Azure AD Workload Identity uses Kubernetes primitives to associate managed identities for Azure resources and identities in Azure Active Directory (AAD) with pods.

This guide demonstrates creating a Kubernetes private cluster in Google Kubernetes Engine (GKE) running a sample Kubernetes workload that connects to a Cloud SQL instance using the cloud-sql-proxy "sidecar" authenticated using Workload Identity (Beta).

Securely access AWS services from GKE cluster

Identity Manager Operator

.net library with extensions for passwordless authentication to Azure Database for MySql and Azure Database for PostgreSQL

Script and container demonstrating SAML SSO for google apps domains

SPIFFE Demo Application

Azure Identity Scripts for Entra ID & Azure DevOps Service Connections

Configure OpenID Connect with GCP Workload Identity Federation

A demo on how to use Workload Identity on GCP to call Google Cloud API from an application deployed on GKE

Example setup of workload-identity into a Kubernetes cluster on GCP - https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity

Showcasing the potential of SPIFFE with real-life services

Azure DevOps Workload Identity Federation - Updating your Azure DevOps ARM Service Connections to use the recommended Workload Identity Federation

GKE IAM role and workload identity sample project

Terraform module for creating workload identity in azure.

Deploy an Azure Function Service Bus trigger using KEDA Add-on for AKS for scaling and connecting to Azure Service Bus using workload identity for AKS.

This repo demonstrates how to fetch secrets from Azure Key Vault using the Kubernetes External Secrets operator. It leverages OIDC authentication and Azure Workload Identity to securely access the vault from within a Kubernetes cluster. The implementation uses K3d, OpenTofu, and Terragrunt for infrastructure provisioning, showcasing GitOps practice

Terraform-managed Azure Service Connection

Kubernetes Helm Chart for HashiCorp Vault with Auto-Unseal This Helm chart helps deploy HashiCorp Vault on Kubernetes with auto-unseal enabled using cloud KMS (Azure, AWS, GCP). The repository includes a step-by-step guide for seamless setup, troubleshooting, and secure configurations for production environments.