tag
4 posts
Configure AKS workload federation with projected service-account tokens, exact issuer-subject-audience trust, safe webhook rollout, and identity diagnostics.
Operate EKS Pod Identity with scoped IAM roles, SDK credential-chain checks, node agents, cross-account delegation, and a reversible migration plan.
Design GKE workload federation with Kubernetes principals, scoped IAM bindings, metadata-server verification, and a safe migration from service-account keys.
Configure projected Kubernetes ServiceAccount tokens with explicit audiences, short lifetimes, safe rotation, workload federation, and least-privilege boundaries.