# Class UserManagedKeysConfig (2.65.0)

2.65.0 (latest) 2.62.0 2.61.0 2.60.0 2.59.0 2.58.0 2.57.0 2.56.1 2.55.1 2.54.0 2.53.0 2.52.0 2.50.0 2.49.0 2.48.0 2.47.1 2.46.0 2.45.0 2.44.0 2.43.0 2.42.0 2.41.0 2.40.0 2.39.0 2.38.0 2.37.0 2.36.0 2.35.0 2.34.0 2.33.0 2.32.0 2.31.0 2.30.0 2.29.0 2.28.0 2.27.0 2.26.0 2.25.0 2.24.0 2.23.0 2.22.0 2.21.0 2.20.0 2.19.0 2.18.0 2.17.4 2.16.0 2.15.0 2.14.0 2.13.0 2.12.2 2.11.2 2.10.8 2.9.0 2.8.1 2.7.1 2.6.1 2.5.0 2.4.1 2.3.1 2.2.0 2.1.0 2.0.1 1.0.3 0.5.0 0.4.0 0.3.0

    UserManagedKeysConfig(mapping=None, *, ignore_unknown_fields=False, **kwargs)

UserManagedKeysConfig holds the resource address to Keys
which are used for signing certs and token that are used for
communication within cluster.

| ## Attributes ||
|---|---|
| **Name** | **Description** |
| `cluster_ca` | `str` The Certificate Authority Service caPool to use for the cluster CA in this cluster. |
| `etcd_api_ca` | `str` Resource path of the Certificate Authority Service caPool to use for the etcd API CA in this cluster. |
| `etcd_peer_ca` | `str` Resource path of the Certificate Authority Service caPool to use for the etcd peer CA in this cluster. |
| `service_account_signing_keys` | `MutableSequence[str]` The Cloud KMS cryptoKeyVersions to use for signing service account JWTs issued by this cluster. Format: `projects/{project}/locations/{location}/keyRings/{keyring}/cryptoKeys/{cryptoKey}/cryptoKeyVersions/{cryptoKeyVersion}` |
| `service_account_verification_keys` | `MutableSequence[str]` The Cloud KMS cryptoKeyVersions to use for verifying service account JWTs issued by this cluster. Format: `projects/{project}/locations/{location}/keyRings/{keyring}/cryptoKeys/{cryptoKey}/cryptoKeyVersions/{cryptoKeyVersion}` |
| `aggregation_ca` | `str` The Certificate Authority Service caPool to use for the aggregation CA in this cluster. |
| `control_plane_disk_encryption_key` | `str` The Cloud KMS cryptoKey to use for Confidential Hyperdisk on the control plane nodes. |
| `control_plane_disk_encryption_key_versions` | `MutableSequence[str]` Output only. All of the versions of the Cloud KMS cryptoKey that are used by Confidential Hyperdisks on the control plane nodes. |
| `gkeops_etcd_backup_encryption_key` | `str` Resource path of the Cloud KMS cryptoKey to use for encryption of internal etcd backups. |