Skip to content

Commit cbabb27

Browse files
Merge pull request #208308 from miwithro/patch-162
Update concepts-security.md
2 parents 8575736 + c7d3665 commit cbabb27

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

articles/aks/concepts-security.md

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -77,6 +77,9 @@ Nightly updates apply security updates to the OS on the node, but the node image
7777

7878
For Windows Server nodes, Windows Update doesn't automatically run and apply the latest updates. Schedule Windows Server node pool upgrades in your AKS cluster around the regular Windows Update release cycle and your own validation process. This upgrade process creates nodes that run the latest Windows Server image and patches, then removes the older nodes. For more information on this process, see [Upgrade a node pool in AKS][nodepool-upgrade].
7979

80+
### Node authorization
81+
Node authorization is a special-purpose authorization mode that specifically authorizes API requests made by kubelets to protect against East-West attacks. Node authorization is enabled by default on AKS 1.24 + clusters.
82+
8083
### Node deployment
8184
Nodes are deployed into a private virtual network subnet, with no public IP addresses assigned. For troubleshooting and management purposes, SSH is enabled by default and only accessible using the internal IP address.
8285

0 commit comments

Comments
 (0)