Skip to main content
Nais Docs
  • Home
  • Explanations
    • What is Nais?
    • What is a team?
    • Under the hood
  • Tutorials
    • Hello Nais
  • Workloads
    • 💡 Explanations
      • The runtime environment
      • Good practices
      • Image repository
      • The workload image
      • Zero Trust
    • 🎯 How-To
      • Set up access policies
      • Communicate with other workloads
      • Reduce costs
      • Debugging workloads
      • Disable read-only file system
      • Overriding user and group that runs container process
      • Troubleshooting
      • Upload third-party image to image repository
    • 📚 Reference
      • Access policy reference
      • Container security
      • Default workload variables
      • Environments
      • Validation and autocompletion in editors
    • Application
      • 💡 Explanations
        • Exposing your application
      • 🎯 How-To
        • Create application
        • Delete your application
        • Expose an application
        • Redirect a client
      • 📚 Reference
        • Nais Application example YAML
        • Nais Application reference
        • Automatic Scaling
        • Ingress reference
    • Nais job
      • 🎯 How-To
        • Create job
        • Delete your job
      • 📚 Reference
        • Nais Job example YAML
        • Nais Job reference
  • Build and deploy
    • 🎯 How-To
      • Build and deploy with GitHub Actions
      • Dependabot with auto-merge
      • Templating
      • Using the image outside of Nais
    • 📚 Reference
      • Deploy action configuration
  • Auth
    • 💡 Explanations
    • 🎯 How-To
      • Log in users
    • 📚 Reference
    • Workload Identity
  • Observability
    • 🎯 How-To
      • Get started with auto-instrumentation
    • 📚 Reference
      • OpenTelemetry Auto-Instrumentation Configuration
      • Observability Glossary
    • Frontend
      • 🎯 How-To
        • Custom frontend metrics
        • Set up Faro
        • Set up Faro with Next.js
        • Sourcemap deobfuscation
        • Frontend-to-backend trace propagation
      • 📚 Reference
        • Auto-configuration reference
        • Frontend observability troubleshooting
    • Tracing
      • 🎯 How-To
        • Avoid false errors from expected 4xx responses
        • Trace context propagation
        • Correlate traces and logs
        • Get started with Grafana Tempo
      • 📚 Reference
        • Span Metrics
        • OpenTelemetry Trace Semantic Conventions
        • TraceQL Reference
    • Alerting
      • 🎯 How-To
        • Create alert in Grafana
        • Customize Prometheus alerts
        • Create alert with Prometheus
      • 📚 Reference
        • Prometheus Alerting Rule Reference
    • Logging
      • 🎯 How-To
        • Disable persistent application logs
        • View logs from the command line
        • Adding logs to your Grafana dashboard
        • Metrics and alerts for logs
        • Get started with Grafana Loki
        • Get started with Team Logs
      • 📚 Reference
        • Log Destinations
        • LogQL Reference
        • Loki Labels Reference
        • Loki Metrics Reference
    • Metrics
      • 🎯 How-To
        • Create a dashboard in Grafana
        • Expose metrics from your application
        • Push metrics to Prometheus
      • 📚 Reference
        • Global Metrics
        • Grafana Glossary
        • Metrics reference
        • OpenTelemetry Metrics
        • PromQL Reference
    • Tutorials
      • Getting Started with Observability in Nais
      • Adding Custom Spans and Metrics with OpenTelemetry
  • Persistence
    • 💡 Explanations
      • Responsibilities
    • BigQuery
      • 🎯 How-To
        • Using BigQuery from your application
        • Create an instance of BigQuery
    • CloudSQL
      • 💡 Explanations
        • Cloud SQL credentials
        • Cloud SQL Instance
        • Cloud SQL Proxy
        • Cloud SQL System Users and Roles
        • Grants and privileges
        • Migrate to new instance
      • 🎯 How-To
        • Additional users
        • Certification sync issues
        • Change the tier of your database instance
        • Connect to a cloned database
        • Postgres database metrics
        • Debugging
        • Deleting the database
        • Enable audit logging
        • Failing to assign private IP to an existing Cloud SQL instance
        • Migrate to new instance
        • Workaround for password synchronization issues
        • Personal database access
        • Reset database credentials
        • Upgrade major version
      • 📚 Reference
    • Buckets
      • 🎯 How-To
        • Create a bucket
        • Deleting a bucket
      • 📚 Reference
    • Kafka
      • 💡 Explanations
        • Working with Kafka Offsets
        • Tiered storage
      • 🎯 How-To
        • Accessing topics from an application
        • Create a Kafka topic
        • Delete Kafka topic and data
        • Using Kafka Streams with internal topics
        • Manage access
        • Remove access to topics from an application
        • Avro and schema
        • Get temporary Kafka credentials
        • How to turn on Tiered Storage for your Kafka topic
        • Troubleshooting
      • 📚 Reference
        • Environment variables for Kafka
        • Nais Topic example YAML
        • Nais Topic reference
        • Kafka metrics
        • Kafka Pools
    • OpenSearch
      • 🎯 How-To
        • Create OpenSearch
        • Use OpenSearch in your workload
        • Delete OpenSearch
        • Create an OpenSearch instance (legacy)
        • Get access to the dashboard
        • Migrate OpenSearch management to Nais Console
        • Get temporary OpenSearch credentials
        • Upgrade major version
      • 📚 Reference
    • PostgreSQL
      • 💡 Explanations
        • Postgres cluster
      • 🎯 How-To
        • Connect from laptop
        • Postgres database metrics
        • Debugging
        • Deleting the database
        • Upgrade major version
      • 📚 Reference
        • Nais Postgres example YAML
        • Nais Postgres reference
    • Valkey
      • 🎯 How-To
        • Create Valkey
        • Use Valkey in your workload
        • Delete Valkey
        • Create a Valkey instance explicitly (legacy)
        • Migrate Valkey management to Nais Console
      • 📚 Reference
  • Other services
    • CDN
      • 🎯 How-To
        • Upload assets to the CDN
        • Manage CDN assets
      • 📚 Reference
        • CDN Upload Action
    • Config
      • 🎯 How-To
        • Create and manage configs in Console
        • Use a config in your workload
      • 📚 Reference
    • Secrets
      • 🎯 How-To
        • Create and manage secrets in Console
        • Use a secret in your workload
        • Advanced: Secrets with binary data
      • 📚 Reference
    • Vulnerabilities
      • 🎯 How-To
        • Alert on vulnerabilities
        • Generate SBOM
      • 📚 Reference
    • Feature Toggling
    • Anti-Virus Scanning
    • Leader Election
      • 🎯 How-To
        • Enable Leader Election
  • Operate
    • 💡 Explanations
      • Labels
    • 🎯 How-To
      • Setup command line access
      • Create a Nais team
      • Add labels to your resources
    • 📚 Reference
      • Label reference
    • Nais Console
      • Nais API
    • CLI
    • naisdevice
      • 🎯 How-To
        • Install naisdevice
        • Troubleshooting naisdevice
        • Uninstall naisdevice
        • Update naisdevice
  • Tags
All tags

workload-identity

1 page

  • Workload Identity

    All workloads on Nais have their own identities. In practice, this is a Kubernetes Service Account. Workloads on Nais are automatically injected with a short-lived OpenID Connect (OIDC) identity…