Use the Azure Key Vault CSI Driver with Workload Identity to deliver secrets - Secrets are fetched at runtime from Key Vault - No base64 plain Secrets remain in cluster - Workload Identity authenticates successfully to Key Vault