Class TokenRequestSpecArgs

TokenRequestSpec contains client provided parameters of a token request.

Inheritance
System.Object
InputArgs
ResourceArgs
TokenRequestSpecArgs
Inherited Members
System.Object.Equals(System.Object)
System.Object.Equals(System.Object, System.Object)
System.Object.GetHashCode()
System.Object.GetType()
System.Object.MemberwiseClone()
System.Object.ReferenceEquals(System.Object, System.Object)
System.Object.ToString()
Namespace: Pulumi.Kubernetes.Types.Inputs.Authentication.V1
Assembly: Pulumi.Kubernetes.dll
Syntax
public class TokenRequestSpecArgs : ResourceArgs

Properties

View Source

Audiences

Audiences are the intendend audiences of the token. A recipient of a token must identitfy themself with an identifier in the list of audiences of the token, and otherwise should reject the token. A token issued for multiple audiences may be used to authenticate against any of the audiences listed but implies a high degree of trust between the target audiences.

Declaration
public InputList<string> Audiences { get; set; }
Property Value
Type Description
InputList<System.String>
View Source

BoundObjectRef

BoundObjectRef is a reference to an object that the token will be bound to. The token will only be valid for as long as the bound object exists. NOTE: The API server's TokenReview endpoint will validate the BoundObjectRef, but other audiences may not. Keep ExpirationSeconds small if you want prompt revocation.

Declaration
public Input<BoundObjectReferenceArgs> BoundObjectRef { get; set; }
Property Value
Type Description
Input<BoundObjectReferenceArgs>
View Source

ExpirationSeconds

ExpirationSeconds is the requested duration of validity of the request. The token issuer may return a token with a different validity duration so a client needs to check the 'expiration' field in a response.

Declaration
public Input<int> ExpirationSeconds { get; set; }
Property Value
Type Description
Input<System.Int32>