Skip to main content
Creates and manages an external OpenID Connect (OIDC) trust configuration for CoreWeave workload identity federation.

Example usage

Schema

Required

  • audience (String) The expected audience claim in tokens issued by the external OIDC provider.
  • issuer_url (String) The issuer URL of the external OIDC provider. HTTPS is required except for loopback development issuers.
  • name (String) A human-readable name for the OIDC configuration. Must contain only letters, numbers, hyphens, and underscores.

Optional

  • active (Boolean) Whether tokens issued by this OIDC provider are accepted for workload identity federation. Defaults to true when omitted on creation. Once a value has been applied it is retained: removing the attribute from configuration keeps the last applied value rather than reverting to true, so a configuration that was deactivated stays deactivated. Set active = true explicitly to reactivate one.
  • description (String) An optional human-readable description of the OIDC configuration.

Read-Only

  • created_at (String) The RFC 3339 timestamp at which the OIDC configuration was created.
  • deactivated_at (String) The RFC 3339 timestamp at which the OIDC configuration was deactivated, or null while it is active.
  • id (String) The server-assigned unique identifier for the OIDC configuration.
  • organization_id (String) The unique identifier of the CoreWeave organization that owns the OIDC configuration.
  • updated_at (String) The RFC 3339 timestamp at which the OIDC configuration was last updated.

Import

Import is supported using the following syntax:
Last modified on September 9, 2026