You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Configure the TencentCloud Provider with TKE OIDC.
244
+
245
+
-> **Note:** Must ensure CAM OIDC provider and WEBHOOK component are created successfully.
246
+
247
+
Usage:
248
+
249
+
```hcl
250
+
provider "tencentcloud" {
251
+
enable_pod_oidc = true
252
+
}
253
+
```
254
+
255
+
### Cam role name
256
+
257
+
If provided with a Cam role name, Terraform will just access the metadata URL: http://metadata.tencentyun.com/latest/meta-data/cam/security-credentials/<cam_role_name> to obtain the STS credential. The CVM Instance Role also can be set using the TENCENTCLOUD_CAM_ROLE_NAME environment variables.
258
+
259
+
-> **Note:** Cam-role-name is used to grant the role entity the permissions to access services and resources and perform operations in Tencent Cloud. You can associate the CAM role with a CVM instance to call other Tencent Cloud APIs from the instance using the periodically updated temporary Security Token Service (STS) key.
260
+
261
+
-> **Note:** Cam-role-name is a no-AK auth type, and there is no need setting secret_id and secret_key while using it.
262
+
263
+
Usage:
264
+
265
+
```hcl
266
+
provider "tencentcloud" {
267
+
cam_role_name = "my-cam-role-name"
268
+
}
269
+
```
270
+
239
271
### CDC cos usage
240
272
241
273
You can set the cos domain by setting the environment variable `TENCENTCLOUD_COS_DOMAIN`, and configure the cdc scenario as follows:
@@ -308,6 +340,7 @@ In addition to generic provider arguments (e.g. alias and version), the followin
308
340
*`assume_role_with_web_identity` - (Optional, Available in 1.81.111+) An `assume_role_with_web_identity` block (documented below). If provided, terraform will attempt to assume this role using the supplied credentials. Only one `assume_role_with_web_identity` block may be in the configuration.
309
341
*`protocol` - (Optional, Available in 1.37.0+) The protocol of the API request. Valid values: `HTTP` and `HTTPS`. Default is `HTTPS`.
310
342
*`domain` - (Optional, Available in 1.37.0+) The root domain of the API request, Default is `tencentcloudapi.com`.
343
+
*`cam_role_name` - (Optional, Available in 1.81.117+) The name of the CVM instance CAM role. It can be sourced from the `TENCENTCLOUD_CAM_ROLE_NAME` environment variable.
311
344
312
345
The nested `assume_role` block supports the following:
313
346
*`role_arn` - (Required) The ARN of the role to assume. It can also be sourced from the `TENCENTCLOUD_ASSUME_ROLE_ARN` environment variable.
0 commit comments