andreaso/Vault OIDC SSH client certs
Use OIDC authentication to get SSH client certificates from Vault alt. OpenBao
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Jul 1, 2026
- License
- MIT
Pinned Snippet
uses: andreaso/vault-oidc-ssh-cert-action@7958b71e15f73a6287677332ab90c185718575bf # v2.1tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| vault_server | URL of the Vault server | yes | — |
| jwt_oidc_backend_path | Path to Vault's GitHub configured JWT OIDC backend | yes | — |
| jwt_oidc_role | Name of the Vault server JWT OIDC role to use | yes | — |
| ssh_backend_path | Path to Vault's SSH CA backend | yes | — |
| ssh_role | Name of the Vault server SSH certificate role to use | yes | — |
| jwt_audience | Custom JWT audience. Defaults to the vault_server hostname | no | — |
Outputs
| name | description |
|---|---|
| cert_path | Full path to the generated SSH certificate |
| key_path | Full path to the corresponding private SSH key |