Add Microsoft Entra ID OIDC SSO to Harbor on AKS
Configure Harbor on AKS for Microsoft Entra ID single sign-on with Terraform-managed OIDC groups, role mapping, and a secure break-glass path.
#Security 7 articles
Articles tagged with "Security"
Harbor Audit Logs in Azure Log Analytics: A Fluent Bit Bridge
Forward Harbor audit events into Azure Log Analytics with a small Fluent Bit syslog bridge, reusing Container Insights so no new Azure resources are required.
AKS Without a Built-in CNI: Swapping iptables for Cilium and eBPF
What happens when you deploy AKS with networkPlugin: none, when customer-managed Cilium is justified over Azure CNI Powered by Cilium, and how to operate its eBPF dataplane, policies, and Hubble observability.
Advanced Container Networking Services on AKS: X-Ray Vision and Kernel-Level Guardrails for Your Cluster Network
What Advanced Container Networking Services (ACNS) actually gives you on AKS — eBPF-powered network observability with Hubble, domain-based egress filtering, and HTTP-aware Layer 7 policies — explained through a hands-on demo you can run yourself.
Migrating AKS Ingress to Istio-Based Gateway API: Moving Beyond NGINX
NGINX Ingress is retired. This guide walks through migrating AKS workloads to the App Routing add-on with Istio-based Gateway API, including GatewayClass, HTTPRoute, TLS from Key Vault, canary traffic splits, and header-based routing.
Deploying the AKS Argo CD Extension with App Routing Ingress and Entra ID SSO
A complete walkthrough of the Argo CD cluster extension for AKS — what Argo CD is, the components behind it, and how to wire up App Routing ingress, TLS from Key Vault, and Microsoft Entra ID single sign-on with workload identity and group-based RBAC.
Runtime Threat Detection on AKS with Falco and Microsoft Sentinel
A practical walkthrough of wiring open-source Falco to Microsoft Sentinel for real-time Kubernetes runtime security: install, configure, ingest, and investigate threats — all with Infrastructure as Code.