Azure AD Workload Identity uses Kubernetes primitives to associate managed identities for Azure resources and identities in Azure Active Directory (AAD) with pods.

aad azure federated-identity kubernetes oidc workload-identity

Перейти к файлу

dependabot[bot] 21899a326c chore: bump peaceiris/actions-gh-pages from 3.9.3 to 4.0.0 Bumps [peaceiris/actions-gh-pages](https://github.com/peaceiris/actions-gh-pages) from 3.9.3 to 4.0.0. - [Release notes](https://github.com/peaceiris/actions-gh-pages/releases) - [Changelog](https://github.com/peaceiris/actions-gh-pages/blob/main/CHANGELOG.md) - [Commits](`373f7f263a...4f9cc6602d`) --- updated-dependencies: - dependency-name: peaceiris/actions-gh-pages dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>		2024-05-02 19:44:52 +00:00
.github	chore: bump peaceiris/actions-gh-pages from 3.9.3 to 4.0.0	2024-05-02 19:44:52 +00:00
.pipelines	ci: remove pinned k8s version for aks clusters (#1334 )	2024-05-02 12:47:19 -04:00
charts/workload-identity-webhook	release: update manifest and helm charts for v1.2.2 (#1326 )	2024-04-17 16:20:31 -04:00
cmd	feat: add graceful shutdown for proxy server (#776 )	2023-03-06 14:04:31 -05:00
config	release: update manifest and helm charts for v1.2.2 (#1326 )	2024-04-17 16:20:31 -04:00
deploy	release: update manifest and helm charts for v1.2.2 (#1326 )	2024-04-17 16:20:31 -04:00
docker	chore: update to go 1.22 (#1315 )	2024-05-02 17:36:17 +00:00
docs/book	release: update manifest and helm charts for v1.2.2 (#1326 )	2024-04-17 16:20:31 -04:00
examples	chore: update to go 1.22 (#1315 )	2024-05-02 17:36:17 +00:00
hack	chore: remove hack/generate-jwks (#211 )	2021-10-13 22:27:57 +00:00
init	fix: update proxy-init iptables rule to prevent forwarding loop (#402 )	2022-03-25 11:07:39 -07:00
manifest_staging	release: update manifest and helm charts for v1.2.2 (#1326 )	2024-04-17 16:20:31 -04:00
pkg	release: update manifest and helm charts for v1.2.2 (#1326 )	2024-04-17 16:20:31 -04:00
scripts	ci: remove pinned k8s version for aks clusters (#1334 )	2024-05-02 12:47:19 -04:00
test/e2e	chore: update to go 1.22 (#1315 )	2024-05-02 17:36:17 +00:00
third_party	release: update manifest and helm charts for v1.2.2 (#1326 )	2024-04-17 16:20:31 -04:00
.gitignore	feat: add msal-java example (#375 )	2022-02-17 12:08:08 -08:00
.golangci.yml	chore: update to go 1.22 (#1315 )	2024-05-02 17:36:17 +00:00
.goreleaser.yml	chore: reenable azwi darwin build as part of release (#909 )	2023-04-29 00:08:14 +00:00
CODEOWNERS	ci: add @enj to CODEOWNERS (#927 )	2023-05-04 20:32:42 +00:00
CODE_OF_CONDUCT.md	Initial CODE_OF_CONDUCT.md commit	2021-04-26 06:52:07 -07:00
LICENSE	Initial LICENSE commit	2021-04-26 06:52:09 -07:00
Makefile	release: update manifest and helm charts for v1.2.2 (#1326 )	2024-04-17 16:20:31 -04:00
PROJECT	feat: rename module and annotations from aad-pod-managed-identity to azure-workload-identity (#150 )	2021-08-24 11:46:00 -07:00
README.md	ci: enable tests with kubernetes v1.29 (#1230 )	2024-02-23 12:32:49 -08:00
SECURITY.md	ci: disable markdown link check for SECURITY.md (#445 )	2022-05-10 22:21:58 +05:30
codecov.yml	ci: add codecov.yml (#788 )	2023-03-16 00:03:08 +00:00
go.mod	chore: update to go 1.22 (#1315 )	2024-05-02 17:36:17 +00:00
go.sum	ci: add govulncheck check and fix GO-2024-2687 (#1320 )	2024-04-16 10:27:15 -07:00
netlify.toml	docs: enable website preview with netlify (#324 )	2022-01-14 00:40:28 +00:00

README.md

Azure AD Workload Identity

Azure AD Workload Identity is the next iteration of Azure AD Pod Identity that enables Kubernetes applications to access Azure cloud resources securely with Azure Active Directory based on annotated service accounts.

Kubernetes Version	Supported
1.29	✅
1.28	✅
1.27	✅
1.26	✅

Installation

Check out the installation guide on how to deploy the Azure AD Workload Identity webhook.

Quick Start

Check out the Azure AD Workload Identity Quick Start on how to securely access Azure cloud resources from your Kubernetes workload using the Microsoft Authentication Library (MSAL).

Code of Conduct

This project has adopted the Microsoft Open Source Code of Conduct. For more information, see the Code of Conduct FAQ or contact opencode@microsoft.com with any additional questions or comments.

Release

Currently, Azure Workload Identity releases on a monthly basis, targeting the last week of the month.

Support

Azure AD Workload Identity is an open source project that is not covered by the Microsoft Azure support policy. Please search open issues here, and if your issue isn't already represented please open a new one. The project maintainers will respond to the best of their abilities.