Reading Time: 5 minutes In today’s cloud-native world, securing your Kubernetes clusters is more critical than ever. Traditional IP-based security measures often fall short in dynamic environments where IP addresses change frequently. This is where Fully Qualified Domain Name (FQDN) filtering comes into play, offering a more efficient and scalable way to manage network Read more…
Reading Time: 2 minutes Hey everyone! Today, I’m excited to share a new feature that’s just hit preview in Azure Kubernetes Service (AKS). If you’ve ever wrestled with managing IP addresses for API server access, you’re going to love this. Azure has introduced the ability to use Service Tags for API Server authorized IP Read more…
Reading Time: 4 minutes Azure Kubernetes Service (AKS) introduces Deployment Safeguards, a feature designed to enforce Kubernetes best practices through Azure Policy controls. This guide provides a step-by-step walkthrough on how to set up and leverage Deployment Safeguards for more secure and compliant Kubernetes deployments. Understanding Deployment Safeguards Deployment Safeguards are designed to enforce Read more…
Reading Time: 3 minutes In an era where security is paramount, the Azure Kubernetes Service (AKS) has taken a significant leap forward with the introduction of Trusted Launch in its preview phase. This cool new feature is all about giving your AKS nodes – which are basically the backbone of your AKS clusters – Read more…
Reading Time: 4 minutes Hey there Azure enthusiasts! I’ve got some cool news to share from the AKS front. If you’ve been looking for more flexibility with network policies in Azure Kubernetes Service (AKS), your prayers have been answered although it is currently still in preview. Let’s dive right in and see what this Read more…
Reading Time: 3 minutes In the ever-evolving landscape of cloud computing and Kubernetes management, Microsoft’s Azure Kubernetes Service (AKS) continuously introduces features to bolster security and ease of management. A significant new feature now in preview is the ability to control SSH access to AKS cluster nodes, providing administrators with enhanced security capabilities. This Read more…
Reading Time: 3 minutes Hello there, Azure enthusiasts! Today, we’re diving into a game-changing feature in Azure Kubernetes Service (AKS) that’s currently in preview: the Fully Managed Resource Group, also known as AKS Node Resource Group Lockdown Mode. If you’ve been following the AKS scene, you know how critical it is to manage your Read more…
Reading Time: 2 minutes In the ever-evolving world of cloud native technologies, keeping your Kubernetes cluster, including Azure Kubernetes Service (Kubernetes), secure is paramount. On August 31, 2023, Microsoft added Agentless Discovery for Kubernetes to Defender for Containers. This exciting addition allows you to enhance your Kubernetes security without the hassle of installing extra Read more…
Reading Time: 2 minutes If you deploy your Azure Kubernetes Service (AKS) cluster in a private virtual network (VNET) to enhance security, management of the cluster becomes more complex. But with security this is something we expect. By default, when you use the az aks get-credentials command to configure access to your AKS cluster, Read more…
Reading Time: 3 minutes If you have been following along with my blog, you may have come across some previous posts about updating Azure Kubernetes Service (AKS). One (https://pixelrobots.co.uk/2019/05/apply-os-updates-to-aks-nodes-without-an-upgrade/) talked about kured (KUbernetes REboot Daemon) by weaveworks https://github.com/weaveworks/kured. The issue with this method is it only supported Linux Kubernetes nodes. So, your windows Kubernetes Read more…