Issue workload identities from a signing CA.
As pki-admin
Open /spiffe
Fill ns/prod/sa/checkout with "ns/prod/sa/checkout"
Click Mint SVID