https://rnemeth90.github.io/tags/identity/Recent content in Identity on GeekyRyanHugoen-usTue, 13 Jun 2023 09:00:00 +0000https://rnemeth90.github.io/projects/2023-06-13-aks-workload-identity-migration/Tue, 13 Jun 2023 09:00:00 +0000https://rnemeth90.github.io/projects/2023-06-13-aks-workload-identity-migration/<p>For a long time, the standard way for a pod in AKS to authenticate to Azure resources (Key Vault, databases, service bus, etc.) was some flavor of managed identity binding via a sidecar (AAD Pod Identity), or worse, credentials baked into a secret. Azure Workload Identity is the modern replacement: it federates a Kubernetes service account with an Azure AD identity using OIDC, with no secrets to manage or rotate.</p>