ClusterUserManagedKeysConfig constructor
- Input<
String?> ? aggregationCa, - Input<
String?> ? clusterCa, - Input<
String?> ? controlPlaneDiskEncryptionKey, - Input<
List< ? controlPlaneDiskEncryptionKeyVersions,String> ?> - Input<
String?> ? etcdApiCa, - Input<
String?> ? etcdPeerCa, - Input<
String?> ? gkeopsEtcdBackupEncryptionKey, - Input<
List< ? serviceAccountSigningKeys,String> ?> - Input<
List< ? serviceAccountVerificationKeys,String> ?>
Creates a new ClusterUserManagedKeysConfig.
aggregationCa The Certificate Authority Service caPool to use for the aggreation CA in this cluster.
clusterCa The Certificate Authority Service caPool to use for the cluster CA in this cluster.
controlPlaneDiskEncryptionKey The Cloud KMS cryptoKey to use for Confidential Hyperdisk on the control plane nodes.
controlPlaneDiskEncryptionKeyVersions The Cloud KMS cryptoKey versions to use for Confidential Hyperdisk on the control plane nodes.
etcdApiCa The Certificate Authority Service caPool to use for the etcd API CA in this cluster.
etcdPeerCa The Certificate Authority Service caPool to use for the etcd peer CA in this cluster.
gkeopsEtcdBackupEncryptionKey Resource path of the Cloud KMS cryptoKey to use for encryption of internal etcd backups.
serviceAccountSigningKeys The Cloud KMS cryptoKeyVersions to use for signing service account JWTs issued by this cluster.
serviceAccountVerificationKeys The Cloud KMS cryptoKeyVersions to use for verifying service account JWTs issued by this cluster.
Implementation
const ClusterUserManagedKeysConfig({
this.aggregationCa,
this.clusterCa,
this.controlPlaneDiskEncryptionKey,
this.controlPlaneDiskEncryptionKeyVersions,
this.etcdApiCa,
this.etcdPeerCa,
this.gkeopsEtcdBackupEncryptionKey,
this.serviceAccountSigningKeys,
this.serviceAccountVerificationKeys,
});