yc iam workload-identity oidc
Written by
Updated at April 22, 2025
Command Usage
Syntax:
yc iam workload-identity oidc <group>
Command Tree
- yc iam workload-identity oidc federation — Manage workload identity OIDC federation
- yc iam workload-identity oidc federation add-access-binding — Add access binding to access the specified workload identity federation as a resource.
- yc iam workload-identity oidc federation add-audiences — Add audiences to workload identity federation
- yc iam workload-identity oidc federation add-labels — Add labels to workload identity federation
- yc iam workload-identity oidc federation create — Create a workload identity federation
- yc iam workload-identity oidc federation delete — Delete the specified workload identity federation
- yc iam workload-identity oidc federation get — Show information about the specified workload identity federation
- yc iam workload-identity oidc federation list — List workload identity federations
- yc iam workload-identity oidc federation list-access-bindings — List access bindings for accessing the specified workload identity federation.
- yc iam workload-identity oidc federation remove-access-binding — Remove access binding for accessing the specified workload identity federation as a resource.
- yc iam workload-identity oidc federation remove-audiences — Remove audiences from workload identity federation
- yc iam workload-identity oidc federation remove-labels — Remove labels from workload identity federation
- yc iam workload-identity oidc federation set-access-bindings — Set access bindings for accessing the specified workload identity federation and DELETE all other existing access bindings if there were any.
- yc iam workload-identity oidc federation update — Update the specified workload identity federation
Global Flags
| Flag | Description |
|---|---|
--profile |
stringSet the custom configuration file. |
--debug |
Debug logging. |
--debug-grpc |
Debug gRPC logging. Very verbose, used for debugging connection problems. |
--no-user-output |
Disable printing user intended output to stderr. |
--retry |
intEnable gRPC retries. By default, retries are enabled with maximum 5 attempts. Pass 0 to disable retries. Pass any negative value for infinite retries. Even infinite retries are capped with 2 minutes timeout. |
--cloud-id |
stringSet the ID of the cloud to use. |
--folder-id |
stringSet the ID of the folder to use. |
--folder-name |
stringSet the name of the folder to use (will be resolved to id). |
--endpoint |
stringSet the Cloud API endpoint (host:port). |
--token |
stringSet the OAuth token to use. |
--impersonate-service-account-id |
stringSet the ID of the service account to impersonate. |
--no-browser |
Disable opening browser for authentication. |
--format |
stringSet the output format: text (default), yaml, json, json-rest. |
--jq |
stringQuery to select values from the response using jq syntax |
-h,--help |
Display help for the command. |