No explainer written for this spec yet. The summary, relations and documented support below are maintained.
How workloads on container orchestrators and cloud platforms get credentials for external authentication today, without managing long-lived secrets themselves.