---
title: "GET /v1/projects/{projectsId}/locations/{locationsId}/clusters/{clustersId}/jwks"
method: GET
path: "/v1/projects/{projectsId}/locations/{locationsId}/clusters/{clustersId}/jwks"
tags: ["projects"]
---

# GET /v1/projects/{projectsId}/locations/{locationsId}/clusters/{clustersId}/jwks

`GET /v1/projects/{projectsId}/locations/{locationsId}/clusters/{clustersId}/jwks`

## Request

- Base URL: `https://container.googleapis.com`
- URL: `https://container.googleapis.com/v1/projects/{projectsId}/locations/{locationsId}/clusters/{clustersId}/jwks`
- Auth: none declared

Gets the public component of the cluster signing keys in JSON Web Key format.

## Path parameters

- `projectsId` string, required
- `locationsId` string, required
- `clustersId` string, required

## Response `200`

Successful response

- GetJSONWebKeysResponse: GetJSONWebKeysResponse is a valid JSON Web Key Set as specified in rfc 7517
  - `cacheHeader` HttpCacheControlResponseHeader: RFC-2616: cache control support
    - `age` string, int64: 14.6 response cache age, in seconds since the response is generated
    - `directive` string: 14.9 request and response directives
    - `expires` string: 14.21 response cache expires, in RFC 1123 date format
  - `keys` Jwk[]: The public component of the keys used by the cluster to sign token requests.
    - `alg` string: Algorithm.
    - `crv` string: Used for ECDSA keys.
    - `e` string: Used for RSA keys.
    - `kid` string: Key ID.
    - `kty` string: Key Type.
    - `n` string: Used for RSA keys.
    - `use` string: Permitted uses for the public keys.
    - `x` string: Used for ECDSA keys.
    - `y` string: Used for ECDSA keys.

---

[API](https://skmtc.dev/google/apis/container.md) - [All operations](https://skmtc.dev/google/apis/container/llms.txt) - [OpenAPI document](https://skmtc.dev/google/apis/container/revisions/649eae563481?raw)