// Kubernetes

Weekly Vlog #18 arrives on a UK Bank Holiday, covering Microsoft's acquisition of Kinvolk to accelerate cloud-native investment and the preview launch of Azure Web PubSub — a managed WebSocket service for real-time applications. Chris reviews Delivery Plans 2.0 GA in Azure DevOps and GitHub engineering posts on feature flags and mono-repo performance optimisations, then shares a detailed update on the Hugo CrossPoster open-source project now featuring unit tests, SonarCloud analysis, and Polly resilience patterns including circuit breakers and retry logic.

Spring, Spring Boot, and Azure Spring Cloud demystified. Chris is joined by Gitte Vermeiren (Microsoft FastTrack Engineer) to explore what Spring and Spring Boot offer Java developers, how Azure Spring Cloud provides a fully managed platform for running microservice workloads without managing underlying infrastructure, and how it compares to Azure App Service and AKS. Whether you're a Java developer evaluating Azure or a .NET developer curious about the Java ecosystem, this episode bridges the gap with clear analogies and live demos.

Principal of least privilege is a commonly used phrase within the Technology Industry. The idea is that we'll assign permissions of what the user needs to get the job done, rather than anything broader or more privileged. This helps reduce the blast radius in the event of a compromised account. This stretches to Azure resources at the management plane, but in some cases can also stretch to the data plane of those resources. We'll be exploring these further in this blog post.

The Bulkhead pattern takes its name from the watertight compartments in a ship's hull. Just as those compartments prevent a single breach from sinking the whole vessel, the Bulkhead pattern isolates components of a cloud application so that failures or resource exhaustion in one service cannot cascade to others. This episode covers partitioning strategies, connection pools, Kubernetes resource limits, and multi-tenancy considerations.

In this Easter Sunday livestream, Chris covers Microsoft's Forrester Wave leader recognition for Azure Functions (FaaS), a wave of AKS updates including the new run command feature and Open Service Mesh add-on, and the GitHub Advanced Security security overview beta plus GA of secret scanning for private repositories. Delivery Plans 2.0 in Azure DevOps approaches GA with card styling and dependency visualisation, while GitHub Desktop gains cherry-pick support and GitHub Mobile adds working-hours notification controls. Cloud with Chris highlights include a beginner Git 101 Cloud Drop, a community blogging panel, the External Configuration and Claim Check architecture pattern episode with Peter Piper, and a preview of the upcoming Northern Azure User Group talk alongside Scott Hanselman.

Vlog #10 is a milestone episode: Chris celebrates his birthday and a full year of Cloud With Chris with a new Shure SM7B microphone upgrade. The bulk of the episode is a walkthrough of Microsoft Ignite announcements, covering Azure Arc-enabled Machine Learning for on-premises data sovereignty scenarios, the Azure Communication Services and Microsoft Teams interoperability story, and significant security updates including Azure Key Vault Managed HSM (preview) and Trusted Launch for VMs. GitHub Actions fans also get a bonus segment on four lesser-known platform capabilities, including semantic release note generation and bring-your-own-environment workflows.

When modernising a legacy application, rewriting everything from scratch is rarely feasible. The Sidecar and Ambassador cloud design patterns offer a pragmatic alternative — attach a companion process to offload cross-cutting concerns like retry logic, circuit breaking, and protocol translation without modifying the application itself. Chris and Peter explore both patterns in depth, covering when to use each, how they relate to service meshes, and their role in Kubernetes-based architectures.

Are you running dedicated compute for every tenant, microservice, or application instance — and paying for it? The Compute Resource Consolidation pattern shows you how to consolidate tasks onto shared infrastructure, such as a single AKS cluster with namespace isolation or an Azure SQL elastic pool, to reduce costs and management overhead. This episode explores the key trade-offs: blast radius containment, noisy neighbour contention, scalability profiles, and multi-tenancy strategies. Part of the "Architecting for the Cloud, One Pattern at a Time" series.

Chris recaps a JamStack blog post, an appearance on the MS How-To show covering cloud design patterns, and the gatekeeper and valet key patterns session on API security. He covers Azure updates including AKS automatic cluster upgrade channels and the Secret Store CSI driver for Azure Key Vault, Azure DevOps Delivery Plans 2.0 with YAML manual validation, Pulumi as an infrastructure-as-code tool supporting Python, TypeScript, and Go, and a comprehensive GitHub 2020 year-in-review.

Hybrid cloud is no longer just a transitional state between on-premises and public cloud — for many enterprises, it is the end state. Chris is joined by Thomas Maurer, Senior Cloud Advocate at Microsoft, to explore how Azure Arc, Azure Stack Hub, Azure Stack HCI, and Azure IoT Edge help organisations run workloads wherever they make sense: from data centres and factory floors to the network edge and other cloud providers.