44 - AKS, AGIC and Kubenet - Tips and tricks to make it work
When using Azure Kubernetes Service (AKS), there’s a chance that kubenet might be the only possible choice due to your requirements. If so, you may still want to use Application Gateway Ingress Controller (AGIC) to leverage Azure Application Gateway’s Web Application Firewall (WAF) capabilities. In this session, we will make the journey together to have a working AGIC in an AKS cluster with kubenet and managed identities.
Related Content
V019 - Weekly Technology Vlog #19
Weekly Vlog #19 is broadcast live, opening with Azure's Fluent Design icon rebrand and covering key security and platform updates including the AKS Secret Store CSI driver add-on, Azure Security Center improvements for hybrid and multi-cloud Kubernetes, and new Azure VPN Gateway multi-authentication capabilities. GitHub Enterprise Server 3.1 launches with GitHub Actions, Packages, and Advanced Security, while the release radar spotlights Pulumi as an emerging cross-cloud infrastructure-as-code framework. Chris also recaps Cloud Gaming Notes episode four featuring Sudoku Social's Azure PlayFab backend and a new Cloud Drop on PowerShell in Azure Functions with Carol de Winter.
Azure role-based access control (RBAC) at the data plane level
Principal of least privilege is a commonly used phrase within the Technology Industry. The idea is that we'll assign permissions of what the user needs to get the job done, rather than anything broader or more privileged. This helps reduce the blast radius in the event of a compromised account. This stretches to Azure resources at the management plane, but in some cases can also stretch to the data plane of those resources. We'll be exploring these further in this blog post.
V010 - Weekly Technology Vlog #10 (Episode backlog until Mid-July! New Microphone, Ignite Content!)
Vlog #10 is a milestone episode: Chris celebrates his birthday and a full year of Cloud With Chris with a new Shure SM7B microphone upgrade. The bulk of the episode is a walkthrough of Microsoft Ignite announcements, covering Azure Arc-enabled Machine Learning for on-premises data sovereignty scenarios, the Azure Communication Services and Microsoft Teams interoperability story, and significant security updates including Azure Key Vault Managed HSM (preview) and Trusted Launch for VMs. GitHub Actions fans also get a bonus segment on four lesser-known platform capabilities, including semantic release note generation and bring-your-own-environment workflows.