Using Kubernetes's new Bound Service Account Tokens for secure workload identity | Hacker News Reader