ezgh iam bots oidc-trust <command>Which OIDC ID tokens may be exchanged for the bot’s API keys (ezgh auth oidc-exchange): tokens from one of the organization’s OIDC providers whose sub matches an entry’s subject and whose claims equal its claims. Removing an entry ends the keys it issued.
Part of ezgh iam bots.
Flags
This command also takes the global flags.
Subcommands
| Command | Description |
|---|---|
ezgh iam bots oidc-trust add |
Let workloads whose OIDC tokens match act as a bot |
ezgh iam bots oidc-trust list |
List the OIDC tokens a bot trusts |
ezgh iam bots oidc-trust remove |
Remove one of a bot’s OIDC trust entries, ending the keys it issued |