spire-federation-lab
Docs for homelabdude/spire-federation-lab: SPIRE on Kubernetes, Entra ID sign-in for an on-prem cluster, and SPIRE → Entra ID workload identity.
SPIRE → Entra ID, step by step Interactive walkthrough: a pod swaps its SPIRE JWT-SVID for an Entra token to read Azure Storage, call kube-apiserver and read Key Vault secrets, plus the ways it's rejected.