Azure AD Workload Identity uses Kubernetes primitives to associate managed identities for Azure resources and identities in Azure Active Directory (AAD) with pods.

aad azure federated-identity kubernetes oidc workload-identity

Перейти к файлу

dependabot[bot] 9fffa02330 chore: bump github.com/docker/distribution from 2.8.1+incompatible to 2.8.2+incompatible in /test/e2e (#954 ) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>		2023-05-12 20:40:47 +00:00
.github	chore: bump peter-evans/create-pull-request from 5.0.0 to 5.0.1 (#936 )	2023-05-08 14:55:41 -07:00
.pipelines	ci: exclude examples folder from trigger (part 2) (#917 )	2023-05-01 21:43:05 +00:00
charts/workload-identity-webhook	release: update manifest and helm charts for v1.1.0 (#935 )	2023-05-08 12:24:16 -07:00
cmd	feat: add graceful shutdown for proxy server (#776 )	2023-03-06 14:04:31 -05:00
config	release: update manifest and helm charts for v1.1.0 (#935 )	2023-05-08 12:24:16 -07:00
deploy	release: update manifest and helm charts for v1.1.0 (#935 )	2023-05-08 12:24:16 -07:00
docker	chore: update distroless-iptables to v0.2.4 (#946 )	2023-05-10 13:03:16 -07:00
docs/book	docs: update minimum required versions for azure-identity sdk (#956 )	2023-05-12 15:35:05 -04:00
examples	docs: update minimum required versions for azure-identity sdk (#956 )	2023-05-12 15:35:05 -04:00
hack	chore: remove hack/generate-jwks (#211 )	2021-10-13 22:27:57 +00:00
init	fix: update proxy-init iptables rule to prevent forwarding loop (#402 )	2022-03-25 11:07:39 -07:00
manifest_staging	release: update manifest and helm charts for v1.1.0 (#935 )	2023-05-08 12:24:16 -07:00
pkg	chore: use `github.com/Azure/azure-sdk-for-go/sdk/azcore/to` instead of `autorest/to` (#947 )	2023-05-10 20:29:51 +00:00
scripts	test: install devel releases with helm and update webhook poll_webhook_readiness (#746 )	2023-02-09 15:22:27 -05:00
test/e2e	chore: bump github.com/docker/distribution from 2.8.1+incompatible to 2.8.2+incompatible in /test/e2e (#954 )	2023-05-12 20:40:47 +00:00
third_party	release: update manifest and helm charts for v1.1.0 (#935 )	2023-05-08 12:24:16 -07:00
.gitignore	feat: add msal-java example (#375 )	2022-02-17 12:08:08 -08:00
.golangci.yml	chore: update to go 1.20 (#840 )	2023-04-14 17:52:01 +00:00
.goreleaser.yml	chore: reenable azwi darwin build as part of release (#909 )	2023-04-29 00:08:14 +00:00
CODEOWNERS	ci: add @enj to CODEOWNERS (#927 )	2023-05-04 20:32:42 +00:00
CODE_OF_CONDUCT.md	Initial CODE_OF_CONDUCT.md commit	2021-04-26 06:52:07 -07:00
LICENSE	Initial LICENSE commit	2021-04-26 06:52:09 -07:00
Makefile	release: update manifest and helm charts for v1.1.0 (#935 )	2023-05-08 12:24:16 -07:00
PROJECT	feat: rename module and annotations from aad-pod-managed-identity to azure-workload-identity (#150 )	2021-08-24 11:46:00 -07:00
README.md	docs: add openssf badge (#904 )	2023-04-27 20:32:05 +00:00
SECURITY.md	ci: disable markdown link check for SECURITY.md (#445 )	2022-05-10 22:21:58 +05:30
codecov.yml	ci: add codecov.yml (#788 )	2023-03-16 00:03:08 +00:00
go.mod	chore: use `github.com/Azure/azure-sdk-for-go/sdk/azcore/to` instead of `autorest/to` (#947 )	2023-05-10 20:29:51 +00:00
go.sum	chore: use `github.com/Azure/azure-sdk-for-go/sdk/azcore/to` instead of `autorest/to` (#947 )	2023-05-10 20:29:51 +00:00
netlify.toml	docs: enable website preview with netlify (#324 )	2022-01-14 00:40:28 +00:00

README.md

Azure AD Workload Identity

Azure AD Workload Identity is the next iteration of Azure AD Pod Identity that enables Kubernetes applications to access Azure cloud resources securely with Azure Active Directory based on annotated service accounts.

Kubernetes Version	Supported
1.27	✅
1.26	✅
1.25	✅
1.24	✅

Installation

Check out the installation guide on how to deploy the Azure AD Workload Identity webhook.

Quick Start

Check out the Azure AD Workload Identity Quick Start on how to securely access Azure cloud resources from your Kubernetes workload using the Microsoft Authentication Library (MSAL).

Code of Conduct

This project has adopted the Microsoft Open Source Code of Conduct. For more information, see the Code of Conduct FAQ or contact opencode@microsoft.com with any additional questions or comments.

Release

Currently, Azure Workload Identity releases on a monthly basis, targeting the last week of the month.

Support

Azure AD Workload Identity is an open source project that is not covered by the Microsoft Azure support policy. Please search open issues here, and if your issue isn't already represented please open a new one. The project maintainers will respond to the best of their abilities.