Add blog post about Workload Identity

[vpnachev]

How to categorize this PR?

/kind enhancement
/area security ipcei
/ipcei workload-identity

What this PR does / why we need it:
Add blog about Workload Identity

The Workload Identity story is toward its completion, with this blog post we want to share with the Gardener end-users how they can benefit from it.

Which issue(s) this PR fixes:
Part of gardener/gardener#9586

Special notes for your reviewer:

/cc @dimityrmirchev @JordanJordanov

[netlify]

❌ Deploy Preview for gardener-docs failed.

Name	Link
🔨 Latest commit	113c21f
🔍 Latest deploy log	https://app.netlify.com/projects/gardener-docs/deploys/69f9fa51393bd50008934c2d

[coderabbitai]

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters (3)

• website/blog/2026/05/05-05-workload-identity-eliminate-static-credentials-for-your-gardener-shoot-clusters.md is excluded by !website/**
• website/blog/2026/05/_index.md is excluded by !website/**
• website/blog/2026/05/images/workload-identity-overview.png is excluded by !**/*.png, !website/**

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yml

Review profile: CHILL

Plan: Pro

Run ID: 2b24002f-3110-485a-8f33-4e8ec2d4bf2e

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

Tip

💬 Introducing Slack Agent: The best way for teams to turn conversations into code.

Slack Agent is built on CodeRabbit's deep understanding of your code, so your team can collaborate across the entire SDLC without losing context.

• Generate code and open pull requests
• Plan features and break down work
• Investigate incidents and troubleshoot customer tickets together
• Automate recurring tasks and respond to alerts with triggers
• Summarize progress and report instantly

Built for teams:

• Shared memory across your entire org—no repeating context
• Per-thread sandboxes to safely plan and execute work
• Governance built-in—scoped access, auditability, and budget controls

One agent for your entire SDLC. Right inside Slack.

👉 Get started

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[gardener-prow]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign kostov6 for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[n-boshnakov]

Thank you for the blog, @vpnachev! Could you please go over the Gardener specific terms in it and make sure that they follow the glossary?

As an example, Garden cluster should be garden cluster.