Azure AD Workload Identity uses Kubernetes primitives to associate managed identities for Azure resources and identities in Azure Active Directory (AAD) with pods.

This guide demonstrates creating a Kubernetes private cluster in Google Kubernetes Engine (GKE) running a sample Kubernetes workload that connects to a Cloud SQL instance using the cloud-sql-proxy "sidecar" authenticated using Workload Identity (Beta).

Securely access AWS services from GKE cluster

A collection of crates for SPIFFE workload identity, Workload API clients, SPIRE-specific APIs, and TLS integration.

Identity Manager Operator

AWS SPIFFE Workload Helper is a light-weight tool intended to assist in providing a workload with credentials for AWS using its SPIFFE identity.

A CLI for Kubernetes workload identity

AegisSovereignAI: The Cross-Ecosystem Trust Layer for the Distributed Enterprise. Verifiable Identity, Hardware-Rooted Integrity, and Sovereign AI Governance - from Silicon to Prompt. Unifying AI, Cloud-Native, and Decentralized architectures.

Showcasing the potential of SPIFFE with real-life services

Azure Identity Scripts for Entra ID & Azure DevOps Service Connections

SPIFFE Demo Application

Interactive workload identity security visualization - Learn workload identity through animated explanations

Workload Identity over Tailscale

This repository contains a CredentialComposer plugin for SPIRE that extends the functionality of JWT-SVIDs, adding custom claims based on the workload's SPIFFE identity.

.net library with extensions for passwordless authentication to Azure Database for MySql and Azure Database for PostgreSQL

Script and container demonstrating SAML SSO for google apps domains

Verify OIDC JWT identity tokens using OIDC discovery

Configure OpenID Connect with GCP Workload Identity Federation

A demo on how to use Workload Identity on GCP to call Google Cloud API from an application deployed on GKE

Provide a GCP Artifact Registry mirror on a GKE cluster using Workload Identity

Terraform module for creating workload identity in azure.

A Rust lib crate for JWT validation with JWKS caching support

Terraform-managed Azure Service Connection

Example setup of workload-identity into a Kubernetes cluster on GCP - https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity

No description provided.

Deploy an Azure Function Service Bus trigger using KEDA Add-on for AKS for scaling and connecting to Azure Service Bus using workload identity for AKS.

This repo demonstrates how to fetch secrets from Azure Key Vault using the Kubernetes External Secrets operator. It leverages OIDC authentication and Azure Workload Identity to securely access the vault from within a Kubernetes cluster. The implementation uses K3d, OpenTofu, and Terragrunt for infrastructure provisioning, showcasing GitOps practice

Kubernetes-native implementation of the SPIFFE standard

GKE IAM role and workload identity sample project

Azure DevOps Workload Identity Federation - Updating your Azure DevOps ARM Service Connections to use the recommended Workload Identity Federation