You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: jfrog-applications/jfrog-cli/get-started/configurations/jfrog-platform-configuration.md
+13-11
Original file line number
Diff line number
Diff line change
@@ -100,7 +100,8 @@ OIDC access tokens are not renewable. They are intended for one-time use during
100
100
101
101
This functionality is primarily designed for CI/CD pipelines use.
102
102
103
-
##### Example (non-interactive-only):
103
+
##### Example :
104
+
⚠️ **OIDC authentication must be used in non-interactive mode. Ensure --interactive=false is set.**
104
105
```
105
106
jf c add \
106
107
--url=https://platform.jfrog.io \
@@ -221,7 +222,7 @@ refer to the [JFrog OIDC Integration](https://jfrog.com/help/r/jfrog-platform-ad
221
222
OIDC tokens are short-lived and ⚠️**do not support refresh**⚠️.
222
223
OIDC access tokens are not renewable. They are intended for one-time use during CI pipelines and do not have an automatic refresh mechanism like other tokens. Consequently, the authentication will only be valid for the duration of the pipeline or until the token expires.
223
224
224
-
The command is primarily designed for internal use, but it is available to allow users the flexibility to generate new OIDC tokens on demand.
225
+
✅ This command can be used independently, or indirectly through `jf c add` when the required environment variables are set.
@@ -230,7 +231,7 @@ The command is primarily designed for internal use, but it is available to allow
230
231
| **Command arguments:** | |
231
232
| `platformUrl` | <p>[Mandatory]</p><p>The URL of the JFrog Platform instance.</p> |
232
233
| `oidc-provider-name`| <p>[Mandatory]</p><p>The name of the OIDC provider.</p> |
233
-
| `oidc-token-id` | <p>[Mandatory]</p><p>The token ID from the OIDC provider.</p> |
234
+
| `oidc-token-id` | <p>[Mandatory]</p><p>The OIDC token (JWT) issued by the CI provider. This is typically retrieved from a CI environment variable such as GitHub’s `ACTIONS_ID_TOKEN`.</p> |
234
235
| **Command options:** | |
235
236
| `--oidc-audience` | <p>[Optional]</p><p>The audience for the OIDC token.</p> |
236
237
| `--oidc-provider-type`| <p>[Optional, default: GitHub]</p><p>The type of provider (e.g. GitHub).</p>|
@@ -241,14 +242,15 @@ The command is primarily designed for internal use, but it is available to allow
0 commit comments