-
-
Notifications
You must be signed in to change notification settings - Fork 6
Description
Is your feature request related to a problem? Please describe.
Using the module requires learning all about the GitHub OIDC token and how to combine claims to achieve your desired configuration. We have custom internal tooling to encapsulate these details, and I'd love to add encapsulation to the native properties of this module.
Describe the solution you'd like
We could allow folks to fully customize the bound_subject and additional_claims while also offering syntactic sugar in which they ask for a certain type of role, e.g. branch binding, and pass in the name of their branch, and we construct the appropriate bound_subject behind the scenes with validation using https://developer.hashicorp.com/terraform/language/expressions/custom-conditions.
Describe alternatives you've considered
This not being useful.
Additional context