Azure AD Workload Identity uses Kubernetes primitives to associate managed identities for Azure resources and identities in Azure Active Directory (AAD) with pods.

This guide demonstrates creating a Kubernetes private cluster in Google Kubernetes Engine (GKE) running a sample Kubernetes workload that connects to a Cloud SQL instance using the cloud-sql-proxy "sidecar" authenticated using Workload Identity (Beta).

Securely access AWS services from GKE cluster

Identity Manager Operator

AWS SPIFFE Workload Helper is a light-weight tool intended to assist in providing a workload with credentials for AWS using its SPIFFE identity.

A CLI for Kubernetes workload identity

Showcasing the potential of SPIFFE with real-life services

Azure Identity Scripts for Entra ID & Azure DevOps Service Connections

SPIFFE Demo Application

AegisEdgeAI delivers verifiable trust for AI at the edge — from manufacturing to live operations — ensuring workloads run only on approved, uncompromised devices, in approved locations.

.net library with extensions for passwordless authentication to Azure Database for MySql and Azure Database for PostgreSQL

Script and container demonstrating SAML SSO for google apps domains

Configure OpenID Connect with GCP Workload Identity Federation

A demo on how to use Workload Identity on GCP to call Google Cloud API from an application deployed on GKE

Verify OIDC JWT identity tokens using OIDC discovery

Terraform module for creating workload identity in azure.

Terraform-managed Azure Service Connection

Example setup of workload-identity into a Kubernetes cluster on GCP - https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity

Deploy an Azure Function Service Bus trigger using KEDA Add-on for AKS for scaling and connecting to Azure Service Bus using workload identity for AKS.