Build an MCP Server in Go (Part 3): How IRSA and EKS Pod Identity Actually Work

Everything the MCP server could check through Part 2 lives inside the cluster. But "my pod can't reach S3" is very often not a Kubernetes problem at all, it's a workload identity problem, and that ide