A sample showing how to configure Azure DevOps Workload identity federation (OIDC) connection to Azure with Terraform and then use that configuration to deploy resources with Terraform. The sample also demonstrates bootstrapping CI / CD with Terraform and how to implement a number of best practices.
A sample showing how to configure GitHub Workload identity federation (OIDC) connection to Azure with Terraform and then use that configuration to deploy resources with Terraform. The sample also demonstrates bootstrapping CI / CD with Terraform and how to implement a number of best practices.
AWS SPIFFE Workload Helper is a light-weight tool intended to assist in providing a workload with credentials for AWS using its SPIFFE identity.
Showcasing the potential of SPIFFE with real-life services
Azure Pipelines YAML examples
Interactive workload identity security visualization - Learn workload identity through animated explanations
Verify OIDC JWT identity tokens using OIDC discovery
Azure Identity Scripts for Entra ID & Azure DevOps Service Connections
Keyless Google Cloud Access from HCP Terraform
Configure OpenID Connect with GCP Workload Identity Federation
A Security Token Service for Cloudflare. Stop storing CLOUDFLARE_API_TOKEN in CI: trade your job's OIDC token for a short-lived, least-privilege Cloudflare API token or R2 credentials, revoked when the job ends. GitHub Actions, GitLab CI, or any OIDC issuer.
Terraform-managed Azure Service Connection
GitHub Action: upload a Chrome extension to the Chrome Web Store API v2 and submit it for review. No stored secret, no dependencies.
Kubernetes identity management for hybrid workloads
The content of my blog hosted at: https://mathieu-benoit.github.io/
Azure DevOps Workload Identity Federation - Updating your Azure DevOps ARM Service Connections to use the recommended Workload Identity Federation
Kubernetes Helm Chart for HashiCorp Vault with Auto-Unseal This Helm chart helps deploy HashiCorp Vault on Kubernetes with auto-unseal enabled using cloud KMS (Azure, AWS, GCP). The repository includes a step-by-step guide for seamless setup, troubleshooting, and secure configurations for production environments.
Cross-model pull request review on Gemini Enterprise Agent Platform. Gemini and Claude read each diff independently, on one Google Cloud credential.
🚀 Automated deployment of a production-ready Argo CD on AKS, secured with TLS and secret-less Microsoft Entra ID SSO using Workload Identity.
A GitHub action signing in to an Azure User-Assigned Managed Identity, to fetch a secret from Azure KeyVault.
To associate your repository with the workload-identity-federation topic, visit your repo's landing page and select "manage topics."