oidcConfig property
OIDC discovery information of the target cluster.
Kubernetes Service Account (KSA) tokens are JWT tokens signed by the cluster
API server. This fields indicates how GCP services
validate KSA tokens in order to allow system workloads (such as GKE Connect
and telemetry agents) to authenticate back to GCP.
Both clusters with public and private issuer URLs are supported.
Clusters with public issuers only need to specify the issuerUrl field
while clusters with private issuers need to provide both
issuerUrl and jwks.
Structure is documented below.
Implementation
final pulumi.Input<AttachedClusterOidcConfig?>? oidcConfig;