Serverless web content with GitHub Actions pushing changes to S3.
makeitwork.cloud/oidc/ hosts public static Kubernetes ServiceAccount OIDC
discovery metadata for future AWS STS web-identity authentication from the k3s
cluster.
- Issuer:
https://makeitwork.cloud/oidc - Discovery:
https://makeitwork.cloud/oidc/.well-known/openid-configuration - JWKS:
https://makeitwork.cloud/oidc/openid/v1/jwks
The JWKS file must contain only public key material for the k3s ServiceAccount token signing key. Never commit the private signing key, AWS credentials, KMS key IDs, kubeconfigs, or decrypted SOPS values here.