feat: set oidc attribute condition (#22)

humanitec-architecture · Apr 12, 2024 · ee1ffa8 · ee1ffa8
1 parent c6b1b2c
commit ee1ffa8
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/examples/with-backstage/gcp-github.tf b/examples/with-backstage/gcp-github.tf
@@ -27,6 +27,7 @@ module "gh_oidc" {
     "attribute.repository"       = "assertion.repository"
     "attribute.repository_owner" = "assertion.repository_owner"
   }
+  attribute_condition = "attribute.repository_owner == \"${var.github_org_id}\""
   sa_mapping = {
     (google_service_account.sa.account_id) = {
       sa_name   = google_service_account.sa.name