NGINX Ingress is retired — here is how to migrate AKS workloads to the App Routing add-on with Istio-based Gateway API (currently in public preview): GatewayClass, HTTPRoute, TLS from Key Vault, canary deployments, and header-based routing without running a full service mesh.
A complete walkthrough of the Argo CD cluster extension for AKS — what Argo CD is, the components behind it, and how to wire up App Routing ingress, TLS from Key Vault, and Microsoft Entra ID single sign-on with workload identity and group-based RBAC.
A practical walkthrough of wiring open-source Falco to Microsoft Sentinel for real-time Kubernetes runtime security: install, configure, ingest, and investigate threats — all with Infrastructure as Code.
