Service accounts
Pod identity and the token that comes with it.
In plain terms
A service account is a staff badge for a robot (a pod) rather than a person. By default every pod gets a badge clipped on — even the ones that never need to open a single door.