Ramblings of an Inquistive Mind
In the third post we explore how we can secure the network communication – by enabling Private Links while communicating to other Azure services, restricting egress traffic using Azure Firewall, choose the right LoadBalancer for your service, create a Private AKS cluster (with Private Link to the control plane in MSFT’s subscription) and finally some basic guidance around Network Policies.…
Continue reading Secure microservices on AKS – Part 3: The Network
In the second post we explore how Azure AD Managed Identities and Azure Policy can be used with AKS to govern the cluster. We explore how one can use Managed Identities to access Azure Key Vault which contains secret connection strings, instead of using base 64 encoded Kubernetes Secrets and use Azure AD Pod Identity to enable Managed Identities for…
Continue reading Secure Microservices on AKS – Part 2: Identity
Are you looking for an end-to-end example of developing & deploying your microservices on Azure Kuberentes Service (AKS) with a focus on security ? – how can you communicate with other PAAS services using Private Links, how can you enforce governance using Azure Policieis, how to use Azure AD Pod Identity to interact with Key Vault holding application secrets etc…
Unless you’ve been living under a rock, I’m sure you know about Kubernetes – one of the vastly successful open source project for container orchestration. And for those of us, who work with any sort of Data Platform, in all likelihood, must have come across the ubiquitous Data Streaming platform – Kafka. I’ve written a couple of posts around how…
Kubernetes offers a way to create and manage sensitive information for your applications using an Object called Secret, however the information stored in a Secret is simply Base64 encoded, which is arguably as good as keeping them in plaintext. Hence for every production workload you would find solutions such as Hashicorp’s Vault or Azure Key Vault managing the secrets (keys,…