Skip to content

Commit 5d0de3f

Browse files
matprigmathieu prigent
authored and
mathieu prigent
committed
second review
1 parent 9004dd3 commit 5d0de3f

File tree

1 file changed

+6
-6
lines changed

1 file changed

+6
-6
lines changed

Diff for: website/docs/r/cloud_project_kube_oidc.html.markdown

+6-6
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ resource "ovh_cloud_project_kube_oidc" "my-oidc" {
2222
issuer_url = "https://ovh.com"
2323
2424
#optional field
25-
oidc_username_claim = "email"
25+
oidc_username_claim = "an-email"
2626
oidc_username_prefix = "ovh:"
2727
oidc_groups_claim = ["groups"]
2828
oidc_groups_prefix = "ovh:"
@@ -47,14 +47,14 @@ The following arguments are supported:
4747

4848
* `oidcUsernameClaim` - JWT claim to use as the user name. By default sub, which is expected to be a unique identifier of the end user. Admins can choose other claims, such as email or name, depending on their provider. However, claims other than email will be prefixed with the issuer URL to prevent naming clashes with other plugins.
4949

50-
* `oidcUsernamePrefix` - Prefix prepended to username claims to prevent clashes with existing names (such as system: users). For example, the value oidc: will create usernames like oidc:jane.doe. If this field isn't set and oidcUsernameClaim is a value other than email the prefix defaults to ( Issuer URL )# where ( Issuer URL ) is the value of oidcIssuerUrl. The value - can be used to disable all prefixing.
50+
* `oidcUsernamePrefix` - Prefix prepended to username claims to prevent clashes with existing names (such as `system:users`). For example, the value `oidc:` will create usernames like `oidc:jane.doe`. If this field isn't set and `oidcUsernameClaim` is a value other than email the prefix defaults to `issuer_url` where `issuer_url` is the value of `oidcIssuerUrl.` The value - can be used to disable all prefixing.
5151

5252
* `oidcGroupsClaim` - Array of JWT claim to use as the user's group. If the claim is present it must be an array of strings.
5353

54-
* `oidcGroupsPrefix` - Prefix prepended to group claims to prevent clashes with existing names (such as system: groups). For example, the value oidc: will create group names like oidc:engineering and oidc:infra.
54+
* `oidcGroupsPrefix` - Prefix prepended to group claims to prevent clashes with existing names (such as `system:groups`). For example, the value `oidc:` will create group names like `oidc:engineering` and `oidc:infra`.
5555

56-
* `oidcRequiredClaim` - Array of key=value pairs that describe required claims in the ID Token. If set, the claims are verified to be present in the ID Token with a matching value."
56+
* `oidcRequiredClaim` - Array of `key=value` pairs that describe required claims in the ID Token. If set, the claims are verified to be present in the ID Token with a matching value."
5757

58-
* `oidcSigningAlgs` - Array of signing algorithms accepted. Default is \"RS256\".
58+
* `oidcSigningAlgs` - Array of signing algorithms accepted. Default is `RS256`.
5959

60-
* `oidcCaContent` - Content of the certificate for the CA, in base64 format, that signed your identity provider's web certificate. Defaults to the host's root CAs.
60+
* `oidcCaContent` - Content of the certificate for the CA, in Base64 format, that signed your identity provider's web certificate. Defaults to the host's root CAs.

0 commit comments

Comments
 (0)