AKS

Attacking Azure Kubernetes Service from the cloud plane: admin credentials, command invoke, and node-pool managed identity through IMDS.

1분 분량2026년 10월 7일 업데이트florianamette기여자 1명
어시스턴트에게 묻기 (MCP)GitHub에서 편집

Azure Kubernetes Service bridges the Azure management plane and the Kubernetes API, so an Azure foothold becomes in-cluster power two ways: pull the cluster's admin kubeconfig, or run commands in the cluster through the management plane. Separately, each node pool carries a managed identity that a pod can reach through IMDS.

Pages#

  • Cluster access: listClusterAdminCredential and managedClusters runCommand.
  • Node identity: the node pool kubelet and managed identity through IMDS.

Generic in-cluster Kubernetes attacks (RBAC, service-account tokens, pod escape) live in the Containers area; these pages stay on the AKS cloud-plane and node-identity angle.

References#

이전User data다음 Cluster access