aad
AKS: Login with Azure CLI and Workload Identity
·972 words·5 mins
azure
kubernetes
aks
terraform
azure cli
workload identity
aad
azure active directory
In this post I’ll show you how to setup Workload Identity in an AKS cluster using terraform and then deploy a pod with Azure CLI that you will use to login to Azure.
Long story short: once workload identity is configured and enabled, kubernetes will inject 3 environment variables needed to login with Azure CLI:
AKS: Disable local accounts with Terraform
·833 words·4 mins
azure
kubernetes
aks
terraform
aad
azure active directory
When deploying an AKS cluster, even if you configure RBAC or AAD integration, local accounts will be enabled by default. This means that, given the right set of permitions, a user will be able to run the az get-credentials command with the --admin flag which will give you a non-audtibale access to the cluster.
Protect your Node.js or .NET API with Azure Active Directory
·1404 words·7 mins
dotnet
azure
dotnet
nodejs
aad
azure active directory
One question I often get from by my customers is how to use Azure Active Directroy to protect their Node.js or .NET APIs.
Every single time I answer by redirecting them to this amazing post (Proteger una API en Node.js con Azure Active Directory), written in spanish, by my friend and peer Gisela Torres (0gis0).