#WorkloadIdentity
LightNews LightNews
whitneylee.com
When a new workload spins up in Kubernetes, it has nothing to prove who it is yet, no credential, no secret. But it can get a verified identity in seconds - how?

Watch the full 🌩️Thunder episode:
https://youtu.be/cCHXRzoThsM

#SPIFFE #SPIRE #WorkloadIdentity #CloudNative
September 22, 2026 at 5:31 PM
roxsross.bsky.social
🔐 Acceso seguro a Claude con Workload Identity Federation

https://claude.com/blog/workload-identity-federation

#Claude #Seguridad #WorkloadIdentity #Tech
June 20, 2026 at 7:25 AM
whitneylee.com
What stops someone from stealing an access token and using it themselves?

Watch the full 🌩️Thunder episode:
https://youtu.be/9XS0B8n180M

#Athenz #WorkloadIdentity #ZeroTrust #CNCF #mTLS
July 8, 2026 at 3:17 PM
abdullahgarcia.bsky.social
Let’s get the day started! 🤓

#WorkloadIdentity #IAM #Cybersecurity #TodayAtWork
April 1, 2025 at 9:20 AM
sakurasky.com
How do you trust an autonomous AI agent?

In our latest post, we look at workload identity as another missing primitive for trustworthy AI.

Read more on our blog: www.sakurasky.com/blog/missing...

#AI #AISecurity #SPIFFE #WorkloadIdentity #DevSecOps
Agent Identity & Attestation
Go beyond API keys. Learn to engineer trustworthy AI agents with verifiable identity and attestation using the SPIFFE framework and a Python example.
www.sakurasky.com
October 7, 2025 at 8:01 AM
darinor.com
Your Agent Is Impersonating You www.darinor.com/blog/delegat... #AgenticAI #AISecurity #WorkloadIdentity #MCP
Your Agent Is Impersonating You
When an agent acts with your token, every downstream log says you did it. Delegation, not impersonation: one token, two identities — and a delegation chain nobody enforces yet.
www.darinor.com
September 5, 2026 at 7:15 PM
whitneylee.com
What happens if someone steals your CA’s private key?

Watch the full 🌩️Thunder episode:
https://youtu.be/9XS0B8n180M

#Athenz #WorkloadIdentity #ZeroTrust #CNCF #mTLS
July 7, 2026 at 3:43 PM
darinor.com
Workload Identity Federation for AI Agents: Kill the Static Key www.darinor.com/blog/workloa... #WorkloadIdentity #AgenticAI #OIDC #Security
Workload Identity Federation for AI Agents: Kill the Static Key
Agents are the new source of leaked secrets — AI-service keys grew 81% in a year. Workload identity federation replaces the static key with a short-lived token minted from the identity your agent alre...
www.darinor.com
August 18, 2026 at 10:37 AM
whitneylee.com
How does Athenz automate the process of giving every single workload its own identity?

Watch the full 🌩️Thunder episode:
https://youtu.be/9XS0B8n180M

#Athenz #WorkloadIdentity #ZeroTrust #CNCF #mTLS
July 7, 2026 at 10:07 PM
whiteduck-gmbh.bsky.social
👉 GitHub-Repo und Blogpost whiteduck.de/terraform-sc...

Wie geht ihr heute mit Terraform-Authentifizierung in euren Pipelines um? Noch Secrets oder schon OIDC/Federation?

#Terraform #Azure #InfrastructureAsCode #OIDC #WorkloadIdentity #DevSecOps #OpenSource #CloudNative
April 21, 2026 at 10:47 AM
tremolo.io
Authenticate Kubernetes workloads to HashiCorp Vault using JWT/OIDC and short-lived tokens—no static ServiceAccount credentials.

#Kubernetes #Vault #OIDC #WorkloadIdentity
www.tremolo.io/post/short-l...
Short Lived Tokens With Vault Without The Static ServiceAccount
Learn how to securely authenticate Kubernetes workloads with HashiCorp Vault using short-lived tokens instead of static ServiceAccount credentials. This post explains why long-lived ServiceAccount…
www.tremolo.io
January 13, 2026 at 3:24 PM
frytg.digital
i spent way to much time debugging the usage of #GoogleCloud SDKs in #flyio through #WorkloadIdentity.

ended up creating a little binary in #Go that can act as a proxy: www.frytg.digital/blog/2024-11... - maybe it helps someone

#OpenID #OIDC #GCP #golang
Using OpenID Workload Identity Tokens with Fly.io and Google Cloud · Daniel Freytag
How to use OpenID Workload Identity Tokens with Fly.io.
www.frytg.digital
November 20, 2024 at 8:33 PM
whitneylee.com
Henry Avetisyan, Software Engineer at Yahoo and lead maintainer of Athenz, explains how Athenz automates workload identity, issuing every service, container, and AI agent a certificate automatically.

Watch 🌩️Thunder:
https://youtu.be/9XS0B8n180M

#Athenz #WorkloadIdentity #ZeroTrust #CNCF
Henry Avetisyan (in grayscale) on the left and Whitney Lee on the right, both smiling, with a filled lightboard behind them showing handwritten notes and diagrams. Large yellow text in the center reads "Athenz" with "Giving Services an Identity" below it. The 🌩️Thunder logo appears in the top left. Text at the bottom reads "with Henry Avetisyan."
July 5, 2026 at 9:53 PM
whitneylee.com
@volkan.io, Principal Kubernetes Software Engineer at Broadcom, joins me on 🌩️Thunder to explain how SPIFFE gives every Kubernetes workload a verifiable identity without relying on a pre-shared secret.

Watch here:
https://youtu.be/cCHXRzoThsM

#SPIFFE #SPIRE #WorkloadIdentity #CloudNative
Split thumbnail with Volkan Özçelik (glasses, dark hair, mustache, blue collared shirt) on the left and Whitney Lee (long brown hair with a red streak, black hoodie, smiling) on the right. Between them is a black lightboard covered in colorful handwritten notes and diagrams about SPIFFE and SPIRE, with bold yellow overlay text reading "WHAT IS SPIFFE and SPIRE? WORKLOAD IDENTITY EXPLAINED" and "With VOLKAN ÖZÇELIK." The 🌩️Thunder logo (a cloud with a lightning bolt) appears in the top right corner.
August 19, 2026 at 1:40 PM
mazlumtosun.bsky.social
I created a new video on #GoogleCloud to show a real world use case with full CI CD pipelines based on #GithubActions enabling #KeylessAuthentication and #WorkloadIdentityFederation

#GoogleCloud #Security #WorkloadIdentity #github #CICD #Terraform #Docker #CloudDataflow

youtu.be/crCgNijl7ko
CI CD on Github Actions enabling Keyless Authentication and Workload Identity
This video shows a real world use case with CI CD pipelines executed on Github Actions without a long lived Service Account token (Keyless Authentication) an...
youtu.be
August 31, 2023 at 8:29 AM
whitneylee.com
Volkan Özçelik explains what workload authentication looked like before SPIFFE: "We were baking service tokens to the images, which is not the most secure way."

Watch the full 🌩️Thunder episode:
https://youtu.be/cCHXRzoThsM

#SPIFFE #SPIRE #WorkloadIdentity #CloudNative
September 14, 2026 at 6:19 PM
darinor.com
Static API keys are the SSH keys of the agent era, long‑lived, widely copied, seldom rotated, and impossible to scope, creating lateral‑movement risks across hosts and clouds. Workload identity fixes this with short‑lived cryptographic proof of what a workload is. #workloadidentity #aisecurity
August 29, 2026 at 2:05 PM
kindtech.bsky.social
Workload identity matured past long-lived credentials. Short-lived OIDC tokens from CI, Kubernetes and cloud providers replaced static keys, so a leaked credential now costs minutes instead of years. Permissions follow the workload, not the secret. #WorkloadIdentity #CloudSecurity #ZeroTrust
August 20, 2026 at 5:05 AM
whitneylee.com
What do you do when a workload’s certificate gets compromised?

Watch the full 🌩️Thunder episode:
https://youtu.be/9XS0B8n180M

#Athenz #WorkloadIdentity #ZeroTrust #CNCF #mTLS
July 6, 2026 at 10:08 PM
rohankalhans.bsky.social
Access Management is one of the biggest pain points when dealing with K8s(GKE) n using Workload Identity makes it feel like a piece of cake.

Read my blog on Workload Identity in GKE

https://link.medium.com/w7qJLGVu0Ab

#googlecloud #workloadidentity #security #gke #access
link.medium.com
June 28, 2023 at 7:53 PM
uhiiman.bsky.social
#うひーメモ
2023-12-08 00:02:30
EC2上のRubyでWorkloadIdentity連携を用いてBigQueryを呼び出す
#Program
#bigquery
#lifull
#lifulladven
EC2上のRubyでWorkloadIdentity連携を用いてBigQueryを呼び出す
不動産・住宅情報サービスLIFULLHOMESを運営しております株式会社LIFULLでデジタルマーケティング領域を担当しておりますYstgですはじめにこの記事はLIFULLAdven
qiita.com
December 7, 2023 at 3:02 PM
uhiiman.bsky.social
#うひーメモ
2023-12-05 00:14:05
Workload Identity連携を使用してLambdaからスプレッドシートにアクセスする
#Program
#workloadidentity
#awslambda
#icare
Workload Identity連携を使用してLambdaからスプレッドシートにアクセスする
株式会社iCAREのタケですこれはiCAREDevAdventCalendarの日目の記事ですはじめにAWSLambdaを使用してMetabaseBIツールのAPI
qiita.com
December 4, 2023 at 3:14 PM
talk-nerdyto-me.bsky.social
Example: GitHub Actions OIDC with Azure, Azure DevOps Service Connections with Workload Identity Federation. It's more setup, but vastly more secure!
#DevSecOps #CICDSecurity #OIDC #WorkloadIdentity #AzureSecurity #OCISecurity #TalkNerdyToMe
May 30, 2025 at 2:03 PM
cmendibl3.bsky.social
Generally Available: Azure Red Hat OpenShift Managed Identity and Workload Identity #Azure #OpenShift #RedHat #WorkloadIdentity azure.microsoft.com/en-us/updates
Azure updates | Microsoft Azure
Subscribe to Microsoft Azure today for service updates, all in one place. Check out the new Cloud Platform roadmap to see our latest product plans.
azure.microsoft.com
March 29, 2026 at 7:23 AM