Non-human identities in Kubernetes are not abstract. They are service accounts, workloads, automated jobs, machine-to-machine calls. They authenticate, authorize, and carry privileges with zero interaction from a person. When these identities hit an Ingress, they’re subject to the same routing, TLS termination, and policy enforcement as human clients—but