https://deploy-preview-3174--ornate-narwhal-088216.netlify.app/chainguard/administration/assumable-ids/identity-examples/Recent content in Identity Examples onHugo -- gohugo.ioen-USThu, 13 Apr 2023 08:49:15 +0000https://deploy-preview-3174--ornate-narwhal-088216.netlify.app/chainguard/administration/assumable-ids/identity-examples/github-identity/Thu, 04 May 2023 08:48:45 +0000https://deploy-preview-3174--ornate-narwhal-088216.netlify.app/chainguard/administration/assumable-ids/identity-examples/github-identity/Chainguard’s assumable identities are identities that can be assumed by external applications or workflows in order to perform certain tasks that would otherwise have to be done by a human. For instance, an assumable identity can be used to allow a GitHub Actions workflow to pull images from cgr.dev without a static pull token. This tutorial outlines how to create an identity, and then create a GitHub Actions workflow that will assume the identity to interact with Chainguard resources.https://deploy-preview-3174--ornate-narwhal-088216.netlify.app/chainguard/administration/assumable-ids/identity-examples/gitlab-identity/Wed, 28 Jun 2023 08:48:45 +0000https://deploy-preview-3174--ornate-narwhal-088216.netlify.app/chainguard/administration/assumable-ids/identity-examples/gitlab-identity/Chainguard’s assumable identities are identities that can be assumed by external applications or workflows in order to perform certain tasks that would otherwise have to be done by a human. This procedural tutorial outlines two methods for how to create a Chainguard identity: chainctl and Terraform. It then walks through how to create a GitLab CI/CD pipeline that will assume the identity to interact with Chainguard resources. Prerequisites To complete this guide, you will need the following.https://deploy-preview-3174--ornate-narwhal-088216.netlify.app/chainguard/administration/assumable-ids/identity-examples/aws-identity-oidc/Mon, 05 Jan 2026 09:00:00 +0000https://deploy-preview-3174--ornate-narwhal-088216.netlify.app/chainguard/administration/assumable-ids/identity-examples/aws-identity-oidc/Chainguard’s assumable identities are identities that can be assumed by external applications or workflows in order to access Chainguard resources or perform certain actions. This tutorial outlines how to create a Chainguard identity that can be assumed by an AWS IAM user or IAM role using AWS IAM outbound identity federation. Prerequisites To complete this guide, outbound identity federation must be enabled for your AWS account. Follow the official AWS documentation to set this up.https://deploy-preview-3174--ornate-narwhal-088216.netlify.app/chainguard/administration/assumable-ids/identity-examples/aws-identity/Fri, 28 Nov 2025 16:00:00 +0000https://deploy-preview-3174--ornate-narwhal-088216.netlify.app/chainguard/administration/assumable-ids/identity-examples/aws-identity/Note: This page describes a custom implementation of assumable identities for AWS that was developed before AWS natively supported issuing OIDC tokens with IAM outbound identity federation. If possible, you should follow the instructions on this page instead. Chainguard’s assumable identities are identities that can be assumed by external applications or workflows in order to access Chainguard resources or perform certain actions. This tutorial outlines how to create a Chainguard identity that can be assumed by an AWS user or IAM role and used to authorize requests from AWS services and workloads hosted on platforms like EC2, ECS, Lambda, and EKS.https://deploy-preview-3174--ornate-narwhal-088216.netlify.app/chainguard/administration/assumable-ids/identity-examples/kubernetes-identity/Thu, 07 Aug 2025 13:00:00 +0000https://deploy-preview-3174--ornate-narwhal-088216.netlify.app/chainguard/administration/assumable-ids/identity-examples/kubernetes-identity/Chainguard’s assumable identities are identities that can be assumed by external applications or workflows in order to perform certain tasks that would otherwise have to be done by a human. This procedural tutorial outlines how to create an identity that can be assumed by a Kubernetes pod and then used to interact with the Chainguard API. Prerequisites To complete this guide, you will need the following. chainctl — the Chainguard command line interface tool — installed on your local machine.https://deploy-preview-3174--ornate-narwhal-088216.netlify.app/chainguard/administration/assumable-ids/identity-examples/buildkite-identity/Wed, 17 May 2023 08:48:45 +0000https://deploy-preview-3174--ornate-narwhal-088216.netlify.app/chainguard/administration/assumable-ids/identity-examples/buildkite-identity/Chainguard’s assumable identities are identities that can be assumed by external applications or workflows in order to perform certain tasks that would otherwise have to be done by a human. This tutorial outlines how to create an identity using Terraform, and then how to update a Buildkite pipeline so that it can assume the identity and interact with Chainguard resources. Prerequisites To complete this guide, you must have the following in place:https://deploy-preview-3174--ornate-narwhal-088216.netlify.app/chainguard/administration/assumable-ids/identity-examples/bitbucket-identity/Wed, 17 May 2023 08:48:45 +0000https://deploy-preview-3174--ornate-narwhal-088216.netlify.app/chainguard/administration/assumable-ids/identity-examples/bitbucket-identity/Chainguard’s assumable identities are identities that can be assumed by external applications or workflows in order to perform certain tasks that would otherwise have to be done by a human. This procedural tutorial outlines how to create an identity using Terraform, and then how to update a Bitbucket pipeline so that it can assume the identity and interact with Chainguard resources. Prerequisites To complete this guide, you will need the following.https://deploy-preview-3174--ornate-narwhal-088216.netlify.app/chainguard/administration/assumable-ids/identity-examples/jenkins-chainctl/Sun, 07 Sep 2025 08:48:45 +0000https://deploy-preview-3174--ornate-narwhal-088216.netlify.app/chainguard/administration/assumable-ids/identity-examples/jenkins-chainctl/Jenkins is an open source automation server that supports building, deploying, and automating projects. This guide explains how to use chainctl to create an assumable identity and configure Jenkins to use that identity to authenticate to Chainguard. To accomplish this, we will create an OIDC token credential in Jenkins and then a matching Chainguard identity that uses the Jenkins OIDC URL and put the process into an example Jenkins build pipeline.https://deploy-preview-3174--ornate-narwhal-088216.netlify.app/chainguard/administration/assumable-ids/identity-examples/jenkins-terraform/Sun, 07 Sep 2025 08:48:45 +0000https://deploy-preview-3174--ornate-narwhal-088216.netlify.app/chainguard/administration/assumable-ids/identity-examples/jenkins-terraform/Chainguard’s assumable identities are identities that can be assumed by external applications or workflows in order to perform certain tasks that would otherwise have to be done by a human. This procedural tutorial outlines how to create an identity using Terraform, and then how to update a Jenkins pipeline so that it can assume the identity and interact with Chainguard resources. If you would like to follow this guide using chainctl, Chainguard’s command line tool, you can review Use chainctl to Create an Assumable Identity for a Jenkins Pipeline.https://deploy-preview-3174--ornate-narwhal-088216.netlify.app/chainguard/administration/assumable-ids/identity-examples/keycloak-identity/Tue, 26 Mar 2024 08:48:45 +0000https://deploy-preview-3174--ornate-narwhal-088216.netlify.app/chainguard/administration/assumable-ids/identity-examples/keycloak-identity/Chainguard’s assumable identities are identities that can be assumed by external applications or workflows in order to perform certain tasks that would otherwise have to be done by a human. This procedural tutorial outlines how to create an identity using Terraform, and then assume the identity with the CLI to interact with Chainguard resources. Prerequisites To complete this guide, you will need the following. terraform installed on your local machine. Terraform is an open-source Infrastructure as Code tool which this guide will use to create various cloud resources.