https://wolkwacht.nl/tags/workload-identity/ Recent content in Workload Identity on Wolkwacht https://wolkwacht.nl/images/branding/feature-image.png https://wolkwacht.nl/images/branding/feature-image.png Hugo en-us Wed, 21 Oct 2026 00:00:00 +0000 https://wolkwacht.nl/posts/securing-and-scaling-dapr-for-production-on-aks/ Wed, 21 Oct 2026 00:00:00 +0000 https://wolkwacht.nl/posts/securing-and-scaling-dapr-for-production-on-aks/ <p><img alt="Dapr-enabled application pods protected by identity and policy while scaling across AKS nodes" loading="lazy" src="https://wolkwacht.nl/images/2026/dapr-security-scaling-feature.svg"></p> <p>A Dapr-enabled application can work perfectly with one replica and still be unprepared for production. The sidecar may have no resource requests, every application may be able to load every component, a rollout may require capacity the cluster does not have, or an autoscaler may react to application CPU while ignoring a throttled <code>daprd</code> container.</p> <p>Production readiness is therefore not one switch. It is a chain of explicit decisions about identity, authorization, isolation, capacity, rollout behaviour, scaling signals, and control-plane availability.</p>