Tag: Container
-
High available control plane with Istio 1.5 on Azure Kubernetes Service
Back in January I have written a blog post about installing the Istio control plane on AKS in HA mode. -> https://www.danielstechblog.io/install-a-high-available-istio-control-plane-on-azure-kubernetes-service/ Since the release of Istio 1.5 this month the overall architecture of the Istio control plane has changed. -> https://istio.io/news/releases/1.5.x/announcing-1.5/#introducing-istiod With the introduction of Istiod the number of deployed pods get dramatically reduced,…
-
Updated maximum nodes limit – Azure Function App – AKS Azure CNI IP address calculation
Just a short information about the update I have done for the Azure Function App doing the AKS Azure CNI IP address calculation. Since the last update there has been a change to the maximum nodes per cluster limit supported by AKS. Maximum nodes per cluster (only with multiple node pools and VMSS): 1000 ->…
-
Combine istioctl commands with kubectl-select
Since working with Istio I stumbled a couple of times over some of the istioctl commands that require to select a specific pod or service. Some of these commands are istioctl… …dashboard controlz {Istio pilot pod name} …dashboard envoy {pod name} …experimental describe service {service name} …experimental metrics {service name} …proxy-config bootstrap {pod name} For…
-
Install a high available Istio control plane on Azure Kubernetes Service
Lately I worked intensively with Istio and focused especially on the topic high availability of the Istio control plane. When you install Istio with the default profile, as mentioned in the Istio documentation, you get a non-high available control plane. istioctl manifest apply \ –set values.global.mtls.enabled=true \ –set values.global.controlPlaneSecurityEnabled=true Per default Istio gets installed with…
-
Check cluster manageability with Azure Kubernetes Service Diagnostics
It does not matter if your AKS cluster is running without any issues or you currently experiencing issues, you should run Azure Kubernetes Service Diagnostics on a regular base. But what is Azure Kubernetes Service Diagnostics? Let me give you a quick introduction. AKS Diagnostics is a functionality in the Azure portal which provides you…
-
Using Octant as alternative Kubernetes dashboard for Azure Kubernetes Service
When you are running an Azure Kubernetes Service cluster you might deployed the cluster without the Kubernetes dashboard or disabled it afterwards. -> https://www.danielstechblog.io/disable-the-kubernetes-dashboard-on-azure-kubernetes-service/ Mainly you are doing it for security purposes to prevent an accidentally exposed and unsecured Kubernetes dashboard to the public. -> https://redlock.io/blog/cryptojacking-tesla The Kubernetes dashboard is neat for demo purposes, but…