What is hcp-tunnelfront?
tunnelfront is an AKS system component that's installed on every cluster that helps to facilitate secure communication from your hosted Kubernetes control plane and your nodes. It's needed for certain operations like kubectl exec, and will be redeployed to your cluster on version upgrades (note that the tunnelfront version matches the cluster version).
If you run into problems with tunnelfront, please do file an issue on https://github.com/Azure/AKS/issues