github.com/Azure/aad-pod-identity@v1.8.17/website/content/en/docs/Concepts/mic.md (about)

     1  ---
     2  title: "Managed Identity Controller (MIC)"
     3  linkTitle: "Managed Identity Controller (MIC)"
     4  weight: 5
     5  description: >
     6    A Kubernetes controller that watches for changes to pods, `AzureIdentity` and `AzureIdentityBindings` through the Kubernetes API Server. When it detects a relevant change, the MIC adds or deletes `AzureAssignedIdentity` as needed.
     7  ---
     8  
     9  Specifically, when a pod is scheduled, the MIC assigns the identity on Azure to the underlying VM/VMSS during the creation phase. When all pods using the identity are deleted, it removes the identity from the underlying VM/VMSS on Azure. The MIC takes similar actions when `AzureIdentity` or `AzureIdentityBinding` are created or deleted.