This blog post is a continuation of Deploying Azure Kubernetes Service Demo Store App with Azure Open AI – Part 1. It dives into the Python code that calls the Azure Open AI Service and highlights the use of Semantic Kernel. The AKS Demo Store uses the AI functionality to generate product descriptions. The article emphasizes the benefits of using Azure Kubernetes Service (AKS) to support AI Ops platform.
This blog series chronicles my experience deploying and learning the technical details of the AKS Demo Store App with Azure Open AI. The app uses AI to generate product descriptions, deployed in a Kubernetes architecture. It showcases Azure Open AI's potential and the future application focus.
The following is a walk through of a quick setup of Azure Managed Grafana Instance and viewing performance graphs on applications running in Azure Kubernetes Service. This is a relatively new Azure platform service and the general documentation can be found at https://learn.microsoft.com/en-us/azure/managed-grafana/how-to-data-source-plugins-managed-identity?tabs=azure-portal I have had experience to build, configure and deploy Grafana into an …
Implementation scenario to establish autorotation of pod mounted key vault secrets and reloading pods to update environment variables of those secrets.
Scenario: You require a pod to mount a secret stored in an Azure Key Vault. So that an application running in the pod can access the secret as a file and environment variable. Also manage the access security between the AKS cluster to the key vault using a user assigned managed identity. Background: To integrate …
Continue reading How To Mount Azure Key Vault Secret to Pods in Azure Kubernetes Service
Objective: To provide key configuration parameters for the beginner when creating the Azure Kubernetes Service with Azure CLI. My design with related az aks create command configuration parameters. You can find the az aks create command’s documentation provides a list of about 60 parameters. az aks create --name --resource-group [--aad-admin-group-object-ids] [--aad-client-app-id] [--aad-server-app-id] [--aad-server-app-secret] [--aad-tenant-id] [--admin-username] …
Continue reading Comprehensive Guide To Create an Azure Kubernetes Service with Az CLI
As announced, in this article Kubernetes resource view is in public preview, I will review and give my thoughts on this new feature Kubernetes Resource View in the Azure Portal compared to the OSS Kubernetes Dashboard (Web UI). A prerequisite is that the AKS Cluster needs to be enable Azure AD integration. The biggest convenience …
Continue reading Azure Portal Azure Kubernetes Resource Viewer vs Kubernetes Dashboard
Issue Background: With an Azure Kubernetes Service deployment (version 1.17.9) in my dev environment, I launch the Kubernetes Dashboard application and I can’t see any Kubernetes resources and I get the following error notification clusterroles.rbac.authorization.k8s.io is forbidden: User "clusterUser" cannot list resource "clusterroles" in API group "rbac.authorization.k8s.io" at the cluster scope I am attempting to …
Error Message: Failed to pull image "rkaks/dotnetcoresqldb:dev": rpc error: code = Unknown desc = Error response from daemon: pull access denied for rkaks/dotnetcoresqldb, repository does not exist or may require 'docker login': denied: requested access to the resource is denied Shown from the Kubernetes Dashboard application Context I have my application's docker image pushed into …
Continue reading Error & Fix: Azure Kubernetes ‘Failed to pull image’
My Blog Post: An ASP .NET Core app hosted in Azure Kubernetes Service (AKS) that is accessing an Azure SQL Database using Azure AD Managed Identity. The benefit is the ability for the application code not to use conventional SQL credentials of username and password stored in configuration files. Also, not use Azure Key vault to retrieve any user name and password credentials. There is nothing wrong with these techniques, but using Managed Identity is more streamlined and is a security best practice. #AKS #Kubernetes #Security #managedidentity #azureAD #AzureSQL
Roy Kim on Azure and AI 