workload identity
termcloudsecurity
Workloads proving who they are through the platform itself - short-lived, automatically issued credentials instead of long-lived secrets in files.
The end state of 'no keys to steal': the platform vouches for the pod, the pod never holds a password.