Ramblings of an Inquistive Mind
In the third post we explore how we can secure the network communication – by enabling Private Links while communicating to other Azure services, restricting egress traffic using Azure Firewall, choose the right LoadBalancer for your service, create a Private AKS cluster (with Private Link to the control plane in MSFT’s subscription) and finally some basic guidance around Network Policies.…
Continue reading Secure microservices on AKS – Part 3: The Network
In the second post we explore how Azure AD Managed Identities and Azure Policy can be used with AKS to govern the cluster. We explore how one can use Managed Identities to access Azure Key Vault which contains secret connection strings, instead of using base 64 encoded Kubernetes Secrets and use Azure AD Pod Identity to enable Managed Identities for…
Continue reading Secure Microservices on AKS – Part 2: Identity
Are you looking for an end-to-end example of developing & deploying your microservices on Azure Kuberentes Service (AKS) with a focus on security ? – how can you communicate with other PAAS services using Private Links, how can you enforce governance using Azure Policieis, how to use Azure AD Pod Identity to interact with Key Vault holding application secrets etc…
Following up from the first blog post which covered the basics: deploying a Kafka cluster on AKS using Strimzi Operator, creating some Users & Topics and connecting to that cluster from inside AKS, the next post covers Exposing brokers outside the cluster securely (TLS AuthN & AuthZ) Exposing Prometheus Metrics & Consuming them via Azure Monitor Check out my article…
Apache Kafka has seen great adoption across different verticals & industries and has indeed become the de-facto choice when it comes to data streaming, building real-time big data pipelines or even communicating asynchronously b/w your trendy microservices. In this article, I compare & discuss the various options for you to deploy, run & manage Apache Kafka in Azure. To check…
Want to play with Azure Functions but rather package up the runtime and the function in a custom docker image and run that on your on-prem Kubernetes Cluster. You are in luck, I wrote a hands-on guide on how to run Azure Functions in Java, create a custom docker image and use it as you may – check out the…
Unless you’ve been living under a rock, I’m sure you know about Kubernetes – one of the vastly successful open source project for container orchestration. And for those of us, who work with any sort of Data Platform, in all likelihood, must have come across the ubiquitous Data Streaming platform – Kafka. I’ve written a couple of posts around how…
Kubernetes offers a way to create and manage sensitive information for your applications using an Object called Secret, however the information stored in a Secret is simply Base64 encoded, which is arguably as good as keeping them in plaintext. Hence for every production workload you would find solutions such as Hashicorp’s Vault or Azure Key Vault managing the secrets (keys,…