AKS Create and Delete Cluster: Difference between revisions
| Line 41: | Line 41: | ||
==Authentication== | ==Authentication== | ||
Cluster infrastructure: [[AKS_Concepts#Service_Principal|Service principal]] or [[AKS_Concepts#System-Assigned_Managed_Identity|System-assigned managed identity]] | Cluster infrastructure: [[AKS_Concepts#Service_Principal|Service principal]] or [[AKS_Concepts#System-Assigned_Managed_Identity|System-assigned managed identity]]. | ||
Use System-assigned managed identity. | |||
Integration | Kubernetes authentication and authorization | ||
Role-based access control (RBAC): Enabled | |||
AKS-managed Azure Active Directory: Disabled | |||
Node pool OS disk encryption. | |||
Encryption type: Default Encryption at-rest with a platform-managed key. | |||
==Networking== | |||
Networking configuration: Kubenet or Azure CNI. | |||
Use Kubenet. | |||
DNS name prefix. This is the DNS name prefix to use with the hosted Kubernetes API server FQDN: | |||
aks-dev | |||
Traffic routing: | |||
Load balancer: Standard | |||
Enable [[AKS_Concepts#HTTP_Application_Routing|HTTP application routing]]. | |||
==Integration== | |||
=Deletion Procedure= | =Deletion Procedure= | ||
Revision as of 20:53, 31 March 2021
External
Internal
Creation Procedure
Go to https://portal.azure.com.
Create a resource → Containers → Kubernetes Service
Basic
Subscription:
Resource group: aks-dev
Cluster details:
Cluster names: aks-dev
Region: ...
Availability zones: 1, 2, 3.
Kubernetes version: 1.19.7
Primary node pool
Node size: Standard D8as_v4
Node count: 3
Node pools
No additional node pools.
Enable virtual nodes: no
Enable virtual machine scale sets: yes by default (required)
Authentication
Cluster infrastructure: Service principal or System-assigned managed identity.
Use System-assigned managed identity.
Kubernetes authentication and authorization
Role-based access control (RBAC): Enabled
AKS-managed Azure Active Directory: Disabled
Node pool OS disk encryption.
Encryption type: Default Encryption at-rest with a platform-managed key.
Networking
Networking configuration: Kubenet or Azure CNI.
Use Kubenet.
DNS name prefix. This is the DNS name prefix to use with the hosted Kubernetes API server FQDN:
aks-dev
Traffic routing:
Load balancer: Standard
Enable HTTP application routing.