Currently, all
pods on AKS nodes can access the AKS worker node's Azure Instance Metadata
Service (IMDS) endpoint.
AKS now offers a
managed solution that restricts IMDS endpoint access for customer pods. Only
AKS system pods and user pods with host network can access IMDS for retrieving
information or authentication.
Learn more.