Tag Archives: PaaS

Disable the Kubernetes dashboard on Azure Kubernetes Service

A recently introduced change enables the capability to disable the Kubernetes dashboard on an AKS cluster. This is achieved by providing the Kubernetes dashboard as an AKS add-on like the Azure Monitor for containers integration, AKS virtual nodes or the HTTP application routing. I stumbled over that capability in the Terraform Azure provider documentation for Azure Kubernetes Service. -> Read more [...]

Custom naming support for AKS node resource group available

When you deploy an Azure Kubernetes Service cluster in Azure a second resource group gets created for the worker nodes. Per default the resource group has the following naming schema MC_resourcegroupname_clustername_location. In most cases this naming schema collides with a naming convention already in place for the company’s Azure environment. A common question since AKS hit the market is, Read more [...]

Optimize build performance on Jenkins Azure worker nodes

Today we focus on some performance optimizations for the Jenkins worker nodes on Azure instead of security as in the last blog post. -> https://www.danielstechblog.io/secure-jenkins-worker-nodes-on-azure/ As you might know already each Azure VM gets an additional SSD-based temporary drive beside the OS disk drive. Per default the swap file is stored on this temporary drive, because it is ephemeral. So, Read more [...]

AKS VMSS base image update script – multiple node pool support

At the beginning of September, I have published a blog post about how to update the base image of a VMSS-based AKS cluster. -> https://www.danielstechblog.io/updating-the-base-image-of-a-vmss-based-aks-cluster/ On LinkedIn I had a good discussion with one of the AKS PMs about that and I want to highlight two things first. The shell script I have written directly interacts with the VMSS Read more [...]

Secure Jenkins worker nodes on Azure

Jenkins has two nifty plugins available to leverage the power of the Azure platform for on-demand worker nodes. -> Azure Container Instances -> Azure Virtual Machines In this blog post I want to quickly highlight to secure the access to Jenkins worker nodes running on Azure. The assumption is that your Jenkins CI master is running outside of Azure e.g. on-premises. When you are using Read more [...]

Updating the base image of a VMSS-based AKS cluster

Earlier this year I had written a blog post about updating the VMSS base image of an aks-engine cluster. -> https://www.danielstechblog.io/updating-the-base-image-of-an-vmss-aks-engine-cluster/ Today, we focus on Azure Kubernetes Service running with VMSS. Microsoft releases updates regularly to the AKS service and refreshes also the base image for the AKS worker nodes. -> https://github.com/azure/aks/releases This Read more [...]

Configuration options for CoreDNS in Azure Kubernetes Service

In my last blog post I have shown you the configuration of custom upstream nameservers for CoreDNS in AKS. -> https://www.danielstechblog.io/setting-custom-upstream-nameservers-for-coredns-in-azure-kubernetes-service/ But there are more configuration options available to customize your CoreDNS experience. We will focus at some of them today. First, let us have a look at the two options Read more [...]

AKS – Authentication issues real-time container logging solution

UPDATE 15.08.2019: The issue described here in my blog post has been resolved in the Azure docs with the following pull request. -> https://github.com/MicrosoftDocs/azure-docs/pull/37045 Back in June Microsoft announced an URL change affecting the Azure Monitor for containers real-time container logging solution. -> https://azure.microsoft.com/en-us/updates/azure-monitor-for-containers-updates-to-live-data-settings/ -> Read more [...]

Setting custom upstream nameservers for CoreDNS in Azure Kubernetes Service

Last year I have written a blog post about configuring kube-dns in Azure Kubernetes Service to provide a custom nameserver for DNS name resolution. -> https://www.danielstechblog.io/using-custom-dns-server-for-domain-specific-name-resolution-with-azure-kubernetes-service/ Since then Kubernetes switched to CoreDNS and AKS as well. Today I am not talking about the topic in my previous blog post, Read more [...]

Distribute Azure Kubernetes Service kubeconfig credentials

Last week I showed you the kubeconfig credentials distribution for AKS Engine. -> https://www.danielstechblog.io/distribute-aks-engine-kubeconfig-credentials/ In this blog post I walk you through the steps for Azure Kubernetes Service. The distribution of the kubeconfig credentials for an AKS cluster with AAD integration is a lot easier thanks to the following two built-in RBAC roles. -> Read more [...]