iam federated-identities create

tcloud iam federated-identities create [flags]

      --annotations strings          Annotations as key=value (repeatable)
      --audience-match-mode string   exact, any (default), or all
      --conditions string            Conditions as JSON object
      --conditions-file string       Path to JSON file for conditions
      --description string           Description
      --expires-at string            RFC3339 expiry time
  -h, --help                         help for create
      --labels strings               Labels as key=value (repeatable)
      --name string                  Display name
      --no-header                    Do not print table headers
      --provider string              Federated identity provider identity
      --scope strings                Allowed scopes: api:read, api:write, kubernetes, objectStorage (repeatable)
      --service-account string       Service account identity to bind
      --subject string               OIDC sub claim for this identity
      --trusted-audience strings     Trusted JWT audiences (repeatable)

      --access-token string    Access Token authentication (overrides context)
      --api string             API endpoint (overrides context)
      --client-id string       OIDC client ID for OIDC authentication (overrides context)
      --client-secret string   OIDC client secret for OIDC authentication (overrides context)
  -c, --context string         Context name
      --debug                  Debug mode
      --ignore-dir-config      Ignore directory-local .thalassa defaults
  -O, --organisation string    Organisation slug or identity (overrides context)
  -P, --project string         Project identity (overrides context; slug is resolved to identity; use "root" for organisation scope)
      --token string           Personal access token (overrides context)