Tag: Public Cloud
-
Azure Kubernetes Service – Microsoft Ignite announcements
At this year’s first digital Microsoft Ignite conference Microsoft announced several GA and preview features for its Azure Kubernetes Service. GA: Azure Policy add-on for AKS GA: Ubuntu 18.04 as new base image GA: Mutate default storage class Preview: Azure RBAC for Kubernetes authorization Preview: AKS cluster start/stop feature Preview: Kubernetes 1.19 support Preview: New…
-
Trigger an on-demand Azure Policy compliance evaluation scan
Azure Policy evaluates resource compliance automatically every 24 hours for already assigned policies or initiatives. New policy or initiative assignments start the evaluation after the assignment has been applied to the defined scope which might take up to 30 minutes. What might be a hidden gem to some of you is the case that you…
-
Introduction to Azure Resource Mover
Azure Resource Mover is a new service in Azure that lets you move resources across regions. It complements the existing capabilities to move resources between resource groups in the same subscriptions or cross subscriptions. Scenarios for Azure Resource Mover are: Taking advantage of a new Azure region that is closer to you and thus reducing…
-
Downgrade the Linux kernel on an Azure Ubuntu VM
Sometimes it might be that you need to downgrade the Linux kernel on an Azure Ubuntu VM. Especially when you use Azure Site Recovery for BCDR. As the ASR agent has a slight delay on supporting the latest Linux kernel versions. -> https://docs.microsoft.com/en-us/azure/site-recovery/azure-to-azure-support-matrix#supported-ubuntu-kernel-versions-for-azure-virtual-machines Ubuntu was one of the first Linux distributions offering an Azure-optimized kernel.…
-
Using distroless images in Istio on Azure Kubernetes Service
Looking at Docker Hub Istio provides the option using distroless images since version 1.3.0. As it is always a good idea on a Kubernetes cluster to reduce the attack surface, especially when running a managed Kubernetes cluster like Azure Kubernetes Service, using distroless images is one option of it. Per default Istio does not use…
-
Assigning RBAC permissions with Azure Resource Manager templates
Recently, I updated my AKS ARM template supporting the latest AKS feature set and important RBAC role assignments for the AKS cluster. After having a hard time, I managed to get the RBAC role assignment working. When you now think what should be so complicated? Check out my tweet on Twitter getting the background information.…