Skip to main content

Codefresh Secretless Authentication

Codefresh supports OIDC authentication for secretless deployments to cloud providers and Kubernetes clusters.

Overview​

Codefresh's OIDC support enables pipelines to authenticate without storing credentials in the platform. This provides:

  • No Stored Credentials: OIDC tokens replace Codefresh secrets
  • Cloud Provider Integration: AWS, GCP, Azure authentication
  • GitOps Support: Secretless Argo CD and GitOps workflows
  • Enhanced Security: Automatic credential rotation

Key Capabilities​

  • OIDC token generation from pipelines
  • Integration with cloud provider OIDC endpoints
  • Kubernetes cluster authentication
  • Pipeline and project identity

Contributing​

This page is a placeholder. We need your help to create comprehensive documentation!

What we need:

  • Complete setup guide for Codefresh OIDC
  • codefresh.yml pipeline examples
  • AWS, GCP, Azure provider configuration
  • Kubernetes cluster integration with OIDC
  • GitOps workflow setup
  • Migration from shared configuration
  • Troubleshooting guide
  • Integration guides (e.g., codefresh-to-aws, codefresh-to-gke)

How to contribute:

Resources​