Cloud Authentication
Create a Custom OIDC provider
Register an OIDC issuer, signing-key discovery configuration, and accepted audiences. Provider names and issuer URLs must be unique within the organization.
post/api/v2/wif/oidc/provider
Request
- Base URLhttps://api.datadoghq.com
- Auth
- API key in header DD-API-KEY and API key in header DD-APPLICATION-KEY
- or OAuth 2Authorization code/oauth2/v1/authorizeToken URL/oauth2/v1/tokenScopesworkload_identity_federation_write
- TypeScriptA function with typed inputs. Its response is checked against the schema.
Request body
Example request
{
"data": {
"attributes": {
"audiences": [
"datadog/00000000-0000-0000-0000-000000000001"
],
"discovery_type": "oidc_discovery",
"identity_claim_name": "sub",
"issuer_url": "https://issuer.example.com",
"jwks_url": "https://issuer.example.com/keys",
"org_uuid_claim_name": "dd_org_uuid",
"org_uuid_source": "dd_org_uuid",
"provider_name": "example-cluster",
"required_claims": [
{
"claim": "sub",
"mode": "exact",
"values": [
"system:serviceaccount:controllers:example-controller"
]
}
]
},
"type": "custom_oidc_provider_config"
}
}Response
Created
Example response
{
"data": {
"attributes": {
"audiences": [
"datadog/00000000-0000-0000-0000-000000000001"
],
"discovery_type": "oidc_discovery",
"identity_claim_name": "sub",
"issuer_url": "https://issuer.example.com",
"jwks_url": "https://issuer.example.com/keys",
"org_uuid_claim_name": "dd_org_uuid",
"org_uuid_source": "dd_org_uuid",
"provider_name": "example-cluster",
"required_claims": [
{
"claim": "sub",
"mode": "exact",
"values": [
"system:serviceaccount:controllers:example-controller"
]
}
]
},
"id": "00000000-0000-0000-0000-000000000004",
"type": "custom_oidc_provider_config"
}
}Changes
Changes to this operation have not been checked yet.