AKS Concepts: Difference between revisions

From NovaOrdis Knowledge Base
Jump to navigation Jump to search
 
(11 intermediate revisions by the same user not shown)
Line 4: Line 4:
* [[AKS#Subjects|AKS]]
* [[AKS#Subjects|AKS]]
* [[Kubernetes Concepts]]
* [[Kubernetes Concepts]]
=Overview=
AKS is the Azure Kubernetes-based implementation of a generic infrastructure platform [[Infrastructure_Concepts#Container_Clusters|container cluster]].
=Node=
=Node=
Nodes are Azure virtual machines.
Nodes are Azure virtual machines.
Line 21: Line 24:


=Networking=
=Networking=
https://docs.microsoft.com/en-us/azure/aks/concepts-network
{{External|https://docs.microsoft.com/en-us/azure/aks/concepts-network}}
==Network Models==
===Kubenet===
{{External|https://docs.microsoft.com/en-us/azure/aks/concepts-network#kubenet-basic-networking}}
The kubenet is the default networking model when configuring the AKS cluster. Nodes get an IP address from the Azure virtual network subnet.
===Azure CNI Networking===
{{External|https://docs.microsoft.com/en-us/azure/aks/concepts-network#azure-cni-advanced-networking}}
 
==HTTP Application Routing==
==HTTP Application Routing==
{{External|https://docs.microsoft.com/en-us/azure/aks/http-application-routing}}
{{External|https://docs.microsoft.com/en-us/azure/aks/http-application-routing}}
Line 47: Line 57:
===In-Tree Storage Plugins===
===In-Tree Storage Plugins===
====default====
====default====
Uses Azure StandardSSD storage to create a [[Azure_Storage_Concepts#Managed_Disk|managed disk]].
====managed-premium====
====managed-premium====
Uses Azure Premium storage to create a [[Azure_Storage_Concepts#Managed_Disk|managed disk]].
====azurefile====
====azurefile====
Uses Azure StandardSSD storage to create an [[Azure_Storage_Concepts#File_Share|Azure File Share]].
<syntaxhighlight lang='yaml'>
kind: PersistentVolumeClaim
spec:
  storageClassName: azurefile
</syntaxhighlight>
====azurefile-premium====
====azurefile-premium====
Uses Azure Premium storage to create an [[Azure_Storage_Concepts#File_Share|Azure File Share]].
===CSI Storage Plugins===
===CSI Storage Plugins===
====managed-csi====
====managed-csi====
Uses Azure StandardSSD storage to create a [[Azure_Storage_Concepts#Managed_Disk|managed disk]].
====managed-csi-premium====
====managed-csi-premium====
Uses Azure Premium storage to create a [[Azure_Storage_Concepts#Managed_Disk|managed disk]].
====azurefile-csi====
====azurefile-csi====
Uses Azure StandardSSD storage to create an [[Azure_Storage_Concepts#File_Share|Azure File Share]].
<syntaxhighlight lang='yaml'>
kind: PersistentVolumeClaim
spec:
  storageClassName: azurefile-csi
</syntaxhighlight>
====azurefile-csi-premium====
====azurefile-csi-premium====
Uses Azure Premium storage to create an [[Azure_Storage_Concepts#File_Share|Azure File Share]].


=Scaling=
=Scaling=
https://docs.microsoft.com/en-us/azure/aks/concepts-scale
https://docs.microsoft.com/en-us/azure/aks/concepts-scale
=Azure Container Registry=
=Azure Container Registry=
=Container Runtime=
AKS clusters based on Kubernetes 1.19+ use [[Kubernetes_Container_Runtime_Concepts#containerd|containerd]] as their container runtime.

Latest revision as of 04:48, 31 December 2021

External

Internal

Overview

AKS is the Azure Kubernetes-based implementation of a generic infrastructure platform container cluster.

Node

Nodes are Azure virtual machines.

Node Pool

Nodes of the same configuration are grouped together into node pools.

Access and Identity

https://docs.microsoft.com/en-us/azure/aks/concepts-identity

Security

https://docs.microsoft.com/en-us/azure/aks/concepts-security

Authentication

Cluster Infrastructure Authentication

The cluster infrastructure authentication is used by AKS to manage cloud resources attached to the cluster. It can be service principal or system-assigned managed identity.

Service Principal

https://docs.microsoft.com/en-us/azure/aks/kubernetes-service-principal

System-Assigned Managed Identity

https://docs.microsoft.com/en-us/azure/aks/use-managed-identity

Networking

https://docs.microsoft.com/en-us/azure/aks/concepts-network

Network Models

Kubenet

https://docs.microsoft.com/en-us/azure/aks/concepts-network#kubenet-basic-networking

The kubenet is the default networking model when configuring the AKS cluster. Nodes get an IP address from the Azure virtual network subnet.

Azure CNI Networking

https://docs.microsoft.com/en-us/azure/aks/concepts-network#azure-cni-advanced-networking

HTTP Application Routing

https://docs.microsoft.com/en-us/azure/aks/http-application-routing

HTTP application routing is a solution to access applications that are deployed in an AKS cluster, and consists in the automatic configuration of an ingress controller in the AKS cluster. As applications are deployed, the solution also creates publicly accessible DNS names for application endpoints.

When the add-on is enabled, it creates a DNS Zone in the subscription.

The HTTP application routing is designed to let you quickly create an ingress controller and access your applications. It is not currently designed for use in a production environment. For production-ready ingress deployments that include multiple replicas and TLS support, see HTTPS Ingress Controller.

HTTPS Ingress Controller

https://docs.microsoft.com/en-us/azure/aks/ingress-tls

Ingress Controller

https://docs.microsoft.com/en-us/azure/application-gateway/ingress-controller-overview

Egress

https://docs.microsoft.com/en-us/azure/aks/egress

Private Cluster

https://docs.microsoft.com/en-us/azure/aks/private-clusters

A private cluster uses an internal IP address to ensure that network traffic between the API server and node pools remains on a private network only. The API server endpoint has no public IP address. To manage the API server, you'll need to use a VM that has access to the AKS cluster's Azure Virtual Network (VNet).

Storage

https://docs.microsoft.com/en-us/azure/aks/concepts-storage

Storage Classes

https://docs.microsoft.com/en-us/azure/aks/concepts-storage#storage-classes

An AKS cluster has access by default to four storage classes implemented with in-tree storage plugins and four storage classes implemented with CSI plugins:

In-Tree Storage Plugins

default

Uses Azure StandardSSD storage to create a managed disk.

managed-premium

Uses Azure Premium storage to create a managed disk.

azurefile

Uses Azure StandardSSD storage to create an Azure File Share.

kind: PersistentVolumeClaim
spec:
  storageClassName: azurefile

azurefile-premium

Uses Azure Premium storage to create an Azure File Share.

CSI Storage Plugins

managed-csi

Uses Azure StandardSSD storage to create a managed disk.

managed-csi-premium

Uses Azure Premium storage to create a managed disk.

azurefile-csi

Uses Azure StandardSSD storage to create an Azure File Share.

kind: PersistentVolumeClaim
spec:
  storageClassName: azurefile-csi

azurefile-csi-premium

Uses Azure Premium storage to create an Azure File Share.

Scaling

https://docs.microsoft.com/en-us/azure/aks/concepts-scale

Azure Container Registry

Container Runtime

AKS clusters based on Kubernetes 1.19+ use containerd as their container runtime.