Group Managed Service Accounts (GMSA) is a secure mechanism to provide Active Directory authentication mechanism to Kubernetes workloads on Windows. This is done without having to use machine accounts and by joining your AKS nodes to an Active Directory.
Learn more: https://aka.ms/aks/gmsa-ga