flux v2.9.5

OCIRepository.spec.verify.matchOIDCIdentity[]

OIDCIdentityMatch specifies options for verifying the certificate identity, i.e. the issuer and the subject of the certificate.

2 fields
OCIRepository.spec.verify.matchOIDCIdentity[] fields and descriptions
Field / TypeDescription
issuer
string required

Issuer specifies the regex pattern to match against to verify the OIDC issuer in the Fulcio certificate. The pattern must be a valid Go regular expression.

subject
string required

Subject specifies the regex pattern to match against to verify the identity subject in the Fulcio certificate. The pattern must be a valid Go regular expression.