Worked on the confidential-containers/cloud-api-adaptor repository to deliver install-time customization of pod labels and service account annotations, enabling seamless integration with cloud workload identity systems. Leveraged Kubernetes, Helm, and YAML to wire new configuration values directly into pod and template rendering, allowing operators to set these parameters during installation rather than relying on manual post-install patches. The implementation introduced empty defaults to ensure backward compatibility, so existing deployments remain unaffected unless new values are specified. This approach streamlined the deployment process and improved security posture by making workload identity integration more robust and maintainable within cloud infrastructure environments.