Why We Stayed with the Cluster Autoscaler on AKS
Our AKS NAP evaluation showed a trade-off between consolidation and daily financial calculations inside Deployment pods. Here is why we kept CAS for now.
#Kubernetes 21 articles
Articles tagged with "Kubernetes"
Making the AKS Control Plane Less of a Black Box with Managed Prometheus
A Terraform demo for enabling AKS control plane metrics, tuning Prometheus collection, and exploring API server and etcd dashboards in Azure Managed Grafana.
Testing AKS Node Auto Provisioning: When Our Managed Disk Policy Blocked Every New Node
While evaluating a move from the cluster autoscaler to Node Auto Provisioning (NAP) on AKS, no nodes were created. NAP quietly fell back from ephemeral OS disks to managed disks, and our Azure Policy denied them.
AKS Desktop: A Hands-On Tour of Microsoft's New Desktop App for Kubernetes
What AKS desktop actually does — Projects, guided deployments without YAML, a natural-language AI troubleshooting assistant, and a built-in plugin catalog — walked through as a demo you can reproduce on your own cluster.
Replicating Harbor on AKS to Azure Container Registry
Configure push-based Harbor replication to Azure Container Registry using a repository-scoped ACR token, resource filters, and event-based triggers.
Add Microsoft Entra ID OIDC SSO to Harbor on AKS
Configure Harbor on AKS for Microsoft Entra ID single sign-on with Terraform-managed OIDC groups, role mapping, and a secure break-glass path.
Installing Harbor Container Registry on AKS with Terraform, Traefik, and cert-manager
Provision an AKS cluster with Terraform and install Harbor behind Traefik, with cert-manager issuing Let's Encrypt certificates through Azure DNS DNS-01 and Workload Identity.
Harbor Audit Logs in Azure Log Analytics: A Fluent Bit Bridge
Forward Harbor audit events into Azure Log Analytics with a small Fluent Bit syslog bridge, reusing Container Insights so no new Azure resources are required.
AKS Without a Built-in CNI: Swapping iptables for Cilium and eBPF
What happens when you deploy AKS with networkPlugin: none, when customer-managed Cilium is justified over Azure CNI Powered by Cilium, and how to operate its eBPF dataplane, policies, and Hubble observability.
Monitoring Harbor with Azure Monitor and Azure Managed Grafana
Collect Harbor 2.15 metrics with an Azure-specific ServiceMonitor, verify ingestion in Azure Monitor managed Prometheus, and build a Harbor dashboard in Azure Managed Grafana.
Advanced Container Networking Services on AKS: X-Ray Vision and Kernel-Level Guardrails for Your Cluster Network
What Advanced Container Networking Services (ACNS) actually gives you on AKS — eBPF-powered network observability with Hubble, domain-based egress filtering, and HTTP-aware Layer 7 policies — explained through a hands-on demo you can run yourself.
Bootstrapping Flux on AKS: Connect a Git Repository with GitRepository and Kustomization CRDs
A practical walkthrough to bootstrap Flux on an AKS cluster, connect it to an external Git repository (GitHub, Azure DevOps, GitLab, and more), and declare reconciliation with GitRepository and Kustomization CRDs.
Scaling AKS Workloads on Custom Metrics with KEDA and Azure Managed Prometheus
A hands-on demo using the AKS KEDA add-on and Azure Managed Prometheus to autoscale a Deployment on HTTP request rate. Covers the Prometheus scaler, ServiceMonitor scraping, Workload Identity authentication, and watching pods scale out and back in.
Migrating AKS Ingress to Istio-Based Gateway API: Moving Beyond NGINX
NGINX Ingress is retired. This guide walks through migrating AKS workloads to the App Routing add-on with Istio-based Gateway API, including GatewayClass, HTTPRoute, TLS from Key Vault, canary traffic splits, and header-based routing.
Deploying the AKS Argo CD Extension with App Routing Ingress and Entra ID SSO
A complete walkthrough of the Argo CD cluster extension for AKS — what Argo CD is, the components behind it, and how to wire up App Routing ingress, TLS from Key Vault, and Microsoft Entra ID single sign-on with workload identity and group-based RBAC.
When Good Policies Break Monitoring: How an Azure Policy Silently Broke Our AKS Pipeline
An AKS incident from our deployment pipeline: Azure Monitor addons moved to a cluster extension-based backend — and a sensible Azure Policy that blocked extensions suddenly broke our AKS provisioning with no warning.
Why You Should Never Lock AKS-Managed Resources: A Volume Outage Story
A real incident from our AKS platform: resource locks on AKS-managed Azure disks silently broke the CSI driver during a node drain, leaving pods stuck without volumes. Here's what went wrong and what we should have done instead.
Runtime Threat Detection on AKS with Falco and Microsoft Sentinel
A practical walkthrough of wiring open-source Falco to Microsoft Sentinel for real-time Kubernetes runtime security: install, configure, ingest, and investigate threats — all with Infrastructure as Code.
My Experience as Technical Reviewer of "The Ultimate Docker Container Book"
Reflections on reviewing a 600+ page deep dive into Docker, Kubernetes, and managed cloud container platforms — what stood out, what I learned, and who the book is for.
Rescuing an AKS Namespace Stuck in Terminating State
A real-world story: how a nightly cleanup pipeline got blocked by a namespace stuck in Terminating, and the kubectl proxy + finalizer trick that finally got it unstuck.
Azure Application Gateway for Containers on AKS with the Gateway API
A hands-on walkthrough of deploying Application Gateway for Containers on AKS using the Kubernetes Gateway API, with a practical look at the managed and BYO deployment models.