Skip to content

feat: add claim conditions to service account OIDC identities - #499

Merged
zentron merged 3 commits into
mainfrom
feat/oidc-identity-claim-conditions
Nov 10, 2026
Merged

zentron merged 3 commits into
mainfrom
feat/oidc-identity-claim-conditions

Conversation

@zentron

@zentron zentron commented Nov 9, 2026

Copy link
Copy Markdown
Contributor

Background

Octopus Server now supports claim conditions on service account OIDC identities. You can find them in OctopusServer #49407, #49408, and #49409. The Terraform provider needs the new field.

Changes

  • Add OIDCIdentityClaimCondition with Claim and Values.
  • Add ClaimConditions to OIDCIdentity.
  • The field has no omitempty. A nil slice sends null and Octopus keeps the existing conditions. An empty slice sends [] and Octopus clears them.

Testing

  • Three JSON tests cover the null, empty, and populated cases.

🤖 Generated with Claude Code

Octopus Server now rejects the AutoDeploy action on a OnceDailySchedule trigger.
@zentron
zentron force-pushed the feat/oidc-identity-claim-conditions branch from 0e941b1 to d09a7fc Compare November 10, 2026 02:35
@zentron
zentron changed the base branch from main to test/fix-project-trigger-action November 10, 2026 02:38
Base automatically changed from test/fix-project-trigger-action to main November 10, 2026 03:08
@zentron
zentron merged commit 9098e13 into main Nov 10, 2026
6 checks passed
@zentron
zentron deleted the feat/oidc-identity-claim-conditions branch November 10, 2026 03:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants