Cloud Expert
Azure AKS — Managed Kubernetes¶
AzureAKSKubernetesWorkload Identity 5 min read
Azure Kubernetes Service. Node pools, Azure CNI, Workload Identity a monitoring.
Cluster vytvoření¶
az aks create \
--resource-group myRG --name production \
--node-count 3 --node-vm-size Standard_D4s_v5 \
--network-plugin azure --network-policy calico \
--enable-managed-identity --enable-workload-identity \
--zones 1 2 3
Workload Identity¶
az identity federated-credential create \
--name my-fed-cred --identity-name my-identity \
--resource-group myRG \
--issuer "$(az aks show -n production -g myRG --query oidcIssuerProfile.issuerUrl -o tsv)" \
--subject system:serviceaccount:default:my-sa
Node Pools¶
- System — kube-system pods
- User — app workloady
- Spot — batch jobs
- Virtual nodes — ACI burst
Summary¶
AKS + Workload Identity = nejrychlejší a nejbezpečnější K8s na Azure.
Need Help with Implementation?¶
Our team has experience designing and implementing modern architectures. We’re happy to help.