VARIABLES.md

Variables

• Module Docs: README
• Module Docs: Resources
• Module Docs: Variables
• Module Docs: Outputs

This module has the following variables:

sts_endpoints: set(string)

A set of hostnames for Amazon's Security Token Service.

Unless you are in GovCloud or China, you should not need to change this value from its default.

Default: ["sts.amazonaws.com"]

tags: map(string)

AWS tags to apply to the created aws_iam_openid_connect_provider.

Setting tags can also be done at the provider-level using default_tags.

Default: {} (empty dictionary)

thumbprint_list: set(string)

A set of thumbprints by which to verify OIDC access attempts.

By default, this variable is set to an empty set, and when this is the case, this will be detected at runtime using the tls provider's tls_certificate data provider, grabbing the SHA-1 fingerprint of the server running at url.

Changing this to any other value will use the user-specified values. This is entirely untested, and if you aren't using GitHub Enterprise, you shouldn't change/set this variable.

Default: [] (empty set)

url: string

The URL of the GitHub Actions OIDC provider.

You shouldn't need to modify the value of this variable unless you are using GitHub Enterpise. Support for GitHub Enterprise is entirely untested.

Default: https://token.actions.githubusercontent.com