You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/aks/intro-kubernetes.md
+44-37Lines changed: 44 additions & 37 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -3,21 +3,22 @@ title: Introduction to Azure Kubernetes Service
3
3
description: Learn the features and benefits of Azure Kubernetes Service to deploy and manage container-based applications in Azure.
4
4
services: container-service
5
5
ms.topic: overview
6
-
ms.date: 02/24/2021
6
+
ms.date: 11/18/2022
7
7
ms.custom: mvc, ignite-2022
8
8
---
9
9
10
10
# Azure Kubernetes Service
11
11
12
-
Azure Kubernetes Service (AKS) simplifies deploying a managed Kubernetes cluster in Azure by offloading the operational overhead to Azure. As a hosted Kubernetes service, Azure handles critical tasks, like health monitoring and maintenance. Since Kubernetes masters are managed by Azure, you only manage and maintain the agent nodes. Thus, AKS is free; you only pay for the agent nodes within your clusters, not for the masters.
12
+
Azure Kubernetes Service (AKS) simplifies deploying a managed Kubernetes cluster in Azure by offloading the operational overhead to Azure. As a hosted Kubernetes service, Azure handles critical tasks, like health monitoring and maintenance. When you create an AKS cluster, a control plane is automatically created and configured. This control plane is provided at no cost as a managed Azure resource abstracted from the user. You only pay for and manage the nodes attached to the AKS cluster.
13
13
14
14
You can create an AKS cluster using:
15
-
*[The Azure CLI][aks-quickstart-cli]
16
-
*[The Azure portal][aks-quickstart-portal]
15
+
16
+
*[Azure CLI][aks-quickstart-cli]
17
17
*[Azure PowerShell][aks-quickstart-powershell]
18
-
* Using template-driven deployment options, like [Azure Resource Manager templates][aks-quickstart-template], [Bicep](../azure-resource-manager/bicep/overview.md) and Terraform.
18
+
*[Azure portal][aks-quickstart-portal]
19
+
* Template-driven deployment options, like [Azure Resource Manager templates][aks-quickstart-template], [Bicep](../azure-resource-manager/bicep/overview.md), and Terraform.
19
20
20
-
When you deploy an AKS cluster, the Kubernetes master and all nodes are deployed and configured for you. Advanced networking, Azure Active Directory (Azure AD) integration, monitoring, and other features can be configured during the deployment process.
21
+
When you deploy an AKS cluster, you specify the number and size of the nodes, and AKS deploys and configures the Kubernetes control plane and nodes. [Advanced networking][aks-networking], [Azure Active Directory (Azure AD) integration][aad], [monitoring][aks-monitor], and other features can be configured during the deployment process.
21
22
22
23
For more information on Kubernetes basics, see [Kubernetes core concepts for AKS][concepts-clusters-workloads].
23
24
@@ -26,8 +27,9 @@ For more information on Kubernetes basics, see [Kubernetes core concepts for AKS
26
27
27
28
## Access, security, and monitoring
28
29
29
-
For improved security and management, AKS lets you integrate with Azure AD to:
30
-
* Use Kubernetes role-based access control (Kubernetes RBAC).
30
+
For improved security and management, you can integrate with [Azure AD][aad] to:
31
+
32
+
* Use Kubernetes role-based access control (Kubernetes RBAC).
31
33
* Monitor the health of your cluster and resources.
32
34
33
35
### Identity and security management
@@ -42,15 +44,16 @@ You can configure an AKS cluster to integrate with Azure AD. With Azure AD integ
42
44
43
45
For more information on identity, see [Access and identity options for AKS][concepts-identity].
44
46
45
-
To secure your AKS clusters, see [Integrate Azure Active Directory with AKS][aks-aad].
47
+
To secure your AKS clusters, see [Integrate Azure AD with AKS][aks-aad].
46
48
47
49
### Integrated logging and monitoring
48
50
49
-
Azure Monitor for Container Health collects memory and processor performance metrics from containers, nodes, and controllers within your AKS cluster and deployed applications. You can review both container logs and [the Kubernetes master logs][aks-master-logs], which are:
50
-
* Stored in an Azure Log Analytics workspace.
51
+
[Azure Monitor for Container Health][azure-monitor] collects memory and processor performance metrics from containers, nodes, and controllers within your AKS clusters and deployed applications. You can review both container logs and [the Kubernetes logs][aks-master-logs], which are:
52
+
53
+
* Stored in an [Azure Log Analytics][azure-logs] workspace.
51
54
* Available through the Azure portal, Azure CLI, or a REST endpoint.
52
55
53
-
For more information, see [Monitor Azure Kubernetes Service container health][container-health].
56
+
For more information, see [Monitor AKS container health][container-health].
54
57
55
58
## Clusters and nodes
56
59
@@ -62,13 +65,13 @@ For more information about Kubernetes cluster, node, and node pool capabilities,
62
65
63
66
As demand for resources change, the number of cluster nodes or pods that run your services automatically scales up or down. You can adjust both the horizontal pod autoscaler or the cluster autoscaler to adjust to demands and only run necessary resources.
64
67
65
-
For more information, see [Scale an Azure Kubernetes Service (AKS) cluster][aks-scale].
68
+
For more information, see [Scale an AKS cluster][aks-scale].
66
69
67
70
### Cluster node upgrades
68
71
69
-
AKS offers multiple Kubernetes versions. As new versions become available in AKS, you can upgrade your cluster using the Azure portalor Azure CLI. During the upgrade process, nodes are carefully cordoned and drained to minimize disruption to running applications.
72
+
AKS offers multiple Kubernetes versions. As new versions become available in AKS, you can upgrade your cluster using the Azure portal, Azure CLI, or Azure PowerShell. During the upgrade process, nodes are carefully cordoned and drained to minimize disruption to running applications.
70
73
71
-
To learn more about lifecycle versions, see [Supported Kubernetes versions in AKS][aks-supported versions]. For steps on how to upgrade, see [Upgrade an Azure Kubernetes Service (AKS) cluster][aks-upgrade].
74
+
To learn more about lifecycle versions, see [Supported Kubernetes versions in AKS][aks-supported versions]. For steps on how to upgrade, see [Upgrade an AKS cluster][aks-upgrade].
72
75
73
76
### GPU-enabled nodes
74
77
@@ -86,49 +89,47 @@ For more information, see [Confidential computing nodes on AKS][conf-com-node].
86
89
87
90
Mariner is an open-source Linux distribution created by Microsoft, and it’s now available for preview as a container host on Azure Kubernetes Service (AKS). The Mariner container host provides reliability and consistency from cloud to edge across the AKS, AKS-HCI, and Arc products. You can deploy Mariner node pools in a new cluster, add Mariner node pools to your existing Ubuntu clusters, or migrate your Ubuntu nodes to Mariner nodes.
88
91
89
-
For more information, see [Use the Mariner container host on Azure Kubernetes Service (AKS)](use-mariner.md)
92
+
For more information, see [Use the Mariner container host on AKS](use-mariner.md)
90
93
91
94
### Storage volume support
92
95
93
-
To support application workloads, you can mount static or dynamic storage volumes for persistent data. Depending on the number of connected pods expected to share the storage volumes, you can use storage backed by either:
94
-
* Azure Disks for single pod access, or
95
-
* Azure Files for multiple, concurrent pod access.
96
+
To support application workloads, you can mount static or dynamic storage volumes for persistent data. Depending on the number of connected pods expected to share the storage volumes, you can use storage backed by:
96
97
97
-
For more information, see [Storage options for applications in AKS][concepts-storage].
98
+
*[Azure Disks][azure-disk] for single pod access
99
+
*[Azure Files][azure-files] for multiple, concurrent pod access.
98
100
99
-
Get started with dynamic persistent volumes using [Azure Disks][azure-disk] or [Azure Files][azure-files].
101
+
For more information, see [Storage options for applications in AKS][concepts-storage].
100
102
101
103
## Virtual networks and ingress
102
104
103
-
An AKS cluster can be deployed into an existing virtual network. In this configuration, every pod in the cluster is assigned an IP address in the virtual network, and can directly communicate with:
104
-
* Other pods in the cluster
105
-
* Other nodes in the virtual network.
105
+
An AKS cluster can be deployed into an existing virtual network. In this configuration, every pod in the cluster is assigned an IP address in the virtual network and can directly communicate with other pods in the cluster and other nodes in the virtual network.
106
106
107
-
Pods can also connect to other services in a peered virtual network and to on-premises networks over ExpressRoute or site-to-site (S2S) VPN connections.
107
+
Pods can also connect to other services in a peered virtual network and on-premises networks over ExpressRoute or site-to-site (S2S) VPN connections.
108
108
109
109
For more information, see the [Network concepts for applications in AKS][aks-networking].
110
110
111
111
### Ingress with HTTP application routing
112
112
113
113
The HTTP application routing add-on helps you easily access applications deployed to your AKS cluster. When enabled, the HTTP application routing solution configures an ingress controller in your AKS cluster.
114
114
115
-
As applications are deployed, publicly accessible DNS names are autoconfigured. The HTTP application routing sets up a DNS zone and integrates it with the AKS cluster. You can then deploy Kubernetes ingress resources as normal.
115
+
As applications are deployed, publicly accessible DNS names are auto-configured. The HTTP application routing sets up a DNS zone and integrates it with the AKS cluster. You can then deploy Kubernetes ingress resources as normal.
116
116
117
-
To get started with ingress traffic, see [HTTP application routing][aks-http-routing].
117
+
To get started with Ingress traffic, see [HTTP application routing][aks-http-routing].
118
118
119
119
## Development tooling integration
120
120
121
-
Kubernetes has a rich ecosystem of development and management tools that work seamlessly with AKS. These tools include Helm and the Kubernetes extension for Visual Studio Code.
121
+
Kubernetes has a rich ecosystem of development and management tools that work seamlessly with AKS. These tools include [Helm][helm] and the [Kubernetes extension for Visual Studio Code][k8s-extension].
122
122
123
123
Azure provides several tools that help streamline Kubernetes, such as DevOps Starter.
124
124
125
125
### DevOps Starter
126
126
127
127
DevOps Starter provides a simple solution for bringing existing code and Git repositories into Azure. DevOps Starter automatically:
128
-
* Creates Azure resources (such as AKS);
129
-
* Configures a release pipeline in Azure DevOps Services that includes a build pipeline for CI;
130
-
* Sets up a release pipeline for CD; and,
131
-
* Generates an Azure Application Insights resource for monitoring.
128
+
129
+
* Creates Azure resources (such as AKS).
130
+
* Configures a release pipeline in Azure DevOps Services that includes a build pipeline for CI.
131
+
* Sets up a release pipeline for CD.
132
+
* Generates an Azure Application Insights resource for monitoring.
132
133
133
134
For more information, see [DevOps Starter][azure-devops].
134
135
@@ -140,22 +141,23 @@ To create a private image store, see [Azure Container Registry][acr-docs].
140
141
141
142
## Kubernetes certification
142
143
143
-
AKS has been CNCF-certified as Kubernetes conformant.
144
+
AKS has been [CNCF-certified][cncf-cert] as Kubernetes conformant.
144
145
145
146
## Regulatory compliance
146
147
147
148
AKS is compliant with SOC, ISO, PCI DSS, and HIPAA. For more information, see [Overview of Microsoft Azure compliance][compliance-doc].
148
149
149
150
## Next steps
150
151
151
-
Learn more about deploying and managing AKS with the Azure CLI Quickstart.
152
+
Learn more about deploying and managing AKS.
152
153
153
154
> [!div class="nextstepaction"]
154
-
> [Deploy an AKS Cluster using Azure CLI][aks-quickstart-cli]
155
+
> [Cluster operator and developer best practices to build and manage applications on AKS][aks-best-practices]
Create an *.env* file as shown below using the *.env.sample* file as a guide. Set the value of `DBNAME` to the name of an existing database in your local PostgreSQL instance. Set the values of `DBHOST`, `DBUSER`, and `DBPASS` as appropriate for your local PostgreSQL instance.
0 commit comments