Add Microsoft Entra ID OIDC SSO to Harbor on AKS
Configure Harbor on AKS for Microsoft Entra ID single sign-on with Terraform-managed OIDC groups, role mapping, and a secure break-glass path.
#Azure 16 articles
Articles tagged with "Azure"
Installing Harbor Container Registry on AKS with Terraform, Traefik, and cert-manager
Provision an AKS cluster with Terraform and install Harbor behind Traefik, with cert-manager issuing Let's Encrypt certificates through Azure DNS DNS-01 and Workload Identity.
Harbor Audit Logs in Azure Log Analytics: A Fluent Bit Bridge
Forward Harbor audit events into Azure Log Analytics with a small Fluent Bit syslog bridge, reusing Container Insights so no new Azure resources are required.
AKS Without a Built-in CNI: Swapping iptables for Cilium and eBPF
What happens when you deploy AKS with networkPlugin: none, when customer-managed Cilium is justified over Azure CNI Powered by Cilium, and how to operate its eBPF dataplane, policies, and Hubble observability.
Monitoring Harbor with Azure Monitor and Azure Managed Grafana
Collect Harbor 2.15 metrics with an Azure-specific ServiceMonitor, verify ingestion in Azure Monitor managed Prometheus, and build a Harbor dashboard in Azure Managed Grafana.
Advanced Container Networking Services on AKS: X-Ray Vision and Kernel-Level Guardrails for Your Cluster Network
What Advanced Container Networking Services (ACNS) actually gives you on AKS — eBPF-powered network observability with Hubble, domain-based egress filtering, and HTTP-aware Layer 7 policies — explained through a hands-on demo you can run yourself.
Bootstrapping Flux on AKS: Connect a Git Repository with GitRepository and Kustomization CRDs
A practical walkthrough to bootstrap Flux on an AKS cluster, connect it to an external Git repository (GitHub, Azure DevOps, GitLab, and more), and declare reconciliation with GitRepository and Kustomization CRDs.
Azure SQL Error 9001: The Log for Database Is Not Available
A real-world look at SQL error 9001 in Azure SQL diagnostic logs — what it means, why it happens during planned maintenance reconfigurations, and how to make your application resilient against it.
Scaling AKS Workloads on Custom Metrics with KEDA and Azure Managed Prometheus
A hands-on demo using the AKS KEDA add-on and Azure Managed Prometheus to autoscale a Deployment on HTTP request rate. Covers the Prometheus scaler, ServiceMonitor scraping, Workload Identity authentication, and watching pods scale out and back in.
Migrating AKS Ingress to Istio-Based Gateway API: Moving Beyond NGINX
NGINX Ingress is retired. This guide walks through migrating AKS workloads to the App Routing add-on with Istio-based Gateway API, including GatewayClass, HTTPRoute, TLS from Key Vault, canary traffic splits, and header-based routing.
Deploying the AKS Argo CD Extension with App Routing Ingress and Entra ID SSO
A complete walkthrough of the Argo CD cluster extension for AKS — what Argo CD is, the components behind it, and how to wire up App Routing ingress, TLS from Key Vault, and Microsoft Entra ID single sign-on with workload identity and group-based RBAC.
When Good Policies Break Monitoring: How an Azure Policy Silently Broke Our AKS Pipeline
An AKS incident from our deployment pipeline: Azure Monitor addons moved to a cluster extension-based backend — and a sensible Azure Policy that blocked extensions suddenly broke our AKS provisioning with no warning.
Why You Should Never Lock AKS-Managed Resources: A Volume Outage Story
A real incident from our AKS platform: resource locks on AKS-managed Azure disks silently broke the CSI driver during a node drain, leaving pods stuck without volumes. Here's what went wrong and what we should have done instead.
Runtime Threat Detection on AKS with Falco and Microsoft Sentinel
A practical walkthrough of wiring open-source Falco to Microsoft Sentinel for real-time Kubernetes runtime security: install, configure, ingest, and investigate threats — all with Infrastructure as Code.
Rescuing an AKS Namespace Stuck in Terminating State
A real-world story: how a nightly cleanup pipeline got blocked by a namespace stuck in Terminating, and the kubectl proxy + finalizer trick that finally got it unstuck.
Azure Application Gateway for Containers on AKS with the Gateway API
A hands-on walkthrough of deploying Application Gateway for Containers on AKS using the Kubernetes Gateway API, with a practical look at the managed and BYO deployment models.