Azure AD Workload Identity uses Kubernetes primitives to associate managed identities for Azure resources and identities in Azure Active Directory (AAD) with pods.

This guide demonstrates creating a Kubernetes private cluster in Google Kubernetes Engine (GKE) running a sample Kubernetes workload that connects to a Cloud SQL instance using the cloud-sql-proxy "sidecar" authenticated using Workload Identity (Beta).

Securely access AWS services from GKE cluster

Identity Manager Operator

SPIFFE Demo Applicaiton

Azure Identity Scripts for Entra ID & Azure DevOps Service Connections

A demo on how to use Workload Identity on GCP to call Google Cloud API from an application deployed on GKE

Script and container demonstrating SAML SSO for google apps domains

Example setup of workload-identity into a Kubernetes cluster on GCP - https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity

Azure DevOps Workload Identity Federation - Updating your Azure DevOps ARM Service Connections to use the recommended Workload Identity Federation

Configure OpenID Connect with GCP Workload Identity Federation

GKE IAM role and workload identity sample project

Terraform module for creating workload identity in azure.

Terraform-managed Azure Service Connection

Build a private Kubernetes Cluster (GKE) and associated resources in Google Cloud using Terraform

Deploy an Azure Function Service Bus trigger using KEDA Add-on for AKS for scaling and connecting to Azure Service Bus using workload identity for AKS.

A sample Python application to show the end to end requirements to use Workload Identity Federation to connect to Azure SQL.

This repo maintains Terraform module for workload Identity for k8s cluster