Category: Cloud Native Security

Hi, In this article, I will show you how you can update the service principals of your AKS cluster. Check the expiration of your service principal: SP_ID=$(az aks show –resource-group…

Hi! Today when you need to access a private cluster, you must do so within the cluster virtual network or a peered network or client machine. This usually requires your…

Hi! Kubelogin is a client-go credential plugin that implements Azure AD authentication. Kubernetes and its CLI, kubectl, are written in Go and client-go is a package or library that allows…

Hi, In this article, I will show you how you can create an SSH connection to an AKS node, use kubectl debug to run a privileged container on your node.…

Hi, The Federal Information Processing Standard (FIPS) 140-2 is a US government standard that defines minimum security requirements for cryptographic modules in information technology products and systems. AKS allows you…

Hi, When deploying an AKS Cluster, local accounts are enabled by default. Even when enabling RBAC or Azure Active Directory integration, –admin access still exists, essentially as a non-auditable backdoor…