#workloadidentity — Public Fediverse posts

Generally Available: Azure Red Hat OpenShift Managed Identity and Workload Identity #Azure #OpenShift #RedHat #WorkloadIdentity https://azure.microsoft.com/en-us/updates

Generally Available: Azure Red Hat OpenShift Managed Identity and Workload Identity #Azure #OpenShift #RedHat #WorkloadIdentity https://azure.microsoft.com/en-us/updates

Static Kubernetes ServiceAccount tokens are a long-standing security risk.
This post walks through authenticating workloads to HashiCorp Vault using JWT/OIDC, exchanging pod identity for short-lived, least-privilege Vault tokens via a Kubernetes-aware STS—without relying on static credentials.

#Kubernetes #HashiCorpVault #OIDC #WorkloadIdentity #ZeroTrust
https://www.tremolo.io/post/short-lived-tokens-with-vault-without-the-static-serviceaccount

Static Kubernetes ServiceAccount tokens are a long-standing security risk.
This post walks through authenticating workloads to HashiCorp Vault using JWT/OIDC, exchanging pod identity for short-lived, least-privilege Vault tokens via a Kubernetes-aware STS—without relying on static credentials.

#Kubernetes #HashiCorpVault #OIDC #WorkloadIdentity #ZeroTrust
https://www.tremolo.io/post/short-lived-tokens-with-vault-without-the-static-serviceaccount

Shift Left and Shift Up Workload Attack Surface Protection – Source: securityboulevard.com https://ciso2ciso.com/shift-left-and-shift-up-workload-attack-surface-protection-source-securityboulevard-com/ #TLSConfigurationandCompliance #WorkloadMicroSegmentation #rssfeedpostgeneratorecho #SecurityBloggersNetwork #OAuthTokenVunerability #CryptographicAgility #MtlsAuthentication #CyberSecurityNews #SecurityBoulevard #quantumcomputing #WorkloadIdentity

Shift Left and Shift Up Workload Attack Surface Protection – Source: securityboulevard.com https://ciso2ciso.com/shift-left-and-shift-up-workload-attack-surface-protection-source-securityboulevard-com/ #TLSConfigurationandCompliance #WorkloadMicroSegmentation #rssfeedpostgeneratorecho #SecurityBloggersNetwork #OAuthTokenVunerability #CryptographicAgility #MtlsAuthentication #CyberSecurityNews #SecurityBoulevard #quantumcomputing #WorkloadIdentity

i spent way to much time debugging the usage of #GoogleCloud SDKs in #flyio through #WorkloadIdentity.

ended up creating a little binary in #Go that can act as a proxy: https://www.frytg.digital/blog/2024-11-20-flyio-openid-token/ - maybe it helps someone

#OpenID #OIDC #GCP #golang

PSA: #WorkloadIdentity on #AKS is now GA!!!! https://techcommunity.microsoft.com/t5/apps-on-azure-blog/general-availability-for-azure-active-directory-ad-workload/ba-p/3798292#M1196 #kubernetes #azure

PSA: #WorkloadIdentity on #AKS is now GA!!!! https://techcommunity.microsoft.com/t5/apps-on-azure-blog/general-availability-for-azure-active-directory-ad-workload/ba-p/3798292#M1196 #kubernetes #azure

well that was fun. got #tornjak integrated with #keycloak successfully. Want to try it out for yourself? Theres a great blog to walk you through the process #spiffe #WorkloadIdentity https://medium.com/universal-workload-identity/guide-to-integrating-tornjak-with-keycloak-for-access-control-to-spire-40a3d5ee5f5a

well that was fun. got #tornjak integrated with #keycloak successfully. Want to try it out for yourself? Theres a great blog to walk you through the process #spiffe #WorkloadIdentity https://medium.com/universal-workload-identity/guide-to-integrating-tornjak-with-keycloak-for-access-control-to-spire-40a3d5ee5f5a