Spacelift’s OIDC tokens always have their audience set to your Spacelift hostname. However, many OIDC consumers require that they be able to set their own audience. Such consumers work on HCP Terraform because it allows you to set TFC_WORKLOAD_IDENTITY_AUDIENCE [1] to customize the token’s audience, but Spacelift offers no such feature.
[1] https://developer.hashicorp.com/terraform/cloud-docs/dynamic-provider-credentials/manual-generation
Please authenticate to join the conversation.
👀 In Review
💡 Feature Requests
2 days ago
Get notified by email when there are changes.
👀 In Review
💡 Feature Requests
2 days ago
Get notified by email when there are changes.