
2/28/2023 · Dov Hershkovitch
What this post added
This post details the evolution of GitLab's CI/CD JWT token support, introducing OpenID Connect (OIDC) for broader cloud provider integration (AWS, GCP). It enhances security by making JWT tokens opt-in via the `id_token` keyword in `.gitlab-ci.yml` and mandates the `aud` (audience) claim for token validation. The post also announces upcoming breaking changes in GitLab 16.0, deprecating older JWT methods in favor of the secured OIDC token and advising users to migrate to `id_token` and enable JWT access limitations.