Skip to content

Commit 90907cf

Browse files
Merge pull request #234509 from MGoedtel/101579
Removed Best Practice reference
2 parents 04a1354 + 55e1e67 commit 90907cf

File tree

1 file changed

+3
-5
lines changed

1 file changed

+3
-5
lines changed

articles/aks/operator-best-practices-identity.md

Lines changed: 3 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ titleSuffix: Azure Kubernetes Service
44
description: Learn the cluster operator best practices for how to manage authentication and authorization for clusters in Azure Kubernetes Service (AKS)
55
ms.topic: conceptual
66
ms.custom: ignite-2022
7-
ms.date: 09/29/2022
7+
ms.date: 04/14/2023
88
---
99

1010
# Best practices for authentication and authorization in Azure Kubernetes Service (AKS)
@@ -116,12 +116,10 @@ There are two levels of access needed to fully operate an AKS cluster:
116116

117117
## Use pod-managed identities
118118

119-
> **Best practice guidance**
120-
>
121-
> Don't use fixed credentials within pods or container images, as they are at risk of exposure or abuse. Instead, use *pod identities* to automatically request access using Azure AD.
119+
Don't use fixed credentials within pods or container images, as they are at risk of exposure or abuse. Instead, use *pod identities* to automatically request access using Azure AD.
122120

123121
> [!NOTE]
124-
> Pod identities are intended for use with Linux pods and container images only. Pod-managed identities support for Windows containers is coming soon.
122+
> Pod identities are intended for use with Linux pods and container images only. Pod-managed identities (preview) support for Windows containers is coming soon.
125123

126124
To access other Azure resources, like Azure Cosmos DB, Key Vault, or Blob storage, the pod needs authentication credentials. You could define authentication credentials with the container image or inject them as a Kubernetes secret. Either way, you would need to manually create and assign them. Usually, these credentials are reused across pods and aren't regularly rotated.
127125

0 commit comments

Comments
 (0)