Container Security

https://docs.microsoft.com/bs-latn-ba/azure/container-registry/container-registry-roles

CNI (container network interface is plug-in to k8s that creates a NIC in a container and integrates that with the host network.

When a new AKS cluster is created a managed identity is automatically created. This identity can be assigned the to the AcrPull role to allow the cluster to access and Azure Container Registry.

An ingress controller is a piece of software that provides reverse proxy, configurable traffic routing, and TLS termination for Kubernetes services.