Add support for OKE workload identity resource principal. - #59
Merged
Merged
Conversation
oracle-contributor-agreement
Bot
added
the
OCA Verified
yfei-a
reviewed
Sep 5, 2026
| elif principal == 'resource principal': | ||
| provider = SignatureProvider.create_with_resource_principal() | ||
| elif principal == 'oke workload': | ||
| provider = SignatureProvider.create_with_oke_workload_identity_resource_principal() |
Member
There was a problem hiding this comment.
Looks like there is an existing issue in the example code, please check wether it's worth addressing as part of this patch.
The OKE path inherits an existing examples defect affecting instance and
resource principals as well. config_cloud.py defaults credentials_file
to ~/.oci/config, and parameters.py opens it to derive tenant_id
during import, before signer selection. Credential-free workloads therefore
fail with FileNotFoundError; setting it to None instead uses
pythontenant as the default compartment, which is not a valid compartment
OCID. Add a separate configured compartment OCID for non-user principals,
bypass credential-file tenancy parsing for those modes, and use that OCID as
the default compartment.
Member
Author
There was a problem hiding this comment.
I checked-in a fix for allowing the example code to run without a ~/.oci/config file.
…al support without requiring an ~/.oci/config file.
yfei-a
approved these changes
Sep 14, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Add support for OKE workload identity resource principal.