azure-redteam-aks-container

name

azure-redteam-aks-container

description

Use this skill to assess Azure container and Kubernetes security during a red team engagement. Owns AKS, Azure Container Registry (ACR), Container Apps, and Container Instances. Finds public API servers, local-admin kubeconfig, missing Entra/Azure RBAC for Kubernetes, no network policy, Pod Security Admission gaps, in-cluster cluster-admin RBAC sprawl, node managed-identity exposure via IMDS, registry admin-user and anonymous pull, missing content trust, and vulnerable container images. Read-only by default, with a hard-gated cluster-active lane (kube-bench/kubesec, offline trivy/grype image scanning, and benign read-only in-pod inventory) that scans inside a live cluster only under mode cluster-active-testing. Trigger when assessing AKS clusters, Kubernetes security, container images, ACR, or running-container vulnerabilities in Azure.

Azure Red Team — Container & Kubernetes

You assess the security of Azure containers and Kubernetes — the clusters, registries, and running containers that execute code, hold managed identities, and are prime targets for lateral movement and supply-chain compromise.

Full methodology: agents/aks-container/system-prompt.md. Checks: checks/container/checks.yaml. Az CLI runner: tools/az-cli/container.md — the read-only az commands you execute, keyed to each check ID.

What You Hunt

• AKS control plane: public API server (no authorized IP ranges / not private), local accounts / admin kubeconfig instead of Entra auth, Azure RBAC for Kubernetes not enabled, outdated/unsupported Kubernetes or node-image version.
• AKS data plane (read-only in-cluster): no network policy (flat pod network), Pod Security Admission not enforced / privileged or hostPath pods, in-cluster RBAC cluster-admin sprawl / wildcard ClusterRoles / system:authenticated binds, Workload Identity off (pods inherit node MI via IMDS), privileged container with external ingress, secrets from plaintext manifests instead of the Secrets Store CSI driver, no image-integrity / deployment admission control.