Provision a internal AKS cluster and deploy a .Net Core application on it with Istio and TLS Ingress using Ansible

1. Azure AKS
Kubernetes on Azure
Gaetan Jaminon – gaetan.jaminon@hotmail.com

2. Summary
What is AKS
Kubernetes
architecture
The Azure managed
components
Kubernetes resources
scheduling
Istio Ingress Gateway:
The entry point to
your services
Demo : Provisioning a
AKS cluster with
Ansible
Demo : Deploy
a .Net Core website
using Ansible

3. What is Azure AKS ?
Azure AKS is a
managed Kubernetes
cluster running on
Azure
It is integrated natively
with Azure services like
Azure AD, Azure Load
Balancers, Storage,
Network, …
The Kubernetes api is
hosted, secured and
managed for free by
Microsoft

4. Kubernetes high level architecture

5. Azure managed part of Kubernetes in AKS
Kubernetes Master Nodes
Fully managed by Microsoft.
Customers don’t have access to the
node
Kubernetes Worker Nodes
Deployed by the customers using
Microsoft tooling (Azure cli,…)
OS Patching is done by Microsoft
but the customer need to reboot
the nodes
Customers do have access to the
nodes via SSH
Kubernetes API
Fully managed by Microsoft
Secured via Azure Active Directory
Possibility to restrict network access
via WAF (Managed by Microsoft)
New version of Kubernetes is
provided by Microsoft but the
customer need to do the upgrade

6. Kubernetes resources scheduling

7. Istio Ingress Gateway: The entry point to your services

8. Demo : Azure AKS
provisioning using Ansible

9. Demo : Deploy a .Net Core
website using Ansible

10. Links :
- My Linkedin : https://www.linkedin.com/in/gaetan-jaminon-1731b0a2/
- Playbook on GitHub : https://github.com/GaetanJaminon/AKS-DEMO