Which AKS identity feature replaces pod-managed identity (preview) and uses OIDC federation for secure Azure resource access without stored credentials?
- A Service Principal
- B AAD Pod Identity v2
- C Workload Identity (correct answer)
- D Managed Identity with MSI token
Shortcut: Workload Identity (GA) uses OIDC federation between the AKS service account and an Azure managed identity, eliminating stored secrets. It replaces the deprecated AAD Pod Identity.