Category: General
-
Downgrade the Linux kernel on an Azure Ubuntu VM
Sometimes it might be that you need to downgrade the Linux kernel on an Azure Ubuntu VM. Especially when you use Azure Site Recovery for BCDR. As the ASR agent has a slight delay on supporting the latest Linux kernel versions. -> https://docs.microsoft.com/en-us/azure/site-recovery/azure-to-azure-support-matrix#supported-ubuntu-kernel-versions-for-azure-virtual-machines Ubuntu was one of the first Linux distributions offering an Azure-optimized kernel.…
-
Using distroless images in Istio on Azure Kubernetes Service
Looking at Docker Hub Istio provides the option using distroless images since version 1.3.0. As it is always a good idea on a Kubernetes cluster to reduce the attack surface, especially when running a managed Kubernetes cluster like Azure Kubernetes Service, using distroless images is one option of it. Per default Istio does not use…
-
Microsoft MVP Award – Microsoft Azure
Today, I received an exciting email that I got the Microsoft MVP award in the category Microsoft Azure. In total this is my fourth award after being awarded in the category Cloud and Datacenter Management in 2013, 2014 and 2015. Then I joined Microsoft and hence as a Microsoft employee was not eligible anymore for…
-
Assigning RBAC permissions with Azure Resource Manager templates
Recently, I updated my AKS ARM template supporting the latest AKS feature set and important RBAC role assignments for the AKS cluster. After having a hard time, I managed to get the RBAC role assignment working. When you now think what should be so complicated? Check out my tweet on Twitter getting the background information.…
-
ARM Template – Deploy an AKS cluster using managed identity and managed Azure AD integration
As I mentioned in my other blog post before I have updated my Azure Resource Manager template as well. Switching from the AAD service principal to managed identity option and from the AAD v1 integration to AAD v2 which is also managed. Other changes and improvements are the following ones: Private cluster support Managed control…
-
Terraform – Deploy an AKS cluster using managed identity and managed Azure AD integration
Recently, I updated my Terraform AKS module switching from the AAD service principal to managed identity option as well from the AAD v1 integration to AAD v2 which is also managed. Other changes and improvements are the following ones: Private cluster support Managed control plane SKU tier support Windows node pool support Node labels support…