Platform

Create OIDC Trust

Required role: admin or higher.

post/v0/oidc_trust

Request

  • The document declares no server URL.
  • Auth: HTTP bearer

Request body

audiencestring nullable

Optional audience claim pattern. * matches any sequence of characters. If omitted, the audience claim is not checked.

descriptionstring nullable

Optional human-readable description.

issuerstring required

Issuer URL exactly as it appears in the iss claim. JWKS are discovered at <issuer>/.well-known/openid-configuration.

namestring required

Trust relationship name. Unique within the tenant.

role'read' | 'write' | 'admin'

A role assignable to a tenant member: read, write, or admin. owner is a platform-wide role, not a tenant membership, so it is not a valid value here.

subjectstring required

Subject claim pattern. * matches any sequence of characters.

Example request

{
  "audience": "https://github.com/my-org",
  "description": "GitHub Actions deploys from main branch",
  "issuer": "https://token.actions.githubusercontent.com",
  "name": "github-actions-prod",
  "subject": "repo:my-org/my-repo:ref:refs/heads/main"
}

Response

Trust relationship created

idstring uuid required

Trust relationship identifier.

namestring required

Changes

No recorded changes to this operation across all 51 revisions of this API.