Skip to main content
OpenID Connect (OIDC) is a widely used standard for authenticating and sharing identities across platforms. CoreWeave AI Object Storage supports OIDC-based Workload Identity Federation, allowing you to authenticate both human users and machine workloads without managing static credentials. OIDC integration follows three common patterns:
  • Human users authenticate through a browser, re-authenticating periodically.
  • Long-lived workloads such as servers and functions run in a cloud provider or Kubernetes cluster that provides an automatically rotated OIDC token.
  • Short-lived jobs such as CI/CD pipelines receive an OIDC token at the start of the job.
For the general setup process that applies to all providers, see Using Workload Identity Federation with OIDC.

​
Provider-specific guides

CKS clusters

Connect CoreWeave Kubernetes Service (CKS) clusters to AI Object Storage with automatic or manual OIDC configuration.

GitHub Actions

Authenticate GitHub Actions workflows to AI Object Storage using GitHub’s OIDC tokens.

Other Kubernetes clusters

Find the OIDC issuer URL for EKS, AKS, and other Kubernetes clusters.
Last modified on August 11, 2026