A sample showing how to configure Azure DevOps Workload identity federation (OIDC) connection to Azure with Terraform and then use that configuration to deploy resources with Terraform. The sample also demonstrates bootstrapping CI / CD with Terraform and how to implement a number of best practices.

A sample showing how to configure GitHub Workload identity federation (OIDC) connection to Azure with Terraform and then use that configuration to deploy resources with Terraform. The sample also demonstrates bootstrapping CI / CD with Terraform and how to implement a number of best practices.

AWS SPIFFE Workload Helper is a light-weight tool intended to assist in providing a workload with credentials for AWS using its SPIFFE identity.

Showcasing the potential of SPIFFE with real-life services

Azure Pipelines YAML examples

Interactive workload identity security visualization - Learn workload identity through animated explanations

Azure Identity Scripts for Entra ID & Azure DevOps Service Connections

Keyless Google Cloud Access from HCP Terraform

Verify OIDC JWT identity tokens using OIDC discovery

Configure OpenID Connect with GCP Workload Identity Federation

Terraform-managed Azure Service Connection

The content of my blog hosted at: https://mathieu-benoit.github.io/

A GitHub action signing in to an Azure User-Assigned Managed Identity, to fetch a secret from Azure KeyVault.

Azure DevOps Workload Identity Federation - Updating your Azure DevOps ARM Service Connections to use the recommended Workload Identity Federation

Kubernetes identity management for hybrid workloads

This repository contains terraform code for Infrastructure deployment on Google Cloud Platform using CICD implementation.

A secure, production-grade DevSecOps pipeline for GKE Autopilot orchestrated via GitHub Actions and Terraform. This project implements a 'zero-trust' security model by leveraging Workload Identity Federation (WIF) to eliminate long-lived service account keys, ensuring a hardened CI/CD workflow from code commit to deployment.

​🚀 Automated deployment of a production-ready Argo CD on AKS, secured with TLS and secret-less Microsoft Entra ID SSO using Workload Identity.

Example in order to setup Workload Identity Federation with another GCP project

Workload Identity Federation with Github actions

Kubernetes Helm Chart for HashiCorp Vault with Auto-Unseal This Helm chart helps deploy HashiCorp Vault on Kubernetes with auto-unseal enabled using cloud KMS (Azure, AWS, GCP). The repository includes a step-by-step guide for seamless setup, troubleshooting, and secure configurations for production environments.

No description provided.

Keyless ETL demo: Load data from S3 to Snowflake using AWS Lambda with Workload Identity Federation (WIDF) — no passwords, no secrets, just IAM trust.

🚀 GitHub Action to promote HCP Packer image iterations to distribution channels | 🔐 Supports OIDC workload identity federation | 📦 Perfect for golden image pipelines

🔑 Checks for expiring Entra ID service principal secrets

Terraform module for configuring GCP Workload Identity Federation and set appropriate Gitlab variables.

Production-grade DevSecOps CI/CD pipelines showcasing security scans, quality gates, artifact management, approval workflows, and VM-based deployments using Azure DevOps & GitHub Actions.

A short talk on how to integrate GitHub Actions securely with Google Cloud through Workload Identity Federation

Azure DevOps Workload Identity Federation - Updating your Azure DevOps ARM Service Connections to use the recommended Workload Identity Federation

Firebase Admin SDK - Workload Identity Federation Demo