An AKS cluster must mount Key Vault secrets as files in pods. Which solution enables this without code changes?
- A Init container with az keyvault secret show
- B Secrets Store CSI Driver with Azure Key Vault Provider (correct answer)
- C Custom DaemonSet pulling secrets
- D Kubernetes External Secrets operator only
Shortcut: The Secrets Store CSI Driver with the AKS Key Vault add-on mounts secrets, keys, and certificates from Key Vault as files or Kubernetes secrets, using workload identity for authentication.