When configuring an OIDC-secured webhook Receiver, set its type to `generic-oidc` and define an OIDC provider with validations and the Flux resources to reconcile. The Receiver uses no Secret; callers send a valid OIDC ID token in the `Authorization: Bearer` header.
apiVersion: notification.toolkit.fluxcd.io/v1
kind: Receiver
metadata:
name: <receiver-name>
namespace: <namespace>
spec:
type: generic-oidc
oidcProviders:
- issuerURL: <issuer-url>
validations:
- expression: "<CEL expression>"
message: "<failure message>"
resources:
- apiVersion: <api-group>/<version>
kind: <resource-kind>
name: <resource-name>