An AKS cluster must access Azure Key Vault secrets from pods without storing credentials. Which solution should you use?
- A Mount secrets as ConfigMaps
- B Azure Key Vault Provider for Secrets Store CSI Driver (correct answer)
- C Store secrets in Kubernetes Secrets manually
- D Use environment variables with az keyvault secret show
Shortcut: The Secrets Store CSI Driver with the Azure Key Vault Provider mounts secrets, keys, and certificates from Key Vault as files in pods, using workload identity or managed identity.