Add --audience-claim for GCR Receivers

Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
This commit is contained in:
Stefan Prodan 2026-04-10 12:34:26 +03:00
parent 02734f28ba
commit c601a212f6
No known key found for this signature in database
GPG key ID: 3299AEB0E4085BAF
5 changed files with 42 additions and 16 deletions

View file

@ -90,10 +90,11 @@ type Options struct {
GitHubAppBaseURL string
// Receiver options
ReceiverType string
Token string
Hostname string
EmailClaim string
ReceiverType string
Token string
Hostname string
EmailClaim string
AudienceClaim string
}
type VerificationCrt struct {

View file

@ -306,7 +306,11 @@ func GenerateReceiver(options Options) (*manifestgen.Manifest, error) {
return nil, fmt.Errorf("email-claim is required for gcr receiver type")
}
secret.StringData[EmailSecretKey] = options.EmailClaim
secret.StringData[AudienceSecretKey] = webhookURL
if options.AudienceClaim != "" {
secret.StringData[AudienceSecretKey] = options.AudienceClaim
} else {
secret.StringData[AudienceSecretKey] = webhookURL
}
}
return secretToManifest(secret, options)