# Secure Workload Identity with SPIRE and OIDC: A Guide for Kubernetes and Istio Users

DevFeed: [Secure Workload Identity with SPIRE and OIDC: A Guide for Kubernetes and Istio Users](<https://devfeed.tech/articles/secure-workload-identity-with-spire-and-oidc-a-guide-for-kubernetes-and-istio-users-29989.md>)

Original publisher: [Read original article](<https://engineering.indeedblog.com/blog/2024/07/workload-identity-with-spire-oidc-for-k8s-istio/>)

Author: Nikhil Arora

Published: 2024-07-03T15:52:26Z

Content type: tutorial

Language: en

Sources: [Indeed](<https://devfeed.tech/sources/indeed.md>)

Topics: [SPIRE](<https://devfeed.tech/topics/spire.md>), [istio](<https://devfeed.tech/topics/istio.md>), [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>), [OpenID connect (OIDC)](<https://devfeed.tech/topics/oidc.md>), [Zero Trust](<https://devfeed.tech/topics/zero-trust.md>), [AWS Identity and Access Management (IAM)](<https://devfeed.tech/topics/aws-identity-and-access-management-iam.md>), [Architecture & Design](<https://devfeed.tech/topics/architecture-design.md>)

Tags: [authentication](<https://devfeed.tech/tags/authentication.md>), [authorization](<https://devfeed.tech/tags/authorization.md>), [aws-iam](<https://devfeed.tech/tags/aws-iam.md>), [credentials](<https://devfeed.tech/tags/credentials.md>), [guide](<https://devfeed.tech/tags/guide.md>), [identity](<https://devfeed.tech/tags/identity.md>), [istio](<https://devfeed.tech/tags/istio.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [oidc](<https://devfeed.tech/tags/oidc.md>), [secrets](<https://devfeed.tech/tags/secrets.md>), [spire](<https://devfeed.tech/tags/spire.md>), [unsorted](<https://devfeed.tech/tags/unsorted.md>), [zero-trust](<https://devfeed.tech/tags/zero-trust.md>)

## AI overview

This guide describes Indeed's approach to building a workload identity platform for Kubernetes and Istio using SPIRE and OIDC, with identities and access controls rooted in Zero Trust principles. It discusses credential risks, design choices, and implementation challenges for heterogeneous first-party and third-party workloads.

## Source excerpt

Goal This blog is for engineering teams, architects, and leaders responsible for defining and implementing a workload identity platform and access controls rooted in Zero Trust principles to mitigate the risks from compromised services. It is relevant for companies using Kubernetes to manage workloads, using Istio for service mesh, and aiming to define identities in [...]