Introduction

How to setup an AKS cluster

Cluster infrastructure resources

Create Pod

Create deployment object

Exec into Pod

Scale pods

Create private service

Create public service using LoadBalancer

View kubernetes objects in the Azure portal

Introduction to clusters access modes

Architecture of a public cluster

Public cluster with VNET integration

Private cluster with VNET integration

Accessing a private cluster

Recap

AKS architecture revisited

Introduction to AKS Network Isolated cluster

Demo Setting up a network isolated cluster

Introduction to accessing private AKS using Bastion

Bastion support for Hub and Spoke

Demo Accessing private AKS using Bastion

Azure CNI (advanced) network mode

Kubenet vs Azure CNI

Azure CNI Overlay mode

Bring Your Own (BYO) CNI plugin

Kubenet vs Azure CNI Overlay mode

CIDR ranges overlapping considerations

Kubenet (basic) network mode

DNS configuration options for Private AKS

Introduction to AKS Private DNS resolution at scale

Demo Resolving private endpoint using public FQDN

Demo Centralized DNS resolution

Demo Decentralized DNS resolution

Introduction to External DNS (PPT)

Introduction to External DNS on the Lightboard

Demo Managing domain names using External DNS

Introduction to Core DNS (previously Kube-DNS)

Demo Setting up custom domain name using CoreDNS

Enable logging DNS queries

Demo Part 1 Setup the demo environment

Lightboard Gateway API and Ingress API

Introduction to Application Gateway for Containers

Lightboard AGIC vs Application Gateway for Containers

Demo Part 2 Installing the ALB Controller and its Managed Identity

Demo Part 4 Exposing an application using Gateway API and HttpRoute

Demo Part 3 Creating and configuring Application Gateway for Containers

Introduction to Application Routing

Lightboard Introduction to AKS Application Routing

Demo Creating Nginx Ingress Controller using Application Routing

Demo Creating Internal Nginx Ingress Controller

Demo Configuring custom domain name using External-DNS

Demo Securing ingress with a TLS certificate from Key vault

Demo Configuring Private DNS Zone for an internal ingress

Exploring the roadmap for Application Routing

Demo Exporting ingress controller metrics in Prometheus and Grafana

Introduction to AKS Egress and Outbound Types (PPT)

Demo AKS with Outbound Type Load Balancer

AKS with Outbound Type Load Balancer

SNAT port exhaustion issue with Load Balancer

SNAT port exhaustion solutions

AKS with Outbound Type Managed NAT Gateway

Introduction to AKS egress traffic and outbound types

Demo AKS with Outbound Type Managed NAT Gateway

AKS with Outbound Type user assigned NAT Gateway

Demo AKS with Outbound Type user assigned NAT Gateway

Important notes about NAT Gateway

Ingress issues and options with UDR mode

Demo AKS with Outbound Type user defined routing (UDR)

AKS with Outbound Type user defined routing (UDR)

Migrate from Load Balancer to NAT Gateway

Introduction to HTTP Proxy settings with AKS

Demo Configuring an AKS cluster with MITM Proxy server

Demo AKS proxy config ignores non-HTTP traffic

Creating an AKS cluster with Calico enabled

Filtering egress traffic for an IP address using Calico

Introduction to controlling egress traffic

Filtering egress traffic for an FQDN using Cilium Network Policy

Logging egress and ingress traffic with Log action

Viewing denied traffic logs in Cilium pods

Creating an AKS cluster and installing Cilium

Using Hubble to monitor network and denied traffic

Introduction to Kube Static Egress Gateway

Demo Assigning static IP addresses using Kube Static Egress Gateway

Demo Preserving client IP address

Introduction to preserving client IP

Demo Preserving IP address with Nginx Ingress Controller

Introduction to StatefulSet

Advanced scenario Statefulset for a MySql cluster with many replicas

Demo Creating a StatefulSet

Demo Creating a MySql cluster with primary and replica instances

Using Azure Disk with Local Redundent Storage (LRS)

Introduction to Azure Disk with Zone Redundant Storage (ZRS)

Demo Creating Azure Disk with Local Redundent Storage (LRS)

Introduction to Azure Shared Disk with Zone Redundant Storage (ZRS)

Demo Creating Azure Disk with Zone Redundant Storage (ZRS)

Demo Creating Azure Shared Disk with Zone Redundant Storage (ZRS)

Introduction to Azure Disk

Important notes on Blob Storage

Securing access to Blob Fuse using Managed Identity

Demo Creating an Azure Blob Storage for AKS

Introduction to Azure Blob Storage

Demo Attaching a Blob Fuse to AKS using User Managed Identity

Introduction the Kubernetes Snapshot API

{Demo Creating a Snapshot for a persistent volume

Demo Preparing the environment

Prez Introduction to AKS Backup

Demo Installing the Backup extension

Deploying sample app (PV, Deploy) for backup

Triggering manual Backup

Configuring AKS Backup Policy and Instance

Restore an AKS cluster

Verifying Restore errors

Lightboard Introduction to AKS Backup

Introduction to Velero

Demo Restore an AKS cluster from backup

Demo Creating AKS cluster backup using Velero

Introduction to Secret Store CSI volume

Final notes

Demo Creating a Secret Store CSI volume that access Azure Key vault

Configuring Namespace for a single Nodepool

Demo Configuring Namespace for a single Nodepool

Introduction to securing Ingres using TLS certificates

Securing ingress traffic using TLS certificates stored in Azure Key vault

Demo Securing ingress using TLS certificate stored in kubernetes secret

Exposing non secure ingress

Demo Securing ingress traffic using TLS certificates stored in Azure Key vault

Lightboard Securing traffic for ingress and pods

Introduction to inter pod communication

Demo Securing to inter pod communication

Using Cert Manager to configure HTTPS on Pods

Demo Using Cert Manager to configure HTTPS on Pods

Setting up the demo env

Introduction to Calico

All pods across namespaces can communicate with each other

Demo Testing the deny all policy

Demo Testing the allow traffic policy

Deploying the first network policy to deny all traffic between pods

Deploying a policy to allow specific traffic

Exploring Network Policy Viewer tool

Creating network policy to allow traffic in a certain namespace

Introduction to using API Management with AKS

Introduction to Exposing AKS apps using API Management Self Hosted Gateway

Demo Exposing AKS apps with APIM

Demo Exposing AKS apps using Self Hosted Gateway with Terraform

Demo Exposing AKS apps using API Management Self Hosted Gateway

Deny access to IMDS using Network Policy

Demo Deny access to IMDS using Network Policy

Introduction to Azure Front Door

Demo Exposing AKS apps using Front Door, PLS and ingress controller

Demo Terraform configuration for exposing AKS apps using Front Door

Demo Exposing AKS apps using Front Door and PLS

Introduction to Azure RBAC roles

Demo Creating custom Azure RBAC role for AKS deployment reader

Introduction to Log Analytics agents customization

Demo Customizing Log Analytics logging config

AKS versioning and support

AKS upgrade options

Introduction to Karpenter for AKS

Demo Working with Karpenter for AKS

Introduction to AKS monitoring and logging

Lightboard Introduction to AKS monitoring and logging

Demo Enabling Managed Prometheus, Grafana and Log Analytics for monitoring

Introduction to private monitoring with AMPLS

Lightboard Introduction to private monitoring with AMPLS

Demo Using Terraform to enable monitoring in AKS

Demo Using AMPLS with private Log Analytics and private Monitor Workspace

Demo Importing Grafana dashboard using Azure CLI

Demo Exporing and importing a Grafana dashboard

Demo Creating a Grafana dashboard

AMA using Prometheus exporter

AMA authentication to Azure Monitor

Introduction to ArgoCD

Demo Deploying an app using ArgoCD

Demo Deploying a Helm chart using ArgoCD

Introduction to LLM models and ollama

Demo Running Ollama in local machine

Demo Running Ollama and chat app in docker containers

Demo Deploying Ollama and chat app in AKS cluster

Demo Viewing apps cost in Cost Analysis

Introduction to AKS Cost Analysis

Introduction to AKS Automatic

Demo Exploring AKS Automatic

Introduction to ACR with ABAC

Demo Configuring ACR with ABAC

Introduction to private AKS cluster in VNET

Introduction to private ACR with private AKS

Demo Creating private AKS and VM

Demo Creating private ACR and setting the connection with AKS