oidc

type Config struct {
	// IssuerURL is the issuer URL provided by the OpenID Connect identity
	// provider.
	IssuerURL string `envconfig:"OIDC_ISSUER_URL" required:"true"`
	// Client ID is the client ID provided by the OpenID Connect identity
	// provider.
	ClientID string `envconfig:"OIDC_CLIENT_ID" required:"true"`
	// CLIClientID is the client ID provided by the OpenID Connect identity
	// provider for CLI login.
	CLIClientID string `envconfig:"OIDC_CLI_CLIENT_ID"`
	// DefaultScopes are the scopes to always be requested during the authorization code flow.
	DefaultScopes []string
	// AdditionalScopes are any more scopes to be requested during the authorization code flow
	// on top of the default Scopes.
	AdditionalScopes []string `envconfig:"OIDC_ADDITIONAL_SCOPES"`
	// UsernameClaim is the claim to use as the username for the user.
	UsernameClaim string `envconfig:"OIDC_USERNAME_CLAIM" default:"email"`

	// GlobalServiceAccountNamespaces is the list of namespaces to look up
	// for shared service accounts.
	GlobalServiceAccountNamespaces []string `envconfig:"GLOBAL_SERVICE_ACCOUNT_NAMESPACES"`
}