OIDC

Jump to bottom

Mathieu Lemay edited this page Aug 3, 2025 · 5 revisions

Warning

This feature is not officially supported. Issues will be closed immediately.

Steps to use OIDC

Enable the feature flag:
```
export PIPELINE_RUNNER_OIDC_ENABLED=1
```
Set the issuer. This must be a valid URL, where the public key will be exposed
```
export PIPELINE_RUNNER_OIDC_ISSUER=https://<some-host-you-control>
```
Generate OIDC key and show config
```
pipeline-runner oidc-config
```

Expose the public key with http. You can use a small server I made for this purpose: pipeline-runner-oidc-server. To run it with docker:

# Use public key and issuer from `pipeline-runner oidc-config`
docker run -e OIDC_SERVER_PUBLIC_KEY=<public-key> -e OIDC_SERVER_ISSUER=<issuer> rogueconsulting/pipeline-runner-oidc-server:1.0.0

Clone this wiki locally