Difference between workload managed identity, Pod Managed Identity and AKS Managed Identity

Azure Kubernetes Service(AKS) offers several options for managing identities within Kubernetes clusters, including AKS Managed Identity, Pod Managed Identity, and Workload Managed Identity. Here’s a comparison of these three options: Key Features AKS Managed Identity Pod Managed Identity Workload Managed Identity Overview A built-in feature of AKS that allows you to assign an Azure AD […]

Read more →

Private Kubernetes cluster in AKS with Azure Private Link

Today, we’ll take a look at a new feature in AKS called Azure Private Link, which allows you to connect to AKS securely and privately over the Microsoft Azure backbone network. In the past, connecting to AKS from an on-premises network or other virtual network required using a public IP address, which posed potential security […]

Read more →

The Rise of GitOps: Automating Deployment and Improving Reliability

GitOps is a relatively new approach to software delivery that has been gaining popularity in recent years. It is a set of practices for managing and deploying infrastructure and applications using Git as the single source of truth. In this blog post, we will explore the concept of GitOps, its key benefits, and some examples […]

Read more →

GitOps with a comparison between Flux and ArgoCD and which one is better for use in Azure AKS

GitOps has emerged as a powerful paradigm for managing Kubernetes clusters and deploying applications. Two popular tools for implementing GitOps in Kubernetes are Flux and ArgoCD. Both tools have similar functionalities, but they differ in terms of their architecture, ease of use, and integration with cloud platforms like Azure AKS. In this blog, we will […]

Read more →

What is Landing Zone in Azure? How to implement it via Terraform

In Azure, a landing zone is a pre-configured environment that provides a baseline for hosting workloads. It helps organizations establish a secure, scalable, and well-managed environment for their applications and services. A landing zone typically includes a set of Azure resources such as networks, storage accounts, virtual machines, and security controls. Implementing a landing zone […]

Read more →

Azure Kubernetes Service (AKS): A Solutions Architect’s Guide to Enterprise Container Orchestration

After two decades of deploying and managing containerized workloads across enterprises, I’ve watched Kubernetes evolve from a complex orchestration tool into the de facto standard for container management. Azure Kubernetes Service (AKS) represents Microsoft’s fully managed Kubernetes offering, and having architected dozens of AKS deployments, I can share the patterns and practices that separate successful […]

Read more →