Sarah Cooley

AKS in Azure supports k8s minor versions for a year. We're also finding that some common k8s extensions/tools rely on specific minor versions.

Limit IPs that can access the VMs under nodepools as well as the commands that can be run. [Read more](https://learn.microsoft.com/en-us/azure/aks/hybrid/restrict-ssh-access)

API server fails to recognize refreshed kubelet certificates

1

We discovered an issue in upstream Kubernetes which causes the API server to fail to recognize the refreshed kubelet certificates, despite the fact that they were being rotated every 4...