ManagedClusterJwtAuthenticatorProperties Class
Definition
Important
Some information relates to prerelease product that may be substantially modified before it’s released. Microsoft makes no warranties, express or implied, with respect to the information provided here.
The properties of JWTAuthenticator. For details on how to configure the properties of a JWT authenticator, please refer to the Kubernetes documentation: https://kubernetes.io/docs/reference/access-authn-authz/authentication/#using-authentication-configuration. Please note that not all fields available in the Kubernetes documentation are supported by AKS. For troubleshooting, please see https://aka.ms/aks-external-issuers-docs.
public class ManagedClusterJwtAuthenticatorProperties : System.ClientModel.Primitives.IJsonModel<Azure.ResourceManager.ContainerService.Models.ManagedClusterJwtAuthenticatorProperties>, System.ClientModel.Primitives.IPersistableModel<Azure.ResourceManager.ContainerService.Models.ManagedClusterJwtAuthenticatorProperties>type ManagedClusterJwtAuthenticatorProperties = class
interface IJsonModel<ManagedClusterJwtAuthenticatorProperties>
interface IPersistableModel<ManagedClusterJwtAuthenticatorProperties>Public Class ManagedClusterJwtAuthenticatorProperties
Implements IJsonModel(Of ManagedClusterJwtAuthenticatorProperties), IPersistableModel(Of ManagedClusterJwtAuthenticatorProperties)- Inheritance
-
ManagedClusterJwtAuthenticatorProperties
- Implements
Constructors
| Name | Description |
|---|---|
| ManagedClusterJwtAuthenticatorProperties(ManagedClusterJwtAuthenticatorIssuer, ManagedClusterJwtAuthenticatorClaimMappings) |
Initializes a new instance of ManagedClusterJwtAuthenticatorProperties. |
Properties
| Name | Description |
|---|---|
| CertificateAuthorityBundle |
PEM-encoded CA certificate bundle used to validate the connection when fetching discovery information. Use this for issuer endpoints that use private certificate authorities or environments where TLS inspection is performed. The bundle must contain only CERTIFICATE PEM blocks, up to 10 CA certificates, and must be no larger than 20 KB in total. Include all CA certificates needed to validate the issuer endpoint's TLS certificate. Certificate revocation checking is not supported. If provided, only these CAs are trusted instead of the well-known root CAs. If not provided and the managed cluster's properties.securityProfile.customCATrustCertificates is set, those certificates will be used instead. Otherwise, only the well-known root CAs are trusted. |
| ClaimMappings |
The mappings that define how user attributes are extracted from the token claims. |
| ClaimValidationRules |
The rules that are applied to validate token claims to authenticate users. All the expressions must evaluate to true for validation to succeed. |
| Issuer |
The JWT OIDC issuer details. |
| ProvisioningState |
The current provisioning state of the JWT authenticator. |
| UserValidationRules |
The rules that are applied to the mapped user before completing authentication. All the expressions must evaluate to true for validation to succeed. |
