A sample showing how to configure Azure DevOps Workload identity federation (OIDC) or Managed Identity connection to Azure with Terraform and then use that configuration to deploy resources with Terraform.

Azure Pipelines YAML examples

Showcasing the potential of SPIFFE with real-life services

Azure Identity Scripts for Entra ID & Azure DevOps Service Connections

AWS SPIFFE Workload Helper is a light-weight tool intended to assist in providing a workload with credentials for AWS using its SPIFFE identity.

Keyless Google Cloud Access from HCP Terraform

Configure OpenID Connect with GCP Workload Identity Federation

The content of my blog hosted at: https://mathieu-benoit.github.io/

Azure DevOps Workload Identity Federation - Updating your Azure DevOps ARM Service Connections to use the recommended Workload Identity Federation

Verify OIDC JWT identity tokens using OIDC discovery

A GitHub action signing in to an Azure User-Assigned Managed Identity, to fetch a secret from Azure KeyVault.

Example in order to setup Workload Identity Federation with another GCP project

Workload Identity Federation with Github actions

Kubernetes Helm Chart for HashiCorp Vault with Auto-Unseal This Helm chart helps deploy HashiCorp Vault on Kubernetes with auto-unseal enabled using cloud KMS (Azure, AWS, GCP). The repository includes a step-by-step guide for seamless setup, troubleshooting, and secure configurations for production environments.

Terraform-managed Azure Service Connection

Azure DevOps Workload Identity Federation - Updating your Azure DevOps ARM Service Connections to use the recommended Workload Identity Federation

A sample Python application to show the end to end requirements to use Workload Identity Federation to connect to Azure SQL.

A short talk on how to integrate GitHub Actions securely with Google Cloud through Workload Identity Federation

Terraform module for creation Azure User Assigned Identity