Hardening Archives - Pixel Robots. https://pixelrobots.co.uk/category/hardening/ A blog about Azure Kubernetes Service (AKS) and more... Tue, 12 Aug 2025 12:53:22 +0000 en-GB hourly 1 https://wordpress.org/?v=6.9.4 https://pixelrobots.co.uk/wp-content/uploads/2018/09/cropped-logohead-32x32.png Hardening Archives - Pixel Robots. https://pixelrobots.co.uk/category/hardening/ 32 32 Connecting to a Private AKS Cluster with Azure Bastion – No Jump Box Needed! https://pixelrobots.co.uk/2025/08/connecting-to-a-private-aks-cluster-with-azure-bastion-no-jump-box-needed/?utm_source=rss&utm_medium=rss&utm_campaign=connecting-to-a-private-aks-cluster-with-azure-bastion-no-jump-box-needed https://pixelrobots.co.uk/2025/08/connecting-to-a-private-aks-cluster-with-azure-bastion-no-jump-box-needed/#comments Tue, 12 Aug 2025 09:30:00 +0000 https://pixelrobots.co.uk/?p=40233 Reading Time: 3 minutesIf you have been following me for a while, you will know I am a big fan of Private AKS clusters. Keeping your API server off the public internet is one of the easiest wins for improving cluster security. The problem?Connecting to them has never been that smooth. With a Read more

The post Connecting to a Private AKS Cluster with Azure Bastion – No Jump Box Needed! appeared first on Pixel Robots..

]]> https://pixelrobots.co.uk/2025/08/connecting-to-a-private-aks-cluster-with-azure-bastion-no-jump-box-needed/feed/ 2 https://pixelrobots.co.uk/wp-content/uploads/2025/08/thumbnail-360-×-240-px-40.png Manage AKS API Server Access Easily with Service Tags (Preview) https://pixelrobots.co.uk/2024/08/manage-aks-api-server-access-easily-with-service-tags-preview/?utm_source=rss&utm_medium=rss&utm_campaign=manage-aks-api-server-access-easily-with-service-tags-preview https://pixelrobots.co.uk/2024/08/manage-aks-api-server-access-easily-with-service-tags-preview/#respond Thu, 15 Aug 2024 11:33:18 +0000 https://pixelrobots.co.uk/?p=39896 Reading Time: 2 minutesHey everyone! Today, I’m excited to share a new feature that’s just hit preview in Azure Kubernetes Service (AKS). If you’ve ever wrestled with managing IP addresses for API server access, you’re going to love this. Azure has introduced the ability to use Service Tags for API Server authorized IP Read more

The post Manage AKS API Server Access Easily with Service Tags (Preview) appeared first on Pixel Robots..

]]> https://pixelrobots.co.uk/2024/08/manage-aks-api-server-access-easily-with-service-tags-preview/feed/ 0 https://pixelrobots.co.uk/wp-content/uploads/2024/08/thumbnail-360-×-240-px-20.png Disable local user account (–admin) in Azure Kubernetes Service https://pixelrobots.co.uk/2021/05/disable-local-user-account-admin-in-azure-kubernetes-service/?utm_source=rss&utm_medium=rss&utm_campaign=disable-local-user-account-admin-in-azure-kubernetes-service https://pixelrobots.co.uk/2021/05/disable-local-user-account-admin-in-azure-kubernetes-service/#comments Mon, 17 May 2021 10:02:12 +0000 https://pixelrobots.co.uk/?p=38120 Reading Time: 4 minutesDid you know that even when you have enabled Azure AD integration with your AKS cluster, a subscription Owner and Contributor can still access you AKS cluster with the -admin switch? In fact, anyone who is a member of the Azure Kubernetes Service Cluster Admin Role (https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#azure-kubernetes-service-cluster-admin-role) can. You were Read more

The post Disable local user account (–admin) in Azure Kubernetes Service appeared first on Pixel Robots..

]]> https://pixelrobots.co.uk/2021/05/disable-local-user-account-admin-in-azure-kubernetes-service/feed/ 5 https://pixelrobots.co.uk/wp-content/uploads/2021/05/aks-local-accounts.png How to build an Azure Kubernetes Cluster using Managed Azure Active Directory Integration https://pixelrobots.co.uk/2020/09/how-to-build-an-azure-kubernetes-cluster-using-managed-azure-active-directory-integration/?utm_source=rss&utm_medium=rss&utm_campaign=how-to-build-an-azure-kubernetes-cluster-using-managed-azure-active-directory-integration https://pixelrobots.co.uk/2020/09/how-to-build-an-azure-kubernetes-cluster-using-managed-azure-active-directory-integration/#respond Wed, 02 Sep 2020 07:00:00 +0000 https://pixelrobots.co.uk/?p=37557 Reading Time: 4 minutesThis blog post is part of a series of blog posts for Azure Back to school https://azurebacktoschool.tech by Dwayne Natwick. For the whole of September different community members will be creating a blog post or video to about Azure. Mine as you can tell from the heading is about Azure Read more

The post How to build an Azure Kubernetes Cluster using Managed Azure Active Directory Integration appeared first on Pixel Robots..

]]> https://pixelrobots.co.uk/2020/09/how-to-build-an-azure-kubernetes-cluster-using-managed-azure-active-directory-integration/feed/ 0 https://pixelrobots.co.uk/wp-content/uploads/2020/08/AKS-Cluster-using-Managed-Azure-AD-Integration.png Apply OS updates to AKS nodes without an upgrade https://pixelrobots.co.uk/2019/05/apply-os-updates-to-aks-nodes-without-an-upgrade/?utm_source=rss&utm_medium=rss&utm_campaign=apply-os-updates-to-aks-nodes-without-an-upgrade https://pixelrobots.co.uk/2019/05/apply-os-updates-to-aks-nodes-without-an-upgrade/#comments Wed, 15 May 2019 12:10:47 +0000 https://pixelrobots.co.uk/?p=33905 Reading Time: 3 minutesMicrosoft protects our AKS clusters by applying OS security and/or kernel updates automatically to the nodes in our cluster. You will find some of the updates will need a reboot to complete. As part of this patching, Microsoft does not reboot our nodes. You could do an AKS upgrade, this Read more

The post Apply OS updates to AKS nodes without an upgrade appeared first on Pixel Robots..

]]> https://pixelrobots.co.uk/2019/05/apply-os-updates-to-aks-nodes-without-an-upgrade/feed/ 2 https://pixelrobots.co.uk/wp-content/uploads/2019/05/akskured.png Getting started with Secure DevOps Kit for Azure https://pixelrobots.co.uk/2019/05/getting-started-with-secure-devops-kit-for-azure/?utm_source=rss&utm_medium=rss&utm_campaign=getting-started-with-secure-devops-kit-for-azure https://pixelrobots.co.uk/2019/05/getting-started-with-secure-devops-kit-for-azure/#respond Wed, 01 May 2019 09:33:15 +0000 https://pixelrobots.co.uk/?p=33494 Reading Time: 4 minutesIn this article, I am going to show you how to Install Secure DevOps Kit for Azure (AzSK), do a scan against as subscription and then fix an issue using the recommendation. What is AzSK? Below is an overview of what AzSK is from their website. https://azsk.azurewebsites.net/README.html#overview The “Secure DevOps Read more

The post Getting started with Secure DevOps Kit for Azure appeared first on Pixel Robots..

]]> https://pixelrobots.co.uk/2019/05/getting-started-with-secure-devops-kit-for-azure/feed/ 0 https://pixelrobots.co.uk/wp-content/uploads/2019/04/AzSK.png How to encrypt an Azure virtual machine scale sets (VMSS) running Windows https://pixelrobots.co.uk/2019/04/how-to-encrypt-an-azure-virtual-machine-scale-sets-vmss-running-windows/?utm_source=rss&utm_medium=rss&utm_campaign=how-to-encrypt-an-azure-virtual-machine-scale-sets-vmss-running-windows https://pixelrobots.co.uk/2019/04/how-to-encrypt-an-azure-virtual-machine-scale-sets-vmss-running-windows/#respond Wed, 17 Apr 2019 09:50:08 +0000 https://pixelrobots.co.uk/?p=33478 Reading Time: 3 minutesRecently at work I have been playing with Azure virtual machine scale sets (VMSS). On 03/04/2019 encryption of VMSS finally went GA! Using PowerShell and the Azure CLI you can now encrypt virtual machine scale sets. Prerequisites To be able to encrypt a VMSS you need to have a Key Read more

The post How to encrypt an Azure virtual machine scale sets (VMSS) running Windows appeared first on Pixel Robots..

]]> https://pixelrobots.co.uk/2019/04/how-to-encrypt-an-azure-virtual-machine-scale-sets-vmss-running-windows/feed/ 0 https://pixelrobots.co.uk/wp-content/uploads/2019/04/vmmsfi.png Quick Fix: Kubernetes Dashboard Forbidden on RBAC AKS Cluster https://pixelrobots.co.uk/2019/02/quick-fix-kubernetes-dashboard-forbidden-on-rbac-aks-cluster/?utm_source=rss&utm_medium=rss&utm_campaign=quick-fix-kubernetes-dashboard-forbidden-on-rbac-aks-cluster https://pixelrobots.co.uk/2019/02/quick-fix-kubernetes-dashboard-forbidden-on-rbac-aks-cluster/#respond Wed, 20 Feb 2019 15:52:40 +0000 https://pixelrobots.co.uk/?p=32579 Reading Time: < 1 minuteIf you are using RBAC on your AKS cluster you will probably see a screen like the one below when you try to access the Kubernetes Dashboard. This is because you do not have access to the dashboard. Luckily its an easy fix. In your bash windows type the following. Read more

The post Quick Fix: Kubernetes Dashboard Forbidden on RBAC AKS Cluster appeared first on Pixel Robots..

]]> https://pixelrobots.co.uk/2019/02/quick-fix-kubernetes-dashboard-forbidden-on-rbac-aks-cluster/feed/ 0 https://pixelrobots.co.uk/wp-content/uploads/2019/01/k8sdashboard.png Create a RBAC Azure Kubernetes Services (AKS) cluster with Azure Active Directory using Terraform https://pixelrobots.co.uk/2019/02/create-a-rbac-azure-kubernetes-services-aks-cluster-with-azure-active-directory-using-terraform/?utm_source=rss&utm_medium=rss&utm_campaign=create-a-rbac-azure-kubernetes-services-aks-cluster-with-azure-active-directory-using-terraform https://pixelrobots.co.uk/2019/02/create-a-rbac-azure-kubernetes-services-aks-cluster-with-azure-active-directory-using-terraform/#comments Wed, 13 Feb 2019 09:46:37 +0000 https://pixelrobots.co.uk/?p=32568 Reading Time: 7 minutesIn this article I am going to show you how to build a Role Based Access Controlled (RBAC) Azure Kubernetes Services (AKS) cluster using Terraform and Azure Active Directory. At the time of writing this article, when you create an AKS cluster using the portal or terraform RBAC is disabled Read more

The post Create a RBAC Azure Kubernetes Services (AKS) cluster with Azure Active Directory using Terraform appeared first on Pixel Robots..

]]> https://pixelrobots.co.uk/2019/02/create-a-rbac-azure-kubernetes-services-aks-cluster-with-azure-active-directory-using-terraform/feed/ 4 https://pixelrobots.co.uk/wp-content/uploads/2019/01/rbac-aks.png The New and Improved way to Encrypt an Azure VM running Windows https://pixelrobots.co.uk/2018/10/the-new-and-improved-way-to-encrypt-an-azure-vm-running-windows/?utm_source=rss&utm_medium=rss&utm_campaign=the-new-and-improved-way-to-encrypt-an-azure-vm-running-windows https://pixelrobots.co.uk/2018/10/the-new-and-improved-way-to-encrypt-an-azure-vm-running-windows/#comments Thu, 18 Oct 2018 12:56:53 +0000 https://pixelrobots.co.uk/?p=31465 Reading Time: 4 minutesAzure is constantly improving, and one area that has improved is the encryption of Azure Virtual Machines. You may have read a previous article of mine called Encrypt an Azure Virtual Machine by using Key Encryption Key,  in this article I showed you how to encrypt the VM using a Read more

The post The New and Improved way to Encrypt an Azure VM running Windows appeared first on Pixel Robots..

]]> https://pixelrobots.co.uk/2018/10/the-new-and-improved-way-to-encrypt-an-azure-vm-running-windows/feed/ 2 https://pixelrobots.co.uk/wp-content/uploads/2018/09/encryptvm.png