Tag: PaaS
-
Secure Jenkins worker nodes on Azure
Jenkins has two nifty plugins available to leverage the power of the Azure platform for on-demand worker nodes. -> Azure Container Instances -> Azure Virtual Machines In this blog post I want to quickly highlight to secure the access to Jenkins worker nodes running on Azure. The assumption is that your Jenkins CI master is…
-
Updating the base image of a VMSS-based AKS cluster
Earlier this year I had written a blog post about updating the VMSS base image of an aks-engine cluster. -> https://www.danielstechblog.io/updating-the-base-image-of-an-vmss-aks-engine-cluster/ Today, we focus on Azure Kubernetes Service running with VMSS. Microsoft releases updates regularly to the AKS service and refreshes also the base image for the AKS worker nodes. -> https://github.com/azure/aks/releases This week I…
-
Configuration options for CoreDNS in Azure Kubernetes Service
In my last blog post I have shown you the configuration of custom upstream nameservers for CoreDNS in AKS. -> https://www.danielstechblog.io/setting-custom-upstream-nameservers-for-coredns-in-azure-kubernetes-service/ But there are more configuration options available to customize your CoreDNS experience. We will focus at some of them today. First, let us have a look at the two options in the custom-coredns ConfigMap.…
-
AKS – Authentication issues real-time container logging solution
UPDATE 15.08.2019: The issue described here in my blog post has been resolved in the Azure docs with the following pull request. -> https://github.com/MicrosoftDocs/azure-docs/pull/37045 Back in June Microsoft announced an URL change affecting the Azure Monitor for containers real-time container logging solution. -> https://azure.microsoft.com/en-us/updates/azure-monitor-for-containers-updates-to-live-data-settings/ -> https://docs.microsoft.com/en-us/azure/azure-monitor/insights/container-insights-live-logs#configure-aks-with-azure-active-directory The URL that needs to be added in the…
-
Setting custom upstream nameservers for CoreDNS in Azure Kubernetes Service
Last year I have written a blog post about configuring kube-dns in Azure Kubernetes Service to provide a custom nameserver for DNS name resolution. -> https://www.danielstechblog.io/using-custom-dns-server-for-domain-specific-name-resolution-with-azure-kubernetes-service/ Since then Kubernetes switched to CoreDNS and AKS as well. Today I am not talking about the topic in my previous blog post, that will follow the next days,…
-
Distribute Azure Kubernetes Service kubeconfig credentials
Last week I showed you the kubeconfig credentials distribution for AKS Engine. -> https://www.danielstechblog.io/distribute-aks-engine-kubeconfig-credentials/ In this blog post I walk you through the steps for Azure Kubernetes Service. The distribution of the kubeconfig credentials for an AKS cluster with AAD integration is a lot easier thanks to the following two built-in RBAC roles. -> Azure…