Workload identity federation

This knowledge base article helps Security Engineer teams apply identity-first controls, least privilege, and policy evidence using Workload identity federation in Kubernetes environments. It emphasizes make exceptions time-bound and reviewable and provides implementation decisions that can be reviewed without relying on vendor or customer claims.