Migrating AKS workloads from AAD Pod Identity to Entra Workload ID

You're looking at an AKS cluster for a client. Somewhere in it, a pod is authenticating to Azure...