This guide demonstrates creating a Kubernetes private cluster in Google Kubernetes Engine (GKE) running a sample Kubernetes workload that connects to a Cloud SQL instance using the cloud-sql-proxy "sidecar" authenticated using Workload Identity (Beta).

Example setup of workload-identity into a Kubernetes cluster on GCP - https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity

GKE IAM role and workload identity sample project

Configure OpenID Connect with GCP Workload Identity Federation

Provisions a Google Kubernetes Engine, along with ArgoCD to bootstrap the cluster with applications

Azure PostgreSQL with AKS Workload Identity

Terraform-managed Azure Service Connection

Build a private Kubernetes Cluster (GKE) and associated resources in Google Cloud using Terraform

A demo on how to use Workload Identity on GCP to call Google Cloud API from an application deployed on GKE

A demo repository of using Azure Functions in a Docker container using AKS Workload Identities for binding authentications

Terraform module for creating workload identity in azure.

GCP hands-on materials in Tunisia

This repo demonstrates how to fetch secrets from Azure Key Vault using the Kubernetes External Secrets operator. It leverages OIDC authentication and Azure Workload Identity to securely access the vault from within a Kubernetes cluster. The implementation uses K3d, OpenTofu, and Terragrunt for infrastructure provisioning, showcasing GitOps practice

Deployment manifests for Personal Applications