iam workload-identity-federation
tcloud iam workload-identity-federation
Bootstrap and manage CI/CD workload identity (OIDC)
Synopsis
Commands to provision federated identity providers, service accounts, role bindings, and federated identities for GitHub Actions, GitLab CI, and Kubernetes service account OIDC tokens.
Options
-h, --help help for workload-identity-federationOptions inherited from parent commands
--access-token string Access Token authentication (overrides context)
--api string API endpoint (overrides context)
--client-id string OIDC client ID for OIDC authentication (overrides context)
--client-secret string OIDC client secret for OIDC authentication (overrides context)
-c, --context string Context name
--debug Debug mode
--ignore-dir-config Ignore directory-local .thalassa defaults
-O, --organisation string Organisation slug or identity (overrides context)
-P, --project string Project identity (overrides context; slug is resolved to identity; use "root" for organisation scope)
--token string Personal access token (overrides context)SEE ALSO
- tcloud iam - Identity and access management for your organisation
- tcloud iam workload-identity-federation bootstrap - Provision workload identity for GitHub, GitLab, or Kubernetes