OidcIssuer class

Registers a new OIDC issuer for an organization, establishing a trust relationship with an external identity provider. Once registered, the identity provider can issue signed, short-lived tokens that are exchanged for temporary Pulumi Cloud credentials during deployments. This eliminates the need to store long-lived access tokens. Supported providers include AWS, Azure, Google Cloud, GitHub Actions, and any OIDC-compliant identity provider. The request must include the issuer URL, and the service will fetch the provider's public signing keys to verify token authenticity.

Constructors

OidcIssuer(String name, {OidcIssuerArgs? args, CustomResourceOptions? options})
Creates a new OidcIssuer. name The Pulumi resource name. args Arguments used to configure this OidcIssuer. The set of arguments for OidcIssuer. options Resource options controlling this resource's behavior.

Properties

childResources → Set<Resource>
finalinherited
completionSources ↔ Map<String, IOutputCompletionSource>
latefinalinherited
created ↔ Output<String?>
The ISO 8601 timestamp when the OIDC issuer was created.
latefinal
hashCode → int
The hash code for this object.
no setterinherited
id ↔ Output<String>
getter/setter pairinherited
isCustom → bool
Returns whether this resource is provider-managed.
no setterinherited
isProtected → bool
Returns whether this resource is protected from deletion.
no setterinherited
isRemote → bool
Whether this resource is registered as remote.
no setterinherited
isResourceReference → bool
Whether this instance represents a resource value returned over RPC.
finalinherited
issuer ↔ Output<String>
The OIDC issuer identifier, typically a URL that uniquely identifies the identity provider.
latefinal
issuerId ↔ Output<String>
The unique identifier of the registered OIDC issuer.
latefinal
jwks ↔ Output
The JSON Web Key Set for the OIDC issuer.
latefinal
lastUsed ↔ Output<String?>
The ISO 8601 timestamp when the OIDC issuer was last used for token exchange.
latefinal
maxExpiration ↔ Output<int?>
The maximum token expiration time in seconds.
latefinal
modified ↔ Output<String?>
The ISO 8601 timestamp when the OIDC issuer was last modified.
latefinal
name ↔ Output<String>
The display name of the OIDC issuer.
latefinal
resourceTransforms → List<ResourceTransform>
Inherited/explicit async transforms.
no setterinherited
runtimeType → Type
A representation of the runtime type of the object.
no setterinherited
thumbprints ↔ Output<List<String>?>
SHA-1 certificate thumbprints used to verify the OIDC issuer's TLS certificate.
latefinal
transformations → List<ResourceTransformation>
Inherited/explicit legacy transformations.
no setterinherited
url ↔ Output<String>
The URL of the OIDC issuer.
latefinal
urn ↔ Output<String>
latefinalinherited

Methods

failId(Object error) → void
Completes this resource ID with an error when registration fails.
inherited
failOutputs(Object error) → void
Completes all output properties with error.
inherited
failUrn(Object error) → void
Completes this resource URN with an error when registration fails.
inherited
getProvider(String moduleMember) → ProviderResource?
Returns provider for moduleMember's package, if configured.
inherited
getResourceName() → String
Returns this resource's logical name.
inherited
getResourceType() → String
Returns this resource's Pulumi type token.
inherited
noSuchMethod(Invocation invocation) → dynamic
Invoked when a nonexistent method or property is accessed.
inherited
registerOutput<T>(String propertyName, {Object? decoder(Object?)?, bool isSecret = false}) → Output<T>
Registers a dynamic output property for this resource.
inherited
resolveId(String? value, {required bool isKnown}) → void
Resolves the provider-assigned ID for this resource.
inherited
resolveOutputs(Struct outputs) → void
Resolves all output properties from a monitor response payload.
inherited
resolveUrn(String value) → void
Resolves this resource's URN once assigned by the engine.
inherited
serializeProperties(Map<String, dynamic> properties) → Future<Struct>
Serializes resource properties for RPC transmission.
inherited
toString() → String
A string representation of this object.
inherited

Operators

operator ==(Object other) → bool
The equality operator.
inherited