diff options
| author | Dan LaManna <danlamanna@users.noreply.github.com> | 2023-09-14 11:59:25 -0400 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-09-14 09:59:25 -0600 |
| commit | 6a249944f56ad942910b70cecb4623130ad8e14c (patch) | |
| tree | 62f6eb9f99764160958b4edbe2101dfdc3ccd7f1 /lib | |
| parent | 6838ee6bb86e5ed7d9ac860731c9e24377c1e39d (diff) | |
| download | spack-6a249944f56ad942910b70cecb4623130ad8e14c.tar.gz spack-6a249944f56ad942910b70cecb4623130ad8e14c.tar.bz2 spack-6a249944f56ad942910b70cecb4623130ad8e14c.tar.xz spack-6a249944f56ad942910b70cecb4623130ad8e14c.zip | |
Add OIDC tokens to gitlab-ci jobs (#39813)
* Add OIDC tokens to gitlab-ci jobs
This should allow us to start issuing just-in-time generated
credentials for CI jobs that need to modify binary mirrors. The "aud"
claim of the token describes what the token is allowed to do. The
claim is verified against a set of rules on the IAM role using signed
information from GitLab. See spack-infrastructure for the claim
verification logic.
---------
Co-authored-by: Scott Wittenburg <scott.wittenburg@kitware.com>
Diffstat (limited to 'lib')
0 files changed, 0 insertions, 0 deletions