AKS Create and Delete Cluster: Difference between revisions

From NovaOrdis Knowledge Base
Jump to navigation Jump to search
 
(8 intermediate revisions by the same user not shown)
Line 2: Line 2:
* https://docs.microsoft.com/en-us/azure/aks/kubernetes-walkthrough-portal
* https://docs.microsoft.com/en-us/azure/aks/kubernetes-walkthrough-portal
=Internal=
=Internal=
* [[AKS_Operations#Create_and_Delete_Cluster|AKS]]
* [[AKS_Operations#Create_and_Delete_Cluster|AKS Operations]]
 
=Creation Procedure=
=Creation Procedure=
==Console==


Go to https://portal.azure.com.
Go to https://portal.azure.com.
Line 9: Line 11:
Create a resource → Containers → Kubernetes Service  
Create a resource → Containers → Kubernetes Service  


==Basic==
===Basic===


Subscription:
Subscription:


Resource group: aks-dev
Resource group: Create New → aks-dev


Cluster details:
Cluster details:
Line 31: Line 33:
Node count: 3
Node count: 3


==Node pools==
===Node pools===


No additional node pools.
No additional node pools.
Line 39: Line 41:
Enable virtual machine scale sets: yes by default (required)
Enable virtual machine scale sets: yes by default (required)


==Authentication==
===Authentication===
 
Cluster infrastructure: [[AKS_Concepts#Service_Principal|Service principal]] or [[AKS_Concepts#System-Assigned_Managed_Identity|System-assigned managed identity]].
 
Use System-assigned managed identity.
 
Kubernetes authentication and authorization
 
Role-based access control (RBAC): Enabled
 
AKS-managed Azure Active Directory: Disabled
 
Node pool OS disk encryption.
 
Encryption type: Default Encryption at-rest with a platform-managed key.
 
===Networking===
 
Networking configuration: Kubenet or Azure CNI.
 
Use Kubenet.
 
DNS name prefix. This is the DNS name prefix to use with the hosted Kubernetes API server FQDN:
 
aks-dev
 
Traffic routing:
 
Load balancer: Standard
 
Enable [[AKS_Concepts#HTTP_Application_Routing|HTTP application routing]].
 
Security:
 
Enable [[AKS_Concepts#Private_Cluster|private cluster]]: Disable
 
Set authorized IP ranges: Disable


Cluster infrastructure: [[AKS_Concepts#Service_Principal|Service principal]] or [[https://kb.novaordis.com/index.php/AKS_Concepts#System-Assigned_Managed_Identity|System-assigned managed identity]]. Use System-assigned managed identity.
Network policy: None


Networking
===Integration===
====Azure Container Registry====
{{Internal|AKS_Concepts#Azure_Container_Registry|Azure Container Registry}}
No container registry declared.
====Azure Monitor====
====Azure Policy====


Integration
==CLI==


=Deletion Procedure=
=Deletion Procedure=

Latest revision as of 22:45, 9 April 2021

External

Internal

Creation Procedure

Console

Go to https://portal.azure.com.

Create a resource → Containers → Kubernetes Service

Basic

Subscription:

Resource group: Create New → aks-dev

Cluster details:

Cluster names: aks-dev

Region: ...

Availability zones: 1, 2, 3.

Kubernetes version: 1.19.7

Primary node pool

Node size: Standard D8as_v4

Node count: 3

Node pools

No additional node pools.

Enable virtual nodes: no

Enable virtual machine scale sets: yes by default (required)

Authentication

Cluster infrastructure: Service principal or System-assigned managed identity.

Use System-assigned managed identity.

Kubernetes authentication and authorization

Role-based access control (RBAC): Enabled

AKS-managed Azure Active Directory: Disabled

Node pool OS disk encryption.

Encryption type: Default Encryption at-rest with a platform-managed key.

Networking

Networking configuration: Kubenet or Azure CNI.

Use Kubenet.

DNS name prefix. This is the DNS name prefix to use with the hosted Kubernetes API server FQDN:

aks-dev

Traffic routing:

Load balancer: Standard

Enable HTTP application routing.

Security:

Enable private cluster: Disable

Set authorized IP ranges: Disable

Network policy: None

Integration

Azure Container Registry

Azure Container Registry

No container registry declared.

Azure Monitor

Azure Policy

CLI

Deletion Procedure