Let's play and learn:
Update your cluster with the following command:
oci ce cluster update --cluster-id CLUSTER_OCID --from-json file://./update.json
The content of the update.json file is below. Replace fharris with your github account and oci-github-actions with your repo:
{
"options": {
"openIdConnectTokenAuthenticationConfig": {
"isOpenIdConnectAuthEnabled": true,
"clientId": "oke-kubernetes-cluster",
"issuerUrl": "https://token.actions.githubusercontent.com",
"usernameClaim": "sub",
"usernamePrefix": "actions-oidc:",
"requiredClaim": [
"repository=fharris/oci-github-actions",
"workflow=oke-oidc",
"ref=refs/heads/main"
],
"caCertificate": null,
"signingAlgorithms": [
"RS256"
]
}
}
}