96c688b879
* fix: Allow users to set OIDC maxAge value to 0 to require immediate reauth (#364) * fix: Allow users to set OIDC maxAge value to 0 to require immediate reauth Previously, setting 0 as a value for maxAge in an OIDC resource block would not update Boundary, as it was getting treated as a nil value in the provider. This fix addresses that issue, ensuring that both setting the value to 0 will require immediate reauthorisation, as well as removing the maxAge paramater defaulting the reauth time length to the TTL of the chose OIDC provider * Update doc strings, fix imports, and run go generate * add changes to CHANGELOG * spelling: host_set_plugin exmaple to example * Update target.md (#349) Update docs for Target resource removing `scope_id` from `boundary_host` resources to prevent error ``` ╷ │ Error: Unsupported argument │ │ on main.tf line 79, in resource "boundary_host" "foo": │ 79: scope_id = boundary_scope.project.id │ │ An argument named "scope_id" is not expected here. ``` * feature: add worker_filter option to Boundary Credential Store Vault (#375) * feature: add worker_filter option to Boundary Credential Store Vault * Update changelog * chore: update deps * small fixes for cherry-picks * downgrade hclog --------- Co-authored-by: mocofound <aharness@hashicorp.com> Co-authored-by: Steven Zamborsky <97125550+stevenzamborsky@users.noreply.github.com> Co-authored-by: Louis Ruch <louisruch@gmail.com>
2.9 KiB
2.9 KiB
page_title, subcategory, description
| page_title | subcategory | description |
|---|---|---|
| boundary_auth_method_oidc Resource - terraform-provider-boundary | The OIDC auth method resource allows you to configure a Boundary authmethodoidc. |
boundary_auth_method_oidc (Resource)
The OIDC auth method resource allows you to configure a Boundary auth_method_oidc.
Schema
Required
scope_id(String) The scope ID.
Optional
account_claim_maps(List of String) Account claim maps for the to_claim of sub.allowed_audiences(List of String) Audiences for which the provider responses will be allowedapi_url_prefix(String) The API prefix to use when generating callback URLs for the provider. Should be set to an address at which the provider can reach back to the controller.callback_url(String) The URL that should be provided to the IdP for callbacks.claims_scopes(List of String) Claims scopes.client_id(String) The client ID assigned to this auth method from the provider.client_secret(String, Sensitive) The secret key assigned to this auth method from the provider. Once set, only the hash will be kept and the original value can be removed from configuration.client_secret_hmac(String) The HMAC of the client secret returned by the Boundary controller, which is used for comparison after initial setting of the value.description(String) The auth method description.disable_discovered_config_validation(Boolean) Disables validation logic ensuring that the OIDC provider's information from its discovery endpoint matches the information here. The validation is only performed at create or update time.idp_ca_certs(List of String) A list of CA certificates to trust when validating the IdP's token signatures.is_primary_for_scope(Boolean) When true, makes this auth method the primary auth method for the scope in which it resides. The primary auth method for a scope means the user will be automatically created when they login using an OIDC account.issuer(String) The issuer corresponding to the provider, which must match the issuer field in generated tokens.max_age(Number) The max age to provide to the provider, indicating how much time is allowed to have passed since the last authentication before the user is challenged again. A value of 0 sets an immediate requirement for all users to reauthenticate, and an unset maxAge results in a Terraform value of -1 and the default TTL of the chosen OIDC will be used.name(String) The auth method name. Defaults to the resource name.signing_algorithms(List of String) Allowed signing algorithms for the provider's issued tokens.state(String) Can be one of 'inactive', 'active-private', or 'active-public'. Currently automatically set to active-public.type(String) The type of auth method; hardcoded.
Read-Only
id(String) The ID of the auth method.