As per OIDC Token Exchange documentation, the payload support identity_mapping_name. It will be useful if we are able to define the identity mapping for different scenario (public, private repo) for single OIDC integration provider setup.
providerConfig:
- name: public-repo
artifactoryUrl: <artifactoryUrl>
matchImages:
- "public-docker.<artifactoryUrl>"
azure:
. . .
jfrog_oidc_provider_name: "azure-oidc-team-a"
jfrog_oidc_identity_mapping_name: "sa-public-readonly"
- name: private-repo
artifactoryUrl: <artifactoryUrl>
matchImages:
- "team-a-docker.<artifactoryUrl>"
azure:
. . .
jfrog_oidc_provider_name: "azure-oidc-team-a"
jfrog_oidc_identity_mapping_name: "sa-private-team-a"
As per OIDC Token Exchange documentation, the payload support identity_mapping_name. It will be useful if we are able to define the identity mapping for different scenario (public, private repo) for single OIDC integration provider setup.