Designing a Production Grade Azure Kubernetes Service(AKS)

Discover the Azure Kubernetes Service architecture with a managed control plane and node pools, learn about resource reservations for CPU and memory, and how monitoring and advanced networking are configured.

Create a fresh AKS cluster in the Azure portal by provisioning a new resource group, selecting node pools and sizes, enabling container monitoring, and configuring networking and authentication.

Dockerize your on premises application, push the image to a container registry, and deploy it to an AKS cluster using a Kubernetes deployment and load balancer, demonstrating cloud-native microservices.

This lab demonstrates refactoring an on-premises application into microservices, containerizing it, pushing the docker image to a container registry, and deploying with azure kubernetes service for production-grade architecture.

Add a node to the AKS node pool, scale a deployment from four to eight, and observe pods deploy on the new node before redeploying to existing nodes.

Learn how to upgrade an Azure Kubernetes Service (AKS) cluster with surge nodes, drain evictions, and control plane upgrades, demonstrated in a live Cube Cluster for minimal downtime.

Demonstrates manual versus auto scaling in a Kubernetes cluster, configuring a horizontal pod autoscaler with min and max replicas and cpu thresholds, and validating scaling through load tests.

Explore horizontal pod autoscaler theory in kubernetes, auto scaling deployments by cpu utilization with min and max replicas, using autoscaling/v1, and options for manual scaling when demand changes.

Explore cluster ip, northport, and load balancer services in AKS, exposing apps internally or externally, with hands-on deployment, port mappings, and external load balancer provisioning.

Deploy a WordPress and MySQL stack on a Kubernetes cluster using persistent volume claims, secrets for passwords, and a load-balanced service to expose WordPress externally.

Explore Kubernetes services such as cluster ip, node port, and load balancer to expose apps internally or externally, and compare Kubernetes networking with advanced networking and IP planning.

Learn how selectors and labels control pod scheduling, apply node affinity and taints with tolerations, and use ingress controllers, notably the application gateway, for layer seven traffic management.

Demonstrates step-by-step deployment of an application gateway ingress controller on Azure Kubernetes Service (AKS), including cluster creation, virtual network and subnet setup, public IP, and enabling the addon.

Demonstrate node affinity in a case cluster by labeling node pools and routing frontend and database workloads to specific nodes, validating deployment success and handling pending or failed schedules.

Deploy a Nginx ingress controller on a Kubernetes cluster using Helm, configure an external IP, and map it to a sample service, with notes on production security and dns routing.

Demonstrate deploying a multi-container pod in azure kubernetes service (aks) and restart only container one inside the pod using exec, with verification of the pod status.

Demonstrates deploying Velero on AKS, configuring storage and service principal, creating and validating backups of a namespace, then deleting and recovering the namespace from backup.

Demonstrates cleaning up Velero backups in AKS by deleting a backup, removing associated data snapshots, and validating storage container and Velero namespace cleanup.

Learn Velero for Kubernetes backup and disaster recovery, backing up namespaces, secrets, and config maps, with scheduled backups and restore to a new cluster via Azure storage account.

Explore aks storage theory by configuring persistent volume claims, default or managed premium storage classes, and mastering access modes, volume expansion, and snapshots.

Create and deploy persistent volume claims (PVCs) in AKS, selecting default or premium storage classes. Mount the PVC to pods, deploy, and validate the persistent storage setup in your cluster.

Create a 20 GB static disk, attach the disk to a deployment in AKS, mount the volume, and verify the container starts successfully.

Demonstrate creating a snapshot of an Azure disk and restoring it to a new deployment in AKS, creating a disk from the snapshot and validating data.

Explore expanding an existing disk in an AKS deployment by scaling down the application during a maintenance window, patching the PVC from 15 GB to 32 GB, then scaling up.

Explore azure fileshare creation and mounting to an AKS deployment, enabling cross pod data sharing with a storage account, file share, and credentials secret.

Learn to integrate Azure Key Vault with AKS using the secret store CSI provider, create a Key Vault and secret, configure access policies, and mount the secret into a pod.

Rolling updates in a Kubernetes deployment within a namespace demonstrate updating the app image with zero downtime, while enforcing min ready, max surge, and max unavailable, with rollback.

Apply rolling updates to achieve zero downtime by configuring min ready seconds and max unavailable during deployment. Learn how readiness probes, rollout history, and version revisions guide Kubernetes deployments.

Demonstrates enabling Azure Active Directory integration for an AKS cluster by creating a new Azure AD user, adding them to an admin group, and authenticating access.

Integrate Azure AD with AKS using the managed resource provider to simplify authentication and access without creating AD applications. Authenticate before accessing the cluster; the app routes requests to services.