https://cloudwalker.it/insights/ Notes on Azure, Kubernetes, platform engineering and cloud security from Cloudwalker IT. en-us https://cloudwalker.it/insights/reinstating-aobo-access-azure-subscriptions/ https://cloudwalker.it/insights/reinstating-aobo-access-azure-subscriptions/ AOBO access does not transfer with an Azure subscription. Restore the partner's foreign-group RBAC assignment, then choose the right scope and access model. Sat, 26 Sep 2026 12:00:00 GMT https://cloudwalker.it/insights/azure-bastion-aks-tunneling-ga/ https://cloudwalker.it/insights/azure-bastion-aks-tunneling-ga/ Azure Bastion can now tunnel directly to a private AKS cluster's API server, no jump box required. Here's what the GA release changes and where it still falls short. Thu, 27 Aug 2026 12:00:00 GMT https://cloudwalker.it/insights/argocd-cve-2026-42880-kubernetes-secrets/ https://cloudwalker.it/insights/argocd-cve-2026-42880-kubernetes-secrets/ A critical (CVSS 9.6) missing-masking flaw in Argo CD lets any authenticated user extract plaintext Kubernetes Secret values. Patches are out; here's what AKS operators need to know before they get to it. Thu, 14 May 2026 12:00:00 GMT https://cloudwalker.it/insights/azure-sql-ag-listener-no-ilb-legacy-clients/ https://cloudwalker.it/insights/azure-sql-ag-listener-no-ilb-legacy-clients/ How we configured a SQL Server Availability Group listener in Azure without an Internal Load Balancer for a client whose legacy application couldn't use MultiSubnetFailover=True -- and the SQL port binding issue that caught us off guard. Fri, 08 May 2026 12:00:00 GMT https://cloudwalker.it/insights/why-we-deliver-aws-through-a-partner/ https://cloudwalker.it/insights/why-we-deliver-aws-through-a-partner/ Most cloud consultancies claim broad in-house capability across every major cloud. Cloudwalker IT doesn't: AWS engagements are delivered jointly with 010 Consulting. Why we set it up that way, and when it isn't the right model. Sun, 03 May 2026 12:00:00 GMT https://cloudwalker.it/insights/platform-engineering-beyond-diy-devops/ https://cloudwalker.it/insights/platform-engineering-beyond-diy-devops/ DevOps promised developer autonomy but delivered cognitive overload. Platform engineering fixes the model. Here is what a practical adoption path looks like. Sun, 22 Mar 2026 12:00:00 GMT https://cloudwalker.it/insights/200-day-tls-certificates-what-it-means/ https://cloudwalker.it/insights/200-day-tls-certificates-what-it-means/ CA/B Forum Ballot SC-081 cuts maximum TLS certificate lifetime to 200 days starting March 15, 2026, with further reductions ahead. We break down the operational impact and the case for automation. Tue, 10 Mar 2026 12:00:00 GMT https://cloudwalker.it/insights/cloud-cost-optimization-2026/ https://cloudwalker.it/insights/cloud-cost-optimization-2026/ Before right-sizing and commitments, look for the spend nobody is using: unattached disks and IPs, log ingestion, licences you already own, and AKS clusters sized off requests. Queries included. Sun, 01 Mar 2026 12:00:00 GMT https://cloudwalker.it/insights/ai-enterprise-integration/ https://cloudwalker.it/insights/ai-enterprise-integration/ The demo took a week. Production takes network isolation, quota planning, token accounting, an evaluation set and a plan for model retirements. A checklist for Azure OpenAI workloads. Sun, 15 Feb 2026 12:00:00 GMT https://cloudwalker.it/insights/zero-trust-security-guide/ https://cloudwalker.it/insights/zero-trust-security-guide/ Most zero trust programmes start with network segmentation. On Azure, the controls that matter most live in Entra ID: emergency accounts, Conditional Access, PIM and workload identities. An order of work that holds up. Tue, 20 Jan 2026 12:00:00 GMT