Creates and manages an external OpenID Connect (OIDC) trust configuration for CoreWeave workload identity federation.
Example usage
Schema
Required
audience (String) The expected audience claim in tokens issued by the external OIDC provider.
issuer_url (String) The issuer URL of the external OIDC provider. HTTPS is required except for loopback development issuers.
name (String) A human-readable name for the OIDC configuration. Must contain only letters, numbers, hyphens, and underscores.
Optional
active (Boolean) Whether tokens issued by this OIDC provider are accepted for workload identity federation. Defaults to true when omitted on creation. Once a value has been applied it is retained: removing the attribute from configuration keeps the last applied value rather than reverting to true, so a configuration that was deactivated stays deactivated. Set active = true explicitly to reactivate one.
description (String) An optional human-readable description of the OIDC configuration.
Read-Only
created_at (String) The RFC 3339 timestamp at which the OIDC configuration was created.
deactivated_at (String) The RFC 3339 timestamp at which the OIDC configuration was deactivated, or null while it is active.
id (String) The server-assigned unique identifier for the OIDC configuration.
organization_id (String) The unique identifier of the CoreWeave organization that owns the OIDC configuration.
updated_at (String) The RFC 3339 timestamp at which the OIDC configuration was last updated.
Import
Import is supported using the following syntax:
Last modified on September 9, 2026