Skip to content

Document the generalised library: quickstarts, options reference, migration, setup guide #12

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
neotrow wants to merge 6 commits into from
Open

Document the generalised library: quickstarts, options reference, migration, setup guide #12

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
8b85d1e
Document the resource-first workload identity model
neotrow Sep 18, 2026
e60e306
Docs: state when an unrecognised Provider fails; drop the AKS claim
neotrow Sep 18, 2026
4046946
Docs: adapter must wrap the matching provider; local-dev override sti…
neotrow Sep 18, 2026
601ccde
Docs: server identity prerequisite for CREATE USER; audit only contai…
neotrow Sep 18, 2026
161cd09
Docs: limit the substitution claim to the public interfaces; point at…
neotrow Sep 18, 2026
eddfae1
Docs: describe how the Azure SDK obtains tokens through the credential
neotrow Sep 18, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 5 additions & 0 deletions .changeset/workload-identity-docs.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,5 @@
---
"@neolution-ch/csag-workload-identity": patch
---

Document the resource-first model. The package README explains how each resource obtains its token from a managed identity or through Google workload identity federation, and carries two complete quickstarts (Azure SQL from Google Cloud Run; Azure SQL and Blob Storage from Azure App Service with a system- or user-assigned managed identity, including a `BlobServiceClient` built on `WorkloadIdentityTokenCredential`), a reference of every configuration key for both providers, and a migration section from `Neolution.AzureSqlFederatedIdentity` with the before/after configuration and the `AddWorkloadIdentity` rename. The cloud setup guide is restructured around the choice between an Azure managed identity and Google Cloud to Azure federation, describes both holders of the federated credential (app registration or user-assigned managed identity), the Azure SQL and Blob Storage grants, the new configuration keys, and Microsoft Entra-only authentication.
Loading
Loading