You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Configure the TencentCloud Provider with TKE OIDC.
242
+
243
+
-> **Note:** Must ensure CAM OIDC provider and WEBHOOK component are created successfully.
244
+
245
+
Usage:
246
+
247
+
```hcl
248
+
provider "tencentcloud" {
249
+
enable_pod_oidc = true
250
+
}
251
+
```
252
+
253
+
### Cam role name
254
+
255
+
If provided with a Cam role name, Terraform will just access the metadata URL: http://metadata.tencentyun.com/latest/meta-data/cam/security-credentials/<cam_role_name> to obtain the STS credential. The CVM Instance Role also can be set using the TENCENTCLOUD_CAM_ROLE_NAME environment variables.
256
+
257
+
-> **Note:** Cam-role-name is a no-AK auth type, and there is no need setting secret_id and secret_key while using it.
258
+
259
+
Usage:
260
+
261
+
```hcl
262
+
provider "tencentcloud" {
263
+
cam_role_name = "my-cam-role-name"
264
+
}
265
+
```
266
+
239
267
### CDC cos usage
240
268
241
269
You can set the cos domain by setting the environment variable `TENCENTCLOUD_COS_DOMAIN`, and configure the cdc scenario as follows:
@@ -308,6 +336,7 @@ In addition to generic provider arguments (e.g. alias and version), the followin
308
336
*`assume_role_with_web_identity` - (Optional, Available in 1.81.111+) An `assume_role_with_web_identity` block (documented below). If provided, terraform will attempt to assume this role using the supplied credentials. Only one `assume_role_with_web_identity` block may be in the configuration.
309
337
*`protocol` - (Optional, Available in 1.37.0+) The protocol of the API request. Valid values: `HTTP` and `HTTPS`. Default is `HTTPS`.
310
338
*`domain` - (Optional, Available in 1.37.0+) The root domain of the API request, Default is `tencentcloudapi.com`.
339
+
*`cam_role_name` - (Optional, Available in 1.81.117+) The name of the CVM instance CAM role. It can be sourced from the `TENCENTCLOUD_CAM_ROLE_NAME` environment variable.
311
340
312
341
The nested `assume_role` block supports the following:
313
342
*`role_arn` - (Required) The ARN of the role to assume. It can also be sourced from the `TENCENTCLOUD_ASSUME_ROLE_ARN` environment variable.
0 commit comments