Sign in Dashboard Get started
  1. Registry
  2. Packages
  3. Google Cloud (GCP) Classic
  4. API Docs
  5. iam
  6. getWorkloadIdentityPoolOpenidConfig
Viewing docs for Google Cloud v9.36.1
published on Thursday, Sep 3, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-gcp

gcp.iam.getWorkloadIdentityPoolOpenidConfig

gcp logo
Viewing docs for Google Cloud v9.36.1
published on Thursday, Sep 3, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-gcp

    Get the OpenID provider configuration (/.well-known/openid-configuration) for an Agent Workload Identity Pool from Google Cloud.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";

const example = gcp.iam.getWorkloadIdentityPoolOpenidConfig({
    resourceName: "https://sts.googleapis.com/v1/organizations/433637338589/locations/global/workloadIdentityPools/agents.global.org-433637338589.system.id.goog/.well-known/openid-configuration",
});

    import pulumi
import pulumi_gcp as gcp

example = gcp.iam.get_workload_identity_pool_openid_config(resource_name="https://sts.googleapis.com/v1/organizations/433637338589/locations/global/workloadIdentityPools/agents.global.org-433637338589.system.id.goog/.well-known/openid-configuration")

    package main

import (
	"github.com/pulumi/pulumi-gcp/sdk/v9/go/gcp/iam"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := iam.GetWorkloadIdentityPoolOpenidConfig(ctx, &iam.GetWorkloadIdentityPoolOpenidConfigArgs{
			ResourceName: "https://sts.googleapis.com/v1/organizations/433637338589/locations/global/workloadIdentityPools/agents.global.org-433637338589.system.id.goog/.well-known/openid-configuration",
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;

return await Deployment.RunAsync(() => 
{
    var example = Gcp.Iam.GetWorkloadIdentityPoolOpenidConfig.Invoke(new()
    {
        ResourceName = "https://sts.googleapis.com/v1/organizations/433637338589/locations/global/workloadIdentityPools/agents.global.org-433637338589.system.id.goog/.well-known/openid-configuration",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.iam.IamFunctions;
import com.pulumi.gcp.iam.inputs.GetWorkloadIdentityPoolOpenidConfigArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var example = IamFunctions.getWorkloadIdentityPoolOpenidConfig(GetWorkloadIdentityPoolOpenidConfigArgs.builder()
            .resourceName("https://sts.googleapis.com/v1/organizations/433637338589/locations/global/workloadIdentityPools/agents.global.org-433637338589.system.id.goog/.well-known/openid-configuration")
            .build());

    }
}

    variables:
  example:
    fn::invoke:
      function: gcp:iam:getWorkloadIdentityPoolOpenidConfig
      arguments:
        resourceName: https://sts.googleapis.com/v1/organizations/433637338589/locations/global/workloadIdentityPools/agents.global.org-433637338589.system.id.goog/.well-known/openid-configuration

    pulumi {
  required_providers {
    gcp = {
      source = "pulumi/gcp"
    }
  }
}

data "gcp_iam_getworkloadidentitypoolopenidconfig" "example" {
  resource_name = "https://sts.googleapis.com/v1/organizations/433637338589/locations/global/workloadIdentityPools/agents.global.org-433637338589.system.id.goog/.well-known/openid-configuration"
}

    Using getWorkloadIdentityPoolOpenidConfig

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getWorkloadIdentityPoolOpenidConfig(args: GetWorkloadIdentityPoolOpenidConfigArgs, opts?: InvokeOptions): Promise<GetWorkloadIdentityPoolOpenidConfigResult>
function getWorkloadIdentityPoolOpenidConfigOutput(args: GetWorkloadIdentityPoolOpenidConfigOutputArgs, opts?: InvokeOutputOptions): Output<GetWorkloadIdentityPoolOpenidConfigResult>
    def get_workload_identity_pool_openid_config(resource_name: Optional[str] = None,
                                             opts: Optional[InvokeOptions] = None) -> GetWorkloadIdentityPoolOpenidConfigResult
def get_workload_identity_pool_openid_config_output(resource_name: pulumi.Input[Optional[str]] = None,
                                             opts: Optional[InvokeOutputOptions] = None) -> Output[GetWorkloadIdentityPoolOpenidConfigResult]
    func GetWorkloadIdentityPoolOpenidConfig(ctx *Context, args *GetWorkloadIdentityPoolOpenidConfigArgs, opts ...InvokeOption) (*GetWorkloadIdentityPoolOpenidConfigResult, error)
func GetWorkloadIdentityPoolOpenidConfigOutput(ctx *Context, args *GetWorkloadIdentityPoolOpenidConfigOutputArgs, opts ...InvokeOption) GetWorkloadIdentityPoolOpenidConfigResultOutput

    > Note: This function is named GetWorkloadIdentityPoolOpenidConfig in the Go SDK.

    public static class GetWorkloadIdentityPoolOpenidConfig 
{
    public static Task<GetWorkloadIdentityPoolOpenidConfigResult> InvokeAsync(GetWorkloadIdentityPoolOpenidConfigArgs args, InvokeOptions? opts = null)
    public static Output<GetWorkloadIdentityPoolOpenidConfigResult> Invoke(GetWorkloadIdentityPoolOpenidConfigInvokeArgs args, InvokeOptions? opts = null)
    public static Output<GetWorkloadIdentityPoolOpenidConfigResult> Invoke(GetWorkloadIdentityPoolOpenidConfigInvokeArgs args, InvokeOutputOptions opts)
}
    public static CompletableFuture<GetWorkloadIdentityPoolOpenidConfigResult> getWorkloadIdentityPoolOpenidConfig(GetWorkloadIdentityPoolOpenidConfigArgs args, InvokeOptions options)
public static Output<GetWorkloadIdentityPoolOpenidConfigResult> getWorkloadIdentityPoolOpenidConfig(GetWorkloadIdentityPoolOpenidConfigArgs args, InvokeOptions options)
public static Output<GetWorkloadIdentityPoolOpenidConfigResult> getWorkloadIdentityPoolOpenidConfig(GetWorkloadIdentityPoolOpenidConfigArgs args, InvokeOutputOptions options)

    fn::invoke:
  function: gcp:iam/getWorkloadIdentityPoolOpenidConfig:getWorkloadIdentityPoolOpenidConfig
  arguments:
    # arguments dictionary
    data "gcp_iam_get_workload_identity_pool_openid_config" "name" {
    # arguments
}

    The following arguments are supported:

    ResourceName string
    The OIDC discovery URI.

    ResourceName string
    The OIDC discovery URI.

    resource_name string
    The OIDC discovery URI.

    resourceName String
    The OIDC discovery URI.

    resourceName string
    The OIDC discovery URI.

    resource_name str
    The OIDC discovery URI.

    resourceName String
    The OIDC discovery URI.

    getWorkloadIdentityPoolOpenidConfig Result

    The following output properties are available:

    AuthorizationEndpoint string
    URL pointing to an authorization endpoint under this issuer.
    Id string
    The provider-assigned unique ID for this managed resource.
    IdTokenSigningAlgValuesSupporteds List<string>
    JSON array containing a list of the JWS signing algorithms (alg values) supported by the OP for the ID token to encode the claims in a JWT [JWT].
    Issuer string
    URL using the https scheme with no query or fragment components that the OP asserts as its issuer identifier.
    JwksUri string
    URL of the OP's JWK Set [JWK] document, which MUST use the https scheme.
    ResourceName string
    ResponseTypesSupporteds List<string>
    JSON array containing a list of the OAuth 2.0 responseType values that this OP supports.
    SubjectTypesSupporteds List<string>
    JSON array containing a list of the subject identifier types that this OP supports.
    TokenEndpoint string
    URL pointing to a token endpoint under this issuer.
    AuthorizationEndpoint string
    URL pointing to an authorization endpoint under this issuer.
    Id string
    The provider-assigned unique ID for this managed resource.
    IdTokenSigningAlgValuesSupporteds []string
    JSON array containing a list of the JWS signing algorithms (alg values) supported by the OP for the ID token to encode the claims in a JWT [JWT].
    Issuer string
    URL using the https scheme with no query or fragment components that the OP asserts as its issuer identifier.
    JwksUri string
    URL of the OP's JWK Set [JWK] document, which MUST use the https scheme.
    ResourceName string
    ResponseTypesSupporteds []string
    JSON array containing a list of the OAuth 2.0 responseType values that this OP supports.
    SubjectTypesSupporteds []string
    JSON array containing a list of the subject identifier types that this OP supports.
    TokenEndpoint string
    URL pointing to a token endpoint under this issuer.
    authorization_endpoint string
    URL pointing to an authorization endpoint under this issuer.
    id string
    The provider-assigned unique ID for this managed resource.
    id_token_signing_alg_values_supporteds list(string)
    JSON array containing a list of the JWS signing algorithms (alg values) supported by the OP for the ID token to encode the claims in a JWT [JWT].
    issuer string
    URL using the https scheme with no query or fragment components that the OP asserts as its issuer identifier.
    jwks_uri string
    URL of the OP's JWK Set [JWK] document, which MUST use the https scheme.
    resource_name string
    response_types_supporteds list(string)
    JSON array containing a list of the OAuth 2.0 responseType values that this OP supports.
    subject_types_supporteds list(string)
    JSON array containing a list of the subject identifier types that this OP supports.
    token_endpoint string
    URL pointing to a token endpoint under this issuer.
    authorizationEndpoint String
    URL pointing to an authorization endpoint under this issuer.
    id String
    The provider-assigned unique ID for this managed resource.
    idTokenSigningAlgValuesSupporteds List<String>
    JSON array containing a list of the JWS signing algorithms (alg values) supported by the OP for the ID token to encode the claims in a JWT [JWT].
    issuer String
    URL using the https scheme with no query or fragment components that the OP asserts as its issuer identifier.
    jwksUri String
    URL of the OP's JWK Set [JWK] document, which MUST use the https scheme.
    resourceName String
    responseTypesSupporteds List<String>
    JSON array containing a list of the OAuth 2.0 responseType values that this OP supports.
    subjectTypesSupporteds List<String>
    JSON array containing a list of the subject identifier types that this OP supports.
    tokenEndpoint String
    URL pointing to a token endpoint under this issuer.
    authorizationEndpoint string
    URL pointing to an authorization endpoint under this issuer.
    id string
    The provider-assigned unique ID for this managed resource.
    idTokenSigningAlgValuesSupporteds string[]
    JSON array containing a list of the JWS signing algorithms (alg values) supported by the OP for the ID token to encode the claims in a JWT [JWT].
    issuer string
    URL using the https scheme with no query or fragment components that the OP asserts as its issuer identifier.
    jwksUri string
    URL of the OP's JWK Set [JWK] document, which MUST use the https scheme.
    resourceName string
    responseTypesSupporteds string[]
    JSON array containing a list of the OAuth 2.0 responseType values that this OP supports.
    subjectTypesSupporteds string[]
    JSON array containing a list of the subject identifier types that this OP supports.
    tokenEndpoint string
    URL pointing to a token endpoint under this issuer.
    authorization_endpoint str
    URL pointing to an authorization endpoint under this issuer.
    id str
    The provider-assigned unique ID for this managed resource.
    id_token_signing_alg_values_supporteds Sequence[str]
    JSON array containing a list of the JWS signing algorithms (alg values) supported by the OP for the ID token to encode the claims in a JWT [JWT].
    issuer str
    URL using the https scheme with no query or fragment components that the OP asserts as its issuer identifier.
    jwks_uri str
    URL of the OP's JWK Set [JWK] document, which MUST use the https scheme.
    resource_name str
    response_types_supporteds Sequence[str]
    JSON array containing a list of the OAuth 2.0 responseType values that this OP supports.
    subject_types_supporteds Sequence[str]
    JSON array containing a list of the subject identifier types that this OP supports.
    token_endpoint str
    URL pointing to a token endpoint under this issuer.
    authorizationEndpoint String
    URL pointing to an authorization endpoint under this issuer.
    id String
    The provider-assigned unique ID for this managed resource.
    idTokenSigningAlgValuesSupporteds List<String>
    JSON array containing a list of the JWS signing algorithms (alg values) supported by the OP for the ID token to encode the claims in a JWT [JWT].
    issuer String
    URL using the https scheme with no query or fragment components that the OP asserts as its issuer identifier.
    jwksUri String
    URL of the OP's JWK Set [JWK] document, which MUST use the https scheme.
    resourceName String
    responseTypesSupporteds List<String>
    JSON array containing a list of the OAuth 2.0 responseType values that this OP supports.
    subjectTypesSupporteds List<String>
    JSON array containing a list of the subject identifier types that this OP supports.
    tokenEndpoint String
    URL pointing to a token endpoint under this issuer.

    Package Details

    Repository
    Google Cloud (GCP) Classic pulumi/pulumi-gcp
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the google-beta Terraform Provider.
    gcp logo
    Viewing docs for Google Cloud v9.36.1
    published on Thursday, Sep 3, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-gcp

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial