Managing and updating passwords or secrets is not only tedious, but can also fall into the wrong hands if mistakes are made. Azure counters this with Managed Identities. A service can authenticate itself to other services with a Managed Identity managed by Azure, without a password. But how does this work with Azure Kubernetes Services?

This talk will show how Managed Identities are configured in Azure Kubernetes Services and thus each individual pod runs under a dedicated Identity. As a use case, we will show the authentication of an ASP.NET Core App in AKS against Azure SQL, including staging with dedicated users per stage.