Author builds Myceliam Kubernetes operator for AWS and GCP federation

The author built Myceliam, a Kubernetes operator designed to simplify workload identity federation across AWS and GCP by continuously reconciling Kubernetes ServiceAccounts with external identity providers like Keycloak, Auth0, and SPIRE. The operator manages the setup and drift of cloud IAM OIDC providers, trust policies, and workload identity pools without handling the workload's actual cloud credentials. The design addresses configuration complexities and common failure modes such as token audience mismatches and trust-policy size limits. Open article →