v32

latestOpenAPI 3.1.0raw.githubusercontent.com2026-05-224341,4072.0 MB

Workload Federation

Create Trust

CreateTrust creates a trust policy for a service principal. Validates the CEL condition_expression at creation time.

post/api/v1/service_principals/{service_principal_id}/trusts

service_principal_idstring required

The service principal ID to create the trust for (from URL path).

allowSourceCidrsstring[] nullable

IP allowlist for token exchange requests matching this trust. Accepts IPv4 (e.g. 10.0.0.0/24) or IPv6 (e.g. 2001:db8::/32) CIDRs.

conditionExpressionstring

CEL expression evaluated against JWT claims. Must return bool. Compiled and validated before storage.

descriptionstring

A description of what this trust policy matches.

displayNamestring

The display name for the trust.

passthroughClaimsstring[] nullable

JWT claim names from the subject token to copy into the issued C1 token.

providerIdstring

The provider this trust references.

scopedRoleIdsstring[] nullable

Scoped role IDs. Effective permissions = min(SP roles, trust.scoped_role_ids).

Successful response