Cloud agnostic workload identity

1. An apparatus, comprising:

a processing device; and

a memory device coupled to the processing device, the memory device having instructions stored thereon that, in response to execution by the processing device, cause the processing device to:

create a cloud native workload identity (CNWI) and assign the CNWI to an instance of a workload to be instantiated in a cloud computing environment of a cloud service provider (CSP);

receive a request from the instance of the workload to create a cloud agnostic workload identity (CAWI) based on the CNWI;

validate the request to create the CAWI by:

requesting metadata associated with the CNWI from a workload repository, wherein the metadata associated with the CNWI comprises data identifying the CSP of the instance of the workload; and

verifying validity of the CNWI with the metadata from the workload repository by verifying that the CNWI of the instance of the workload is associated with the CSP;

translate the CNWI into a CAWI and assign the CAWI to the workload instance; and

use the CAWI by the workload instance to communicate with other workloads in the CSP or other CSPs.

2. The apparatus of claim 1 , comprising instructions to create the CNWI at build time for running workloads on the cloud computing environment of the CSP.

3. The apparatus of claim 1 , comprising instructions to create computing infrastructure in the cloud computing environment of the CSP for the workload instance.

4. The apparatus of claim 3 , comprising instructions to validate the computing infrastructure to be created by verifying metadata about the workload to be instantiated stored in a workload repository.

5. The apparatus of claim 1 , wherein the CNWI comprises at least one of a cryptographic key or secret used to obtain a session token.

6. The apparatus of claim 5 , wherein the CNWI is specific to the CSP and cannot be used in a cloud computing environment of another CSP, and wherein the request identifies the CSP.

7. The apparatus of claim 1 , wherein the CAWI comprises a transport layer security (TLS) certificate assigned to the workload instance to communicate securely with other workload instances.

8. The apparatus of claim 1 , wherein the CAWI is not specific to the CSP and can be used in a cloud computing environment of another CSP.

9. The apparatus of claim 1 , comprising instructions to translate the CNWI into the CAWI at run time for the workload instance to communicate securely with other workload instances.

10. A computer-implemented method, comprising:

creating a cloud native workload identity (CNWI) and assigning the CNWI to an instance of a workload to be instantiated in a cloud computing environment of a cloud service provider (CSP);

receiving a request from the instance of the workload to create a cloud agnostic workload identity (CAWI) based on the CNWI;

validating the request to create the CAWI by:

requesting metadata associated with the CNWI from a workload repository, wherein the metadata associated with the CNWI comprises data identifying the CSP of the instance of the workload; and

verifying validity of the CNWI with the metadata from the workload repository by verifying that the CNWI of the instance of the workload is associated with the CSP;

translating the CNWI into the CAWI and assigning the CAWI to the workload instance; and

using the CAWI by the workload instance to communicate with other workloads in the CSP or other CSPs.

11. The computer-implemented method of claim 10 , comprising creating the CNWI at build time for running workloads on the cloud computing environment of the CSP.

12. The computer-implemented method of claim 10 , comprising creating computing infrastructure in the cloud computing environment of the CSP for the workload instance.

13. The computer-implemented method of claim 12 , comprising validating the computing infrastructure to be created by verifying metadata about the workload to be instantiated stored in a workload repository.

14. The computer-implemented method of claim 10 , wherein the CNWI comprises at least one of a cryptographic key or secret used to obtain a session token.

15. The computer-implemented method of claim 14 , wherein the CNWI is specific to the CSP and cannot be used in a cloud computing environment of another CSP, and wherein the request identifies the CSP.

16. The computer-implemented method of claim 10 , wherein the CAWI comprises a transport layer security (TLS) certificate assigned to the workload instance to communicate securely with other workload instances.

17. The computer-implemented method of claim 10 , wherein the CAWI is not specific to the CSP and can be used in a cloud computing environment of another CSP.

18. The computer-implemented method of claim 10 , comprising translating the CNWI into the CAWI at run time for the workload instance to communicate securely with other workload instances.

19. At least one tangible non-transitory machine-readable medium comprising a plurality of instructions that in response to being executed by a processor in a computing system cause the processor to:

create a cloud native workload identity (CNWI) and assign the CNWI to an instance of a workload to be instantiated in a cloud computing environment of a cloud service provider (CSP);

receive a request from the instance of the workload to create a cloud agnostic workload identity (CAWI) based on the CNWI;

validate the request to create the CAWI by:

requesting metadata associated with the CNWI from a workload repository, wherein the metadata associated with the CNWI comprises data identifying the CSP of the instance of the workload; and

verifying validity of the CNWI with the metadata from the workload repository by verifying that the CNWI of the instance of the workload is associated with the CSP;

translate the CNWI into the CAWI and assign the CAWI to the workload instance; and

use the CAWI by the workload instance to communicate with other workloads in the CSP or other CSPs.

20. The at least one tangible non-transitory machine-readable medium of claim 19 , comprising instructions to create the CNWI at build time for running workloads on the cloud computing environment of the CSP.

21. The at least one tangible non-transitory machine-readable medium of claim 19 , comprising instructions to create computing infrastructure in the cloud computing environment of the CSP for the workload instance.

22. The at least one tangible non-transitory machine-readable medium of claim 21 , comprising instructions to validate the computing infrastructure to be created by verifying metadata about the workload to be instantiated stored in a workload repository.