SHIFT-WIKI - Sjoerd Hooft's InFormation Technology
This WIKI is my personal documentation blog. Please enjoy it and feel free to reach out through blue sky if you have a question, remark, improvement or observation. See below for the latest additions, or use the search or tags to browse for content.
Get root access on pods in an AKS cluster
Summary: Usually you wouldn't need to get root access to pods in a kubernetes cluster, but sometimes it can be convenient for a quick test or as emergency access. I recently had the desire to be root at one of the pods, and it turned out to be quite difficult nowadays, so I wrote a post on it. I'll be documenting the various options you have to interact with pods and containers in pods, until I finally found the solution. I hope you enjoy the journey.
Date: 27 December 2024
Note that this was done on an aks cluster with version 1.27.7.
AKS with Workload Identity
Summary: Workloads deployed on an Azure Kubernetes Services (AKS) cluster require Microsoft Entra application credentials or managed identities to access Microsoft Entra protected resources, such as a Azure Key Vault. Microsoft Entra Workload ID integrates with the capabilities native to Kubernetes to federate with external identity providers. On this page I'll show you how to quickly deploy an AKS cluster with workload identity enabled.
Date: 26 January 2025
I'll show you the following steps:
- Deploy an AKS cluster using the Azure CLI with the OpenID Connect issuer and a Microsoft Entra Workload ID.
- Create a Microsoft Entra Workload ID and Kubernetes service account.
- Configure the managed identity for token federation.
- Deploy a test workload and verify authentication with the workload identity.
- Grant a pod in the cluster access to secrets in an Azure key vault.
All command shown here are done with powershell in the Azure Cloud Shell.
JavaScript Referrer
Summary: How to create a referrer (redirect) using javascript
Date: Around 2018
Refactor: 1 March 2025: Checked links and formatting.
Use this javascript to set a referrer, meaning that if a user visits a page directly it gets referred to the main page. This way you enforce users to always use the mainpage:
<script type="text/javascript"> if (document.referrer !== "http://mainpage.url.com/") { window.location.href = "http://mainpage.url.com/"; } </script>
This wiki has been made possible by: