Skip to main content

Customize OIDC audience

Spacelift’s OIDC tokens always have their audience set to your Spacelift hostname. However, many OIDC consumers require that they be able to set their own audience. Such consumers work on HCP Terraform because it allows you to set TFC_WORKLOAD_IDENTITY_AUDIENCE [1] to customize the token’s audience, but Spacelift offers no such feature.

[1] https://developer.hashicorp.com/terraform/cloud-docs/dynamic-provider-credentials/manual-generation

Workaround

Log in to comment and vote

No comments yet

Be the first to share your thoughts.