Azure Kuberneties service

Rasheed Md
Content

 Introduction
 Kubernetes on Azure overview
 AKS high avaialbilty
 Resources
How Kubernetes works
Kubernetes
control Worker node
Internet
kubelet kube-proxy

1. Kubernetes users communicate

with API server and apply Docker
desired state Master node
Pod Pod

API server Containers Containers

2. Master nodes actively enforce
desired state on worker nodes

3. Worker nodes support -controller-

communication between manager -scheduler
Worker node
containers kubelet kube-proxy
Internet

4. Worker nodes support replication, namespace,

serviceaccounts, etc. etcd
communication from the
Internet Docker

Pod Pod

Containers Containers
Managed Kubernetes Kubernetes
Internet

control Worker node

kubelet kube-proxy

Docker
Master node
Pod Pod
API server Containers Containers

-controller-
manager -scheduler
Worker node
kubelet kube-proxy

replication, namespace,
serviceaccounts, etc. etcd

Docker

Pod Pod
Azure managed control plane Containers Containers

master node
components components
Integrated end-to-end Kubernetes experience
AKS production cluster

Web tier

Azure
Inner loop
Source Container Azure
code control Registry Monitor
Azure AKS dev
DevSpaces cluster
Test

Business tier
Debug

Auto-build

Azure Pipelines/
DevOps Project

Database tier
Helm chart

CI/CD
Base line architecture of AKS

© Microsoft Corporation Azure

Availability Zones in AKS

AKS provides built-in high availability features, such as multiple availability zones (in
supported regions), cluster auto-repair, and automatic upgrades.

Azure Kubernetes Service (AKS) cluster with availability

zones, distributes the node components across zones to
enhance availability and resilience. Overview of
Availability Zones in AKS:
1. Availability zones are physically separate data
centers within an Azure region.
2. They provide redundancy and fault tolerance by
ensuring that your resources are distributed across
different zones.

© Microsoft Corporation Azure

Regional High Availability for AKS Workloads

In our above architecture, we have 2 AKS clusters, one in region

North Europe (Primary) and one in West Europe.

© Microsoft Corporation Azure

Secure your Kubernetes environment with layers of isolation

Control access through Safeguard keys and Secure network Compliant Kubernetes
AAD and RBAC secrets with Key Vault communications with service with certifications
VNET and policy for SOC, HIPAA, and PCI
Scale applications on the fly

Built-in auto Global data center Elastically burst from Geo-replicated

scaling to boost performance AKS cluster using ACI container registry for low
and reach latency image serving
1.Managed Kubernetes: AKS is a fully managed Kubernetes service provided by Microsoft Azure. It
eliminates the need for manual setup, configuration, and maintenance of Kubernetes clusters. Microsoft
takes care of the underlying infrastructure, including control plane management, security patches, and
updates, allowing you to focus on deploying and managing your applications.
2.Scalability and Elasticity: AKS enables horizontal scaling of applications by automatically adjusting the
number of pod replicas based on workload demands. It supports dynamic scaling to handle increased traffic
or resource requirements, ensuring optimal performance and resource utilization.
3.Integrated Developer Tools: AKS seamlessly integrates with Azure DevOps and other popular
development tools, facilitating continuous integration and continuous deployment (CI/CD) workflows. It
provides integrations with Azure Container Registry (ACR) for easy container image storage and
deployment.
4.High Availability and Reliability: AKS provides built-in high availability features, such as multiple
availability zones (in supported regions), cluster auto-repair, and automatic upgrades. These features help
ensure that your applications are resilient and available even in the event of infrastructure failures or
planned maintenance.
5.Security and Compliance: AKS incorporates Azure security features, including Azure Active Directory
integration, role-based access control (RBAC), and network security groups. It helps secure your
containerized applications and data, ensuring compliance with regulatory requirements.
6.Monitoring and Diagnostics: AKS integrates with Azure Monitor, Azure Log Analytics, and other
monitoring tools, providing visibility into your cluster’s health, performance, and logs. You can monitor
container metrics, view logs, and set up alerts for proactive issue detection and troubleshooting.
7.Hybrid and Multi-Cloud Support: AKS enables hybrid and multi-cloud deployments by integrating with
Azure Arc. This allows you to manage and govern AKS clusters across multiple environments, including on-
Kubernetes-based event-driven auto-scaling (KEDA)

Open-source component jointly built by Microsoft and Kubernetes cluster

RedHat

• Event-driven container creation & scaling Scaler AKS cluster

Allows containers to “scale to zero” until an event
comes in, which will then create the container and External
process the event, resulting in more efficient trigger source
utilization and reduced costs Controller

• ​ ative triggers support

N
Containers can consume events directly from the
Metrics adapter
event source, instead of routing events through
HTTP

• ​ an be used in any Kubernetes service

C
This includes in the cloud (e.g., AKS, EKS, GKE, etc.) KEDA
or on-premises with OpenShift—any Kubernetes
workload that requires scaling by events instead of
traditional CPU or memory scaling can leverage this
component.
Service Mesh Interface (SMI)

SMI defines a set of APIs that can be implemented

by individual mesh providers. Service meshes and tools Apps Tooling Ecosystem
can either integrate directly with SMI or an adapter can
consume SMI and drive native mesh APIs.

• ​Standard interface for service mesh on Kubernetes​

​ asic feature set to address most common

B
•
scenarios​
Service Mesh Interface
Routing Telemetry Policy

• ​ xtensible to support new features as they become

E
widely available​

…and more

Kubernetes
Additional references,

1. aka.ms/LearnKubernetes
2. https://adrianhynes.medium.com/regional-high-availability-for-aks-workloads-
ac2dd4adc87b
3. https://github.com/virtual-kubelet/virtual-kubelet
4. https://docs.microsoft.com/en-us/azure/aks/virtual-nodes-portal
5. https://openappmodel.io/
6. https://dapr.io
7. https://azure.microsoft.com/en-us/resources/kubernetes-up-and-runni
ng/
8. https://aksworkshop.io/

9. https://thechief.io/c/codersociety/creating-and-manageing-ha-aks-
kubernetes-cluster-azure-thanks-terraform/