The following is a walk through of a quick setup of Azure Managed Grafana Instance and viewing performance graphs on applications running in Azure Kubernetes Service. This is a relatively new Azure platform service and the general documentation can be found at https://learn.microsoft.com/en-us/azure/managed-grafana/how-to-data-source-plugins-managed-identity?tabs=azure-portal I have had experience to build, configure and deploy Grafana into an …
Implementation scenario to establish autorotation of pod mounted key vault secrets and reloading pods to update environment variables of those secrets.
Scenario: You require a pod to mount a secret stored in an Azure Key Vault. So that an application running in the pod can access the secret as a file and environment variable. Also manage the access security between the AKS cluster to the key vault using a user assigned managed identity. Background: To integrate …
Continue reading How To Mount Azure Key Vault Secret to Pods in Azure Kubernetes Service
I have been working with Istio Service Mesh with Azure Kubernetes for a couple years, I like to share my experiences that were beneficial and impactful in my projects. Istio Service mesh helps with managing traffic among your microservices applications. Read more at https://istio.io/latest/about/service-mesh/ The general architecture is as follows where a service A (in …
Continue reading My 3 Key Benefits of Istio Service Mesh with AKS
Objective: To provide key configuration parameters for the beginner when creating the Azure Kubernetes Service with Azure CLI. My design with related az aks create command configuration parameters. You can find the az aks create command’s documentation provides a list of about 60 parameters. az aks create --name --resource-group [--aad-admin-group-object-ids] [--aad-client-app-id] [--aad-server-app-id] [--aad-server-app-secret] [--aad-tenant-id] [--admin-username] …
Continue reading Comprehensive Guide To Create an Azure Kubernetes Service with Az CLI
As announced, in this article Kubernetes resource view is in public preview, I will review and give my thoughts on this new feature Kubernetes Resource View in the Azure Portal compared to the OSS Kubernetes Dashboard (Web UI). A prerequisite is that the AKS Cluster needs to be enable Azure AD integration. The biggest convenience …
Continue reading Azure Portal Azure Kubernetes Resource Viewer vs Kubernetes Dashboard
Issue Background: With an Azure Kubernetes Service deployment (version 1.17.9) in my dev environment, I launch the Kubernetes Dashboard application and I can’t see any Kubernetes resources and I get the following error notification clusterroles.rbac.authorization.k8s.io is forbidden: User "clusterUser" cannot list resource "clusterroles" in API group "rbac.authorization.k8s.io" at the cluster scope I am attempting to …
My Blog Post: An ASP .NET Core app hosted in Azure Kubernetes Service (AKS) that is accessing an Azure SQL Database using Azure AD Managed Identity. The benefit is the ability for the application code not to use conventional SQL credentials of username and password stored in configuration files. Also, not use Azure Key vault to retrieve any user name and password credentials. There is nothing wrong with these techniques, but using Managed Identity is more streamlined and is a security best practice. #AKS #Kubernetes #Security #managedidentity #azureAD #AzureSQL
One of the non-straight forward aspects of implementing for applications in Kubernetes is the stateful data store. I will be showing 2 relational database patterns in Azure Kubernetes Service. Since containers are the fundamental building blocks, these are stateless by default. That is the containers can lose its data when it is terminated or fail. …
Continue reading Database Patterns with Azure Kubernetes Service Part 1: MySQL + Azure Managed Disk
Scenario:Building upon my previous blog post Managing Azure with Az CLI and Windows Subsystem for Linux, I want to demonstrate examples and techniques in managing a Kubernetes cluster on Azure Kubernetes Service (AKS) in a bash shell using Windows Subsystem for Linux. As a mainstream Microsoft platform developer and engineer for most of my career, …
Continue reading Managing Azure Kubernetes with Windows Subsystem for Linux
Roy Kim on Azure and Microsoft 365 