diff --git a/.gitignore b/.gitignore
index f887b78b7..3bb208658 100644
--- a/.gitignore
+++ b/.gitignore
@@ -22,6 +22,4 @@ id_rsa*
 kube.conf
 out.env
 infra/**/peer-pods-config.yaml
-infra/**/kustomization.yaml
-infra/**/workload-identity.yaml
 uplosi.conf*
diff --git a/infra/azure-peerpods/main.tf b/infra/azure-peerpods/main.tf
index 5f2cf3f2c..e85106c78 100644
--- a/infra/azure-peerpods/main.tf
+++ b/infra/azure-peerpods/main.tf
@@ -69,14 +69,6 @@ resource "azurerm_role_assignment" "ra_network_contributor" {
   principal_id         = azuread_service_principal.sp.object_id
 }
 
-resource "azuread_application_federated_identity_credential" "federated_credentials" {
-  display_name   = local.name
-  application_id = azuread_application.app.id
-  issuer         = azurerm_kubernetes_cluster.cluster.oidc_issuer_url
-  subject        = "system:serviceaccount:confidential-containers-system:cloud-api-adaptor"
-  audiences      = ["api://AzureADTokenExchange"]
-}
-
 resource "azuread_application_password" "cred" {
   application_id = azuread_application.app.id
 }
@@ -128,70 +120,6 @@ resource "local_file" "kubeconfig" {
   content    = azurerm_kubernetes_cluster.cluster.kube_config_raw
 }
 
-resource "local_file" "workload_identity" {
-  filename        = "./workload-identity.yaml"
-  file_permission = "0777"
-  content         = <<EOF
-apiVersion: apps/v1
-kind: DaemonSet
-metadata:
-  name: cloud-api-adaptor-daemonset
-  namespace: confidential-containers-system
-spec:
-  template:
-    metadata:
-      labels:
-        azure.workload.identity/use: "true"
----
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: cloud-api-adaptor
-  namespace: confidential-containers-system
-  annotations:
-    azure.workload.identity/client-id: ${azuread_application.app.client_id}
-EOF
-}
-
-resource "local_file" "kustomization" {
-  filename        = "./kustomization.yaml"
-  file_permission = "0777"
-  content         = <<EOF
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-bases:
-- ../../yamls
-images:
-- name: cloud-api-adaptor
-  newName: quay.io/confidential-containers/cloud-api-adaptor
-  newTag: v0.9.0-amd64
-generatorOptions:
-  disableNameSuffixHash: true
-configMapGenerator:
-- name: peer-pods-cm
-  namespace: confidential-containers-system
-  literals:
-  - CLOUD_PROVIDER=azure
-  - AZURE_SUBSCRIPTION_ID=${data.azurerm_subscription.current.subscription_id}
-  - AZURE_REGION=${data.azurerm_resource_group.rg.location}
-  - AZURE_INSTANCE_SIZE=Standard_DC2as_v5
-  - AZURE_RESOURCE_GROUP=${data.azurerm_resource_group.rg.name}
-  - AZURE_SUBNET_ID=${one(azurerm_virtual_network.main.subnet.*.id)}
-  - AZURE_IMAGE_ID=${var.image_id}
-  - DISABLECVM=false
-secretGenerator:
-- name: peer-pods-secret
-  namespace: confidential-containers-system
-- name: ssh-key-secret
-  namespace: confidential-containers-system
-  files:
-  - id_rsa.pub
-patchesStrategicMerge:
-- workload-identity.yaml
-EOF
-}
-
-
 data "local_file" "id_rsa" {
   filename = "id_rsa.pub"
 }