Azure Portal Azure Kubernetes Resource Viewer vs Kubernetes Dashboard

As announced, in this article Kubernetes resource view is in public preview, I will review and give my thoughts on this new feature Kubernetes Resource View in the Azure Portal compared to the OSS Kubernetes Dashboard (Web UI). A prerequisite is that the AKS Cluster needs to be enable Azure AD integration. The biggest convenience …

Continue reading Azure Portal Azure Kubernetes Resource Viewer vs Kubernetes Dashboard

Kubernetes Error & Fix: clusterroles.rbac.authorization.k8s.io is forbidden: User clusterUser cannot list resource clusterroles

Issue Background: With an Azure Kubernetes Service deployment (version 1.17.9) in my dev environment, I launch the Kubernetes Dashboard application and I can’t see any Kubernetes resources and I get the following error notification clusterroles.rbac.authorization.k8s.io is forbidden: User "clusterUser" cannot list resource "clusterroles" in API group "rbac.authorization.k8s.io" at the cluster scope I am attempting to …

Continue reading Kubernetes Error & Fix: clusterroles.rbac.authorization.k8s.io is forbidden: User clusterUser cannot list resource clusterroles

Error & Fix: Azure Kubernetes ‘Failed to pull image’

Error Message: Failed to pull image "rkaks/dotnetcoresqldb:dev": rpc error: code = Unknown desc = Error response from daemon: pull access denied for rkaks/dotnetcoresqldb, repository does not exist or may require 'docker login': denied: requested access to the resource is denied Shown from the Kubernetes Dashboard application Context I have my application's docker image pushed into …

Continue reading Error & Fix: Azure Kubernetes ‘Failed to pull image’

Database Patterns with Azure Kubernetes Service Part 2: Azure SQL DB and Managed Identity

My Blog Post: An ASP .NET Core app hosted in Azure Kubernetes Service (AKS) that is accessing an Azure SQL Database using Azure AD Managed Identity. The benefit is the ability for the application code not to use conventional SQL credentials of username and password stored in configuration files. Also, not use Azure Key vault to retrieve any user name and password credentials. There is nothing wrong with these techniques, but using Managed Identity is more streamlined and is a security best practice. #AKS #Kubernetes #Security #managedidentity #azureAD #AzureSQL

Database Patterns with Azure Kubernetes Service Part 1: MySQL + Azure Managed Disk

One of the non-straight forward aspects of implementing for applications in Kubernetes is the stateful data store. I will be showing 2 relational database patterns in Azure Kubernetes Service. Since containers are the fundamental building blocks, these are stateless by default. That is the containers can lose its data when it is terminated or fail. …

Continue reading Database Patterns with Azure Kubernetes Service Part 1: MySQL + Azure Managed Disk

Understanding Ingress Controllers and Azure App Gateway for Azure Kubernetes Part 1: Intro

I will share my experiences with a design and implementation of Azure Application Gateway for an Azure Kubernetes Service (AKS) cluster. This is so that you may get some practical insight as you plan and design for using the Azure App Gateway. In this blog series, I will go over Fundamental Ingress conceptsArchitecture and deployment …

Continue reading Understanding Ingress Controllers and Azure App Gateway for Azure Kubernetes Part 1: Intro

Azure Kubernetes Fundamentals: My Development Tools

Azure Kubernetes Service (AKS) is an orchestrating engine to run multiple containerized applications in a cluster. It is currently growing in the developer and cloud engineering community and gainer more adoption in the enterprise. Learning and working with AKS has known to have a steep learning curve. There are many parts and pieces to get …

Continue reading Azure Kubernetes Fundamentals: My Development Tools

Comparing Azure Kubernetes Networking Scenarios – Part 5 Concluding Analysis

In this final blog post of the following series Comparing Azure Kubernetes Networking Scenarios - Part 1 IntroComparing Azure Kubernetes Networking Scenarios - Part 2 KubenetComparing Azure Kubernetes Networking Scenarios - Part 3 Azure CNI Comparing Azure Kubernetes Networking Scenarios - Part 4 Http App Routing Let’s recap the AKS network related configuration settings I …

Continue reading Comparing Azure Kubernetes Networking Scenarios – Part 5 Concluding Analysis

Comparing Azure Kubernetes Networking Scenarios – Part 4 Http App Routing

In this 3rd configuration profile, I will walk through the resulting configuration of AKS and its effect on the Load Balancer, Virtual Network, VM network interface card, deploy and test a web application into the Azure Kubernetes Service (AKS) cluster. The configuration profile is mainly around the Azure CNI network model and enabling the HTTP …

Continue reading Comparing Azure Kubernetes Networking Scenarios – Part 4 Http App Routing

Comparing Azure Kubernetes Networking Scenarios – Part 2 Kubenet

In this 1st configuration profile, I will walk through the resulting configuration of AKS and its effect on the Load Balancer, Virtual Network, VM network interface card, deploy and test a web application in the Azure Kubernetes Service (AKS) cluster. The configuration profile is mainly around the Kubenet network model. Kubenet is a very basic, …

Continue reading Comparing Azure Kubernetes Networking Scenarios – Part 2 Kubenet