This is very important: I see you are using managed identity. We cant have an AKS workshop where managed identity is used or the attendees will question it. We need to use workload identity which went GA this week: Tutorial - Use a workload identity with an application on Azure Kubernetes Service (AKS) - Azure Kubernetes Service | Microsoft Learn