Tag: AKS
-
Azure Policy for Azure Kubernetes Service
In June I already covered Azure Policy for Kubernetes in a blog post. -> https://www.danielstechblog.io/using-azure-policy-for-kubernetes/ Back then Azure Policy for AKS was in public preview. At this year’s Microsoft Ignite Azure Policy for AKS went GA. -> https://azure.microsoft.com/en-us/updates/ga-policy-addon-for-azure-kubernetes-service/ There have been some significant changes between the public preview and the GA version. First, let us…
-
Azure Kubernetes Service – Microsoft Ignite announcements
At this year’s first digital Microsoft Ignite conference Microsoft announced several GA and preview features for its Azure Kubernetes Service. GA: Azure Policy add-on for AKS GA: Ubuntu 18.04 as new base image GA: Mutate default storage class Preview: Azure RBAC for Kubernetes authorization Preview: AKS cluster start/stop feature Preview: Kubernetes 1.19 support Preview: New…
-
Using distroless images in Istio on Azure Kubernetes Service
Looking at Docker Hub Istio provides the option using distroless images since version 1.3.0. As it is always a good idea on a Kubernetes cluster to reduce the attack surface, especially when running a managed Kubernetes cluster like Azure Kubernetes Service, using distroless images is one option of it. Per default Istio does not use…
-
ARM Template – Deploy an AKS cluster using managed identity and managed Azure AD integration
As I mentioned in my other blog post before I have updated my Azure Resource Manager template as well. Switching from the AAD service principal to managed identity option and from the AAD v1 integration to AAD v2 which is also managed. Other changes and improvements are the following ones: Private cluster support Managed control…
-
Terraform – Deploy an AKS cluster using managed identity and managed Azure AD integration
Recently, I updated my Terraform AKS module switching from the AAD service principal to managed identity option as well from the AAD v1 integration to AAD v2 which is also managed. Other changes and improvements are the following ones: Private cluster support Managed control plane SKU tier support Windows node pool support Node labels support…
-
Running Istio on KinD – Kubernetes in Docker
In my last blog post I have shown you my local Kubernetes setup with KinD. I mentioned also Istio and today we walk through the configuration to get it running on Kubernetes in Docker. As prerequisite I recommend reading my previous blog post before you continue with this one. -> https://www.danielstechblog.io/local-kubernetes-setup-with-kind/ I made a configuration…