richeney

AKS Multi-tenanted - continue

Later - use YADA with private endpointed SQL

Links

https://learn.microsoft.com/en-us/azure/aks/azure-cni-overlay https://learn.microsoft.com/en-us/azure/aks/hybrid/calico-networking-policy https://learn.microsoft.com/en-us/azure/aks/workload-identity-overview

richeney

DNS over HTTPS

Settings | Network & Internet | Ethernet/WiFi | DNS server assignment | Edit

Add automatic templates:

netsh dns add encryption server=1.1.1.3 dohtemplate=https://cloudflare-dns.com/dns-query
netsh dns add encryption server=1.0.0.3 dohtemplate=https://cloudflare-dns.com/dns-query
netsh dns add encryption server=2606:4700:4700::1113 dohtemplate=https://cloudflare-dns.com/dns-query

richeney

#!/usr/bin/env bash
# [GitHub Gist - richeney/pal_attestation.sh](https://gist.github.com/richeney/60f487bf788cfd52c89cfd7800d5adef)
# Usage: curl -sSL https://aka.ms/pal/attestation | bash

error() { echo "ERROR: $@" >&2; exit 1; }

usage() {
  cat <<EOF
Usage: $(basename "${BASH_SOURCE[0]:-$0}") [-a|--assignments] [--object-id <id>] [-h|--help]