AKS Configuration and Management

Duration

3 days

What you'll learn

• What is Azure Kubernetes Service (AKS).
• Managed vs self-managed Kubernetes solutions.
• AKS Capacity Analysis.
• Detailed AKS Network architecture.
• How to create an AKS cluster using Azure Portal and Azure CLI.
• AKS authentication and authorization, including integration with Active Directory.
• How AKS manages Azure storage volumes.
• AKS monitoring and log debugging.

Requirements

• Familiarity with Azure Portal and Azure CLI.
• Understanding of Kubernetes objects, such as Namespaces, Pods and RBAC.
• Basic Bash and Linux command line knowledge.
• Understanding of network concepts.

Description

Learn how to create and manage Kubernetes using one of the leading managed services on the market.

Azure Kubernetes Service Zero to Hero admin guide is an intermediate course which describes:

• Comparison of Managed vs self-managed Kubernetes solutions;
• Pros and Cons of Managed Kubernetes services;
• AKS Capacity Analysis;
• Detailed AKS network architecture;
• How to create an AKS cluster using Azure Portal and Azure CLI;
• Integrate AKS with Active Directory;
• Create Kubernetes users using self-signed certificates;
• How AKS creates and manages Azure storage resources;
• AKS monitoring and log debugging.

Who this course is for

• Fearless Kubernetes administrators.

Course content

Azure Kubernetes Service (AKS) Overvew

• What is AKS?
• AKS pricing

Managed vs self-managed Kubernetes

• The truth about managed Kubernetes services
• The good about managed Kubernetes services
• The bad about managed Kubernetes services
• Managed vs self-managed comparison
• Managed vs self-managed Kubernetes Quiz

AKS Capacity Analysis

• Restricted Virtual Machine Sizes
• Resource Group and Tags
• Node Operating System
• Kubernetes Version
• Network
• Resources reservation
• Azure subscription limits
• Resource Group limits
• AKS Capacity Analysis Quiz

AKS Network-Architecture

Overview

• Kubenet (basic) vs Azure CNI (advanced)
• Basic Load Balancer vs Standard Load Balancer
• Recommendations
• AKS Network - Architecture Quiz

AKS Network- Egress traffic

• Basic External Load Balancer with dynamic outbound IP
• [ HANDS-ON ] Basic External Load Balancer with dynamic outbound IP
• Basic External Load Balancer with static outbound IP
• [ HANDS-ON ] Basic External Load Balancer with static outbound IP
• Standard External Load Balancer
• [ HANDS-ON ] Standard External Load Balancer
• Standard External Load Balancer Customization
• Internal Network egress
• [ HANDS-ON ] Internal network egress
• AKS Network - Egress traffic Quiz

AKS Network- Ingress Traffic

• Ingress traffic from the Internet
• [ HANDS-ON ] External nginx-ingress / cert-manager (letsencrypt) / external-dns
• HTTP Application Routing
• Ingress traffic from internal network
• [ HANDS-ON] Internal nginx-ingress/ cert-manager (self-signed)/ external-dns
• AKS Network-Ingress traffic Quiz

Create AKS Cluster

• Azure Portal vs Azure CLI
• Using Azure Portal
• [ HANDS-ON ] Using Azure Portal
• Using Azure CLI
• [ HANDS-ON ] Using Azure CLI / ACR / K8S Dashboard
• Create an AKS Cluster Quiz

AKS Access and Identity

• AKS Authorization and Authentication
• Generate kubeconfig for admins
• Generate kubeconfig for users
• Admin vs User - Security concerns
• [ HANDS-ON ] AKS auth
• AKS Access and Identity Quiz

Integrate AKS with Azure Active Directory

• Integration Architecture
• Server Application
• Client Application
• Integrate AKS with Active Directory
• Generate kubeconfig for AD users
• Kubernetes RBAC for AD users and groups
• Recommendations
• [ HANDS-ON ] AKS + Azure Active Directory
• Integrate AKS with Azure Active Directory Quiz

Kubernetes Users

• Generate self-signed certificates
• Create kubeconfig files for users
• RBAC for Kubernetes Users and Groups
• [ HANDS-ON ] Kubernetes users
• Kubernetes users Quiz

AKS volumes

• Provisioners
• Storage Classes
• [ HANDS-ON ] Storage Classes
• Dynamic Volumes
• [ HANDS-ON ] Dynamic Volumes
• Static Volumes
• AKS volumes Quiz

AKS Monitoring and Logging

• Enable AKS monitoring add-on
• Telemetry and Healtchcheck
• Log debugging
• Recommendations
• AKS Monitoring and Logging Quiz

Programme scope, delivery arrangements and suitability are confirmed during enquiry.