Trigger an on-demand Azure Policy compliance evaluation scan

Azure Policy evaluates resource compliance automatically every 24 hours for already assigned policies or initiatives. New policy or initiative assignments start the evaluation after the assignment has been applied to the defined scope which might take up to 30 minutes. What might be a hidden gem to some of you is the case that you can trigger an on-demand compliance evaluation scan whenever Read more [...]

Introduction to Azure Resource Mover

Azure Resource Mover is a new service in Azure that lets you move resources across regions. It complements the existing capabilities to move resources between resource groups in the same subscriptions or cross subscriptions. Scenarios for Azure Resource Mover are: Taking advantage of a new Azure region that is closer to you and thus reducing latency. Moving resources to Azure regions Read more [...]

Downgrade the Linux kernel on an Azure Ubuntu VM

Sometimes it might be that you need to downgrade the Linux kernel on an Azure Ubuntu VM. Especially when you use Azure Site Recovery for BCDR. As the ASR agent has a slight delay on supporting the latest Linux kernel versions. -> https://docs.microsoft.com/en-us/azure/site-recovery/azure-to-azure-support-matrix#supported-ubuntu-kernel-versions-for-azure-virtual-machines Ubuntu was one of Read more [...]

Using distroless images in Istio on Azure Kubernetes Service

Looking at Docker Hub Istio provides the option using distroless images since version 1.3.0. As it is always a good idea on a Kubernetes cluster to reduce the attack surface, especially when running a managed Kubernetes cluster like Azure Kubernetes Service, using distroless images is one option of it. Per default Istio does not use the distroless image versions. So, you need to opt in for Read more [...]

Microsoft MVP Award – Microsoft Azure

Today, I received an exciting email that I got the Microsoft MVP award in the category Microsoft Azure. In total this is my fourth award after being awarded in the category Cloud and Datacenter Management in 2013, 2014 and 2015. Then I joined Microsoft and hence as a Microsoft employee was not eligible anymore for receiving the MVP award. After nearly three years at Microsoft I decided Read more [...]

Assigning RBAC permissions with Azure Resource Manager templates

Recently, I updated my AKS ARM template supporting the latest AKS feature set and important RBAC role assignments for the AKS cluster. After having a hard time, I managed to get the RBAC role assignment working. When you now think what should be so complicated? Check out my tweet on Twitter getting the background information. -> https://twitter.com/neumanndaniel/status/1294272253211947008 It Read more [...]

ARM Template – Deploy an AKS cluster using managed identity and managed Azure AD integration

As I mentioned in my other blog post before I have updated my Azure Resource Manager template as well. Switching from the AAD service principal to managed identity option and from the AAD v1 integration to AAD v2 which is also managed. Other changes and improvements are the following ones: Private cluster support Managed control plane SKU tier support Windows node pool support Node Read more [...]

Terraform – Deploy an AKS cluster using managed identity and managed Azure AD integration

Recently, I updated my Terraform AKS module switching from the AAD service principal to managed identity option as well from the AAD v1 integration to AAD v2 which is also managed. Other changes and improvements are the following ones: Private cluster support Managed control plane SKU tier support Windows node pool support Node labels support addon_profile section parameterized -> Read more [...]

Running Istio on KinD – Kubernetes in Docker

In my last blog post I have shown you my local Kubernetes setup with KinD. I mentioned also Istio and today we walk through the configuration to get it running on Kubernetes in Docker. As prerequisite I recommend reading my previous blog post before you continue with this one. -> https://www.danielstechblog.io/local-kubernetes-setup-with-kind/ I made a configuration decision for KinD Read more [...]

Local Kubernetes setup with KinD

Getting started with Kubernetes these days is easy and does not require to be in the lucky position having access to a cloud provider subscription for playing around with managed Kubernetes like AKS, EKS or GKE. All you need is your local machine. But then you must choose which one of the available offerings you would like to use: minikube, Docker Desktop, MicroK8s, k3s/k3d or KinD? Today Read more [...]