Skip to content
tcloud iam workload-identity-federation

iam workload-identity-federation

tcloud iam workload-identity-federation

Bootstrap and manage CI/CD workload identity (OIDC)

Synopsis

Commands to provision federated identity providers, service accounts, role bindings, and federated identities for GitHub Actions, GitLab CI, and Kubernetes service account OIDC tokens.

Options

  -h, --help   help for workload-identity-federation

Options inherited from parent commands

      --access-token string    Access Token authentication (overrides context)
      --api string             API endpoint (overrides context)
      --client-id string       OIDC client ID for OIDC authentication (overrides context)
      --client-secret string   OIDC client secret for OIDC authentication (overrides context)
  -c, --context string         Context name
      --debug                  Debug mode
      --ignore-dir-config      Ignore directory-local .thalassa defaults
  -O, --organisation string    Organisation slug or identity (overrides context)
  -P, --project string         Project identity (overrides context; slug is resolved to identity; use "root" for organisation scope)
      --token string           Personal access token (overrides context)

SEE ALSO