AKS Create and Delete Cluster: Difference between revisions
| (3 intermediate revisions by the same user not shown) | |||
| Line 2: | Line 2: | ||
* https://docs.microsoft.com/en-us/azure/aks/kubernetes-walkthrough-portal | * https://docs.microsoft.com/en-us/azure/aks/kubernetes-walkthrough-portal | ||
=Internal= | =Internal= | ||
* [[AKS_Operations#Create_and_Delete_Cluster|AKS]] | * [[AKS_Operations#Create_and_Delete_Cluster|AKS Operations]] | ||
=Creation Procedure= | =Creation Procedure= | ||
==Console== | |||
Go to https://portal.azure.com. | Go to https://portal.azure.com. | ||
| Line 9: | Line 11: | ||
Create a resource → Containers → Kubernetes Service | Create a resource → Containers → Kubernetes Service | ||
==Basic== | ===Basic=== | ||
Subscription: | Subscription: | ||
Resource group: aks-dev | Resource group: Create New → aks-dev | ||
Cluster details: | Cluster details: | ||
| Line 31: | Line 33: | ||
Node count: 3 | Node count: 3 | ||
==Node pools== | ===Node pools=== | ||
No additional node pools. | No additional node pools. | ||
| Line 39: | Line 41: | ||
Enable virtual machine scale sets: yes by default (required) | Enable virtual machine scale sets: yes by default (required) | ||
==Authentication== | ===Authentication=== | ||
Cluster infrastructure: [[AKS_Concepts#Service_Principal|Service principal]] or [[AKS_Concepts#System-Assigned_Managed_Identity|System-assigned managed identity]]. | Cluster infrastructure: [[AKS_Concepts#Service_Principal|Service principal]] or [[AKS_Concepts#System-Assigned_Managed_Identity|System-assigned managed identity]]. | ||
| Line 55: | Line 57: | ||
Encryption type: Default Encryption at-rest with a platform-managed key. | Encryption type: Default Encryption at-rest with a platform-managed key. | ||
==Networking== | ===Networking=== | ||
Networking configuration: Kubenet or Azure CNI. | Networking configuration: Kubenet or Azure CNI. | ||
| Line 71: | Line 73: | ||
Enable [[AKS_Concepts#HTTP_Application_Routing|HTTP application routing]]. | Enable [[AKS_Concepts#HTTP_Application_Routing|HTTP application routing]]. | ||
Enable [[AKS_Concepts#Private_Cluster|private cluster]] | Security: | ||
Enable [[AKS_Concepts#Private_Cluster|private cluster]]: Disable | |||
Set authorized IP ranges: Disable | |||
Network policy | Network policy: None | ||
==Integration== | ===Integration=== | ||
===Azure Container Registry=== | ====Azure Container Registry==== | ||
{{Internal|AKS_Concepts#Azure_Container_Registry|Azure Container Registry}} | {{Internal|AKS_Concepts#Azure_Container_Registry|Azure Container Registry}} | ||
No container registry declared. | No container registry declared. | ||
===Azure Monitor=== | ====Azure Monitor==== | ||
===Azure Policy=== | ====Azure Policy==== | ||
==CLI== | |||
=Deletion Procedure= | =Deletion Procedure= | ||
Latest revision as of 22:45, 9 April 2021
External
Internal
Creation Procedure
Console
Go to https://portal.azure.com.
Create a resource → Containers → Kubernetes Service
Basic
Subscription:
Resource group: Create New → aks-dev
Cluster details:
Cluster names: aks-dev
Region: ...
Availability zones: 1, 2, 3.
Kubernetes version: 1.19.7
Primary node pool
Node size: Standard D8as_v4
Node count: 3
Node pools
No additional node pools.
Enable virtual nodes: no
Enable virtual machine scale sets: yes by default (required)
Authentication
Cluster infrastructure: Service principal or System-assigned managed identity.
Use System-assigned managed identity.
Kubernetes authentication and authorization
Role-based access control (RBAC): Enabled
AKS-managed Azure Active Directory: Disabled
Node pool OS disk encryption.
Encryption type: Default Encryption at-rest with a platform-managed key.
Networking
Networking configuration: Kubenet or Azure CNI.
Use Kubenet.
DNS name prefix. This is the DNS name prefix to use with the hosted Kubernetes API server FQDN:
aks-dev
Traffic routing:
Load balancer: Standard
Enable HTTP application routing.
Security:
Enable private cluster: Disable
Set authorized IP ranges: Disable
Network policy: None
Integration
Azure Container Registry
No container registry declared.