ezgh iam oidc-providers <command>OpenID Connect identity providers the organization registered (GitHub Actions, GitLab CI, a Kubernetes cluster, any OIDC issuer). A workload holding one’s ID token exchanges it for a short-lived API key of a bot whose OIDC trust matches (ezgh auth oidc-exchange), so it stores no EZGH secret.
Part of ezgh iam.
Flags
This command also takes the global flags.
Subcommands
| Command | Description |
|---|---|
ezgh iam oidc-providers create |
Register an OIDC identity provider whose ID tokens bots may trust |
ezgh iam oidc-providers delete |
Delete an OIDC provider, the trust entries naming it, and their keys |
ezgh iam oidc-providers get |
Show an OIDC provider, by ID, slug, name or issuer |
ezgh iam oidc-providers list |
List the organization’s OIDC providers |
ezgh iam oidc-providers update |
Rename an OIDC provider or replace its audiences |