diff --git a/docs/dyn/gkehub_v1.projects.locations.features.html b/docs/dyn/gkehub_v1.projects.locations.features.html
index 85ec36d0a0..f7fae4ab69 100644
--- a/docs/dyn/gkehub_v1.projects.locations.features.html
+++ b/docs/dyn/gkehub_v1.projects.locations.features.html
@@ -181,8 +181,10 @@
Method Details
"clientId": "A String", # ID for the registered client application that makes authentication requests to the Azure AD identity provider.
"clientSecret": "A String", # Input only. Unencrypted AzureAD client secret will be passed to the GKE Hub CLH.
"encryptedClientSecret": "A String", # Output only. Encrypted AzureAD client secret.
+ "groupFormat": "A String", # Optional. Format of the AzureAD groups that the client wants for auth.
"kubectlRedirectUri": "A String", # The redirect URL that kubectl uses for authorization.
"tenant": "A String", # Kind of Azure AD account to be authenticated. Supported values are or for accounts belonging to a specific tenant.
+ "userClaim": "A String", # Optional. Claim in the AzureAD ID Token that holds the user details.
},
"googleConfig": { # Configuration for the Google Plugin Auth flow. # GoogleConfig specific configuration.
"disable": True or False, # Disable automatic configuration of Google Plugin on supported platforms.
@@ -205,6 +207,20 @@ Method Details
"userPrefix": "A String", # Prefix to prepend to user name.
},
"proxy": "A String", # Proxy server address to use for auth method.
+ "samlConfig": { # Configuration for the SAML Auth flow. # SAML specific configuration.
+ "attributeMapping": { # Optional. The mapping of additional user attributes like nickname, birthday and address etc.. `key` is the name of this additional attribute. `value` is a string presenting as CEL(common expression language, go/cel) used for getting the value from the resources. Take nickname as an example, in this case, `key` is "attribute.nickname" and `value` is "assertion.nickname".
+ "a_key": "A String",
+ },
+ "groupPrefix": "A String", # Optional. Prefix to prepend to group name.
+ "groupsAttribute": "A String", # Optional. The SAML attribute to read groups from. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `group_prefix`).
+ "identityProviderCertificates": [ # Required. The list of IdP certificates to validate the SAML response against.
+ "A String",
+ ],
+ "identityProviderId": "A String", # Required. The entity ID of the SAML IdP.
+ "identityProviderSsoUri": "A String", # Required. The URI where the SAML IdP exposes the SSO service.
+ "userAttribute": "A String", # Optional. The SAML attribute to read username from. If unspecified, the username will be read from the NameID element of the assertion in SAML response. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `user_prefix`).
+ "userPrefix": "A String", # Optional. Prefix to prepend to user name.
+ },
},
],
},
@@ -334,8 +350,10 @@ Method Details
"clientId": "A String", # ID for the registered client application that makes authentication requests to the Azure AD identity provider.
"clientSecret": "A String", # Input only. Unencrypted AzureAD client secret will be passed to the GKE Hub CLH.
"encryptedClientSecret": "A String", # Output only. Encrypted AzureAD client secret.
+ "groupFormat": "A String", # Optional. Format of the AzureAD groups that the client wants for auth.
"kubectlRedirectUri": "A String", # The redirect URL that kubectl uses for authorization.
"tenant": "A String", # Kind of Azure AD account to be authenticated. Supported values are or for accounts belonging to a specific tenant.
+ "userClaim": "A String", # Optional. Claim in the AzureAD ID Token that holds the user details.
},
"googleConfig": { # Configuration for the Google Plugin Auth flow. # GoogleConfig specific configuration.
"disable": True or False, # Disable automatic configuration of Google Plugin on supported platforms.
@@ -358,6 +376,20 @@ Method Details
"userPrefix": "A String", # Prefix to prepend to user name.
},
"proxy": "A String", # Proxy server address to use for auth method.
+ "samlConfig": { # Configuration for the SAML Auth flow. # SAML specific configuration.
+ "attributeMapping": { # Optional. The mapping of additional user attributes like nickname, birthday and address etc.. `key` is the name of this additional attribute. `value` is a string presenting as CEL(common expression language, go/cel) used for getting the value from the resources. Take nickname as an example, in this case, `key` is "attribute.nickname" and `value` is "assertion.nickname".
+ "a_key": "A String",
+ },
+ "groupPrefix": "A String", # Optional. Prefix to prepend to group name.
+ "groupsAttribute": "A String", # Optional. The SAML attribute to read groups from. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `group_prefix`).
+ "identityProviderCertificates": [ # Required. The list of IdP certificates to validate the SAML response against.
+ "A String",
+ ],
+ "identityProviderId": "A String", # Required. The entity ID of the SAML IdP.
+ "identityProviderSsoUri": "A String", # Required. The URI where the SAML IdP exposes the SSO service.
+ "userAttribute": "A String", # Optional. The SAML attribute to read username from. If unspecified, the username will be read from the NameID element of the assertion in SAML response. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `user_prefix`).
+ "userPrefix": "A String", # Optional. Prefix to prepend to user name.
+ },
},
],
},
@@ -606,8 +638,10 @@ Method Details
"clientId": "A String", # ID for the registered client application that makes authentication requests to the Azure AD identity provider.
"clientSecret": "A String", # Input only. Unencrypted AzureAD client secret will be passed to the GKE Hub CLH.
"encryptedClientSecret": "A String", # Output only. Encrypted AzureAD client secret.
+ "groupFormat": "A String", # Optional. Format of the AzureAD groups that the client wants for auth.
"kubectlRedirectUri": "A String", # The redirect URL that kubectl uses for authorization.
"tenant": "A String", # Kind of Azure AD account to be authenticated. Supported values are or for accounts belonging to a specific tenant.
+ "userClaim": "A String", # Optional. Claim in the AzureAD ID Token that holds the user details.
},
"googleConfig": { # Configuration for the Google Plugin Auth flow. # GoogleConfig specific configuration.
"disable": True or False, # Disable automatic configuration of Google Plugin on supported platforms.
@@ -630,6 +664,20 @@ Method Details
"userPrefix": "A String", # Prefix to prepend to user name.
},
"proxy": "A String", # Proxy server address to use for auth method.
+ "samlConfig": { # Configuration for the SAML Auth flow. # SAML specific configuration.
+ "attributeMapping": { # Optional. The mapping of additional user attributes like nickname, birthday and address etc.. `key` is the name of this additional attribute. `value` is a string presenting as CEL(common expression language, go/cel) used for getting the value from the resources. Take nickname as an example, in this case, `key` is "attribute.nickname" and `value` is "assertion.nickname".
+ "a_key": "A String",
+ },
+ "groupPrefix": "A String", # Optional. Prefix to prepend to group name.
+ "groupsAttribute": "A String", # Optional. The SAML attribute to read groups from. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `group_prefix`).
+ "identityProviderCertificates": [ # Required. The list of IdP certificates to validate the SAML response against.
+ "A String",
+ ],
+ "identityProviderId": "A String", # Required. The entity ID of the SAML IdP.
+ "identityProviderSsoUri": "A String", # Required. The URI where the SAML IdP exposes the SSO service.
+ "userAttribute": "A String", # Optional. The SAML attribute to read username from. If unspecified, the username will be read from the NameID element of the assertion in SAML response. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `user_prefix`).
+ "userPrefix": "A String", # Optional. Prefix to prepend to user name.
+ },
},
],
},
@@ -973,8 +1021,10 @@ Method Details
"clientId": "A String", # ID for the registered client application that makes authentication requests to the Azure AD identity provider.
"clientSecret": "A String", # Input only. Unencrypted AzureAD client secret will be passed to the GKE Hub CLH.
"encryptedClientSecret": "A String", # Output only. Encrypted AzureAD client secret.
+ "groupFormat": "A String", # Optional. Format of the AzureAD groups that the client wants for auth.
"kubectlRedirectUri": "A String", # The redirect URL that kubectl uses for authorization.
"tenant": "A String", # Kind of Azure AD account to be authenticated. Supported values are or for accounts belonging to a specific tenant.
+ "userClaim": "A String", # Optional. Claim in the AzureAD ID Token that holds the user details.
},
"googleConfig": { # Configuration for the Google Plugin Auth flow. # GoogleConfig specific configuration.
"disable": True or False, # Disable automatic configuration of Google Plugin on supported platforms.
@@ -997,6 +1047,20 @@ Method Details
"userPrefix": "A String", # Prefix to prepend to user name.
},
"proxy": "A String", # Proxy server address to use for auth method.
+ "samlConfig": { # Configuration for the SAML Auth flow. # SAML specific configuration.
+ "attributeMapping": { # Optional. The mapping of additional user attributes like nickname, birthday and address etc.. `key` is the name of this additional attribute. `value` is a string presenting as CEL(common expression language, go/cel) used for getting the value from the resources. Take nickname as an example, in this case, `key` is "attribute.nickname" and `value` is "assertion.nickname".
+ "a_key": "A String",
+ },
+ "groupPrefix": "A String", # Optional. Prefix to prepend to group name.
+ "groupsAttribute": "A String", # Optional. The SAML attribute to read groups from. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `group_prefix`).
+ "identityProviderCertificates": [ # Required. The list of IdP certificates to validate the SAML response against.
+ "A String",
+ ],
+ "identityProviderId": "A String", # Required. The entity ID of the SAML IdP.
+ "identityProviderSsoUri": "A String", # Required. The URI where the SAML IdP exposes the SSO service.
+ "userAttribute": "A String", # Optional. The SAML attribute to read username from. If unspecified, the username will be read from the NameID element of the assertion in SAML response. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `user_prefix`).
+ "userPrefix": "A String", # Optional. Prefix to prepend to user name.
+ },
},
],
},
@@ -1126,8 +1190,10 @@ Method Details
"clientId": "A String", # ID for the registered client application that makes authentication requests to the Azure AD identity provider.
"clientSecret": "A String", # Input only. Unencrypted AzureAD client secret will be passed to the GKE Hub CLH.
"encryptedClientSecret": "A String", # Output only. Encrypted AzureAD client secret.
+ "groupFormat": "A String", # Optional. Format of the AzureAD groups that the client wants for auth.
"kubectlRedirectUri": "A String", # The redirect URL that kubectl uses for authorization.
"tenant": "A String", # Kind of Azure AD account to be authenticated. Supported values are or for accounts belonging to a specific tenant.
+ "userClaim": "A String", # Optional. Claim in the AzureAD ID Token that holds the user details.
},
"googleConfig": { # Configuration for the Google Plugin Auth flow. # GoogleConfig specific configuration.
"disable": True or False, # Disable automatic configuration of Google Plugin on supported platforms.
@@ -1150,6 +1216,20 @@ Method Details
"userPrefix": "A String", # Prefix to prepend to user name.
},
"proxy": "A String", # Proxy server address to use for auth method.
+ "samlConfig": { # Configuration for the SAML Auth flow. # SAML specific configuration.
+ "attributeMapping": { # Optional. The mapping of additional user attributes like nickname, birthday and address etc.. `key` is the name of this additional attribute. `value` is a string presenting as CEL(common expression language, go/cel) used for getting the value from the resources. Take nickname as an example, in this case, `key` is "attribute.nickname" and `value` is "assertion.nickname".
+ "a_key": "A String",
+ },
+ "groupPrefix": "A String", # Optional. Prefix to prepend to group name.
+ "groupsAttribute": "A String", # Optional. The SAML attribute to read groups from. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `group_prefix`).
+ "identityProviderCertificates": [ # Required. The list of IdP certificates to validate the SAML response against.
+ "A String",
+ ],
+ "identityProviderId": "A String", # Required. The entity ID of the SAML IdP.
+ "identityProviderSsoUri": "A String", # Required. The URI where the SAML IdP exposes the SSO service.
+ "userAttribute": "A String", # Optional. The SAML attribute to read username from. If unspecified, the username will be read from the NameID element of the assertion in SAML response. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `user_prefix`).
+ "userPrefix": "A String", # Optional. Prefix to prepend to user name.
+ },
},
],
},
@@ -1398,8 +1478,10 @@ Method Details
"clientId": "A String", # ID for the registered client application that makes authentication requests to the Azure AD identity provider.
"clientSecret": "A String", # Input only. Unencrypted AzureAD client secret will be passed to the GKE Hub CLH.
"encryptedClientSecret": "A String", # Output only. Encrypted AzureAD client secret.
+ "groupFormat": "A String", # Optional. Format of the AzureAD groups that the client wants for auth.
"kubectlRedirectUri": "A String", # The redirect URL that kubectl uses for authorization.
"tenant": "A String", # Kind of Azure AD account to be authenticated. Supported values are or for accounts belonging to a specific tenant.
+ "userClaim": "A String", # Optional. Claim in the AzureAD ID Token that holds the user details.
},
"googleConfig": { # Configuration for the Google Plugin Auth flow. # GoogleConfig specific configuration.
"disable": True or False, # Disable automatic configuration of Google Plugin on supported platforms.
@@ -1422,6 +1504,20 @@ Method Details
"userPrefix": "A String", # Prefix to prepend to user name.
},
"proxy": "A String", # Proxy server address to use for auth method.
+ "samlConfig": { # Configuration for the SAML Auth flow. # SAML specific configuration.
+ "attributeMapping": { # Optional. The mapping of additional user attributes like nickname, birthday and address etc.. `key` is the name of this additional attribute. `value` is a string presenting as CEL(common expression language, go/cel) used for getting the value from the resources. Take nickname as an example, in this case, `key` is "attribute.nickname" and `value` is "assertion.nickname".
+ "a_key": "A String",
+ },
+ "groupPrefix": "A String", # Optional. Prefix to prepend to group name.
+ "groupsAttribute": "A String", # Optional. The SAML attribute to read groups from. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `group_prefix`).
+ "identityProviderCertificates": [ # Required. The list of IdP certificates to validate the SAML response against.
+ "A String",
+ ],
+ "identityProviderId": "A String", # Required. The entity ID of the SAML IdP.
+ "identityProviderSsoUri": "A String", # Required. The URI where the SAML IdP exposes the SSO service.
+ "userAttribute": "A String", # Optional. The SAML attribute to read username from. If unspecified, the username will be read from the NameID element of the assertion in SAML response. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `user_prefix`).
+ "userPrefix": "A String", # Optional. Prefix to prepend to user name.
+ },
},
],
},
@@ -1753,8 +1849,10 @@ Method Details
"clientId": "A String", # ID for the registered client application that makes authentication requests to the Azure AD identity provider.
"clientSecret": "A String", # Input only. Unencrypted AzureAD client secret will be passed to the GKE Hub CLH.
"encryptedClientSecret": "A String", # Output only. Encrypted AzureAD client secret.
+ "groupFormat": "A String", # Optional. Format of the AzureAD groups that the client wants for auth.
"kubectlRedirectUri": "A String", # The redirect URL that kubectl uses for authorization.
"tenant": "A String", # Kind of Azure AD account to be authenticated. Supported values are or for accounts belonging to a specific tenant.
+ "userClaim": "A String", # Optional. Claim in the AzureAD ID Token that holds the user details.
},
"googleConfig": { # Configuration for the Google Plugin Auth flow. # GoogleConfig specific configuration.
"disable": True or False, # Disable automatic configuration of Google Plugin on supported platforms.
@@ -1777,6 +1875,20 @@ Method Details
"userPrefix": "A String", # Prefix to prepend to user name.
},
"proxy": "A String", # Proxy server address to use for auth method.
+ "samlConfig": { # Configuration for the SAML Auth flow. # SAML specific configuration.
+ "attributeMapping": { # Optional. The mapping of additional user attributes like nickname, birthday and address etc.. `key` is the name of this additional attribute. `value` is a string presenting as CEL(common expression language, go/cel) used for getting the value from the resources. Take nickname as an example, in this case, `key` is "attribute.nickname" and `value` is "assertion.nickname".
+ "a_key": "A String",
+ },
+ "groupPrefix": "A String", # Optional. Prefix to prepend to group name.
+ "groupsAttribute": "A String", # Optional. The SAML attribute to read groups from. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `group_prefix`).
+ "identityProviderCertificates": [ # Required. The list of IdP certificates to validate the SAML response against.
+ "A String",
+ ],
+ "identityProviderId": "A String", # Required. The entity ID of the SAML IdP.
+ "identityProviderSsoUri": "A String", # Required. The URI where the SAML IdP exposes the SSO service.
+ "userAttribute": "A String", # Optional. The SAML attribute to read username from. If unspecified, the username will be read from the NameID element of the assertion in SAML response. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `user_prefix`).
+ "userPrefix": "A String", # Optional. Prefix to prepend to user name.
+ },
},
],
},
@@ -1906,8 +2018,10 @@ Method Details
"clientId": "A String", # ID for the registered client application that makes authentication requests to the Azure AD identity provider.
"clientSecret": "A String", # Input only. Unencrypted AzureAD client secret will be passed to the GKE Hub CLH.
"encryptedClientSecret": "A String", # Output only. Encrypted AzureAD client secret.
+ "groupFormat": "A String", # Optional. Format of the AzureAD groups that the client wants for auth.
"kubectlRedirectUri": "A String", # The redirect URL that kubectl uses for authorization.
"tenant": "A String", # Kind of Azure AD account to be authenticated. Supported values are or for accounts belonging to a specific tenant.
+ "userClaim": "A String", # Optional. Claim in the AzureAD ID Token that holds the user details.
},
"googleConfig": { # Configuration for the Google Plugin Auth flow. # GoogleConfig specific configuration.
"disable": True or False, # Disable automatic configuration of Google Plugin on supported platforms.
@@ -1930,6 +2044,20 @@ Method Details
"userPrefix": "A String", # Prefix to prepend to user name.
},
"proxy": "A String", # Proxy server address to use for auth method.
+ "samlConfig": { # Configuration for the SAML Auth flow. # SAML specific configuration.
+ "attributeMapping": { # Optional. The mapping of additional user attributes like nickname, birthday and address etc.. `key` is the name of this additional attribute. `value` is a string presenting as CEL(common expression language, go/cel) used for getting the value from the resources. Take nickname as an example, in this case, `key` is "attribute.nickname" and `value` is "assertion.nickname".
+ "a_key": "A String",
+ },
+ "groupPrefix": "A String", # Optional. Prefix to prepend to group name.
+ "groupsAttribute": "A String", # Optional. The SAML attribute to read groups from. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `group_prefix`).
+ "identityProviderCertificates": [ # Required. The list of IdP certificates to validate the SAML response against.
+ "A String",
+ ],
+ "identityProviderId": "A String", # Required. The entity ID of the SAML IdP.
+ "identityProviderSsoUri": "A String", # Required. The URI where the SAML IdP exposes the SSO service.
+ "userAttribute": "A String", # Optional. The SAML attribute to read username from. If unspecified, the username will be read from the NameID element of the assertion in SAML response. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `user_prefix`).
+ "userPrefix": "A String", # Optional. Prefix to prepend to user name.
+ },
},
],
},
@@ -2178,8 +2306,10 @@ Method Details
"clientId": "A String", # ID for the registered client application that makes authentication requests to the Azure AD identity provider.
"clientSecret": "A String", # Input only. Unencrypted AzureAD client secret will be passed to the GKE Hub CLH.
"encryptedClientSecret": "A String", # Output only. Encrypted AzureAD client secret.
+ "groupFormat": "A String", # Optional. Format of the AzureAD groups that the client wants for auth.
"kubectlRedirectUri": "A String", # The redirect URL that kubectl uses for authorization.
"tenant": "A String", # Kind of Azure AD account to be authenticated. Supported values are or for accounts belonging to a specific tenant.
+ "userClaim": "A String", # Optional. Claim in the AzureAD ID Token that holds the user details.
},
"googleConfig": { # Configuration for the Google Plugin Auth flow. # GoogleConfig specific configuration.
"disable": True or False, # Disable automatic configuration of Google Plugin on supported platforms.
@@ -2202,6 +2332,20 @@ Method Details
"userPrefix": "A String", # Prefix to prepend to user name.
},
"proxy": "A String", # Proxy server address to use for auth method.
+ "samlConfig": { # Configuration for the SAML Auth flow. # SAML specific configuration.
+ "attributeMapping": { # Optional. The mapping of additional user attributes like nickname, birthday and address etc.. `key` is the name of this additional attribute. `value` is a string presenting as CEL(common expression language, go/cel) used for getting the value from the resources. Take nickname as an example, in this case, `key` is "attribute.nickname" and `value` is "assertion.nickname".
+ "a_key": "A String",
+ },
+ "groupPrefix": "A String", # Optional. Prefix to prepend to group name.
+ "groupsAttribute": "A String", # Optional. The SAML attribute to read groups from. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `group_prefix`).
+ "identityProviderCertificates": [ # Required. The list of IdP certificates to validate the SAML response against.
+ "A String",
+ ],
+ "identityProviderId": "A String", # Required. The entity ID of the SAML IdP.
+ "identityProviderSsoUri": "A String", # Required. The URI where the SAML IdP exposes the SSO service.
+ "userAttribute": "A String", # Optional. The SAML attribute to read username from. If unspecified, the username will be read from the NameID element of the assertion in SAML response. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `user_prefix`).
+ "userPrefix": "A String", # Optional. Prefix to prepend to user name.
+ },
},
],
},
@@ -2489,8 +2633,10 @@ Method Details
"clientId": "A String", # ID for the registered client application that makes authentication requests to the Azure AD identity provider.
"clientSecret": "A String", # Input only. Unencrypted AzureAD client secret will be passed to the GKE Hub CLH.
"encryptedClientSecret": "A String", # Output only. Encrypted AzureAD client secret.
+ "groupFormat": "A String", # Optional. Format of the AzureAD groups that the client wants for auth.
"kubectlRedirectUri": "A String", # The redirect URL that kubectl uses for authorization.
"tenant": "A String", # Kind of Azure AD account to be authenticated. Supported values are or for accounts belonging to a specific tenant.
+ "userClaim": "A String", # Optional. Claim in the AzureAD ID Token that holds the user details.
},
"googleConfig": { # Configuration for the Google Plugin Auth flow. # GoogleConfig specific configuration.
"disable": True or False, # Disable automatic configuration of Google Plugin on supported platforms.
@@ -2513,6 +2659,20 @@ Method Details
"userPrefix": "A String", # Prefix to prepend to user name.
},
"proxy": "A String", # Proxy server address to use for auth method.
+ "samlConfig": { # Configuration for the SAML Auth flow. # SAML specific configuration.
+ "attributeMapping": { # Optional. The mapping of additional user attributes like nickname, birthday and address etc.. `key` is the name of this additional attribute. `value` is a string presenting as CEL(common expression language, go/cel) used for getting the value from the resources. Take nickname as an example, in this case, `key` is "attribute.nickname" and `value` is "assertion.nickname".
+ "a_key": "A String",
+ },
+ "groupPrefix": "A String", # Optional. Prefix to prepend to group name.
+ "groupsAttribute": "A String", # Optional. The SAML attribute to read groups from. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `group_prefix`).
+ "identityProviderCertificates": [ # Required. The list of IdP certificates to validate the SAML response against.
+ "A String",
+ ],
+ "identityProviderId": "A String", # Required. The entity ID of the SAML IdP.
+ "identityProviderSsoUri": "A String", # Required. The URI where the SAML IdP exposes the SSO service.
+ "userAttribute": "A String", # Optional. The SAML attribute to read username from. If unspecified, the username will be read from the NameID element of the assertion in SAML response. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `user_prefix`).
+ "userPrefix": "A String", # Optional. Prefix to prepend to user name.
+ },
},
],
},
@@ -2642,8 +2802,10 @@ Method Details
"clientId": "A String", # ID for the registered client application that makes authentication requests to the Azure AD identity provider.
"clientSecret": "A String", # Input only. Unencrypted AzureAD client secret will be passed to the GKE Hub CLH.
"encryptedClientSecret": "A String", # Output only. Encrypted AzureAD client secret.
+ "groupFormat": "A String", # Optional. Format of the AzureAD groups that the client wants for auth.
"kubectlRedirectUri": "A String", # The redirect URL that kubectl uses for authorization.
"tenant": "A String", # Kind of Azure AD account to be authenticated. Supported values are or for accounts belonging to a specific tenant.
+ "userClaim": "A String", # Optional. Claim in the AzureAD ID Token that holds the user details.
},
"googleConfig": { # Configuration for the Google Plugin Auth flow. # GoogleConfig specific configuration.
"disable": True or False, # Disable automatic configuration of Google Plugin on supported platforms.
@@ -2666,6 +2828,20 @@ Method Details
"userPrefix": "A String", # Prefix to prepend to user name.
},
"proxy": "A String", # Proxy server address to use for auth method.
+ "samlConfig": { # Configuration for the SAML Auth flow. # SAML specific configuration.
+ "attributeMapping": { # Optional. The mapping of additional user attributes like nickname, birthday and address etc.. `key` is the name of this additional attribute. `value` is a string presenting as CEL(common expression language, go/cel) used for getting the value from the resources. Take nickname as an example, in this case, `key` is "attribute.nickname" and `value` is "assertion.nickname".
+ "a_key": "A String",
+ },
+ "groupPrefix": "A String", # Optional. Prefix to prepend to group name.
+ "groupsAttribute": "A String", # Optional. The SAML attribute to read groups from. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `group_prefix`).
+ "identityProviderCertificates": [ # Required. The list of IdP certificates to validate the SAML response against.
+ "A String",
+ ],
+ "identityProviderId": "A String", # Required. The entity ID of the SAML IdP.
+ "identityProviderSsoUri": "A String", # Required. The URI where the SAML IdP exposes the SSO service.
+ "userAttribute": "A String", # Optional. The SAML attribute to read username from. If unspecified, the username will be read from the NameID element of the assertion in SAML response. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `user_prefix`).
+ "userPrefix": "A String", # Optional. Prefix to prepend to user name.
+ },
},
],
},
@@ -2914,8 +3090,10 @@ Method Details
"clientId": "A String", # ID for the registered client application that makes authentication requests to the Azure AD identity provider.
"clientSecret": "A String", # Input only. Unencrypted AzureAD client secret will be passed to the GKE Hub CLH.
"encryptedClientSecret": "A String", # Output only. Encrypted AzureAD client secret.
+ "groupFormat": "A String", # Optional. Format of the AzureAD groups that the client wants for auth.
"kubectlRedirectUri": "A String", # The redirect URL that kubectl uses for authorization.
"tenant": "A String", # Kind of Azure AD account to be authenticated. Supported values are or for accounts belonging to a specific tenant.
+ "userClaim": "A String", # Optional. Claim in the AzureAD ID Token that holds the user details.
},
"googleConfig": { # Configuration for the Google Plugin Auth flow. # GoogleConfig specific configuration.
"disable": True or False, # Disable automatic configuration of Google Plugin on supported platforms.
@@ -2938,6 +3116,20 @@ Method Details
"userPrefix": "A String", # Prefix to prepend to user name.
},
"proxy": "A String", # Proxy server address to use for auth method.
+ "samlConfig": { # Configuration for the SAML Auth flow. # SAML specific configuration.
+ "attributeMapping": { # Optional. The mapping of additional user attributes like nickname, birthday and address etc.. `key` is the name of this additional attribute. `value` is a string presenting as CEL(common expression language, go/cel) used for getting the value from the resources. Take nickname as an example, in this case, `key` is "attribute.nickname" and `value` is "assertion.nickname".
+ "a_key": "A String",
+ },
+ "groupPrefix": "A String", # Optional. Prefix to prepend to group name.
+ "groupsAttribute": "A String", # Optional. The SAML attribute to read groups from. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `group_prefix`).
+ "identityProviderCertificates": [ # Required. The list of IdP certificates to validate the SAML response against.
+ "A String",
+ ],
+ "identityProviderId": "A String", # Required. The entity ID of the SAML IdP.
+ "identityProviderSsoUri": "A String", # Required. The URI where the SAML IdP exposes the SSO service.
+ "userAttribute": "A String", # Optional. The SAML attribute to read username from. If unspecified, the username will be read from the NameID element of the assertion in SAML response. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `user_prefix`).
+ "userPrefix": "A String", # Optional. Prefix to prepend to user name.
+ },
},
],
},
diff --git a/docs/dyn/gkehub_v1alpha.projects.locations.features.html b/docs/dyn/gkehub_v1alpha.projects.locations.features.html
index 65de6f6679..142b67a914 100644
--- a/docs/dyn/gkehub_v1alpha.projects.locations.features.html
+++ b/docs/dyn/gkehub_v1alpha.projects.locations.features.html
@@ -184,8 +184,10 @@ Method Details
"clientId": "A String", # ID for the registered client application that makes authentication requests to the Azure AD identity provider.
"clientSecret": "A String", # Input only. Unencrypted AzureAD client secret will be passed to the GKE Hub CLH.
"encryptedClientSecret": "A String", # Output only. Encrypted AzureAD client secret.
+ "groupFormat": "A String", # Optional. Format of the AzureAD groups that the client wants for auth.
"kubectlRedirectUri": "A String", # The redirect URL that kubectl uses for authorization.
"tenant": "A String", # Kind of Azure AD account to be authenticated. Supported values are or for accounts belonging to a specific tenant.
+ "userClaim": "A String", # Optional. Claim in the AzureAD ID Token that holds the user details.
},
"googleConfig": { # Configuration for the Google Plugin Auth flow. # GoogleConfig specific configuration.
"disable": True or False, # Disable automatic configuration of Google Plugin on supported platforms.
@@ -208,6 +210,20 @@ Method Details
"userPrefix": "A String", # Prefix to prepend to user name.
},
"proxy": "A String", # Proxy server address to use for auth method.
+ "samlConfig": { # Configuration for the SAML Auth flow. # SAML specific configuration.
+ "attributeMapping": { # Optional. The mapping of additional user attributes like nickname, birthday and address etc.. `key` is the name of this additional attribute. `value` is a string presenting as CEL(common expression language, go/cel) used for getting the value from the resources. Take nickname as an example, in this case, `key` is "attribute.nickname" and `value` is "assertion.nickname".
+ "a_key": "A String",
+ },
+ "groupPrefix": "A String", # Optional. Prefix to prepend to group name.
+ "groupsAttribute": "A String", # Optional. The SAML attribute to read groups from. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `group_prefix`).
+ "identityProviderCertificates": [ # Required. The list of IdP certificates to validate the SAML response against.
+ "A String",
+ ],
+ "identityProviderId": "A String", # Required. The entity ID of the SAML IdP.
+ "identityProviderSsoUri": "A String", # Required. The URI where the SAML IdP exposes the SSO service.
+ "userAttribute": "A String", # Optional. The SAML attribute to read username from. If unspecified, the username will be read from the NameID element of the assertion in SAML response. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `user_prefix`).
+ "userPrefix": "A String", # Optional. Prefix to prepend to user name.
+ },
},
],
},
@@ -350,8 +366,10 @@ Method Details
"clientId": "A String", # ID for the registered client application that makes authentication requests to the Azure AD identity provider.
"clientSecret": "A String", # Input only. Unencrypted AzureAD client secret will be passed to the GKE Hub CLH.
"encryptedClientSecret": "A String", # Output only. Encrypted AzureAD client secret.
+ "groupFormat": "A String", # Optional. Format of the AzureAD groups that the client wants for auth.
"kubectlRedirectUri": "A String", # The redirect URL that kubectl uses for authorization.
"tenant": "A String", # Kind of Azure AD account to be authenticated. Supported values are or for accounts belonging to a specific tenant.
+ "userClaim": "A String", # Optional. Claim in the AzureAD ID Token that holds the user details.
},
"googleConfig": { # Configuration for the Google Plugin Auth flow. # GoogleConfig specific configuration.
"disable": True or False, # Disable automatic configuration of Google Plugin on supported platforms.
@@ -374,6 +392,20 @@ Method Details
"userPrefix": "A String", # Prefix to prepend to user name.
},
"proxy": "A String", # Proxy server address to use for auth method.
+ "samlConfig": { # Configuration for the SAML Auth flow. # SAML specific configuration.
+ "attributeMapping": { # Optional. The mapping of additional user attributes like nickname, birthday and address etc.. `key` is the name of this additional attribute. `value` is a string presenting as CEL(common expression language, go/cel) used for getting the value from the resources. Take nickname as an example, in this case, `key` is "attribute.nickname" and `value` is "assertion.nickname".
+ "a_key": "A String",
+ },
+ "groupPrefix": "A String", # Optional. Prefix to prepend to group name.
+ "groupsAttribute": "A String", # Optional. The SAML attribute to read groups from. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `group_prefix`).
+ "identityProviderCertificates": [ # Required. The list of IdP certificates to validate the SAML response against.
+ "A String",
+ ],
+ "identityProviderId": "A String", # Required. The entity ID of the SAML IdP.
+ "identityProviderSsoUri": "A String", # Required. The URI where the SAML IdP exposes the SSO service.
+ "userAttribute": "A String", # Optional. The SAML attribute to read username from. If unspecified, the username will be read from the NameID element of the assertion in SAML response. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `user_prefix`).
+ "userPrefix": "A String", # Optional. Prefix to prepend to user name.
+ },
},
],
},
@@ -640,8 +672,10 @@ Method Details
"clientId": "A String", # ID for the registered client application that makes authentication requests to the Azure AD identity provider.
"clientSecret": "A String", # Input only. Unencrypted AzureAD client secret will be passed to the GKE Hub CLH.
"encryptedClientSecret": "A String", # Output only. Encrypted AzureAD client secret.
+ "groupFormat": "A String", # Optional. Format of the AzureAD groups that the client wants for auth.
"kubectlRedirectUri": "A String", # The redirect URL that kubectl uses for authorization.
"tenant": "A String", # Kind of Azure AD account to be authenticated. Supported values are or for accounts belonging to a specific tenant.
+ "userClaim": "A String", # Optional. Claim in the AzureAD ID Token that holds the user details.
},
"googleConfig": { # Configuration for the Google Plugin Auth flow. # GoogleConfig specific configuration.
"disable": True or False, # Disable automatic configuration of Google Plugin on supported platforms.
@@ -664,6 +698,20 @@ Method Details
"userPrefix": "A String", # Prefix to prepend to user name.
},
"proxy": "A String", # Proxy server address to use for auth method.
+ "samlConfig": { # Configuration for the SAML Auth flow. # SAML specific configuration.
+ "attributeMapping": { # Optional. The mapping of additional user attributes like nickname, birthday and address etc.. `key` is the name of this additional attribute. `value` is a string presenting as CEL(common expression language, go/cel) used for getting the value from the resources. Take nickname as an example, in this case, `key` is "attribute.nickname" and `value` is "assertion.nickname".
+ "a_key": "A String",
+ },
+ "groupPrefix": "A String", # Optional. Prefix to prepend to group name.
+ "groupsAttribute": "A String", # Optional. The SAML attribute to read groups from. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `group_prefix`).
+ "identityProviderCertificates": [ # Required. The list of IdP certificates to validate the SAML response against.
+ "A String",
+ ],
+ "identityProviderId": "A String", # Required. The entity ID of the SAML IdP.
+ "identityProviderSsoUri": "A String", # Required. The URI where the SAML IdP exposes the SSO service.
+ "userAttribute": "A String", # Optional. The SAML attribute to read username from. If unspecified, the username will be read from the NameID element of the assertion in SAML response. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `user_prefix`).
+ "userPrefix": "A String", # Optional. Prefix to prepend to user name.
+ },
},
],
},
@@ -1137,8 +1185,10 @@ Method Details
"clientId": "A String", # ID for the registered client application that makes authentication requests to the Azure AD identity provider.
"clientSecret": "A String", # Input only. Unencrypted AzureAD client secret will be passed to the GKE Hub CLH.
"encryptedClientSecret": "A String", # Output only. Encrypted AzureAD client secret.
+ "groupFormat": "A String", # Optional. Format of the AzureAD groups that the client wants for auth.
"kubectlRedirectUri": "A String", # The redirect URL that kubectl uses for authorization.
"tenant": "A String", # Kind of Azure AD account to be authenticated. Supported values are or for accounts belonging to a specific tenant.
+ "userClaim": "A String", # Optional. Claim in the AzureAD ID Token that holds the user details.
},
"googleConfig": { # Configuration for the Google Plugin Auth flow. # GoogleConfig specific configuration.
"disable": True or False, # Disable automatic configuration of Google Plugin on supported platforms.
@@ -1161,6 +1211,20 @@ Method Details
"userPrefix": "A String", # Prefix to prepend to user name.
},
"proxy": "A String", # Proxy server address to use for auth method.
+ "samlConfig": { # Configuration for the SAML Auth flow. # SAML specific configuration.
+ "attributeMapping": { # Optional. The mapping of additional user attributes like nickname, birthday and address etc.. `key` is the name of this additional attribute. `value` is a string presenting as CEL(common expression language, go/cel) used for getting the value from the resources. Take nickname as an example, in this case, `key` is "attribute.nickname" and `value` is "assertion.nickname".
+ "a_key": "A String",
+ },
+ "groupPrefix": "A String", # Optional. Prefix to prepend to group name.
+ "groupsAttribute": "A String", # Optional. The SAML attribute to read groups from. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `group_prefix`).
+ "identityProviderCertificates": [ # Required. The list of IdP certificates to validate the SAML response against.
+ "A String",
+ ],
+ "identityProviderId": "A String", # Required. The entity ID of the SAML IdP.
+ "identityProviderSsoUri": "A String", # Required. The URI where the SAML IdP exposes the SSO service.
+ "userAttribute": "A String", # Optional. The SAML attribute to read username from. If unspecified, the username will be read from the NameID element of the assertion in SAML response. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `user_prefix`).
+ "userPrefix": "A String", # Optional. Prefix to prepend to user name.
+ },
},
],
},
@@ -1303,8 +1367,10 @@ Method Details
"clientId": "A String", # ID for the registered client application that makes authentication requests to the Azure AD identity provider.
"clientSecret": "A String", # Input only. Unencrypted AzureAD client secret will be passed to the GKE Hub CLH.
"encryptedClientSecret": "A String", # Output only. Encrypted AzureAD client secret.
+ "groupFormat": "A String", # Optional. Format of the AzureAD groups that the client wants for auth.
"kubectlRedirectUri": "A String", # The redirect URL that kubectl uses for authorization.
"tenant": "A String", # Kind of Azure AD account to be authenticated. Supported values are or for accounts belonging to a specific tenant.
+ "userClaim": "A String", # Optional. Claim in the AzureAD ID Token that holds the user details.
},
"googleConfig": { # Configuration for the Google Plugin Auth flow. # GoogleConfig specific configuration.
"disable": True or False, # Disable automatic configuration of Google Plugin on supported platforms.
@@ -1327,6 +1393,20 @@ Method Details
"userPrefix": "A String", # Prefix to prepend to user name.
},
"proxy": "A String", # Proxy server address to use for auth method.
+ "samlConfig": { # Configuration for the SAML Auth flow. # SAML specific configuration.
+ "attributeMapping": { # Optional. The mapping of additional user attributes like nickname, birthday and address etc.. `key` is the name of this additional attribute. `value` is a string presenting as CEL(common expression language, go/cel) used for getting the value from the resources. Take nickname as an example, in this case, `key` is "attribute.nickname" and `value` is "assertion.nickname".
+ "a_key": "A String",
+ },
+ "groupPrefix": "A String", # Optional. Prefix to prepend to group name.
+ "groupsAttribute": "A String", # Optional. The SAML attribute to read groups from. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `group_prefix`).
+ "identityProviderCertificates": [ # Required. The list of IdP certificates to validate the SAML response against.
+ "A String",
+ ],
+ "identityProviderId": "A String", # Required. The entity ID of the SAML IdP.
+ "identityProviderSsoUri": "A String", # Required. The URI where the SAML IdP exposes the SSO service.
+ "userAttribute": "A String", # Optional. The SAML attribute to read username from. If unspecified, the username will be read from the NameID element of the assertion in SAML response. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `user_prefix`).
+ "userPrefix": "A String", # Optional. Prefix to prepend to user name.
+ },
},
],
},
@@ -1593,8 +1673,10 @@ Method Details
"clientId": "A String", # ID for the registered client application that makes authentication requests to the Azure AD identity provider.
"clientSecret": "A String", # Input only. Unencrypted AzureAD client secret will be passed to the GKE Hub CLH.
"encryptedClientSecret": "A String", # Output only. Encrypted AzureAD client secret.
+ "groupFormat": "A String", # Optional. Format of the AzureAD groups that the client wants for auth.
"kubectlRedirectUri": "A String", # The redirect URL that kubectl uses for authorization.
"tenant": "A String", # Kind of Azure AD account to be authenticated. Supported values are or for accounts belonging to a specific tenant.
+ "userClaim": "A String", # Optional. Claim in the AzureAD ID Token that holds the user details.
},
"googleConfig": { # Configuration for the Google Plugin Auth flow. # GoogleConfig specific configuration.
"disable": True or False, # Disable automatic configuration of Google Plugin on supported platforms.
@@ -1617,6 +1699,20 @@ Method Details
"userPrefix": "A String", # Prefix to prepend to user name.
},
"proxy": "A String", # Proxy server address to use for auth method.
+ "samlConfig": { # Configuration for the SAML Auth flow. # SAML specific configuration.
+ "attributeMapping": { # Optional. The mapping of additional user attributes like nickname, birthday and address etc.. `key` is the name of this additional attribute. `value` is a string presenting as CEL(common expression language, go/cel) used for getting the value from the resources. Take nickname as an example, in this case, `key` is "attribute.nickname" and `value` is "assertion.nickname".
+ "a_key": "A String",
+ },
+ "groupPrefix": "A String", # Optional. Prefix to prepend to group name.
+ "groupsAttribute": "A String", # Optional. The SAML attribute to read groups from. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `group_prefix`).
+ "identityProviderCertificates": [ # Required. The list of IdP certificates to validate the SAML response against.
+ "A String",
+ ],
+ "identityProviderId": "A String", # Required. The entity ID of the SAML IdP.
+ "identityProviderSsoUri": "A String", # Required. The URI where the SAML IdP exposes the SSO service.
+ "userAttribute": "A String", # Optional. The SAML attribute to read username from. If unspecified, the username will be read from the NameID element of the assertion in SAML response. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `user_prefix`).
+ "userPrefix": "A String", # Optional. Prefix to prepend to user name.
+ },
},
],
},
@@ -2078,8 +2174,10 @@ Method Details
"clientId": "A String", # ID for the registered client application that makes authentication requests to the Azure AD identity provider.
"clientSecret": "A String", # Input only. Unencrypted AzureAD client secret will be passed to the GKE Hub CLH.
"encryptedClientSecret": "A String", # Output only. Encrypted AzureAD client secret.
+ "groupFormat": "A String", # Optional. Format of the AzureAD groups that the client wants for auth.
"kubectlRedirectUri": "A String", # The redirect URL that kubectl uses for authorization.
"tenant": "A String", # Kind of Azure AD account to be authenticated. Supported values are or for accounts belonging to a specific tenant.
+ "userClaim": "A String", # Optional. Claim in the AzureAD ID Token that holds the user details.
},
"googleConfig": { # Configuration for the Google Plugin Auth flow. # GoogleConfig specific configuration.
"disable": True or False, # Disable automatic configuration of Google Plugin on supported platforms.
@@ -2102,6 +2200,20 @@ Method Details
"userPrefix": "A String", # Prefix to prepend to user name.
},
"proxy": "A String", # Proxy server address to use for auth method.
+ "samlConfig": { # Configuration for the SAML Auth flow. # SAML specific configuration.
+ "attributeMapping": { # Optional. The mapping of additional user attributes like nickname, birthday and address etc.. `key` is the name of this additional attribute. `value` is a string presenting as CEL(common expression language, go/cel) used for getting the value from the resources. Take nickname as an example, in this case, `key` is "attribute.nickname" and `value` is "assertion.nickname".
+ "a_key": "A String",
+ },
+ "groupPrefix": "A String", # Optional. Prefix to prepend to group name.
+ "groupsAttribute": "A String", # Optional. The SAML attribute to read groups from. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `group_prefix`).
+ "identityProviderCertificates": [ # Required. The list of IdP certificates to validate the SAML response against.
+ "A String",
+ ],
+ "identityProviderId": "A String", # Required. The entity ID of the SAML IdP.
+ "identityProviderSsoUri": "A String", # Required. The URI where the SAML IdP exposes the SSO service.
+ "userAttribute": "A String", # Optional. The SAML attribute to read username from. If unspecified, the username will be read from the NameID element of the assertion in SAML response. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `user_prefix`).
+ "userPrefix": "A String", # Optional. Prefix to prepend to user name.
+ },
},
],
},
@@ -2244,8 +2356,10 @@ Method Details
"clientId": "A String", # ID for the registered client application that makes authentication requests to the Azure AD identity provider.
"clientSecret": "A String", # Input only. Unencrypted AzureAD client secret will be passed to the GKE Hub CLH.
"encryptedClientSecret": "A String", # Output only. Encrypted AzureAD client secret.
+ "groupFormat": "A String", # Optional. Format of the AzureAD groups that the client wants for auth.
"kubectlRedirectUri": "A String", # The redirect URL that kubectl uses for authorization.
"tenant": "A String", # Kind of Azure AD account to be authenticated. Supported values are or for accounts belonging to a specific tenant.
+ "userClaim": "A String", # Optional. Claim in the AzureAD ID Token that holds the user details.
},
"googleConfig": { # Configuration for the Google Plugin Auth flow. # GoogleConfig specific configuration.
"disable": True or False, # Disable automatic configuration of Google Plugin on supported platforms.
@@ -2268,6 +2382,20 @@ Method Details
"userPrefix": "A String", # Prefix to prepend to user name.
},
"proxy": "A String", # Proxy server address to use for auth method.
+ "samlConfig": { # Configuration for the SAML Auth flow. # SAML specific configuration.
+ "attributeMapping": { # Optional. The mapping of additional user attributes like nickname, birthday and address etc.. `key` is the name of this additional attribute. `value` is a string presenting as CEL(common expression language, go/cel) used for getting the value from the resources. Take nickname as an example, in this case, `key` is "attribute.nickname" and `value` is "assertion.nickname".
+ "a_key": "A String",
+ },
+ "groupPrefix": "A String", # Optional. Prefix to prepend to group name.
+ "groupsAttribute": "A String", # Optional. The SAML attribute to read groups from. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `group_prefix`).
+ "identityProviderCertificates": [ # Required. The list of IdP certificates to validate the SAML response against.
+ "A String",
+ ],
+ "identityProviderId": "A String", # Required. The entity ID of the SAML IdP.
+ "identityProviderSsoUri": "A String", # Required. The URI where the SAML IdP exposes the SSO service.
+ "userAttribute": "A String", # Optional. The SAML attribute to read username from. If unspecified, the username will be read from the NameID element of the assertion in SAML response. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `user_prefix`).
+ "userPrefix": "A String", # Optional. Prefix to prepend to user name.
+ },
},
],
},
@@ -2534,8 +2662,10 @@ Method Details
"clientId": "A String", # ID for the registered client application that makes authentication requests to the Azure AD identity provider.
"clientSecret": "A String", # Input only. Unencrypted AzureAD client secret will be passed to the GKE Hub CLH.
"encryptedClientSecret": "A String", # Output only. Encrypted AzureAD client secret.
+ "groupFormat": "A String", # Optional. Format of the AzureAD groups that the client wants for auth.
"kubectlRedirectUri": "A String", # The redirect URL that kubectl uses for authorization.
"tenant": "A String", # Kind of Azure AD account to be authenticated. Supported values are or for accounts belonging to a specific tenant.
+ "userClaim": "A String", # Optional. Claim in the AzureAD ID Token that holds the user details.
},
"googleConfig": { # Configuration for the Google Plugin Auth flow. # GoogleConfig specific configuration.
"disable": True or False, # Disable automatic configuration of Google Plugin on supported platforms.
@@ -2558,6 +2688,20 @@ Method Details
"userPrefix": "A String", # Prefix to prepend to user name.
},
"proxy": "A String", # Proxy server address to use for auth method.
+ "samlConfig": { # Configuration for the SAML Auth flow. # SAML specific configuration.
+ "attributeMapping": { # Optional. The mapping of additional user attributes like nickname, birthday and address etc.. `key` is the name of this additional attribute. `value` is a string presenting as CEL(common expression language, go/cel) used for getting the value from the resources. Take nickname as an example, in this case, `key` is "attribute.nickname" and `value` is "assertion.nickname".
+ "a_key": "A String",
+ },
+ "groupPrefix": "A String", # Optional. Prefix to prepend to group name.
+ "groupsAttribute": "A String", # Optional. The SAML attribute to read groups from. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `group_prefix`).
+ "identityProviderCertificates": [ # Required. The list of IdP certificates to validate the SAML response against.
+ "A String",
+ ],
+ "identityProviderId": "A String", # Required. The entity ID of the SAML IdP.
+ "identityProviderSsoUri": "A String", # Required. The URI where the SAML IdP exposes the SSO service.
+ "userAttribute": "A String", # Optional. The SAML attribute to read username from. If unspecified, the username will be read from the NameID element of the assertion in SAML response. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `user_prefix`).
+ "userPrefix": "A String", # Optional. Prefix to prepend to user name.
+ },
},
],
},
@@ -2975,8 +3119,10 @@ Method Details
"clientId": "A String", # ID for the registered client application that makes authentication requests to the Azure AD identity provider.
"clientSecret": "A String", # Input only. Unencrypted AzureAD client secret will be passed to the GKE Hub CLH.
"encryptedClientSecret": "A String", # Output only. Encrypted AzureAD client secret.
+ "groupFormat": "A String", # Optional. Format of the AzureAD groups that the client wants for auth.
"kubectlRedirectUri": "A String", # The redirect URL that kubectl uses for authorization.
"tenant": "A String", # Kind of Azure AD account to be authenticated. Supported values are or for accounts belonging to a specific tenant.
+ "userClaim": "A String", # Optional. Claim in the AzureAD ID Token that holds the user details.
},
"googleConfig": { # Configuration for the Google Plugin Auth flow. # GoogleConfig specific configuration.
"disable": True or False, # Disable automatic configuration of Google Plugin on supported platforms.
@@ -2999,6 +3145,20 @@ Method Details
"userPrefix": "A String", # Prefix to prepend to user name.
},
"proxy": "A String", # Proxy server address to use for auth method.
+ "samlConfig": { # Configuration for the SAML Auth flow. # SAML specific configuration.
+ "attributeMapping": { # Optional. The mapping of additional user attributes like nickname, birthday and address etc.. `key` is the name of this additional attribute. `value` is a string presenting as CEL(common expression language, go/cel) used for getting the value from the resources. Take nickname as an example, in this case, `key` is "attribute.nickname" and `value` is "assertion.nickname".
+ "a_key": "A String",
+ },
+ "groupPrefix": "A String", # Optional. Prefix to prepend to group name.
+ "groupsAttribute": "A String", # Optional. The SAML attribute to read groups from. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `group_prefix`).
+ "identityProviderCertificates": [ # Required. The list of IdP certificates to validate the SAML response against.
+ "A String",
+ ],
+ "identityProviderId": "A String", # Required. The entity ID of the SAML IdP.
+ "identityProviderSsoUri": "A String", # Required. The URI where the SAML IdP exposes the SSO service.
+ "userAttribute": "A String", # Optional. The SAML attribute to read username from. If unspecified, the username will be read from the NameID element of the assertion in SAML response. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `user_prefix`).
+ "userPrefix": "A String", # Optional. Prefix to prepend to user name.
+ },
},
],
},
@@ -3141,8 +3301,10 @@ Method Details
"clientId": "A String", # ID for the registered client application that makes authentication requests to the Azure AD identity provider.
"clientSecret": "A String", # Input only. Unencrypted AzureAD client secret will be passed to the GKE Hub CLH.
"encryptedClientSecret": "A String", # Output only. Encrypted AzureAD client secret.
+ "groupFormat": "A String", # Optional. Format of the AzureAD groups that the client wants for auth.
"kubectlRedirectUri": "A String", # The redirect URL that kubectl uses for authorization.
"tenant": "A String", # Kind of Azure AD account to be authenticated. Supported values are or for accounts belonging to a specific tenant.
+ "userClaim": "A String", # Optional. Claim in the AzureAD ID Token that holds the user details.
},
"googleConfig": { # Configuration for the Google Plugin Auth flow. # GoogleConfig specific configuration.
"disable": True or False, # Disable automatic configuration of Google Plugin on supported platforms.
@@ -3165,6 +3327,20 @@ Method Details
"userPrefix": "A String", # Prefix to prepend to user name.
},
"proxy": "A String", # Proxy server address to use for auth method.
+ "samlConfig": { # Configuration for the SAML Auth flow. # SAML specific configuration.
+ "attributeMapping": { # Optional. The mapping of additional user attributes like nickname, birthday and address etc.. `key` is the name of this additional attribute. `value` is a string presenting as CEL(common expression language, go/cel) used for getting the value from the resources. Take nickname as an example, in this case, `key` is "attribute.nickname" and `value` is "assertion.nickname".
+ "a_key": "A String",
+ },
+ "groupPrefix": "A String", # Optional. Prefix to prepend to group name.
+ "groupsAttribute": "A String", # Optional. The SAML attribute to read groups from. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `group_prefix`).
+ "identityProviderCertificates": [ # Required. The list of IdP certificates to validate the SAML response against.
+ "A String",
+ ],
+ "identityProviderId": "A String", # Required. The entity ID of the SAML IdP.
+ "identityProviderSsoUri": "A String", # Required. The URI where the SAML IdP exposes the SSO service.
+ "userAttribute": "A String", # Optional. The SAML attribute to read username from. If unspecified, the username will be read from the NameID element of the assertion in SAML response. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `user_prefix`).
+ "userPrefix": "A String", # Optional. Prefix to prepend to user name.
+ },
},
],
},
@@ -3431,8 +3607,10 @@ Method Details
"clientId": "A String", # ID for the registered client application that makes authentication requests to the Azure AD identity provider.
"clientSecret": "A String", # Input only. Unencrypted AzureAD client secret will be passed to the GKE Hub CLH.
"encryptedClientSecret": "A String", # Output only. Encrypted AzureAD client secret.
+ "groupFormat": "A String", # Optional. Format of the AzureAD groups that the client wants for auth.
"kubectlRedirectUri": "A String", # The redirect URL that kubectl uses for authorization.
"tenant": "A String", # Kind of Azure AD account to be authenticated. Supported values are or for accounts belonging to a specific tenant.
+ "userClaim": "A String", # Optional. Claim in the AzureAD ID Token that holds the user details.
},
"googleConfig": { # Configuration for the Google Plugin Auth flow. # GoogleConfig specific configuration.
"disable": True or False, # Disable automatic configuration of Google Plugin on supported platforms.
@@ -3455,6 +3633,20 @@ Method Details
"userPrefix": "A String", # Prefix to prepend to user name.
},
"proxy": "A String", # Proxy server address to use for auth method.
+ "samlConfig": { # Configuration for the SAML Auth flow. # SAML specific configuration.
+ "attributeMapping": { # Optional. The mapping of additional user attributes like nickname, birthday and address etc.. `key` is the name of this additional attribute. `value` is a string presenting as CEL(common expression language, go/cel) used for getting the value from the resources. Take nickname as an example, in this case, `key` is "attribute.nickname" and `value` is "assertion.nickname".
+ "a_key": "A String",
+ },
+ "groupPrefix": "A String", # Optional. Prefix to prepend to group name.
+ "groupsAttribute": "A String", # Optional. The SAML attribute to read groups from. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `group_prefix`).
+ "identityProviderCertificates": [ # Required. The list of IdP certificates to validate the SAML response against.
+ "A String",
+ ],
+ "identityProviderId": "A String", # Required. The entity ID of the SAML IdP.
+ "identityProviderSsoUri": "A String", # Required. The URI where the SAML IdP exposes the SSO service.
+ "userAttribute": "A String", # Optional. The SAML attribute to read username from. If unspecified, the username will be read from the NameID element of the assertion in SAML response. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `user_prefix`).
+ "userPrefix": "A String", # Optional. Prefix to prepend to user name.
+ },
},
],
},
diff --git a/docs/dyn/gkehub_v1beta.projects.locations.features.html b/docs/dyn/gkehub_v1beta.projects.locations.features.html
index 83907290a8..0c2f5bd322 100644
--- a/docs/dyn/gkehub_v1beta.projects.locations.features.html
+++ b/docs/dyn/gkehub_v1beta.projects.locations.features.html
@@ -184,8 +184,10 @@ Method Details
"clientId": "A String", # ID for the registered client application that makes authentication requests to the Azure AD identity provider.
"clientSecret": "A String", # Input only. Unencrypted AzureAD client secret will be passed to the GKE Hub CLH.
"encryptedClientSecret": "A String", # Output only. Encrypted AzureAD client secret.
+ "groupFormat": "A String", # Optional. Format of the AzureAD groups that the client wants for auth.
"kubectlRedirectUri": "A String", # The redirect URL that kubectl uses for authorization.
"tenant": "A String", # Kind of Azure AD account to be authenticated. Supported values are or for accounts belonging to a specific tenant.
+ "userClaim": "A String", # Optional. Claim in the AzureAD ID Token that holds the user details.
},
"googleConfig": { # Configuration for the Google Plugin Auth flow. # GoogleConfig specific configuration.
"disable": True or False, # Disable automatic configuration of Google Plugin on supported platforms.
@@ -208,6 +210,20 @@ Method Details
"userPrefix": "A String", # Prefix to prepend to user name.
},
"proxy": "A String", # Proxy server address to use for auth method.
+ "samlConfig": { # Configuration for the SAML Auth flow. # SAML specific configuration.
+ "attributeMapping": { # Optional. The mapping of additional user attributes like nickname, birthday and address etc.. `key` is the name of this additional attribute. `value` is a string presenting as CEL(common expression language, go/cel) used for getting the value from the resources. Take nickname as an example, in this case, `key` is "attribute.nickname" and `value` is "assertion.nickname".
+ "a_key": "A String",
+ },
+ "groupPrefix": "A String", # Optional. Prefix to prepend to group name.
+ "groupsAttribute": "A String", # Optional. The SAML attribute to read groups from. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `group_prefix`).
+ "identityProviderCertificates": [ # Required. The list of IdP certificates to validate the SAML response against.
+ "A String",
+ ],
+ "identityProviderId": "A String", # Required. The entity ID of the SAML IdP.
+ "identityProviderSsoUri": "A String", # Required. The URI where the SAML IdP exposes the SSO service.
+ "userAttribute": "A String", # Optional. The SAML attribute to read username from. If unspecified, the username will be read from the NameID element of the assertion in SAML response. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `user_prefix`).
+ "userPrefix": "A String", # Optional. Prefix to prepend to user name.
+ },
},
],
},
@@ -349,8 +365,10 @@ Method Details
"clientId": "A String", # ID for the registered client application that makes authentication requests to the Azure AD identity provider.
"clientSecret": "A String", # Input only. Unencrypted AzureAD client secret will be passed to the GKE Hub CLH.
"encryptedClientSecret": "A String", # Output only. Encrypted AzureAD client secret.
+ "groupFormat": "A String", # Optional. Format of the AzureAD groups that the client wants for auth.
"kubectlRedirectUri": "A String", # The redirect URL that kubectl uses for authorization.
"tenant": "A String", # Kind of Azure AD account to be authenticated. Supported values are or for accounts belonging to a specific tenant.
+ "userClaim": "A String", # Optional. Claim in the AzureAD ID Token that holds the user details.
},
"googleConfig": { # Configuration for the Google Plugin Auth flow. # GoogleConfig specific configuration.
"disable": True or False, # Disable automatic configuration of Google Plugin on supported platforms.
@@ -373,6 +391,20 @@ Method Details
"userPrefix": "A String", # Prefix to prepend to user name.
},
"proxy": "A String", # Proxy server address to use for auth method.
+ "samlConfig": { # Configuration for the SAML Auth flow. # SAML specific configuration.
+ "attributeMapping": { # Optional. The mapping of additional user attributes like nickname, birthday and address etc.. `key` is the name of this additional attribute. `value` is a string presenting as CEL(common expression language, go/cel) used for getting the value from the resources. Take nickname as an example, in this case, `key` is "attribute.nickname" and `value` is "assertion.nickname".
+ "a_key": "A String",
+ },
+ "groupPrefix": "A String", # Optional. Prefix to prepend to group name.
+ "groupsAttribute": "A String", # Optional. The SAML attribute to read groups from. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `group_prefix`).
+ "identityProviderCertificates": [ # Required. The list of IdP certificates to validate the SAML response against.
+ "A String",
+ ],
+ "identityProviderId": "A String", # Required. The entity ID of the SAML IdP.
+ "identityProviderSsoUri": "A String", # Required. The URI where the SAML IdP exposes the SSO service.
+ "userAttribute": "A String", # Optional. The SAML attribute to read username from. If unspecified, the username will be read from the NameID element of the assertion in SAML response. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `user_prefix`).
+ "userPrefix": "A String", # Optional. Prefix to prepend to user name.
+ },
},
],
},
@@ -630,8 +662,10 @@ Method Details
"clientId": "A String", # ID for the registered client application that makes authentication requests to the Azure AD identity provider.
"clientSecret": "A String", # Input only. Unencrypted AzureAD client secret will be passed to the GKE Hub CLH.
"encryptedClientSecret": "A String", # Output only. Encrypted AzureAD client secret.
+ "groupFormat": "A String", # Optional. Format of the AzureAD groups that the client wants for auth.
"kubectlRedirectUri": "A String", # The redirect URL that kubectl uses for authorization.
"tenant": "A String", # Kind of Azure AD account to be authenticated. Supported values are or for accounts belonging to a specific tenant.
+ "userClaim": "A String", # Optional. Claim in the AzureAD ID Token that holds the user details.
},
"googleConfig": { # Configuration for the Google Plugin Auth flow. # GoogleConfig specific configuration.
"disable": True or False, # Disable automatic configuration of Google Plugin on supported platforms.
@@ -654,6 +688,20 @@ Method Details
"userPrefix": "A String", # Prefix to prepend to user name.
},
"proxy": "A String", # Proxy server address to use for auth method.
+ "samlConfig": { # Configuration for the SAML Auth flow. # SAML specific configuration.
+ "attributeMapping": { # Optional. The mapping of additional user attributes like nickname, birthday and address etc.. `key` is the name of this additional attribute. `value` is a string presenting as CEL(common expression language, go/cel) used for getting the value from the resources. Take nickname as an example, in this case, `key` is "attribute.nickname" and `value` is "assertion.nickname".
+ "a_key": "A String",
+ },
+ "groupPrefix": "A String", # Optional. Prefix to prepend to group name.
+ "groupsAttribute": "A String", # Optional. The SAML attribute to read groups from. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `group_prefix`).
+ "identityProviderCertificates": [ # Required. The list of IdP certificates to validate the SAML response against.
+ "A String",
+ ],
+ "identityProviderId": "A String", # Required. The entity ID of the SAML IdP.
+ "identityProviderSsoUri": "A String", # Required. The URI where the SAML IdP exposes the SSO service.
+ "userAttribute": "A String", # Optional. The SAML attribute to read username from. If unspecified, the username will be read from the NameID element of the assertion in SAML response. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `user_prefix`).
+ "userPrefix": "A String", # Optional. Prefix to prepend to user name.
+ },
},
],
},
@@ -1012,8 +1060,10 @@ Method Details
"clientId": "A String", # ID for the registered client application that makes authentication requests to the Azure AD identity provider.
"clientSecret": "A String", # Input only. Unencrypted AzureAD client secret will be passed to the GKE Hub CLH.
"encryptedClientSecret": "A String", # Output only. Encrypted AzureAD client secret.
+ "groupFormat": "A String", # Optional. Format of the AzureAD groups that the client wants for auth.
"kubectlRedirectUri": "A String", # The redirect URL that kubectl uses for authorization.
"tenant": "A String", # Kind of Azure AD account to be authenticated. Supported values are or for accounts belonging to a specific tenant.
+ "userClaim": "A String", # Optional. Claim in the AzureAD ID Token that holds the user details.
},
"googleConfig": { # Configuration for the Google Plugin Auth flow. # GoogleConfig specific configuration.
"disable": True or False, # Disable automatic configuration of Google Plugin on supported platforms.
@@ -1036,6 +1086,20 @@ Method Details
"userPrefix": "A String", # Prefix to prepend to user name.
},
"proxy": "A String", # Proxy server address to use for auth method.
+ "samlConfig": { # Configuration for the SAML Auth flow. # SAML specific configuration.
+ "attributeMapping": { # Optional. The mapping of additional user attributes like nickname, birthday and address etc.. `key` is the name of this additional attribute. `value` is a string presenting as CEL(common expression language, go/cel) used for getting the value from the resources. Take nickname as an example, in this case, `key` is "attribute.nickname" and `value` is "assertion.nickname".
+ "a_key": "A String",
+ },
+ "groupPrefix": "A String", # Optional. Prefix to prepend to group name.
+ "groupsAttribute": "A String", # Optional. The SAML attribute to read groups from. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `group_prefix`).
+ "identityProviderCertificates": [ # Required. The list of IdP certificates to validate the SAML response against.
+ "A String",
+ ],
+ "identityProviderId": "A String", # Required. The entity ID of the SAML IdP.
+ "identityProviderSsoUri": "A String", # Required. The URI where the SAML IdP exposes the SSO service.
+ "userAttribute": "A String", # Optional. The SAML attribute to read username from. If unspecified, the username will be read from the NameID element of the assertion in SAML response. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `user_prefix`).
+ "userPrefix": "A String", # Optional. Prefix to prepend to user name.
+ },
},
],
},
@@ -1177,8 +1241,10 @@ Method Details
"clientId": "A String", # ID for the registered client application that makes authentication requests to the Azure AD identity provider.
"clientSecret": "A String", # Input only. Unencrypted AzureAD client secret will be passed to the GKE Hub CLH.
"encryptedClientSecret": "A String", # Output only. Encrypted AzureAD client secret.
+ "groupFormat": "A String", # Optional. Format of the AzureAD groups that the client wants for auth.
"kubectlRedirectUri": "A String", # The redirect URL that kubectl uses for authorization.
"tenant": "A String", # Kind of Azure AD account to be authenticated. Supported values are or for accounts belonging to a specific tenant.
+ "userClaim": "A String", # Optional. Claim in the AzureAD ID Token that holds the user details.
},
"googleConfig": { # Configuration for the Google Plugin Auth flow. # GoogleConfig specific configuration.
"disable": True or False, # Disable automatic configuration of Google Plugin on supported platforms.
@@ -1201,6 +1267,20 @@ Method Details
"userPrefix": "A String", # Prefix to prepend to user name.
},
"proxy": "A String", # Proxy server address to use for auth method.
+ "samlConfig": { # Configuration for the SAML Auth flow. # SAML specific configuration.
+ "attributeMapping": { # Optional. The mapping of additional user attributes like nickname, birthday and address etc.. `key` is the name of this additional attribute. `value` is a string presenting as CEL(common expression language, go/cel) used for getting the value from the resources. Take nickname as an example, in this case, `key` is "attribute.nickname" and `value` is "assertion.nickname".
+ "a_key": "A String",
+ },
+ "groupPrefix": "A String", # Optional. Prefix to prepend to group name.
+ "groupsAttribute": "A String", # Optional. The SAML attribute to read groups from. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `group_prefix`).
+ "identityProviderCertificates": [ # Required. The list of IdP certificates to validate the SAML response against.
+ "A String",
+ ],
+ "identityProviderId": "A String", # Required. The entity ID of the SAML IdP.
+ "identityProviderSsoUri": "A String", # Required. The URI where the SAML IdP exposes the SSO service.
+ "userAttribute": "A String", # Optional. The SAML attribute to read username from. If unspecified, the username will be read from the NameID element of the assertion in SAML response. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `user_prefix`).
+ "userPrefix": "A String", # Optional. Prefix to prepend to user name.
+ },
},
],
},
@@ -1458,8 +1538,10 @@ Method Details
"clientId": "A String", # ID for the registered client application that makes authentication requests to the Azure AD identity provider.
"clientSecret": "A String", # Input only. Unencrypted AzureAD client secret will be passed to the GKE Hub CLH.
"encryptedClientSecret": "A String", # Output only. Encrypted AzureAD client secret.
+ "groupFormat": "A String", # Optional. Format of the AzureAD groups that the client wants for auth.
"kubectlRedirectUri": "A String", # The redirect URL that kubectl uses for authorization.
"tenant": "A String", # Kind of Azure AD account to be authenticated. Supported values are or for accounts belonging to a specific tenant.
+ "userClaim": "A String", # Optional. Claim in the AzureAD ID Token that holds the user details.
},
"googleConfig": { # Configuration for the Google Plugin Auth flow. # GoogleConfig specific configuration.
"disable": True or False, # Disable automatic configuration of Google Plugin on supported platforms.
@@ -1482,6 +1564,20 @@ Method Details
"userPrefix": "A String", # Prefix to prepend to user name.
},
"proxy": "A String", # Proxy server address to use for auth method.
+ "samlConfig": { # Configuration for the SAML Auth flow. # SAML specific configuration.
+ "attributeMapping": { # Optional. The mapping of additional user attributes like nickname, birthday and address etc.. `key` is the name of this additional attribute. `value` is a string presenting as CEL(common expression language, go/cel) used for getting the value from the resources. Take nickname as an example, in this case, `key` is "attribute.nickname" and `value` is "assertion.nickname".
+ "a_key": "A String",
+ },
+ "groupPrefix": "A String", # Optional. Prefix to prepend to group name.
+ "groupsAttribute": "A String", # Optional. The SAML attribute to read groups from. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `group_prefix`).
+ "identityProviderCertificates": [ # Required. The list of IdP certificates to validate the SAML response against.
+ "A String",
+ ],
+ "identityProviderId": "A String", # Required. The entity ID of the SAML IdP.
+ "identityProviderSsoUri": "A String", # Required. The URI where the SAML IdP exposes the SSO service.
+ "userAttribute": "A String", # Optional. The SAML attribute to read username from. If unspecified, the username will be read from the NameID element of the assertion in SAML response. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `user_prefix`).
+ "userPrefix": "A String", # Optional. Prefix to prepend to user name.
+ },
},
],
},
@@ -1828,8 +1924,10 @@ Method Details
"clientId": "A String", # ID for the registered client application that makes authentication requests to the Azure AD identity provider.
"clientSecret": "A String", # Input only. Unencrypted AzureAD client secret will be passed to the GKE Hub CLH.
"encryptedClientSecret": "A String", # Output only. Encrypted AzureAD client secret.
+ "groupFormat": "A String", # Optional. Format of the AzureAD groups that the client wants for auth.
"kubectlRedirectUri": "A String", # The redirect URL that kubectl uses for authorization.
"tenant": "A String", # Kind of Azure AD account to be authenticated. Supported values are or for accounts belonging to a specific tenant.
+ "userClaim": "A String", # Optional. Claim in the AzureAD ID Token that holds the user details.
},
"googleConfig": { # Configuration for the Google Plugin Auth flow. # GoogleConfig specific configuration.
"disable": True or False, # Disable automatic configuration of Google Plugin on supported platforms.
@@ -1852,6 +1950,20 @@ Method Details
"userPrefix": "A String", # Prefix to prepend to user name.
},
"proxy": "A String", # Proxy server address to use for auth method.
+ "samlConfig": { # Configuration for the SAML Auth flow. # SAML specific configuration.
+ "attributeMapping": { # Optional. The mapping of additional user attributes like nickname, birthday and address etc.. `key` is the name of this additional attribute. `value` is a string presenting as CEL(common expression language, go/cel) used for getting the value from the resources. Take nickname as an example, in this case, `key` is "attribute.nickname" and `value` is "assertion.nickname".
+ "a_key": "A String",
+ },
+ "groupPrefix": "A String", # Optional. Prefix to prepend to group name.
+ "groupsAttribute": "A String", # Optional. The SAML attribute to read groups from. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `group_prefix`).
+ "identityProviderCertificates": [ # Required. The list of IdP certificates to validate the SAML response against.
+ "A String",
+ ],
+ "identityProviderId": "A String", # Required. The entity ID of the SAML IdP.
+ "identityProviderSsoUri": "A String", # Required. The URI where the SAML IdP exposes the SSO service.
+ "userAttribute": "A String", # Optional. The SAML attribute to read username from. If unspecified, the username will be read from the NameID element of the assertion in SAML response. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `user_prefix`).
+ "userPrefix": "A String", # Optional. Prefix to prepend to user name.
+ },
},
],
},
@@ -1993,8 +2105,10 @@ Method Details
"clientId": "A String", # ID for the registered client application that makes authentication requests to the Azure AD identity provider.
"clientSecret": "A String", # Input only. Unencrypted AzureAD client secret will be passed to the GKE Hub CLH.
"encryptedClientSecret": "A String", # Output only. Encrypted AzureAD client secret.
+ "groupFormat": "A String", # Optional. Format of the AzureAD groups that the client wants for auth.
"kubectlRedirectUri": "A String", # The redirect URL that kubectl uses for authorization.
"tenant": "A String", # Kind of Azure AD account to be authenticated. Supported values are or for accounts belonging to a specific tenant.
+ "userClaim": "A String", # Optional. Claim in the AzureAD ID Token that holds the user details.
},
"googleConfig": { # Configuration for the Google Plugin Auth flow. # GoogleConfig specific configuration.
"disable": True or False, # Disable automatic configuration of Google Plugin on supported platforms.
@@ -2017,6 +2131,20 @@ Method Details
"userPrefix": "A String", # Prefix to prepend to user name.
},
"proxy": "A String", # Proxy server address to use for auth method.
+ "samlConfig": { # Configuration for the SAML Auth flow. # SAML specific configuration.
+ "attributeMapping": { # Optional. The mapping of additional user attributes like nickname, birthday and address etc.. `key` is the name of this additional attribute. `value` is a string presenting as CEL(common expression language, go/cel) used for getting the value from the resources. Take nickname as an example, in this case, `key` is "attribute.nickname" and `value` is "assertion.nickname".
+ "a_key": "A String",
+ },
+ "groupPrefix": "A String", # Optional. Prefix to prepend to group name.
+ "groupsAttribute": "A String", # Optional. The SAML attribute to read groups from. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `group_prefix`).
+ "identityProviderCertificates": [ # Required. The list of IdP certificates to validate the SAML response against.
+ "A String",
+ ],
+ "identityProviderId": "A String", # Required. The entity ID of the SAML IdP.
+ "identityProviderSsoUri": "A String", # Required. The URI where the SAML IdP exposes the SSO service.
+ "userAttribute": "A String", # Optional. The SAML attribute to read username from. If unspecified, the username will be read from the NameID element of the assertion in SAML response. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `user_prefix`).
+ "userPrefix": "A String", # Optional. Prefix to prepend to user name.
+ },
},
],
},
@@ -2274,8 +2402,10 @@ Method Details
"clientId": "A String", # ID for the registered client application that makes authentication requests to the Azure AD identity provider.
"clientSecret": "A String", # Input only. Unencrypted AzureAD client secret will be passed to the GKE Hub CLH.
"encryptedClientSecret": "A String", # Output only. Encrypted AzureAD client secret.
+ "groupFormat": "A String", # Optional. Format of the AzureAD groups that the client wants for auth.
"kubectlRedirectUri": "A String", # The redirect URL that kubectl uses for authorization.
"tenant": "A String", # Kind of Azure AD account to be authenticated. Supported values are or for accounts belonging to a specific tenant.
+ "userClaim": "A String", # Optional. Claim in the AzureAD ID Token that holds the user details.
},
"googleConfig": { # Configuration for the Google Plugin Auth flow. # GoogleConfig specific configuration.
"disable": True or False, # Disable automatic configuration of Google Plugin on supported platforms.
@@ -2298,6 +2428,20 @@ Method Details
"userPrefix": "A String", # Prefix to prepend to user name.
},
"proxy": "A String", # Proxy server address to use for auth method.
+ "samlConfig": { # Configuration for the SAML Auth flow. # SAML specific configuration.
+ "attributeMapping": { # Optional. The mapping of additional user attributes like nickname, birthday and address etc.. `key` is the name of this additional attribute. `value` is a string presenting as CEL(common expression language, go/cel) used for getting the value from the resources. Take nickname as an example, in this case, `key` is "attribute.nickname" and `value` is "assertion.nickname".
+ "a_key": "A String",
+ },
+ "groupPrefix": "A String", # Optional. Prefix to prepend to group name.
+ "groupsAttribute": "A String", # Optional. The SAML attribute to read groups from. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `group_prefix`).
+ "identityProviderCertificates": [ # Required. The list of IdP certificates to validate the SAML response against.
+ "A String",
+ ],
+ "identityProviderId": "A String", # Required. The entity ID of the SAML IdP.
+ "identityProviderSsoUri": "A String", # Required. The URI where the SAML IdP exposes the SSO service.
+ "userAttribute": "A String", # Optional. The SAML attribute to read username from. If unspecified, the username will be read from the NameID element of the assertion in SAML response. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `user_prefix`).
+ "userPrefix": "A String", # Optional. Prefix to prepend to user name.
+ },
},
],
},
@@ -2600,8 +2744,10 @@ Method Details
"clientId": "A String", # ID for the registered client application that makes authentication requests to the Azure AD identity provider.
"clientSecret": "A String", # Input only. Unencrypted AzureAD client secret will be passed to the GKE Hub CLH.
"encryptedClientSecret": "A String", # Output only. Encrypted AzureAD client secret.
+ "groupFormat": "A String", # Optional. Format of the AzureAD groups that the client wants for auth.
"kubectlRedirectUri": "A String", # The redirect URL that kubectl uses for authorization.
"tenant": "A String", # Kind of Azure AD account to be authenticated. Supported values are or for accounts belonging to a specific tenant.
+ "userClaim": "A String", # Optional. Claim in the AzureAD ID Token that holds the user details.
},
"googleConfig": { # Configuration for the Google Plugin Auth flow. # GoogleConfig specific configuration.
"disable": True or False, # Disable automatic configuration of Google Plugin on supported platforms.
@@ -2624,6 +2770,20 @@ Method Details
"userPrefix": "A String", # Prefix to prepend to user name.
},
"proxy": "A String", # Proxy server address to use for auth method.
+ "samlConfig": { # Configuration for the SAML Auth flow. # SAML specific configuration.
+ "attributeMapping": { # Optional. The mapping of additional user attributes like nickname, birthday and address etc.. `key` is the name of this additional attribute. `value` is a string presenting as CEL(common expression language, go/cel) used for getting the value from the resources. Take nickname as an example, in this case, `key` is "attribute.nickname" and `value` is "assertion.nickname".
+ "a_key": "A String",
+ },
+ "groupPrefix": "A String", # Optional. Prefix to prepend to group name.
+ "groupsAttribute": "A String", # Optional. The SAML attribute to read groups from. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `group_prefix`).
+ "identityProviderCertificates": [ # Required. The list of IdP certificates to validate the SAML response against.
+ "A String",
+ ],
+ "identityProviderId": "A String", # Required. The entity ID of the SAML IdP.
+ "identityProviderSsoUri": "A String", # Required. The URI where the SAML IdP exposes the SSO service.
+ "userAttribute": "A String", # Optional. The SAML attribute to read username from. If unspecified, the username will be read from the NameID element of the assertion in SAML response. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `user_prefix`).
+ "userPrefix": "A String", # Optional. Prefix to prepend to user name.
+ },
},
],
},
@@ -2765,8 +2925,10 @@ Method Details
"clientId": "A String", # ID for the registered client application that makes authentication requests to the Azure AD identity provider.
"clientSecret": "A String", # Input only. Unencrypted AzureAD client secret will be passed to the GKE Hub CLH.
"encryptedClientSecret": "A String", # Output only. Encrypted AzureAD client secret.
+ "groupFormat": "A String", # Optional. Format of the AzureAD groups that the client wants for auth.
"kubectlRedirectUri": "A String", # The redirect URL that kubectl uses for authorization.
"tenant": "A String", # Kind of Azure AD account to be authenticated. Supported values are or for accounts belonging to a specific tenant.
+ "userClaim": "A String", # Optional. Claim in the AzureAD ID Token that holds the user details.
},
"googleConfig": { # Configuration for the Google Plugin Auth flow. # GoogleConfig specific configuration.
"disable": True or False, # Disable automatic configuration of Google Plugin on supported platforms.
@@ -2789,6 +2951,20 @@ Method Details
"userPrefix": "A String", # Prefix to prepend to user name.
},
"proxy": "A String", # Proxy server address to use for auth method.
+ "samlConfig": { # Configuration for the SAML Auth flow. # SAML specific configuration.
+ "attributeMapping": { # Optional. The mapping of additional user attributes like nickname, birthday and address etc.. `key` is the name of this additional attribute. `value` is a string presenting as CEL(common expression language, go/cel) used for getting the value from the resources. Take nickname as an example, in this case, `key` is "attribute.nickname" and `value` is "assertion.nickname".
+ "a_key": "A String",
+ },
+ "groupPrefix": "A String", # Optional. Prefix to prepend to group name.
+ "groupsAttribute": "A String", # Optional. The SAML attribute to read groups from. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `group_prefix`).
+ "identityProviderCertificates": [ # Required. The list of IdP certificates to validate the SAML response against.
+ "A String",
+ ],
+ "identityProviderId": "A String", # Required. The entity ID of the SAML IdP.
+ "identityProviderSsoUri": "A String", # Required. The URI where the SAML IdP exposes the SSO service.
+ "userAttribute": "A String", # Optional. The SAML attribute to read username from. If unspecified, the username will be read from the NameID element of the assertion in SAML response. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `user_prefix`).
+ "userPrefix": "A String", # Optional. Prefix to prepend to user name.
+ },
},
],
},
@@ -3046,8 +3222,10 @@ Method Details
"clientId": "A String", # ID for the registered client application that makes authentication requests to the Azure AD identity provider.
"clientSecret": "A String", # Input only. Unencrypted AzureAD client secret will be passed to the GKE Hub CLH.
"encryptedClientSecret": "A String", # Output only. Encrypted AzureAD client secret.
+ "groupFormat": "A String", # Optional. Format of the AzureAD groups that the client wants for auth.
"kubectlRedirectUri": "A String", # The redirect URL that kubectl uses for authorization.
"tenant": "A String", # Kind of Azure AD account to be authenticated. Supported values are or for accounts belonging to a specific tenant.
+ "userClaim": "A String", # Optional. Claim in the AzureAD ID Token that holds the user details.
},
"googleConfig": { # Configuration for the Google Plugin Auth flow. # GoogleConfig specific configuration.
"disable": True or False, # Disable automatic configuration of Google Plugin on supported platforms.
@@ -3070,6 +3248,20 @@ Method Details
"userPrefix": "A String", # Prefix to prepend to user name.
},
"proxy": "A String", # Proxy server address to use for auth method.
+ "samlConfig": { # Configuration for the SAML Auth flow. # SAML specific configuration.
+ "attributeMapping": { # Optional. The mapping of additional user attributes like nickname, birthday and address etc.. `key` is the name of this additional attribute. `value` is a string presenting as CEL(common expression language, go/cel) used for getting the value from the resources. Take nickname as an example, in this case, `key` is "attribute.nickname" and `value` is "assertion.nickname".
+ "a_key": "A String",
+ },
+ "groupPrefix": "A String", # Optional. Prefix to prepend to group name.
+ "groupsAttribute": "A String", # Optional. The SAML attribute to read groups from. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `group_prefix`).
+ "identityProviderCertificates": [ # Required. The list of IdP certificates to validate the SAML response against.
+ "A String",
+ ],
+ "identityProviderId": "A String", # Required. The entity ID of the SAML IdP.
+ "identityProviderSsoUri": "A String", # Required. The URI where the SAML IdP exposes the SSO service.
+ "userAttribute": "A String", # Optional. The SAML attribute to read username from. If unspecified, the username will be read from the NameID element of the assertion in SAML response. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `user_prefix`).
+ "userPrefix": "A String", # Optional. Prefix to prepend to user name.
+ },
},
],
},
diff --git a/googleapiclient/discovery_cache/documents/gkehub.v1.json b/googleapiclient/discovery_cache/documents/gkehub.v1.json
index 0e41514789..20dc388bef 100644
--- a/googleapiclient/discovery_cache/documents/gkehub.v1.json
+++ b/googleapiclient/discovery_cache/documents/gkehub.v1.json
@@ -1834,7 +1834,7 @@
}
}
},
-"revision": "20240225",
+"revision": "20240229",
"rootUrl": "https://gkehub.googleapis.com/",
"schemas": {
"AppDevExperienceFeatureSpec": {
@@ -3733,6 +3733,10 @@
"proxy": {
"description": "Proxy server address to use for auth method.",
"type": "string"
+},
+"samlConfig": {
+"$ref": "IdentityServiceSamlConfig",
+"description": "SAML specific configuration."
}
},
"type": "object"
@@ -3755,6 +3759,10 @@
"readOnly": true,
"type": "string"
},
+"groupFormat": {
+"description": "Optional. Format of the AzureAD groups that the client wants for auth.",
+"type": "string"
+},
"kubectlRedirectUri": {
"description": "The redirect URL that kubectl uses for authorization.",
"type": "string"
@@ -3762,6 +3770,10 @@
"tenant": {
"description": "Kind of Azure AD account to be authenticated. Supported values are or for accounts belonging to a specific tenant.",
"type": "string"
+},
+"userClaim": {
+"description": "Optional. Claim in the AzureAD ID Token that holds the user details.",
+"type": "string"
}
},
"type": "object"
@@ -3889,6 +3901,51 @@
},
"type": "object"
},
+"IdentityServiceSamlConfig": {
+"description": "Configuration for the SAML Auth flow.",
+"id": "IdentityServiceSamlConfig",
+"properties": {
+"attributeMapping": {
+"additionalProperties": {
+"type": "string"
+},
+"description": "Optional. The mapping of additional user attributes like nickname, birthday and address etc.. `key` is the name of this additional attribute. `value` is a string presenting as CEL(common expression language, go/cel) used for getting the value from the resources. Take nickname as an example, in this case, `key` is \"attribute.nickname\" and `value` is \"assertion.nickname\".",
+"type": "object"
+},
+"groupPrefix": {
+"description": "Optional. Prefix to prepend to group name.",
+"type": "string"
+},
+"groupsAttribute": {
+"description": "Optional. The SAML attribute to read groups from. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `group_prefix`).",
+"type": "string"
+},
+"identityProviderCertificates": {
+"description": "Required. The list of IdP certificates to validate the SAML response against.",
+"items": {
+"type": "string"
+},
+"type": "array"
+},
+"identityProviderId": {
+"description": "Required. The entity ID of the SAML IdP.",
+"type": "string"
+},
+"identityProviderSsoUri": {
+"description": "Required. The URI where the SAML IdP exposes the SSO service.",
+"type": "string"
+},
+"userAttribute": {
+"description": "Optional. The SAML attribute to read username from. If unspecified, the username will be read from the NameID element of the assertion in SAML response. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `user_prefix`).",
+"type": "string"
+},
+"userPrefix": {
+"description": "Optional. Prefix to prepend to user name.",
+"type": "string"
+}
+},
+"type": "object"
+},
"KubernetesMetadata": {
"description": "KubernetesMetadata provides informational metadata for Memberships representing Kubernetes clusters.",
"id": "KubernetesMetadata",
diff --git a/googleapiclient/discovery_cache/documents/gkehub.v1alpha.json b/googleapiclient/discovery_cache/documents/gkehub.v1alpha.json
index 21186fd5c7..74f18a9a86 100644
--- a/googleapiclient/discovery_cache/documents/gkehub.v1alpha.json
+++ b/googleapiclient/discovery_cache/documents/gkehub.v1alpha.json
@@ -2175,7 +2175,7 @@
}
}
},
-"revision": "20240225",
+"revision": "20240229",
"rootUrl": "https://gkehub.googleapis.com/",
"schemas": {
"AnthosObservabilityFeatureSpec": {
@@ -4324,6 +4324,10 @@
"proxy": {
"description": "Proxy server address to use for auth method.",
"type": "string"
+},
+"samlConfig": {
+"$ref": "IdentityServiceSamlConfig",
+"description": "SAML specific configuration."
}
},
"type": "object"
@@ -4346,6 +4350,10 @@
"readOnly": true,
"type": "string"
},
+"groupFormat": {
+"description": "Optional. Format of the AzureAD groups that the client wants for auth.",
+"type": "string"
+},
"kubectlRedirectUri": {
"description": "The redirect URL that kubectl uses for authorization.",
"type": "string"
@@ -4353,6 +4361,10 @@
"tenant": {
"description": "Kind of Azure AD account to be authenticated. Supported values are or for accounts belonging to a specific tenant.",
"type": "string"
+},
+"userClaim": {
+"description": "Optional. Claim in the AzureAD ID Token that holds the user details.",
+"type": "string"
}
},
"type": "object"
@@ -4480,6 +4492,51 @@
},
"type": "object"
},
+"IdentityServiceSamlConfig": {
+"description": "Configuration for the SAML Auth flow.",
+"id": "IdentityServiceSamlConfig",
+"properties": {
+"attributeMapping": {
+"additionalProperties": {
+"type": "string"
+},
+"description": "Optional. The mapping of additional user attributes like nickname, birthday and address etc.. `key` is the name of this additional attribute. `value` is a string presenting as CEL(common expression language, go/cel) used for getting the value from the resources. Take nickname as an example, in this case, `key` is \"attribute.nickname\" and `value` is \"assertion.nickname\".",
+"type": "object"
+},
+"groupPrefix": {
+"description": "Optional. Prefix to prepend to group name.",
+"type": "string"
+},
+"groupsAttribute": {
+"description": "Optional. The SAML attribute to read groups from. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `group_prefix`).",
+"type": "string"
+},
+"identityProviderCertificates": {
+"description": "Required. The list of IdP certificates to validate the SAML response against.",
+"items": {
+"type": "string"
+},
+"type": "array"
+},
+"identityProviderId": {
+"description": "Required. The entity ID of the SAML IdP.",
+"type": "string"
+},
+"identityProviderSsoUri": {
+"description": "Required. The URI where the SAML IdP exposes the SSO service.",
+"type": "string"
+},
+"userAttribute": {
+"description": "Optional. The SAML attribute to read username from. If unspecified, the username will be read from the NameID element of the assertion in SAML response. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `user_prefix`).",
+"type": "string"
+},
+"userPrefix": {
+"description": "Optional. Prefix to prepend to user name.",
+"type": "string"
+}
+},
+"type": "object"
+},
"KubernetesMetadata": {
"description": "KubernetesMetadata provides informational metadata for Memberships representing Kubernetes clusters.",
"id": "KubernetesMetadata",
diff --git a/googleapiclient/discovery_cache/documents/gkehub.v1alpha2.json b/googleapiclient/discovery_cache/documents/gkehub.v1alpha2.json
index 35c4102322..5da862b096 100644
--- a/googleapiclient/discovery_cache/documents/gkehub.v1alpha2.json
+++ b/googleapiclient/discovery_cache/documents/gkehub.v1alpha2.json
@@ -657,7 +657,7 @@
}
}
},
-"revision": "20240225",
+"revision": "20240229",
"rootUrl": "https://gkehub.googleapis.com/",
"schemas": {
"ApplianceCluster": {
diff --git a/googleapiclient/discovery_cache/documents/gkehub.v1beta.json b/googleapiclient/discovery_cache/documents/gkehub.v1beta.json
index 0a600c6c17..cc76a8021a 100644
--- a/googleapiclient/discovery_cache/documents/gkehub.v1beta.json
+++ b/googleapiclient/discovery_cache/documents/gkehub.v1beta.json
@@ -2024,7 +2024,7 @@
}
}
},
-"revision": "20240225",
+"revision": "20240229",
"rootUrl": "https://gkehub.googleapis.com/",
"schemas": {
"AnthosObservabilityFeatureSpec": {
@@ -4028,6 +4028,10 @@
"proxy": {
"description": "Proxy server address to use for auth method.",
"type": "string"
+},
+"samlConfig": {
+"$ref": "IdentityServiceSamlConfig",
+"description": "SAML specific configuration."
}
},
"type": "object"
@@ -4050,6 +4054,10 @@
"readOnly": true,
"type": "string"
},
+"groupFormat": {
+"description": "Optional. Format of the AzureAD groups that the client wants for auth.",
+"type": "string"
+},
"kubectlRedirectUri": {
"description": "The redirect URL that kubectl uses for authorization.",
"type": "string"
@@ -4057,6 +4065,10 @@
"tenant": {
"description": "Kind of Azure AD account to be authenticated. Supported values are or for accounts belonging to a specific tenant.",
"type": "string"
+},
+"userClaim": {
+"description": "Optional. Claim in the AzureAD ID Token that holds the user details.",
+"type": "string"
}
},
"type": "object"
@@ -4184,6 +4196,51 @@
},
"type": "object"
},
+"IdentityServiceSamlConfig": {
+"description": "Configuration for the SAML Auth flow.",
+"id": "IdentityServiceSamlConfig",
+"properties": {
+"attributeMapping": {
+"additionalProperties": {
+"type": "string"
+},
+"description": "Optional. The mapping of additional user attributes like nickname, birthday and address etc.. `key` is the name of this additional attribute. `value` is a string presenting as CEL(common expression language, go/cel) used for getting the value from the resources. Take nickname as an example, in this case, `key` is \"attribute.nickname\" and `value` is \"assertion.nickname\".",
+"type": "object"
+},
+"groupPrefix": {
+"description": "Optional. Prefix to prepend to group name.",
+"type": "string"
+},
+"groupsAttribute": {
+"description": "Optional. The SAML attribute to read groups from. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `group_prefix`).",
+"type": "string"
+},
+"identityProviderCertificates": {
+"description": "Required. The list of IdP certificates to validate the SAML response against.",
+"items": {
+"type": "string"
+},
+"type": "array"
+},
+"identityProviderId": {
+"description": "Required. The entity ID of the SAML IdP.",
+"type": "string"
+},
+"identityProviderSsoUri": {
+"description": "Required. The URI where the SAML IdP exposes the SSO service.",
+"type": "string"
+},
+"userAttribute": {
+"description": "Optional. The SAML attribute to read username from. If unspecified, the username will be read from the NameID element of the assertion in SAML response. This value is expected to be a string and will be passed along as-is (with the option of being prefixed by the `user_prefix`).",
+"type": "string"
+},
+"userPrefix": {
+"description": "Optional. Prefix to prepend to user name.",
+"type": "string"
+}
+},
+"type": "object"
+},
"KubernetesMetadata": {
"description": "KubernetesMetadata provides informational metadata for Memberships representing Kubernetes clusters.",
"id": "KubernetesMetadata",
diff --git a/googleapiclient/discovery_cache/documents/gkehub.v1beta1.json b/googleapiclient/discovery_cache/documents/gkehub.v1beta1.json
index 1e05a1b462..844e9b6cf7 100644
--- a/googleapiclient/discovery_cache/documents/gkehub.v1beta1.json
+++ b/googleapiclient/discovery_cache/documents/gkehub.v1beta1.json
@@ -712,7 +712,7 @@
}
}
},
-"revision": "20240225",
+"revision": "20240229",
"rootUrl": "https://gkehub.googleapis.com/",
"schemas": {
"ApplianceCluster": {
diff --git a/googleapiclient/discovery_cache/documents/gkehub.v2alpha.json b/googleapiclient/discovery_cache/documents/gkehub.v2alpha.json
index 7b7024918a..8e4c00031d 100644
--- a/googleapiclient/discovery_cache/documents/gkehub.v2alpha.json
+++ b/googleapiclient/discovery_cache/documents/gkehub.v2alpha.json
@@ -280,7 +280,7 @@
}
}
},
-"revision": "20240225",
+"revision": "20240229",
"rootUrl": "https://gkehub.googleapis.com/",
"schemas": {
"CancelOperationRequest": {