This course was created with the
course builder. Create your online course today.
Start now
Create your course
with
Autoplay
Autocomplete
Previous Lesson
Complete and Continue
Advanced Kubernetes networking in Azure
Introduction to the course
Teaser (1:43)
Get the source code
Get the powerpoint presentation
Introduction to Kubernetes
Kubernetes and AKS architecture (20:58)
Getting started with Kubernetes fundamentals
Create Kubernetes cluster on Azure (12:18)
Viewing cluster infrastructure (6:01)
Creating Pod (docker image) (5:32)
Creating Deployment (3:42)
Exec into Pod (1:36)
Scale out Pods (replicas) (1:34)
Creating private/internal Service (5:17)
Creating Public Service (Public IP) (2:25)
Viewing Kubernetes objects on Azure portal (1:10)
AKS Networking Plugins
Introduction (0:36)
Kubenet networking model (10:44)
Azure CNI (Container Network Interface) (5:04)
Kubenet vs Azure CNI (4:59)
Azure CNI Overlay mode (5:41)
Kubenet vs Azure CNI Overlay (2:23)
Bring Your Own (BYO) CNI plugin (0:59)
Important notes about Kubernetes CIDR ranges (2:23)
Public and private clusters on Azure
Introduction (2:18)
Public cluster endpoint (3:49)
Private cluster using Private Endpoint (5:58)
Public cluster using VNET integration (5:10)
Private cluster with VNET integration (3:28)
Accessing a private cluster's API server (1:34)
Recap (2:22)
AKS Egress Traffic and Outbound Types
Introduction to AKS Egress and Outbound Types on the Lightboard (10:53)
Introduction to AKS Egress and Outbound Types (PPT) (3:37)
AKS with Outbound Type Load Balancer (2:54)
[Demo] AKS with Outbound Type Load Balancer (0:59)
SNAT port exhaustion issue with Load Balancer (2:22)
SNAT port exhaustion solutions (2:08)
AKS with Outbound Type Managed NAT Gateway (2:49)
[Demo] AKS with Outbound Type Managed NAT Gateway (1:29)
AKS with Outbound Type user assigned NAT Gateway (1:27)
[Demo] AKS with Outbound Type user assigned NAT Gateway (1:55)
AKS with Outbound Type user defined routing (UDR) (5:26)
[Demo] AKS with Outbound Type user defined routing (UDR) (7:02)
Ingress issues and options with UDR mode (4:02)
Kubernetes Core DNS
Introduction to domain names inside Kubernetes (3:07)
Demo - creating custom domain name inside Kubernetes (9:09)
Kubernetes External DNS
Introduction to External DNS on the Lightboard (10:30)
Introduction to External DNS with presentation (7:18)
Demo - Configuring External DNS with Azure DNS (16:19)
Kubernetes Network Policy: the in-cluster Firewall
Introduction to Network Policy with Calico (4:07)
Setting the environment for the demo (1:21)
Demo - Pod to Pod communication is not restricted (2:55)
Demo - Deploy first network policy to deny all traffic (1:54)
Demo - Validating the deny all policy (1:08)
Demo - Deploy network policy to allow certain traffic (1:38)
Demo- Validating the allow traffic policy (3:04)
Demo - Creating network policy for allowing communication inside a namespace (4:23)
Exploring network policy viewer tool (3:12)
The demo content
Securing access to cluster IMDS server (169.254.169.254)
Introduction to IMDS and its security threat (10:38)
Demo - Deny access to IMDS using Network Policy (13:02)
Exposing services through Ingress Controller
Installing and configuring Nginx Ingress Controller (12:25)
Introduction to Application Gateway intergration with AKS (0:40)
Explaining how AGIC works on the lightboard (13:29)
Introduction to Application Gateway intergration with AKS (PPT) (1:31)
Enabling AGIC extension in an AKS cluster (5:18)
Deploying an ingress using AGIC (7:23)
HTTPS in Kubernetes for Ingress and Pods
Introduction to traffic security using TLS certificates (8:53)
Introduction to securing Ingress (2:08)
Demo - Configuring TLS certificate for Ingress (9:02)
Securing access to TLS certificate using Key vault (5:00)
Demo - Configuring Ingress TLS with Azure Key vault (22:38)
Introduction to Pod to Pod communication (3:57)
Demo - Securing inter-Pod traffic using TLS certificate (5:19)
Introduction to Cert Manager (5:05)
Demo - Automate traffic encryption using Cert Manager (9:33)
AKS Landing Zone
Introduction to Platform Entreprise Scale and Application Landing Zone (6:01)
Multi-layer Terraform (4:10)
Steps to deploy AKS Landing Zone (4:06)
Customizing the Landing Zone (2:05)
Configuring Terraform backend state (1:57)
Creating Azure AD groups (2:26)
Creating the Hub network (6:18)
Creating the Spoke network (4:48)
Deploying ACR and Key vault (2:38)
Deploying AKS cluster into the Landing Zone (4:19)
Configuring private AKS network with Private Endpoint
Introduction (0:47)
Creating Private AKS cluster (3:12)
Checking the Private Endpoint for AKS (1:25)
Accessing private cluster using Command Invoke (1:49)
Creating a Jumpbox Azure VM with Bastion host (1:52)
Connect Jumpbox VM to private AKS using VNET peering (3:29)
Demoing the connection using Bastion (1:21)
Creating Private Endpoint for ACR (4:57)
Checking Private Endpoint and Private DNS for ACR (2:14)
Configuring the connection between Jumpbox VM and ACR (4:33)
Connecting AKS to ACR Private Endpoint (1:39)
Conclusion (0:43)
Karpenter for AKS
Introduction to Karpenter for AKS (6:18)
[Demo] Working with Karpenter for AKS (10:07)
Gateway API with Application Gateway for Containers
[Lightboard] Gateway API and Ingress API (5:14)
[Lightboard] AGIC vs Application Gateway for Containers
Introduction to Application Gateway for Containers
[Demo] Part 1: Setup the demo environment
[Demo] Part 2: Installing the ALB Controller and its Managed Identity
[Demo] Part 3: Creating and configuring Application Gateway for Containers
[Demo] Part 4: Exposing an application using Gateway API and HttpRoute
Data persistence in Azure Disk
Lighboard Introduction to Azure Disk (LRS, ZRS and Shared) (17:04)
Introduction to LRS Disk (4:42)
Demo Creating an Azure LRS Disk (9:24)
Introduction to Azure ZRS Disk (4:28)
Demo Creating an Azure ZRS Disk (7:32)
Introduction to Azure Shared ZRS Disk (7:25)
Demo Creating an Azure Shared ZRS Disk (9:31)
Data persistence in Storage Account
Introduction to Azure Blob Containers (14:32)
[Demo] Creating an Azure Blob Container for AKS (10:37)
Important notes for Azure Blob Container (2:01)
Introduction to Azure Blob Fuse with Managed Identity and AKS (14:49)
[Demo] Creating an Azure Blob Fuse with Managed Identity and AKS (4:57)
Backup for AKS cluster
Introduction to AKS Backup (9:53)
[Lightboard] Introduction to AKS Backup (10:02)
[Demo] Preparing the demo environment (2:55)
Installing AKS Backup extension (4:06)
[Demo] Deploying sample app (PV, Deploy) for backup (2:27)
Configuring Backup Policy and Instance (11:03)
Triggering manual backup (3:59)
Restore an AKS cluster (6:44)
Verifying Restore errors (3:19)
Securing Secrets using Secret Store CSI volume
Introduction to Secret Store CSI volume (17:41)
[Demo] Creating Secret Store CSI volume with access to Azure Key vault (13:04)
Important notes about Secret Store CSI (5:43)
Section summary
Scheduling Pods on Nodepools
Configuring Namespace for a single Nodepool (2:40)
[Demo] Configuring Namespace for a single Nodepool (5:59)
AKS versioning and upgrades
AKS versioning and versions (8:48)
AKS upgrade options (11:36)
Azure RBAC permissions for AKS
Introduction to Azure RBAC roles (5:38)
[Demo] Creating custom RBAC role for AKS (5:49)
Logging with Log Analytics
Introduction to Log Analytics and AMA agents (1:26)
[Demo] Customizing Log Analytics logging configuration (6:51)
Replacing Cluster Autoscaler with Karpenter
Introduction to Karpenter for AKS (6:18)
[Demo] Working with Karpenter for AKS (10:07)
Create Kubernetes cluster on Azure
Complete and Continue
Discussion
0
comments
Load more
course builder. Create your online course today.
Start now
course builder. Create your online course today.
Start now
course builder. Create your online course today.
Start now
0 comments