LIVE DEMO — DEV

Secure AKS Web Platform

This static page is served from a container built and pushed to Azure Container Registry by GitHub Actions, deployed to a private Azure Kubernetes Service cluster, and exposed to the Internet through an Application Gateway (WAF_v2) ingress with a Let's Encrypt-issued TLS certificate.

No public AKS API server

The control plane has no public IP. CI and admins reach it only via az aks command invoke, over the Azure control-plane API.

No ACR admin credentials

Image pulls use the AKS node's kubelet managed identity — nothing stored, nothing to rotate.

OIDC, not secrets

GitHub Actions authenticates to Azure via federated OIDC — zero long-lived cloud credentials in the repo.

Locked-down pod

Runs as a non-root user, read-only root filesystem, all Linux capabilities dropped.

namespace: demo-web

See Architecture for how the pieces fit together, or Configuration for the exact security and networking settings this environment runs with.