Reading Time: 5 minutes In today’s cloud-native world, securing your Kubernetes clusters is more critical than ever. Traditional IP-based security measures often fall short in dynamic environments where IP addresses change frequently. This is where Fully Qualified Domain Name (FQDN) filtering comes into play, offering a more efficient and scalable way to manage network Read more…
Reading Time: 2 minutes Hey everyone! Today, I’m excited to share a new feature that’s just hit preview in Azure Kubernetes Service (AKS). If you’ve ever wrestled with managing IP addresses for API server access, you’re going to love this. Azure has introduced the ability to use Service Tags for API Server authorized IP Read more…
Reading Time: 4 minutes Azure Kubernetes Service (AKS) introduces Deployment Safeguards, a feature designed to enforce Kubernetes best practices through Azure Policy controls. This guide provides a step-by-step walkthrough on how to set up and leverage Deployment Safeguards for more secure and compliant Kubernetes deployments. Understanding Deployment Safeguards Deployment Safeguards are designed to enforce Read more…
Reading Time: 4 minutes Hey there Azure enthusiasts! I’ve got some cool news to share from the AKS front. If you’ve been looking for more flexibility with network policies in Azure Kubernetes Service (AKS), your prayers have been answered although it is currently still in preview. Let’s dive right in and see what this Read more…
Reading Time: 3 minutes In the ever-evolving landscape of cloud computing and Kubernetes management, Microsoft’s Azure Kubernetes Service (AKS) continuously introduces features to bolster security and ease of management. A significant new feature now in preview is the ability to control SSH access to AKS cluster nodes, providing administrators with enhanced security capabilities. This Read more…
Reading Time: 3 minutes Hello there, Azure enthusiasts! Today, we’re diving into a game-changing feature in Azure Kubernetes Service (AKS) that’s currently in preview: the Fully Managed Resource Group, also known as AKS Node Resource Group Lockdown Mode. If you’ve been following the AKS scene, you know how critical it is to manage your Read more…
Reading Time: 2 minutes In the ever-evolving world of cloud native technologies, keeping your Kubernetes cluster, including Azure Kubernetes Service (Kubernetes), secure is paramount. On August 31, 2023, Microsoft added Agentless Discovery for Kubernetes to Defender for Containers. This exciting addition allows you to enhance your Kubernetes security without the hassle of installing extra Read more…
Reading Time: 4 minutes So, you want to secure access to the kubernetes API server on your AKS cluster? Lucky for you that’s what this blog post is about. But first, why would you want to? The answer to that has to be security. By default, the Kubernetes API to manage your cluster is Read more…
Reading Time: 5 minutes So, in this short article, I am going to walk you through how I am scanning for vulnerabilities in my container images during the CI pipeline using Azure DevOps. For this, I am using Trivy https://github.com/aquasecurity/trivy by AQUA https://www.aquasec.com/. It’s an open-source simple and comprehensive vulnerability scanner for containers. Perfect Read more…
Reading Time: 2 minutes You may not know, but by default, AKS clusters are created with a service principal and that service principal has a one-year expiration time. Luckily there is an easy solution to update the credentials and this blog post is going to show you how to do it! Note: You will Read more…