Thank you for reaching out to the Microsoft Q&A platform.
For your follow up question, if you are talking about the managed identities, when you deploy an AKS cluster, a system-assigned managed identity is automatically created, and it's managed by the Azure platform, so it doesn't require you to provision or rotate any secrets. For more information, see managed identities for Azure resources.
Reference https://learn.microsoft.com/en-us/azure/aks/use-managed-identity
If an answer has been helpful, please consider accepting the answer to help increase visibility of this question for other members of the Microsoft Q&A community. If not, please let us know what is still needed in the comments so the question can be answered. Thank you for helping to improve Microsoft Q&A!