CloudsmithAccessTokenSpec defines the configuration for generating a Cloudsmith access token using OIDC authentication.
apiUrl
string
APIURL configures the Cloudsmith API URL. Defaults to https://api.cloudsmith.io.
orgSlug
string required
OrgSlug is the organization slug in Cloudsmith
serviceAccountRef
object required
Name of the service account you are federating with
audiences
[]string
Audience specifies the `aud` claim for the service account token
If the service account uses a well-known annotation for e.g. IRSA or GCP Workload Identity
then this audiences will be appended to the list
name
string required
The name of the ServiceAccount resource being referred to.
pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
minLength: 1
maxLength: 253
namespace
string
Namespace of the resource being referred to.
Ignored if referent is not cluster-scoped, otherwise defaults to the namespace of the referent.
pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$
minLength: 1
maxLength: 63
serviceSlug
string required
ServiceSlug is the service slug in Cloudsmith for OIDC authentication