Inlägg taggade med "AKS"

LiteLLM 1.107.0 shipped on 21 October 2026 with a credential stealer and remote-code loader that ran on every Python start, harvesting Azure, Kubernetes, SSH and AI-tool credentials plus the proxy database of provider keys. A two-hour audit for Azure teams running LiteLLM in front of Azure OpenAI: find the digests, hunt the indicators, rotate in the right order, and decide whether the gateway belongs in API Management.

Let's Encrypt will issue 64-day certificates by default from 10 February 2027, flips its staging environment on 14 October 2026, and drops to 45 days with seven-hour authorization reuse in 2028. On Azure that touches certbot on VMs, cert-manager on AKS and Key Vault pipelines feeding Front Door and Application Gateway, where fixed renewal schedules and absolute monitoring thresholds need to become relative.

The Model Context Protocol specification version 2026-07-28 shipped on 28 July with a stateless core, Multi Round-Trip Requests, required routing headers, cacheable list results and a hardened authorization model that deprecates Dynamic Client Registration in favour of Client ID Metadata Documents. All four Tier 1 SDKs shipped support on release day, so Azure teams running MCP servers on Container Apps, AKS or behind API Management can start migrating immediately.

MCP's 2026-07-28 release candidate removes the initialize handshake and the Mcp-Session-Id header, so every request is self-contained and Azure-hosted MCP servers can run behind plain load balancers without sticky sessions or Redis session stores. Tasks and MCP Apps land as formal extensions, six SEPs harden authorization around OAuth 2.0 and OpenID Connect, and Roots, Sampling and Logging enter a 12-month deprecation window.

A decision matrix for running AI workloads on Azure Container Apps versus AKS — GPU support, scale-to-zero economics, networking, blast radius, operational overhead, and when graduating from Container Apps to AKS actually pays off.