https://pineapplesupdate.com/secure-the-next-wave-of-workload-identity-in-cloud/