HashiCorp Vault v6.7.1 published on Friday, May 2, 2025 by Pulumi
vault.identity.getOidcOpenidConfig
Explore with Pulumi AI
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as vault from "@pulumi/vault";
const key = new vault.identity.OidcKey("key", {
    name: "key",
    allowedClientIds: ["*"],
    rotationPeriod: 3600,
    verificationTtl: 3600,
});
const app = new vault.identity.OidcClient("app", {
    name: "application",
    key: key.name,
    redirectUris: [
        "http://127.0.0.1:9200/v1/auth-methods/oidc:authenticate:callback",
        "http://127.0.0.1:8251/callback",
        "http://127.0.0.1:8080/callback",
    ],
    idTokenTtl: 2400,
    accessTokenTtl: 7200,
});
const provider = new vault.identity.OidcProvider("provider", {
    name: "provider",
    allowedClientIds: [test.clientId],
});
const config = vault.identity.getOidcOpenidConfigOutput({
    name: provider.name,
});
import pulumi
import pulumi_vault as vault
key = vault.identity.OidcKey("key",
    name="key",
    allowed_client_ids=["*"],
    rotation_period=3600,
    verification_ttl=3600)
app = vault.identity.OidcClient("app",
    name="application",
    key=key.name,
    redirect_uris=[
        "http://127.0.0.1:9200/v1/auth-methods/oidc:authenticate:callback",
        "http://127.0.0.1:8251/callback",
        "http://127.0.0.1:8080/callback",
    ],
    id_token_ttl=2400,
    access_token_ttl=7200)
provider = vault.identity.OidcProvider("provider",
    name="provider",
    allowed_client_ids=[test["clientId"]])
config = vault.identity.get_oidc_openid_config_output(name=provider.name)
package main
import (
	"github.com/pulumi/pulumi-vault/sdk/v6/go/vault/identity"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		key, err := identity.NewOidcKey(ctx, "key", &identity.OidcKeyArgs{
			Name: pulumi.String("key"),
			AllowedClientIds: pulumi.StringArray{
				pulumi.String("*"),
			},
			RotationPeriod:  pulumi.Int(3600),
			VerificationTtl: pulumi.Int(3600),
		})
		if err != nil {
			return err
		}
		_, err = identity.NewOidcClient(ctx, "app", &identity.OidcClientArgs{
			Name: pulumi.String("application"),
			Key:  key.Name,
			RedirectUris: pulumi.StringArray{
				pulumi.String("http://127.0.0.1:9200/v1/auth-methods/oidc:authenticate:callback"),
				pulumi.String("http://127.0.0.1:8251/callback"),
				pulumi.String("http://127.0.0.1:8080/callback"),
			},
			IdTokenTtl:     pulumi.Int(2400),
			AccessTokenTtl: pulumi.Int(7200),
		})
		if err != nil {
			return err
		}
		provider, err := identity.NewOidcProvider(ctx, "provider", &identity.OidcProviderArgs{
			Name: pulumi.String("provider"),
			AllowedClientIds: pulumi.StringArray{
				test.ClientId,
			},
		})
		if err != nil {
			return err
		}
		_ = identity.GetOidcOpenidConfigOutput(ctx, identity.GetOidcOpenidConfigOutputArgs{
			Name: provider.Name,
		}, nil)
		return nil
	})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Vault = Pulumi.Vault;
return await Deployment.RunAsync(() => 
{
    var key = new Vault.Identity.OidcKey("key", new()
    {
        Name = "key",
        AllowedClientIds = new[]
        {
            "*",
        },
        RotationPeriod = 3600,
        VerificationTtl = 3600,
    });
    var app = new Vault.Identity.OidcClient("app", new()
    {
        Name = "application",
        Key = key.Name,
        RedirectUris = new[]
        {
            "http://127.0.0.1:9200/v1/auth-methods/oidc:authenticate:callback",
            "http://127.0.0.1:8251/callback",
            "http://127.0.0.1:8080/callback",
        },
        IdTokenTtl = 2400,
        AccessTokenTtl = 7200,
    });
    var provider = new Vault.Identity.OidcProvider("provider", new()
    {
        Name = "provider",
        AllowedClientIds = new[]
        {
            test.ClientId,
        },
    });
    var config = Vault.Identity.GetOidcOpenidConfig.Invoke(new()
    {
        Name = provider.Name,
    });
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.vault.identity.OidcKey;
import com.pulumi.vault.identity.OidcKeyArgs;
import com.pulumi.vault.identity.OidcClient;
import com.pulumi.vault.identity.OidcClientArgs;
import com.pulumi.vault.identity.OidcProvider;
import com.pulumi.vault.identity.OidcProviderArgs;
import com.pulumi.vault.identity.IdentityFunctions;
import com.pulumi.vault.identity.inputs.GetOidcOpenidConfigArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var key = new OidcKey("key", OidcKeyArgs.builder()
            .name("key")
            .allowedClientIds("*")
            .rotationPeriod(3600)
            .verificationTtl(3600)
            .build());
        var app = new OidcClient("app", OidcClientArgs.builder()
            .name("application")
            .key(key.name())
            .redirectUris(            
                "http://127.0.0.1:9200/v1/auth-methods/oidc:authenticate:callback",
                "http://127.0.0.1:8251/callback",
                "http://127.0.0.1:8080/callback")
            .idTokenTtl(2400)
            .accessTokenTtl(7200)
            .build());
        var provider = new OidcProvider("provider", OidcProviderArgs.builder()
            .name("provider")
            .allowedClientIds(test.clientId())
            .build());
        final var config = IdentityFunctions.getOidcOpenidConfig(GetOidcOpenidConfigArgs.builder()
            .name(provider.name())
            .build());
    }
}
resources:
  key:
    type: vault:identity:OidcKey
    properties:
      name: key
      allowedClientIds:
        - '*'
      rotationPeriod: 3600
      verificationTtl: 3600
  app:
    type: vault:identity:OidcClient
    properties:
      name: application
      key: ${key.name}
      redirectUris:
        - http://127.0.0.1:9200/v1/auth-methods/oidc:authenticate:callback
        - http://127.0.0.1:8251/callback
        - http://127.0.0.1:8080/callback
      idTokenTtl: 2400
      accessTokenTtl: 7200
  provider:
    type: vault:identity:OidcProvider
    properties:
      name: provider
      allowedClientIds:
        - ${test.clientId}
variables:
  config:
    fn::invoke:
      function: vault:identity:getOidcOpenidConfig
      arguments:
        name: ${provider.name}
Using getOidcOpenidConfig
Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.
function getOidcOpenidConfig(args: GetOidcOpenidConfigArgs, opts?: InvokeOptions): Promise<GetOidcOpenidConfigResult>
function getOidcOpenidConfigOutput(args: GetOidcOpenidConfigOutputArgs, opts?: InvokeOptions): Output<GetOidcOpenidConfigResult>def get_oidc_openid_config(name: Optional[str] = None,
                           namespace: Optional[str] = None,
                           opts: Optional[InvokeOptions] = None) -> GetOidcOpenidConfigResult
def get_oidc_openid_config_output(name: Optional[pulumi.Input[str]] = None,
                           namespace: Optional[pulumi.Input[str]] = None,
                           opts: Optional[InvokeOptions] = None) -> Output[GetOidcOpenidConfigResult]func GetOidcOpenidConfig(ctx *Context, args *GetOidcOpenidConfigArgs, opts ...InvokeOption) (*GetOidcOpenidConfigResult, error)
func GetOidcOpenidConfigOutput(ctx *Context, args *GetOidcOpenidConfigOutputArgs, opts ...InvokeOption) GetOidcOpenidConfigResultOutput> Note: This function is named GetOidcOpenidConfig in the Go SDK.
public static class GetOidcOpenidConfig 
{
    public static Task<GetOidcOpenidConfigResult> InvokeAsync(GetOidcOpenidConfigArgs args, InvokeOptions? opts = null)
    public static Output<GetOidcOpenidConfigResult> Invoke(GetOidcOpenidConfigInvokeArgs args, InvokeOptions? opts = null)
}public static CompletableFuture<GetOidcOpenidConfigResult> getOidcOpenidConfig(GetOidcOpenidConfigArgs args, InvokeOptions options)
public static Output<GetOidcOpenidConfigResult> getOidcOpenidConfig(GetOidcOpenidConfigArgs args, InvokeOptions options)
fn::invoke:
  function: vault:identity/getOidcOpenidConfig:getOidcOpenidConfig
  arguments:
    # arguments dictionaryThe following arguments are supported:
getOidcOpenidConfig Result
The following output properties are available:
- string
- The Authorization Endpoint for the provider.
- GrantTypes List<string>Supporteds 
- The grant types supported by the provider.
- Id string
- The provider-assigned unique ID for this managed resource.
- IdToken List<string>Signing Alg Values Supporteds 
- The signing algorithms supported by the provider.
- Issuer string
- The URL of the issuer for the provider.
- JwksUri string
- The well known keys URI for the provider.
- Name string
- RequestUri boolParameter Supported 
- Specifies whether Request URI Parameter is supported by the provider.
- ResponseTypes List<string>Supporteds 
- The response types supported by the provider.
- ScopesSupporteds List<string>
- The scopes supported by the provider.
- SubjectTypes List<string>Supporteds 
- The subject types supported by the provider.
- TokenEndpoint string
- The Token Endpoint for the provider.
- TokenEndpoint List<string>Auth Methods Supporteds 
- The token endpoint auth methods supported by the provider.
- UserinfoEndpoint string
- The User Info Endpoint for the provider
- Namespace string
- string
- The Authorization Endpoint for the provider.
- GrantTypes []stringSupporteds 
- The grant types supported by the provider.
- Id string
- The provider-assigned unique ID for this managed resource.
- IdToken []stringSigning Alg Values Supporteds 
- The signing algorithms supported by the provider.
- Issuer string
- The URL of the issuer for the provider.
- JwksUri string
- The well known keys URI for the provider.
- Name string
- RequestUri boolParameter Supported 
- Specifies whether Request URI Parameter is supported by the provider.
- ResponseTypes []stringSupporteds 
- The response types supported by the provider.
- ScopesSupporteds []string
- The scopes supported by the provider.
- SubjectTypes []stringSupporteds 
- The subject types supported by the provider.
- TokenEndpoint string
- The Token Endpoint for the provider.
- TokenEndpoint []stringAuth Methods Supporteds 
- The token endpoint auth methods supported by the provider.
- UserinfoEndpoint string
- The User Info Endpoint for the provider
- Namespace string
- String
- The Authorization Endpoint for the provider.
- grantTypes List<String>Supporteds 
- The grant types supported by the provider.
- id String
- The provider-assigned unique ID for this managed resource.
- idToken List<String>Signing Alg Values Supporteds 
- The signing algorithms supported by the provider.
- issuer String
- The URL of the issuer for the provider.
- jwksUri String
- The well known keys URI for the provider.
- name String
- requestUri BooleanParameter Supported 
- Specifies whether Request URI Parameter is supported by the provider.
- responseTypes List<String>Supporteds 
- The response types supported by the provider.
- scopesSupporteds List<String>
- The scopes supported by the provider.
- subjectTypes List<String>Supporteds 
- The subject types supported by the provider.
- tokenEndpoint String
- The Token Endpoint for the provider.
- tokenEndpoint List<String>Auth Methods Supporteds 
- The token endpoint auth methods supported by the provider.
- userinfoEndpoint String
- The User Info Endpoint for the provider
- namespace String
- string
- The Authorization Endpoint for the provider.
- grantTypes string[]Supporteds 
- The grant types supported by the provider.
- id string
- The provider-assigned unique ID for this managed resource.
- idToken string[]Signing Alg Values Supporteds 
- The signing algorithms supported by the provider.
- issuer string
- The URL of the issuer for the provider.
- jwksUri string
- The well known keys URI for the provider.
- name string
- requestUri booleanParameter Supported 
- Specifies whether Request URI Parameter is supported by the provider.
- responseTypes string[]Supporteds 
- The response types supported by the provider.
- scopesSupporteds string[]
- The scopes supported by the provider.
- subjectTypes string[]Supporteds 
- The subject types supported by the provider.
- tokenEndpoint string
- The Token Endpoint for the provider.
- tokenEndpoint string[]Auth Methods Supporteds 
- The token endpoint auth methods supported by the provider.
- userinfoEndpoint string
- The User Info Endpoint for the provider
- namespace string
- str
- The Authorization Endpoint for the provider.
- grant_types_ Sequence[str]supporteds 
- The grant types supported by the provider.
- id str
- The provider-assigned unique ID for this managed resource.
- id_token_ Sequence[str]signing_ alg_ values_ supporteds 
- The signing algorithms supported by the provider.
- issuer str
- The URL of the issuer for the provider.
- jwks_uri str
- The well known keys URI for the provider.
- name str
- request_uri_ boolparameter_ supported 
- Specifies whether Request URI Parameter is supported by the provider.
- response_types_ Sequence[str]supporteds 
- The response types supported by the provider.
- scopes_supporteds Sequence[str]
- The scopes supported by the provider.
- subject_types_ Sequence[str]supporteds 
- The subject types supported by the provider.
- token_endpoint str
- The Token Endpoint for the provider.
- token_endpoint_ Sequence[str]auth_ methods_ supporteds 
- The token endpoint auth methods supported by the provider.
- userinfo_endpoint str
- The User Info Endpoint for the provider
- namespace str
- String
- The Authorization Endpoint for the provider.
- grantTypes List<String>Supporteds 
- The grant types supported by the provider.
- id String
- The provider-assigned unique ID for this managed resource.
- idToken List<String>Signing Alg Values Supporteds 
- The signing algorithms supported by the provider.
- issuer String
- The URL of the issuer for the provider.
- jwksUri String
- The well known keys URI for the provider.
- name String
- requestUri BooleanParameter Supported 
- Specifies whether Request URI Parameter is supported by the provider.
- responseTypes List<String>Supporteds 
- The response types supported by the provider.
- scopesSupporteds List<String>
- The scopes supported by the provider.
- subjectTypes List<String>Supporteds 
- The subject types supported by the provider.
- tokenEndpoint String
- The Token Endpoint for the provider.
- tokenEndpoint List<String>Auth Methods Supporteds 
- The token endpoint auth methods supported by the provider.
- userinfoEndpoint String
- The User Info Endpoint for the provider
- namespace String
Package Details
- Repository
- Vault pulumi/pulumi-vault
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the vaultTerraform Provider.