Workload Identity Practices

This document describes industry practices for providing secure identities to workloads in container orchestration, cloud platforms, and other workload platforms. It explains how workloads obtain credentials for external authentication purposes, without managing long-lived secrets directly. It does not take into account the standards work in progress for the WIMSE architecture [WIMSE-ARCH] and other protocols, such as [WIMSE-HTTPSIG].