OidcIdentityProviderConfig
¶
Source code in docs_src/capo_eks/types/oidc_identity_provider_config.py
client_id
instance-attribute
¶
client_id: NotRequired[String]
This is also known as audience. The ID of the client application that makes authentication requests to the OIDC identity provider.
groups_claim
instance-attribute
¶
groups_claim: NotRequired[String]
The JSON web token (JWT) claim that the provider uses to return your groups.
groups_prefix
instance-attribute
¶
groups_prefix: NotRequired[String]
The prefix that is prepended to group claims to prevent clashes with existing names (such as system: groups). For example, the value oidc: creates group names like oidc:engineering and oidc:infra. The prefix can't contain system:
identity_provider_config_arn
instance-attribute
¶
identity_provider_config_arn: NotRequired[String]
The ARN of the configuration.
identity_provider_config_name
instance-attribute
¶
identity_provider_config_name: NotRequired[String]
The name of the configuration.
issuer_url
instance-attribute
¶
issuer_url: NotRequired[String]
The URL of the OIDC identity provider that allows the API server to discover public signing keys for verifying tokens.
required_claims
instance-attribute
¶
required_claims: NotRequired[requiredClaimsMap]
The key-value pairs that describe required claims in the identity token. If set, each claim is verified to be present in the token with a matching value.
status
instance-attribute
¶
status: NotRequired[configStatus]
The status of the OIDC identity provider.
tags
instance-attribute
¶
tags: NotRequired[TagMap]
Metadata that assists with categorization and organization. Each tag consists of a key and an optional value. You define both. Tags don't propagate to any other cluster or Amazon Web Services resources.