Map WIF runner client from audience
This commit is contained in:
parent
5276b57c4d
commit
65809da33a
3 changed files with 3 additions and 3 deletions
|
|
@ -142,7 +142,7 @@ resource "google_iam_workload_identity_pool_provider" "forgejo_runners" {
|
|||
"attribute.burrow_subject" = "assertion.sub"
|
||||
"attribute.burrow_username" = "assertion.preferred_username"
|
||||
"attribute.burrow_email" = "assertion.email"
|
||||
"attribute.burrow_client_id" = "assertion.azp"
|
||||
"attribute.burrow_client_id" = "assertion.aud"
|
||||
}
|
||||
|
||||
attribute_condition = var.google_wif_attribute_condition
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue