published on Wednesday, Nov 11, 2026 by Pulumi
published on Wednesday, Nov 11, 2026 by Pulumi
Provides a GitHub Actions OIDC intake mapping for Datadog workload identity federation. The mapping allows GitHub Actions workloads whose OIDC tokens match the claimMatchers patterns to send telemetry to Datadog intake endpoints. Mappings cannot be updated; changing any attribute replaces the mapping. This resource uses a public beta API and is subject to change.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as datadog from "@pulumi/datadog";
const terraform = new datadog.GithubOidcIntakeMapping("terraform", {claimMatchers: [{
sub: "repo:my-org/terraform:ref:refs/heads/main",
repository: "^my-org/terraform$",
}]});
import pulumi
import pulumi_datadog as datadog
terraform = datadog.GithubOidcIntakeMapping("terraform", claim_matchers=[{
"sub": "repo:my-org/terraform:ref:refs/heads/main",
"repository": "^my-org/terraform$",
}])
package main
import (
"github.com/pulumi/pulumi-datadog/sdk/v5/go/datadog"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := datadog.NewGithubOidcIntakeMapping(ctx, "terraform", &datadog.GithubOidcIntakeMappingArgs{
ClaimMatchers: datadog.GithubOidcIntakeMappingClaimMatchersArgs{
map[string]string{
"sub": "repo:my-org/terraform:ref:refs/heads/main",
"repository": "^my-org/terraform$",
},
},
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Datadog = Pulumi.Datadog;
return await Deployment.RunAsync(() =>
{
var terraform = new Datadog.GithubOidcIntakeMapping("terraform", new()
{
ClaimMatchers = new[]
{
{
{ "sub", "repo:my-org/terraform:ref:refs/heads/main" },
{ "repository", "^my-org/terraform$" },
},
},
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.datadog.GithubOidcIntakeMapping;
import com.pulumi.datadog.GithubOidcIntakeMappingArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var terraform = new GithubOidcIntakeMapping("terraform", GithubOidcIntakeMappingArgs.builder()
.claimMatchers(com.pulumi.datadog.inputs.GithubOidcIntakeMappingClaimMatchersArgs.builder()
.sub("repo:my-org/terraform:ref:refs/heads/main")
.repository("^my-org/terraform$")
.build())
.build());
}
}
resources:
terraform:
type: datadog:GithubOidcIntakeMapping
properties:
claimMatchers:
- sub: repo:my-org/terraform:ref:refs/heads/main
repository: ^my-org/terraform$
terraform {
required_providers {
datadog = {
source = "pulumi/datadog"
}
}
}
resource "datadog_github_oidc_intake_mapping" "terraform" {
lifecycle {
create_before_destroy = true
}
claim_matchers = [{
"sub" = "repo:my-org/terraform:ref:refs/heads/main"
"repository" = "^my-org/terraform$"
}]
}
Create GithubOidcIntakeMapping Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new GithubOidcIntakeMapping(name: string, args: GithubOidcIntakeMappingArgs, opts?: CustomResourceOptions);@overload
def GithubOidcIntakeMapping(resource_name: str,
args: GithubOidcIntakeMappingArgs,
opts: Optional[ResourceOptions] = None)
@overload
def GithubOidcIntakeMapping(resource_name: str,
opts: Optional[ResourceOptions] = None,
claim_matchers: Optional[GithubOidcIntakeMappingClaimMatchersArgs] = None)func NewGithubOidcIntakeMapping(ctx *Context, name string, args GithubOidcIntakeMappingArgs, opts ...ResourceOption) (*GithubOidcIntakeMapping, error)public GithubOidcIntakeMapping(string name, GithubOidcIntakeMappingArgs args, CustomResourceOptions? opts = null)
public GithubOidcIntakeMapping(String name, GithubOidcIntakeMappingArgs args)
public GithubOidcIntakeMapping(String name, GithubOidcIntakeMappingArgs args, CustomResourceOptions options)
type: datadog:GithubOidcIntakeMapping
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
resource "datadog_github_oidc_intake_mapping" "name" {
# resource properties
}Parameters
- name string
- The unique name of the resource.
- args GithubOidcIntakeMappingArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args GithubOidcIntakeMappingArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args GithubOidcIntakeMappingArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args GithubOidcIntakeMappingArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args GithubOidcIntakeMappingArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var githubOidcIntakeMappingResource = new Datadog.GithubOidcIntakeMapping("githubOidcIntakeMappingResource", new()
{
ClaimMatchers = new Datadog.Inputs.GithubOidcIntakeMappingClaimMatchersArgs
{
Sub = "string",
RefType = "string",
RepositoryId = "string",
EnterpriseId = "string",
Environment = "string",
EventName = "string",
JobWorkflowRef = "string",
Ref = "string",
Actor = "string",
Enterprise = "string",
RepositoryOwner = "string",
Repository = "string",
RepositoryOwnerId = "string",
RepositoryVisibility = "string",
RunnerEnvironment = "string",
ActorId = "string",
Workflow = "string",
WorkflowRef = "string",
},
});
example, err := datadog.NewGithubOidcIntakeMapping(ctx, "githubOidcIntakeMappingResource", &datadog.GithubOidcIntakeMappingArgs{
ClaimMatchers: &datadog.GithubOidcIntakeMappingClaimMatchersArgs{
Sub: pulumi.String("string"),
RefType: pulumi.String("string"),
RepositoryId: pulumi.String("string"),
EnterpriseId: pulumi.String("string"),
Environment: pulumi.String("string"),
EventName: pulumi.String("string"),
JobWorkflowRef: pulumi.String("string"),
Ref: pulumi.String("string"),
Actor: pulumi.String("string"),
Enterprise: pulumi.String("string"),
RepositoryOwner: pulumi.String("string"),
Repository: pulumi.String("string"),
RepositoryOwnerId: pulumi.String("string"),
RepositoryVisibility: pulumi.String("string"),
RunnerEnvironment: pulumi.String("string"),
ActorId: pulumi.String("string"),
Workflow: pulumi.String("string"),
WorkflowRef: pulumi.String("string"),
},
})
resource "datadog_github_oidc_intake_mapping" "githubOidcIntakeMappingResource" {
lifecycle {
create_before_destroy = true
}
claim_matchers = {
sub = "string"
ref_type = "string"
repository_id = "string"
enterprise_id = "string"
environment = "string"
event_name = "string"
job_workflow_ref = "string"
ref = "string"
actor = "string"
enterprise = "string"
repository_owner = "string"
repository = "string"
repository_owner_id = "string"
repository_visibility = "string"
runner_environment = "string"
actor_id = "string"
workflow = "string"
workflow_ref = "string"
}
}
var githubOidcIntakeMappingResource = new GithubOidcIntakeMapping("githubOidcIntakeMappingResource", GithubOidcIntakeMappingArgs.builder()
.claimMatchers(GithubOidcIntakeMappingClaimMatchersArgs.builder()
.sub("string")
.refType("string")
.repositoryId("string")
.enterpriseId("string")
.environment("string")
.eventName("string")
.jobWorkflowRef("string")
.ref("string")
.actor("string")
.enterprise("string")
.repositoryOwner("string")
.repository("string")
.repositoryOwnerId("string")
.repositoryVisibility("string")
.runnerEnvironment("string")
.actorId("string")
.workflow("string")
.workflowRef("string")
.build())
.build());
github_oidc_intake_mapping_resource = datadog.GithubOidcIntakeMapping("githubOidcIntakeMappingResource", claim_matchers={
"sub": "string",
"ref_type": "string",
"repository_id": "string",
"enterprise_id": "string",
"environment": "string",
"event_name": "string",
"job_workflow_ref": "string",
"ref": "string",
"actor": "string",
"enterprise": "string",
"repository_owner": "string",
"repository": "string",
"repository_owner_id": "string",
"repository_visibility": "string",
"runner_environment": "string",
"actor_id": "string",
"workflow": "string",
"workflow_ref": "string",
})
const githubOidcIntakeMappingResource = new datadog.GithubOidcIntakeMapping("githubOidcIntakeMappingResource", {claimMatchers: {
sub: "string",
refType: "string",
repositoryId: "string",
enterpriseId: "string",
environment: "string",
eventName: "string",
jobWorkflowRef: "string",
ref: "string",
actor: "string",
enterprise: "string",
repositoryOwner: "string",
repository: "string",
repositoryOwnerId: "string",
repositoryVisibility: "string",
runnerEnvironment: "string",
actorId: "string",
workflow: "string",
workflowRef: "string",
}});
type: datadog:GithubOidcIntakeMapping
properties:
claimMatchers:
actor: string
actorId: string
enterprise: string
enterpriseId: string
environment: string
eventName: string
jobWorkflowRef: string
ref: string
refType: string
repository: string
repositoryId: string
repositoryOwner: string
repositoryOwnerId: string
repositoryVisibility: string
runnerEnvironment: string
sub: string
workflow: string
workflowRef: string
GithubOidcIntakeMapping Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The GithubOidcIntakeMapping resource accepts the following input properties:
- Claim
Matchers GithubOidc Intake Mapping Claim Matchers - GitHub Actions OIDC claims to match against. Each argument is a regular expression;
subis required and all other claims are optional. A token matches only when all provided patterns match simultaneously (AND semantics).
- Claim
Matchers GithubOidc Intake Mapping Claim Matchers Args - GitHub Actions OIDC claims to match against. Each argument is a regular expression;
subis required and all other claims are optional. A token matches only when all provided patterns match simultaneously (AND semantics).
- claim_
matchers object - GitHub Actions OIDC claims to match against. Each argument is a regular expression;
subis required and all other claims are optional. A token matches only when all provided patterns match simultaneously (AND semantics).
- claim
Matchers GithubOidc Intake Mapping Claim Matchers - GitHub Actions OIDC claims to match against. Each argument is a regular expression;
subis required and all other claims are optional. A token matches only when all provided patterns match simultaneously (AND semantics).
- claim
Matchers GithubOidc Intake Mapping Claim Matchers - GitHub Actions OIDC claims to match against. Each argument is a regular expression;
subis required and all other claims are optional. A token matches only when all provided patterns match simultaneously (AND semantics).
- claim_
matchers GithubOidc Intake Mapping Claim Matchers Args - GitHub Actions OIDC claims to match against. Each argument is a regular expression;
subis required and all other claims are optional. A token matches only when all provided patterns match simultaneously (AND semantics).
- claim
Matchers Property Map - GitHub Actions OIDC claims to match against. Each argument is a regular expression;
subis required and all other claims are optional. A token matches only when all provided patterns match simultaneously (AND semantics).
Outputs
All input properties are implicitly available as output properties. Additionally, the GithubOidcIntakeMapping resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Id string
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id str
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
Look up Existing GithubOidcIntakeMapping Resource
Get an existing GithubOidcIntakeMapping resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: GithubOidcIntakeMappingState, opts?: CustomResourceOptions): GithubOidcIntakeMapping@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
claim_matchers: Optional[GithubOidcIntakeMappingClaimMatchersArgs] = None) -> GithubOidcIntakeMappingfunc GetGithubOidcIntakeMapping(ctx *Context, name string, id IDInput, state *GithubOidcIntakeMappingState, opts ...ResourceOption) (*GithubOidcIntakeMapping, error)public static GithubOidcIntakeMapping Get(string name, Input<string> id, GithubOidcIntakeMappingState? state, CustomResourceOptions? opts = null)public static GithubOidcIntakeMapping get(String name, Output<String> id, GithubOidcIntakeMappingState state, CustomResourceOptions options)resources: _: type: datadog:GithubOidcIntakeMapping get: id: ${id}import {
to = datadog_github_oidc_intake_mapping.example
id = "${id}"
}
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Claim
Matchers GithubOidc Intake Mapping Claim Matchers - GitHub Actions OIDC claims to match against. Each argument is a regular expression;
subis required and all other claims are optional. A token matches only when all provided patterns match simultaneously (AND semantics).
- Claim
Matchers GithubOidc Intake Mapping Claim Matchers Args - GitHub Actions OIDC claims to match against. Each argument is a regular expression;
subis required and all other claims are optional. A token matches only when all provided patterns match simultaneously (AND semantics).
- claim_
matchers object - GitHub Actions OIDC claims to match against. Each argument is a regular expression;
subis required and all other claims are optional. A token matches only when all provided patterns match simultaneously (AND semantics).
- claim
Matchers GithubOidc Intake Mapping Claim Matchers - GitHub Actions OIDC claims to match against. Each argument is a regular expression;
subis required and all other claims are optional. A token matches only when all provided patterns match simultaneously (AND semantics).
- claim
Matchers GithubOidc Intake Mapping Claim Matchers - GitHub Actions OIDC claims to match against. Each argument is a regular expression;
subis required and all other claims are optional. A token matches only when all provided patterns match simultaneously (AND semantics).
- claim_
matchers GithubOidc Intake Mapping Claim Matchers Args - GitHub Actions OIDC claims to match against. Each argument is a regular expression;
subis required and all other claims are optional. A token matches only when all provided patterns match simultaneously (AND semantics).
- claim
Matchers Property Map - GitHub Actions OIDC claims to match against. Each argument is a regular expression;
subis required and all other claims are optional. A token matches only when all provided patterns match simultaneously (AND semantics).
Supporting Types
GithubOidcIntakeMappingClaimMatchers, GithubOidcIntakeMappingClaimMatchersArgs
- Sub string
- Regular expression matched against the required
subclaim of the GitHub Actions OIDC token. It must start with the literalrepo:<OWNER>/prefix; the owner cannot be a regex. String length must be at least 1. - Actor string
- Regular expression matched against the
actorclaim of the GitHub Actions OIDC token. String length must be at least 1. - Actor
Id string - Regular expression matched against the
actorIdclaim of the GitHub Actions OIDC token. String length must be at least 1. - Enterprise string
- Regular expression matched against the
enterpriseclaim of the GitHub Actions OIDC token. String length must be at least 1. - Enterprise
Id string - Regular expression matched against the
enterpriseIdclaim of the GitHub Actions OIDC token. String length must be at least 1. - Environment string
- Regular expression matched against the
environmentclaim of the GitHub Actions OIDC token. String length must be at least 1. - Event
Name string - Regular expression matched against the
eventNameclaim of the GitHub Actions OIDC token. String length must be at least 1. - Job
Workflow stringRef - Regular expression matched against the
jobWorkflowRefclaim of the GitHub Actions OIDC token. String length must be at least 1. - Ref string
- Regular expression matched against the
refclaim of the GitHub Actions OIDC token. String length must be at least 1. - Ref
Type string - Regular expression matched against the
refTypeclaim of the GitHub Actions OIDC token. String length must be at least 1. - Repository string
- Regular expression matched against the
repositoryclaim of the GitHub Actions OIDC token. String length must be at least 1. - Repository
Id string - Regular expression matched against the
repositoryIdclaim of the GitHub Actions OIDC token. String length must be at least 1. - Repository
Owner string - Regular expression matched against the
repositoryOwnerclaim of the GitHub Actions OIDC token. String length must be at least 1. - Repository
Owner stringId - Regular expression matched against the
repositoryOwnerIdclaim of the GitHub Actions OIDC token. String length must be at least 1. - Repository
Visibility string - Regular expression matched against the
repositoryVisibilityclaim of the GitHub Actions OIDC token. String length must be at least 1. - Runner
Environment string - Regular expression matched against the
runnerEnvironmentclaim of the GitHub Actions OIDC token. String length must be at least 1. - Workflow string
- Regular expression matched against the
workflowclaim of the GitHub Actions OIDC token. String length must be at least 1. - Workflow
Ref string - Regular expression matched against the
workflowRefclaim of the GitHub Actions OIDC token. String length must be at least 1.
- Sub string
- Regular expression matched against the required
subclaim of the GitHub Actions OIDC token. It must start with the literalrepo:<OWNER>/prefix; the owner cannot be a regex. String length must be at least 1. - Actor string
- Regular expression matched against the
actorclaim of the GitHub Actions OIDC token. String length must be at least 1. - Actor
Id string - Regular expression matched against the
actorIdclaim of the GitHub Actions OIDC token. String length must be at least 1. - Enterprise string
- Regular expression matched against the
enterpriseclaim of the GitHub Actions OIDC token. String length must be at least 1. - Enterprise
Id string - Regular expression matched against the
enterpriseIdclaim of the GitHub Actions OIDC token. String length must be at least 1. - Environment string
- Regular expression matched against the
environmentclaim of the GitHub Actions OIDC token. String length must be at least 1. - Event
Name string - Regular expression matched against the
eventNameclaim of the GitHub Actions OIDC token. String length must be at least 1. - Job
Workflow stringRef - Regular expression matched against the
jobWorkflowRefclaim of the GitHub Actions OIDC token. String length must be at least 1. - Ref string
- Regular expression matched against the
refclaim of the GitHub Actions OIDC token. String length must be at least 1. - Ref
Type string - Regular expression matched against the
refTypeclaim of the GitHub Actions OIDC token. String length must be at least 1. - Repository string
- Regular expression matched against the
repositoryclaim of the GitHub Actions OIDC token. String length must be at least 1. - Repository
Id string - Regular expression matched against the
repositoryIdclaim of the GitHub Actions OIDC token. String length must be at least 1. - Repository
Owner string - Regular expression matched against the
repositoryOwnerclaim of the GitHub Actions OIDC token. String length must be at least 1. - Repository
Owner stringId - Regular expression matched against the
repositoryOwnerIdclaim of the GitHub Actions OIDC token. String length must be at least 1. - Repository
Visibility string - Regular expression matched against the
repositoryVisibilityclaim of the GitHub Actions OIDC token. String length must be at least 1. - Runner
Environment string - Regular expression matched against the
runnerEnvironmentclaim of the GitHub Actions OIDC token. String length must be at least 1. - Workflow string
- Regular expression matched against the
workflowclaim of the GitHub Actions OIDC token. String length must be at least 1. - Workflow
Ref string - Regular expression matched against the
workflowRefclaim of the GitHub Actions OIDC token. String length must be at least 1.
- sub string
- Regular expression matched against the required
subclaim of the GitHub Actions OIDC token. It must start with the literalrepo:<OWNER>/prefix; the owner cannot be a regex. String length must be at least 1. - actor string
- Regular expression matched against the
actorclaim of the GitHub Actions OIDC token. String length must be at least 1. - actor_
id string - Regular expression matched against the
actorIdclaim of the GitHub Actions OIDC token. String length must be at least 1. - enterprise string
- Regular expression matched against the
enterpriseclaim of the GitHub Actions OIDC token. String length must be at least 1. - enterprise_
id string - Regular expression matched against the
enterpriseIdclaim of the GitHub Actions OIDC token. String length must be at least 1. - environment string
- Regular expression matched against the
environmentclaim of the GitHub Actions OIDC token. String length must be at least 1. - event_
name string - Regular expression matched against the
eventNameclaim of the GitHub Actions OIDC token. String length must be at least 1. - job_
workflow_ stringref - Regular expression matched against the
jobWorkflowRefclaim of the GitHub Actions OIDC token. String length must be at least 1. - ref string
- Regular expression matched against the
refclaim of the GitHub Actions OIDC token. String length must be at least 1. - ref_
type string - Regular expression matched against the
refTypeclaim of the GitHub Actions OIDC token. String length must be at least 1. - repository string
- Regular expression matched against the
repositoryclaim of the GitHub Actions OIDC token. String length must be at least 1. - repository_
id string - Regular expression matched against the
repositoryIdclaim of the GitHub Actions OIDC token. String length must be at least 1. - repository_
owner string - Regular expression matched against the
repositoryOwnerclaim of the GitHub Actions OIDC token. String length must be at least 1. - repository_
owner_ stringid - Regular expression matched against the
repositoryOwnerIdclaim of the GitHub Actions OIDC token. String length must be at least 1. - repository_
visibility string - Regular expression matched against the
repositoryVisibilityclaim of the GitHub Actions OIDC token. String length must be at least 1. - runner_
environment string - Regular expression matched against the
runnerEnvironmentclaim of the GitHub Actions OIDC token. String length must be at least 1. - workflow string
- Regular expression matched against the
workflowclaim of the GitHub Actions OIDC token. String length must be at least 1. - workflow_
ref string - Regular expression matched against the
workflowRefclaim of the GitHub Actions OIDC token. String length must be at least 1.
- sub String
- Regular expression matched against the required
subclaim of the GitHub Actions OIDC token. It must start with the literalrepo:<OWNER>/prefix; the owner cannot be a regex. String length must be at least 1. - actor String
- Regular expression matched against the
actorclaim of the GitHub Actions OIDC token. String length must be at least 1. - actor
Id String - Regular expression matched against the
actorIdclaim of the GitHub Actions OIDC token. String length must be at least 1. - enterprise String
- Regular expression matched against the
enterpriseclaim of the GitHub Actions OIDC token. String length must be at least 1. - enterprise
Id String - Regular expression matched against the
enterpriseIdclaim of the GitHub Actions OIDC token. String length must be at least 1. - environment String
- Regular expression matched against the
environmentclaim of the GitHub Actions OIDC token. String length must be at least 1. - event
Name String - Regular expression matched against the
eventNameclaim of the GitHub Actions OIDC token. String length must be at least 1. - job
Workflow StringRef - Regular expression matched against the
jobWorkflowRefclaim of the GitHub Actions OIDC token. String length must be at least 1. - ref String
- Regular expression matched against the
refclaim of the GitHub Actions OIDC token. String length must be at least 1. - ref
Type String - Regular expression matched against the
refTypeclaim of the GitHub Actions OIDC token. String length must be at least 1. - repository String
- Regular expression matched against the
repositoryclaim of the GitHub Actions OIDC token. String length must be at least 1. - repository
Id String - Regular expression matched against the
repositoryIdclaim of the GitHub Actions OIDC token. String length must be at least 1. - repository
Owner String - Regular expression matched against the
repositoryOwnerclaim of the GitHub Actions OIDC token. String length must be at least 1. - repository
Owner StringId - Regular expression matched against the
repositoryOwnerIdclaim of the GitHub Actions OIDC token. String length must be at least 1. - repository
Visibility String - Regular expression matched against the
repositoryVisibilityclaim of the GitHub Actions OIDC token. String length must be at least 1. - runner
Environment String - Regular expression matched against the
runnerEnvironmentclaim of the GitHub Actions OIDC token. String length must be at least 1. - workflow String
- Regular expression matched against the
workflowclaim of the GitHub Actions OIDC token. String length must be at least 1. - workflow
Ref String - Regular expression matched against the
workflowRefclaim of the GitHub Actions OIDC token. String length must be at least 1.
- sub string
- Regular expression matched against the required
subclaim of the GitHub Actions OIDC token. It must start with the literalrepo:<OWNER>/prefix; the owner cannot be a regex. String length must be at least 1. - actor string
- Regular expression matched against the
actorclaim of the GitHub Actions OIDC token. String length must be at least 1. - actor
Id string - Regular expression matched against the
actorIdclaim of the GitHub Actions OIDC token. String length must be at least 1. - enterprise string
- Regular expression matched against the
enterpriseclaim of the GitHub Actions OIDC token. String length must be at least 1. - enterprise
Id string - Regular expression matched against the
enterpriseIdclaim of the GitHub Actions OIDC token. String length must be at least 1. - environment string
- Regular expression matched against the
environmentclaim of the GitHub Actions OIDC token. String length must be at least 1. - event
Name string - Regular expression matched against the
eventNameclaim of the GitHub Actions OIDC token. String length must be at least 1. - job
Workflow stringRef - Regular expression matched against the
jobWorkflowRefclaim of the GitHub Actions OIDC token. String length must be at least 1. - ref string
- Regular expression matched against the
refclaim of the GitHub Actions OIDC token. String length must be at least 1. - ref
Type string - Regular expression matched against the
refTypeclaim of the GitHub Actions OIDC token. String length must be at least 1. - repository string
- Regular expression matched against the
repositoryclaim of the GitHub Actions OIDC token. String length must be at least 1. - repository
Id string - Regular expression matched against the
repositoryIdclaim of the GitHub Actions OIDC token. String length must be at least 1. - repository
Owner string - Regular expression matched against the
repositoryOwnerclaim of the GitHub Actions OIDC token. String length must be at least 1. - repository
Owner stringId - Regular expression matched against the
repositoryOwnerIdclaim of the GitHub Actions OIDC token. String length must be at least 1. - repository
Visibility string - Regular expression matched against the
repositoryVisibilityclaim of the GitHub Actions OIDC token. String length must be at least 1. - runner
Environment string - Regular expression matched against the
runnerEnvironmentclaim of the GitHub Actions OIDC token. String length must be at least 1. - workflow string
- Regular expression matched against the
workflowclaim of the GitHub Actions OIDC token. String length must be at least 1. - workflow
Ref string - Regular expression matched against the
workflowRefclaim of the GitHub Actions OIDC token. String length must be at least 1.
- sub str
- Regular expression matched against the required
subclaim of the GitHub Actions OIDC token. It must start with the literalrepo:<OWNER>/prefix; the owner cannot be a regex. String length must be at least 1. - actor str
- Regular expression matched against the
actorclaim of the GitHub Actions OIDC token. String length must be at least 1. - actor_
id str - Regular expression matched against the
actorIdclaim of the GitHub Actions OIDC token. String length must be at least 1. - enterprise str
- Regular expression matched against the
enterpriseclaim of the GitHub Actions OIDC token. String length must be at least 1. - enterprise_
id str - Regular expression matched against the
enterpriseIdclaim of the GitHub Actions OIDC token. String length must be at least 1. - environment str
- Regular expression matched against the
environmentclaim of the GitHub Actions OIDC token. String length must be at least 1. - event_
name str - Regular expression matched against the
eventNameclaim of the GitHub Actions OIDC token. String length must be at least 1. - job_
workflow_ strref - Regular expression matched against the
jobWorkflowRefclaim of the GitHub Actions OIDC token. String length must be at least 1. - ref str
- Regular expression matched against the
refclaim of the GitHub Actions OIDC token. String length must be at least 1. - ref_
type str - Regular expression matched against the
refTypeclaim of the GitHub Actions OIDC token. String length must be at least 1. - repository str
- Regular expression matched against the
repositoryclaim of the GitHub Actions OIDC token. String length must be at least 1. - repository_
id str - Regular expression matched against the
repositoryIdclaim of the GitHub Actions OIDC token. String length must be at least 1. - repository_
owner str - Regular expression matched against the
repositoryOwnerclaim of the GitHub Actions OIDC token. String length must be at least 1. - repository_
owner_ strid - Regular expression matched against the
repositoryOwnerIdclaim of the GitHub Actions OIDC token. String length must be at least 1. - repository_
visibility str - Regular expression matched against the
repositoryVisibilityclaim of the GitHub Actions OIDC token. String length must be at least 1. - runner_
environment str - Regular expression matched against the
runnerEnvironmentclaim of the GitHub Actions OIDC token. String length must be at least 1. - workflow str
- Regular expression matched against the
workflowclaim of the GitHub Actions OIDC token. String length must be at least 1. - workflow_
ref str - Regular expression matched against the
workflowRefclaim of the GitHub Actions OIDC token. String length must be at least 1.
- sub String
- Regular expression matched against the required
subclaim of the GitHub Actions OIDC token. It must start with the literalrepo:<OWNER>/prefix; the owner cannot be a regex. String length must be at least 1. - actor String
- Regular expression matched against the
actorclaim of the GitHub Actions OIDC token. String length must be at least 1. - actor
Id String - Regular expression matched against the
actorIdclaim of the GitHub Actions OIDC token. String length must be at least 1. - enterprise String
- Regular expression matched against the
enterpriseclaim of the GitHub Actions OIDC token. String length must be at least 1. - enterprise
Id String - Regular expression matched against the
enterpriseIdclaim of the GitHub Actions OIDC token. String length must be at least 1. - environment String
- Regular expression matched against the
environmentclaim of the GitHub Actions OIDC token. String length must be at least 1. - event
Name String - Regular expression matched against the
eventNameclaim of the GitHub Actions OIDC token. String length must be at least 1. - job
Workflow StringRef - Regular expression matched against the
jobWorkflowRefclaim of the GitHub Actions OIDC token. String length must be at least 1. - ref String
- Regular expression matched against the
refclaim of the GitHub Actions OIDC token. String length must be at least 1. - ref
Type String - Regular expression matched against the
refTypeclaim of the GitHub Actions OIDC token. String length must be at least 1. - repository String
- Regular expression matched against the
repositoryclaim of the GitHub Actions OIDC token. String length must be at least 1. - repository
Id String - Regular expression matched against the
repositoryIdclaim of the GitHub Actions OIDC token. String length must be at least 1. - repository
Owner String - Regular expression matched against the
repositoryOwnerclaim of the GitHub Actions OIDC token. String length must be at least 1. - repository
Owner StringId - Regular expression matched against the
repositoryOwnerIdclaim of the GitHub Actions OIDC token. String length must be at least 1. - repository
Visibility String - Regular expression matched against the
repositoryVisibilityclaim of the GitHub Actions OIDC token. String length must be at least 1. - runner
Environment String - Regular expression matched against the
runnerEnvironmentclaim of the GitHub Actions OIDC token. String length must be at least 1. - workflow String
- Regular expression matched against the
workflowclaim of the GitHub Actions OIDC token. String length must be at least 1. - workflow
Ref String - Regular expression matched against the
workflowRefclaim of the GitHub Actions OIDC token. String length must be at least 1.
Import
The pulumi import command can be used, for example:
$ pulumi import datadog:index/githubOidcIntakeMapping:GithubOidcIntakeMapping terraform "00000000-0000-0000-0000-000000000000"
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- Datadog pulumi/pulumi-datadog
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
datadogTerraform Provider.
published on Wednesday, Nov 11, 2026 by Pulumi