Azure AKS — Managed Kubernetes

Azure Kubernetes Service. Node pools, Azure CNI, Workload Identity a monitoring.

Cluster vytvoření

az aks create \
  --resource-group myRG --name production \
  --node-count 3 --node-vm-size Standard_D4s_v5 \
  --network-plugin azure --network-policy calico \
  --enable-managed-identity --enable-workload-identity \
  --zones 1 2 3

Workload Identity

az identity federated-credential create \
  --name my-fed-cred --identity-name my-identity \
  --resource-group myRG \
  --issuer "$(az aks show -n production -g myRG --query oidcIssuerProfile.issuerUrl -o tsv)" \
  --subject system:serviceaccount:default:my-sa

Node Pools

• System — kube-system pods
• User — app workloady
• Spot — batch jobs
• Virtual nodes — ACI burst

Shrnutí

AKS + Workload Identity = nejrychlejší a nejbezpečnější K8s na Azure.