Kubernetes v1.35 Tightens Exec Plugins, AKS Automates Deployments

Azure Kubernetes Service maintains a public GitHub repository to track features, issues, and community feedback, monitored by the AKS product team. It offers best-effort support for reproducible issues, while urgent or SLA-backed support is handled through official Azure support channels, with links to roadmaps, release notes, and community resources.

Kubernetes v1.35 adds a beta security feature that lets users restrict which external executables kubectl may run when authenticating via kubeconfig exec plugins. By configuring a credential plugin policy and allowlist in the kuberc file, users can reduce supply-chain and pipeline risks without writing application code.

The piece explains how to deploy applications to AKS Automatic using Terraform when Azure RBAC replaces static kubeconfig credentials. It outlines token-based authentication options for the Helm (and Kubernetes) provider using Azure CLI, service principals, or managed identities, and shows how to provision an AKS Automatic cluster with the AzApi provider.