Azure Kubernetes Service (AKS) Tutorial: (Terraform - Nginx Ingress & TLS - OIDC Workload Identity)

Ғылым және технология

🔴 - To support my channel, I’d like to offer Mentorship/On-the-Job Support/Consulting - me@antonputra.com
▬▬▬▬▬ Experience & Location 💼 ▬▬▬▬▬
► I’m a Senior Software Engineer at Juniper Networks (12+ years of experience)
► Located in San Francisco Bay Area, CA (US citizen)
▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬
► LinkedIn: / anton-putra
► Twitter/X: / antonvputra
► GitHub: github.com/antonputra
► Email: me@antonputra.com
▬▬▬▬▬▬ Related videos 👨‍🏫 ▬▬▬▬▬▬
👉 [Playlist] Kubernetes Tutorials: • Kubernetes Tutorials
👉 [Playlist] Terraform Tutorials: • Terraform Tutorials fo...
👉 [Playlist] Network Tutorials: • Network Tutorials
👉 [Playlist] Apache Kafka Tutorials: • Apache Kafka Tutorials
👉 [Playlist] Performance Benchmarks: • Performance Benchmarks
👉 [Playlist] Database Tutorials: • Database Tutorials
▬▬▬▬▬▬▬ Source Code 📚 ▬▬▬▬▬▬▬
► GitHub: github.com/antonputra/tutoria...
#azure #kubernetes #devops

Пікірлер: 52

  • @AntonPutra
    @AntonPutra8 ай бұрын

    🔴 - To support my channel, I’d like to offer Mentorship/On-the-Job Support/Consulting - me@antonputra.com

  • @mhmdbahja
    @mhmdbahja8 ай бұрын

    Incredible work as always. Keep it up!

  • @AntonPutra

    @AntonPutra

    8 ай бұрын

    Thanks Mohammad!

  • @George-mk7lp
    @George-mk7lp7 ай бұрын

    all your tutorials are truly amazing , no exception.

  • @AntonPutra

    @AntonPutra

    7 ай бұрын

    Thanks montpellier!

  • @Niko-kf1gt

    @Niko-kf1gt

    7 ай бұрын

    I agree

  • @sombiri9147
    @sombiri91478 ай бұрын

    You make look so easy Anton.

  • @AntonPutra

    @AntonPutra

    8 ай бұрын

    🥰

  • @rnrn7127
    @rnrn712728 күн бұрын

    thank you, man! you really are on a different level! keep up the good work!

  • @AntonPutra

    @AntonPutra

    28 күн бұрын

    ❤️

  • @diegonayalazo
    @diegonayalazo3 ай бұрын

    thank you Sensei :)

  • @samrybkin9184
    @samrybkin91845 ай бұрын

    Спасибо Антон было очень интересно!

  • @AntonPutra

    @AntonPutra

    5 ай бұрын

    pojalusta!

  • @diegonayalazo
    @diegonayalazo6 ай бұрын

    Thank you Sensei.

  • @AntonPutra

    @AntonPutra

    6 ай бұрын

    Thanks, Diego! :)

  • @andrewnhien9714
    @andrewnhien97147 ай бұрын

    Like the way you explain concept in Azure by compare with AWS, thank you so much. Please make more video about Azure and Azure IOT if can 🎉❤

  • @AntonPutra

    @AntonPutra

    6 ай бұрын

    Thanks! I will in the future!

  • @dennisraborar4040
    @dennisraborar40402 күн бұрын

    God bless you more brother. This tutorial is excellent for all beginners like me. If possible, can you also create a video for terragrunt Azure version with AKS cluster :)

  • @AntonPutra

    @AntonPutra

    2 күн бұрын

    Thank you! I'll think about it

  • @rahulchowdhury279
    @rahulchowdhury2798 ай бұрын

    Without @Anton Azure will become bankrupt 😂

  • @AntonPutra

    @AntonPutra

    8 ай бұрын

    😂

  • @joeb.1163

    @joeb.1163

    Ай бұрын

    🤣🤣🤣🤣🤣

  • @GabrielPozo
    @GabrielPozo8 ай бұрын

    👏👏👏👏

  • @testchannel4695
    @testchannel46955 ай бұрын

    Amazing tutorial, full of value - I'm genuinely impressed this is free on the internet, so thanks a lot. A quick question: If I run a basic .NET 8 web app, do I need to configure it to run on HTTPS before I can use the cert-manager thing on it? I currently get status code 502 when I try to access the ingress, which calls the service which calls my pod. Cheers!

  • @AntonPutra

    @AntonPutra

    5 ай бұрын

    Thank you! No you just need to use plain HTTP protocol, ingress will terminate TLS and route HTTP to your app.

  • @testchannel4695

    @testchannel4695

    5 ай бұрын

    Or should I start the 4-example from scratch directly with my app in the deployment (aka I do not start with the echo-server and then to change with my app).

  • @AntonPutra

    @AntonPutra

    5 ай бұрын

    @@testchannel4695 yes, but you still need this - github.com/antonputra/tutorials/blob/main/lessons/177/terraform/8-cert-manager.tf

  • @testchannel4695

    @testchannel4695

    5 ай бұрын

    @@AntonPutraI tried it both from scratch (directly with my image, not the echo-server), but it doesn't work - I still get the 502 when I try to access my app over HTTPS...

  • @biLLie_wiLLie
    @biLLie_wiLLie8 ай бұрын

    Anton, how did you become such smart DevOps? I heard it's hell hard. Can you compare this skill to frontend skill? What is harder?

  • @AntonPutra

    @AntonPutra

    8 ай бұрын

    First of all, you need to learn the basics, such as networking, Linux, etc., and then just keep up to date with current technologies. I know that you guys have hundreds of different JavaScript frameworks as well :)

  • @dhirajsonawane-oj7xj
    @dhirajsonawane-oj7xj8 ай бұрын

    How did you do this, everytime you put something i learn something nee from it. Thanks and keep doing this🎉

  • @AntonPutra

    @AntonPutra

    8 ай бұрын

    ❤️

  • @glebfadeev9782
    @glebfadeev97824 ай бұрын

    Лучший туториал евер

  • @AntonPutra

    @AntonPutra

    4 ай бұрын

    spasibo :)

  • @glebfadeev9782

    @glebfadeev9782

    3 ай бұрын

    Привет, подскажи пожалуйста. я добавил в твой код aks .tf следующее key_vault_secrets_provider { secret_rotation_enabled = true } как я понял Надстройка создает управляемое удостоверение. как я могу получить object_id этого удостоверения (managed indentity), чтобы добавить к azurerm_key_vault access_policy { tenant_id = data.azurerm_client_config.current.tenant_id object_id = тут этот object_id key_permissions = [ "Get", ] secret_permissions = [ "Get", ] storage_permissions = [ "Get", ] } просто по умолчанию этот managed indentity не имеет доступ к azurer_key_vault. Я конечно могу вручную дать доступ и все работает, но хотелось бы через terraform Помоги пожалуйста)@@AntonPutra

  • @glebfadeev9782

    @glebfadeev9782

    3 ай бұрын

    Привет, подскажи пожалуйста. я добавил в твой код aks следующее key_vault_secrets_provider secret_rotation_enabled = true как я понял Надстройка создает управляемое удостоверение. как я могу получить object_id этого удостоверения (managed indentity), чтобы добавить к azurerm_key_vault , access_policy просто по умолчанию этот managed indentity не имеет доступ к azurer_key_vault. Я конечно могу вручную дать доступ и все работает, но хотелось бы через terraform Помоги пожалуйста) ​@@AntonPutra

  • @glebfadeev9782

    @glebfadeev9782

    3 ай бұрын

    ​@@AntonPutra Привет. Подскажи пожалуйста. Как получить айдентиту которую azure создает автоматически в терраформ? Я, получается, добавил в aks файл аддон на key_vault_secrets_provider У меня создалась Managed Identity, но она какая то фантомная, я не могу найти ее objectId, чтобы дать ей доступ Get к Azure KeyVault

  • @glebfadeev9782

    @glebfadeev9782

    3 ай бұрын

    То есть я могу зайти на портал, найти objectId этой Айдентити и дать досутп в ручную. Но я подумал может быть есть способ через terraform. В интренетах ничего нет на эту тему

  • @phillipgilligan8168
    @phillipgilligan81686 ай бұрын

    Thanks Anton, very informative and to the point and your teaching style is fantastic. Have you considered doing Udemy courses? If you already have some, could you point me to where? If not, you really should man, you’re awesome.

  • @AntonPutra

    @AntonPutra

    6 ай бұрын

    Thank you! Not yet, still have a full time job.

  • @denistaran
    @denistaranАй бұрын

    AKS provides a more intuitive and straightforward configuration process than AWS EKS.

  • @AntonPutra

    @AntonPutra

    Ай бұрын

    Azure more on the PaaS side (platform as a service - higher level) when AWS is more infra as service (low level)

  • @Michael-wr7gi
    @Michael-wr7giАй бұрын

    Anton, how important is setting up vNets/VPCs? Can you work without them i.e at a startup, or would this result in a lot of 'technical debt' following on?

  • @AntonPutra

    @AntonPutra

    Ай бұрын

    well unless you fully use serverless functions, you need to setup vnet yourself. it's not very complicated.

  • @kayoutube690
    @kayoutube6908 ай бұрын

  • @AntonPutra

    @AntonPutra

    8 ай бұрын

    🥰

  • @kayoutube690

    @kayoutube690

    8 ай бұрын

    good job sir!

  • @kayoutube690
    @kayoutube69010 күн бұрын

    Lets encrypt is safe to use in production?

  • @AntonPutra

    @AntonPutra

    10 күн бұрын

    yes, i've been using letsencrypt for the last 3 years

  • @nandkishormetange
    @nandkishormetange3 ай бұрын

    How to enable virtual node in this code

  • @tmtam612
    @tmtam6125 ай бұрын

    when I did the example 3, it returned "Error code explanation: 404 - Nothing matches the given URI.". Do I need to add anything? please help

  • @AntonPutra

    @AntonPutra

    5 ай бұрын

    sorry, it's too generic. Make sure that load balancer is created and ingress is properly configured

Келесі