Skip to main content

env0 Secretless Authentication

env0 supports native OIDC integration for authenticating to cloud providers without storing credentials.

Overview​

env0's built-in OIDC support enables infrastructure deployments using temporary credentials for cloud providers. This provides:

  • No Cloud Credentials: OIDC tokens replace stored credentials
  • Native Integration: Built-in AWS, GCP, Azure support
  • Automatic Authentication: Seamless credential provisioning
  • Enhanced Security: No credential storage in env0

Key Capabilities​

  • Native OIDC integration with cloud providers
  • Automatic credential exchange during deployments
  • Environment and project-level configuration
  • Support for Terraform, Terragrunt, Pulumi, OpenTofu

Contributing​

This page is a placeholder. We need your help to create comprehensive documentation!

What we need:

  • Complete setup guide for env0 OIDC
  • AWS IAM role configuration for env0
  • GCP Workload Identity Federation setup
  • Azure Workload Identity configuration
  • Environment and project setup
  • Multi-cloud deployment patterns
  • Troubleshooting authentication issues
  • Migration from stored credentials

How to contribute:

Resources​