s the format “spiffe://&lt;<em>domain</em>&gt;/ns/&lt;<em>namespace</em>&gt;/sa/&lt;<em>serviceaccount</em>&gt;”.<ul><li><em>domain</em> is currently <em>cluster.local</em>. We will support customization of domain in the near future.</li><li><em>namespace</em> is the namespace of the Kubernetes service account.</li><li><em>serviceaccount</em> is the Kubernetes service account name.</li></ul></li><li><p>A service account is <strong>the identity (or role) a workload runs as</strong>, which represents that