Azure Rosenheim Meetup: Azure Service Operator

•

0 j'aime•62 vues

ARM Templates und Terraform sind mittlerweile bekannt und weit verbreitet. In diesem Meetup wollen wir Euch zwei alternative Möglichkeiten zeigen, wie ihr Eure Azure Ressource verwalten und in Infrastructure as Code abbilden könnt. Hierbei zeigen wir Euch in einer Demo, wie die Tools funktionieren und sprechen Vor- und Nachteile sowie Best Practices an.

Technologie

Azure Service Operator
Provision Your Resources in a Cloud-Native Way
Azure Rosenheim Meetup 2021

Nico Meisenzahl
• Senior Cloud & DevOps Consultant at white duck
• Microsoft MVP, GitLab Hero & Docker Community
Leader
• Container, Kubernetes, Cloud-Native & DevOps
© white duck GmbH 2021
Phone: +49 8031 230159 0
Email: nico.meisenzahl@whiteduck.de
Twitter: @nmeisenzahl
LinkedIn: https://www.linkedin.com/in/nicomeisenzahl
Blog: https://meisenzahl.org

Agenda
• what is Azure Service Operator?
• bundle your app with its infrastructure
• manage your infrastructure with GitOps
© white duck GmbH 2021

Azure Service Operator (ASO)
• “…helps you provision Azure resources and connect your
applications to them from within Kubernetes.”
• Why?
• Bundle your app with its infrastructure
• GitOps
• …
© white duck GmbH 2021

Azure Service Operator (ASO)
• open-source project by Microsoft Azure
• still pretty new
• V1 but not production-ready yet
• 280 stars, 53 Contributors
• 3200 commit, first one in July 2019
• first use case was a self-service portal for an enterprise
customer
• monthly community call
© white duck GmbH 2021

ASO – how it works
• Custom Resource Definitions (CRDs) for each of the
Azure services
• e.g. ResourceGroup, RedisCache, CosmosDB, …
• A Kubernetes controller that watches for changes of the
CRDs and then acting on them
• creates, update, delete the Azure resources
© white duck GmbH 2021

ASO - technical details
• can be installed via Helm Chart on any Kubernetes
Cluster
• requires
• Cert-Manager
• Service Principal or Managed Identity (requires AKS)
• Azure AD Pod Identity (part of ASO, requires AKS)
• Controller is based on Kubebuilder
© white duck GmbH 2021

ASO – GitHub project
© white duck GmbH 2021

Demo: Create a first Azure resource
© white duck GmbH 2021

Demo: Bundle your app with its infrastructure
• combine app and infrastructure in one deployment
• inject secrets & connections strings via auto-generated
secrets
© white duck GmbH 2021

Manage your infrastructure with GitOps
• GitOps?
• Git as the single source of truth
• Push vs pull pipeline
• tools like Argo CD & Flux CD
can help
© white duck GmbH 2021

More on ASO
• detailed blog post on ASO
• https://medium.com/01001101/azure-service-operator-manage-
your-azure-resources-with-kubernetes-69f49d9dbbc5
• Cloud Native Club - ASO episode
• https://www.youtube.com/watch?v=d02hiMHLmsg
© white duck GmbH 2021

Questions?
Slides: https://www.slideshare.net/nmeisenzahl
Demo: https://github.com/nmeisenzahl/aso-fluxcd-sample
Nico Meisenzahl (Senior Cloud & DevOps Consultant)
Phone: +49 8031 230159 0
Email: nico.meisenzahl@whiteduck.de
Twitter: @nmeisenzahl
LinkedIn: https://www.linkedin.com/in/nicomeisenzahl
Blog: https://meisenzahl.org
© white duck GmbH 2021

Contenu connexe

Tendances

Nico will show how to hijack a Kubernetes cluster based on common attack vectors. You'll also learn why it's important to implement zero-trust to prevent data leaks and malicious workloads from being executed on a hijacked cluster. Furthermore, he will show you how to protect your cluster from being taken over by sharing useful insights, configurations, and toolsets. This talk is not intended to be an in-depth security talk, but to provide you with best practices and also make you aware of certain attack vectors and how to prevent them.

Hijack a Kubernetes Cluster - a Walkthrough

Nico Meisenzahl

You are already running Kubernetes-based workloads on Azure Kubernetes Service and want to get more out of it? This is your session! In this talk, Nico will show you all the nice features you get with AKS besides just Kubernetes. Learn all the details about the available add-ons, integrations, and toolsets to integrate and secure your Kubernetes-based applications. Furthermore, Nico will give a preview of potential new features from the AKS roadmap.

Azure Zürich User Group: Azure Kubernetes Service – more than just a managed ...

Nico Meisenzahl

GitHub Actions 101

Nico Meisenzahl

Learn how to eliminate any dependencies on your CI/CD build nodes and don’t bother yourself with multiple versions of your toolchain and any corresponding constraints. Walk away with knowledge and best practices that will help you to optimize your builds and deployments with containerized pipelines! Use containerized GitLab CI/CD pipelines and Kaniko to move your build and deployment workloads into your Kubernetes cluster. Build your apps and infrastructure without any external dependencies and constraints. If you are building a Go project, deploying an app to Kubernetes or just building your infrastructure. It doesn’t matter, anything is possible! Join Nico on a deep dive into the secrets of building hassle-free containerized build and deployment pipelines with GitLab CI/CD, Kubernetes and Kaniko.

Virtual GitLab Meetup: How Containerized Pipelines and Kubernetes Can Boost Y...

Nico Meisenzahl

Cloud native environments are a double edged sword - used right, the benefits are immense. However, it also introduces multiple entry points for example security breaches. In this session, Nico will show how application vulnerabilities make it easy to hijack a Kubernetes cluster. He will also talk about why it's important to implement zero-trust to prevent data leaks and malicious workloads from being executed on a hijacked cluster. In addition, you will learn how GitLab can protect you from being hijacked. Nico will talk about how to create more secure applications by using Static Application Security Testing (SAST) as well as how to secure your Kubernetes cluster with Container Host Security, Container Network Security or a Web Application Firewall.

GitLab Commit DevOps: How GitLab Can Save your Kubernetes environment from Be...

Nico Meisenzahl

Docker Rosenheim Meetup: Policy & Governance for Kubernetes

Nico Meisenzahl

FestiveTechCalendar2021 - Have Yourself An Azure Container Registry

Philip Welz

Learn how to eliminate any dependencies on your CI/CD build nodes and don’t bother yourself with multiple versions of your toolchain and any corresponding constraints. Walk away with knowledge and best practices that will help you to optimize your builds and deployments with containerized pipelines! Use containerized Gitlab CI/CD pipelines and Kaniko to move your build and deployment workloads into your Kubernetes cluster. Build your apps and infrastructure without any external dependencies and constraints. You are building a Go project, deploying an app to Kubernetes or building your infrastructure. It doesn’t matter. Anything is possible! Nico will also introduce you to Tekton - an open source project which helps you building a cloud native toolchain by moving your whole CI/CD into Kubernetes. Join Nico on a deep dive into the secrets of building hassle-free containerized build and deployment pipelines with Gitlab CI/CD, Kaniko and Tekton.

DevOps Gathering - How Containerized Pipelines Can Boost Your CI/CD

Nico Meisenzahl

Policy & Governance für Kubernetes

Nico Meisenzahl

Learn how to eliminate any dependencies on your CI/CD build nodes and don’t bother yourself with multiple versions of your toolchain and any corresponding constraints. Walk away with knowledge and best practices that will help you to optimize your builds and deployments with containerized pipelines Use containerized Gitlab CI/CD pipelines and Kaniko to move your build and deployment workloads into your Kubernetes cluster. Build your apps and infrastructure without any external dependencies and constraints. You are building a Go project, deploying an app to Kubernetes or building your infrastructure. It doesn’t matter. Anything is possible! Nico will also introduce you to Tekton – an open source project which helps you building a cloud native toolchain by moving your whole CI/CD into Kubernetes. Join Nico on a deep dive into the secrets of building hassle-free containerized build and deployment pipelines with Gitlab CI/CD, Kaniko and Tekton.

DevOpsCon London: How containerized Pipelines can boost your CI/CD

Nico Meisenzahl

Containerisierte Anwendungen sind zu einem festen Bestandteil unseres Alltags geworden. Erfahren Sie alles über Containern und wie Sie diese in der Azure Cloud betreiben können. In diesem Vortrag erklärt Nico, wie Container funktionieren und zeigt Ihnen welche Probleme diese in Ihrem Alltag lösen können. Im Anschluss erfahren Sie, wie Kubernetes Ihnen helfen kann, Container in Produktion zu betreiben. Lernen Sie die Grundlagen sowie Best-Practises kennen, die Sie direkt umsetzten können! Abschließend werden Sie die Möglichkeiten der Azure Container Services kennenlernen. Nico wird hierbei insbesondere auf Azure Kubernetes Service, Azure Container Registry und Azure Container Instances eingehen.

Global Azure Virtual: Container & Kubernetes on Azure

Nico Meisenzahl

Global Azure Bootcamp: Container, Docker & Kubernetes Basics

Nico Meisenzahl

In this talk, Nico will introduce you to the Azure Service Operator project. The Azure Service Operator allows you to manage your Azure resources with a cloud-native approach using a Kubernetes Controllers and Custom Resource Definitions (CRDs). We will show you how Azure Service Operator works and share how customers and partners use it to take their Azure infrastructure management to the next level. Get insights into how Azure Service Operator can help you to package your application with its infrastructure dependencies, how you can use a GitOps approach to manage your Azure infrastructure, or how Azure Service Operator allows you to create your own composable abstraction to build your own implementations and self-service solutions. Walk away and know everything you need to know to successfully provision your Azure resources with Azure Service Operator.

Azure Service Operator - Provision Your Resources in a Cloud-Native Way

Nico Meisenzahl

Whether you want to get started with Infrastructure as Code on Azure or using it already today, in this session Philip will talk about Bicep and Terraform as well as the battle between them. Is there even a battle or is it just marketing? Do I have to decide? What is the best choice for my use case? If you have ever asked yourself one of those questions or even are just curious about one of those tools, this talk is for you. In short: There is no battle. Both tools have different scopes. Philip will talk about the pros and cons, and what the tools themselves focus on. Join his talk to learn more!

AzDevCom2021 - Bicep vs Terraform

Philip Welz

Hijack a Kubernetes Cluster - a Walkthrough

Nico Meisenzahl

Join Nico to learn how to enhance your Kubernetes CI/CD pipelines with GitLab FOSS/CE features as well as Open Source projects. Learn how GitLab can help you to better integrate your CI/CD pipelines with Kubernetes. Nico will talk about newer GitLab FOSS/CE features like the Web Application Firewall for Kubernetes Ingress, Monitoring and Logging as well as Serverless with Knative. Besides this, you will also learn how Open Source projects like Kaniko and Kustomize can help you to streamline your pipelines. Walk away with knowledge and best practices that will help you to enhance your own Kubernetes CI/CD Pipelines with Gitlab and Open Source!

GitLab Remote Meetup: Enhance Your Kubernetes CI/CD Pipelines with GitLab & ...

Nico Meisenzahl

Working within a heavily regulated environment brings a special set of challenges, including increased difficulty in application scaling. In this session you will learn how you can enhance your Kubernetes CI/CD pipelines with GitLab and other open source projects. We will demonstrate practices for deployments using newer GitLab features like the Web Application Firewall for Kubernetes Ingress, and managing serverless functions with Knative. The techniques covered in this session will give you new options to streamline your Kubernetes pipelines reliably and consistently.

Enhance Your Kubernetes CI/CD Pipelines With GitLab & Open Source

Nico Meisenzahl

Besuchen Sie Nicos Vortrag um zu erfahren wie Sie Ihre eigene Private Cloud on-premises aufbauen können. Ziel dieser Session ist es, dass Sie einen Überblick erhalten, wie man eine Private Cloud Umgebung auf Basis von Kubernetes, unter Berücksichtigung notwendiger Anforderungen, aufbaut. Nico wird mit Ihnen über das Cluster Provisioning selbst sowie die benötigte Toolchain sprechen, die Sie benötigen um die eigene Umgebung erfolgreich zu betreiben. Im Vordergrund stehen dabei Themen wie Infrastructure as Code, CI/CD, Storage, Monitoring, Hochverfügbarkeit und Sicherheit. Erhalten Sie das notwendige Wissen sowie Best Practices, die Ihnen beim Aufbau Ihrer eigenen Private Cloud-Umgebung helfen.

Build your own private Cloud environment

Nico Meisenzahl

Whether you want to get started with Governance or improve your current process, this talk will show you how to improve your compliance by implementing policy-based CI/CD (Continuous Integration / Continuous Delivery) with GitLab CI and Open Policy Agent. Philippe and Nico will tell you all the details about Open Policy Agent and how you can easily integrate it into your existing CI/CD pipelines. Join our session to learn how to improve compliance, from gating your dependencies to controlling your infrastructure.

GitLab Commit: Enhance your Compliance with Policy-Based CI/CD

Nico Meisenzahl

In diesem Meetup möchten wir über Service Meshes sprechen. Was ist ein Service Mesh genau und wie funktioniert es? Wir klären euch auf! Wir starten den Abend mit einem Beispiel-Anwendung an der wir euch zeigen wie man Retry-, Timeout-Management sowie Circuit Breaker als Code implementiert um eine widerstandsfähige und belastbare Microservice zu erhalten. Des Weiteren zeigen wir auch die Implementierung von mutual TLS mit der eine sichere Kommunikation gewährleistet ist. Im Anschluss schauen wir uns nach einer Einleitung zu den Grundlagen von Service Meshes an wie man mit Hilfe von Istio die oben beschriebenen Funktionen abstrahieren und vom Code in die Infrastruktur verlagern kann. Abschließen geben wir einen Ausblick auf weitere Funktionen von Istio wie A/B testing und Fault Injection.

Was ist ein Service Mesh und wie funktioniert es?

Cloud Native Rosenheim Meetup

Tendances (20)

Hijack a Kubernetes Cluster - a Walkthrough

Azure Zürich User Group: Azure Kubernetes Service – more than just a managed ...

GitHub Actions 101

Virtual GitLab Meetup: How Containerized Pipelines and Kubernetes Can Boost Y...

GitLab Commit DevOps: How GitLab Can Save your Kubernetes environment from Be...

Docker Rosenheim Meetup: Policy & Governance for Kubernetes

FestiveTechCalendar2021 - Have Yourself An Azure Container Registry

DevOps Gathering - How Containerized Pipelines Can Boost Your CI/CD

Policy & Governance für Kubernetes

DevOpsCon London: How containerized Pipelines can boost your CI/CD

Global Azure Virtual: Container & Kubernetes on Azure

Global Azure Bootcamp: Container, Docker & Kubernetes Basics

Azure Service Operator - Provision Your Resources in a Cloud-Native Way

AzDevCom2021 - Bicep vs Terraform

Hijack a Kubernetes Cluster - a Walkthrough

GitLab Remote Meetup: Enhance Your Kubernetes CI/CD Pipelines with GitLab & ...

Enhance Your Kubernetes CI/CD Pipelines With GitLab & Open Source

Build your own private Cloud environment

GitLab Commit: Enhance your Compliance with Policy-Based CI/CD

Was ist ein Service Mesh und wie funktioniert es?

Similaire à Azure Rosenheim Meetup: Azure Service Operator

Join this talk to learn about Azure Service Operator v2. In the first part, we will introduce Azure technologies like Azure Service Operator v2, Azure Workload Identity, and GitOps for Azure Kubernetes Service. We will explain how they are linked together to provision Azure resources from Kubernetes. In the second part, we will then show step-by-step how to deploy an application to Kubernetes together with the needed Azure resources only using Git. So don't miss joining us!

AzDevCom 2022 - YAMLize your infrastructure with the Azure Service Operator a...

Philip Welz

All Things Cloud Native Meetup: Azure Kubernetes Service Basics

Nico Meisenzahl

GitLab Remote Meetup: Enhance Your Kubernetes CI/CD Pipelines with GitLab & O...

Cloud Native Rosenheim Meetup

GitLab London Meetup: How Containerized Pipelines and Kubernetes Can Boost Yo...

Nico Meisenzahl

Lernen Sie, wie Sie mit containerisierten Pipelines Abhängigkeiten in Ihren CI/CD-Umgebung eliminieren, um sich nicht mit verschiedenen Versionen Ihrer Toolchain und Abhängigkeiten herumschlagen zu müssen. Nutzen Sie die containerisierten Gitlab CI/CD-Pipelines und Kaniko, um Build- und Deployment-Workloads in Ihrem Kubernetes-Cluster zu verlagern. Stellen Sie Ihre Microservices und/oder Infrastruktur ohne externe Abhängigkeiten und Einschränkungen bereit. Nico wird Sie auch in Tekton einführen - ein Open-Source-Projekt, das Ihnen hilft, eine Cloud-native Toolchain aufzubauen, indem Sie Ihr gesamtes CI/CD (Workload sowie Konfiguration) in Kubernetes verlagern. Begleiten Sie Nico auf einem Deep Dive in die Geheimnisse von containerisierten Build und Deployment Pipelines mit Gitlab CI/CD, Kaniko und Tekton.

Effiziente CI/CD-Pipelines – mit den richtigen Tools klappt das

Nico Meisenzahl

How to Prevent Your Kubernetes Cluster From Being Hacked

Nico Meisenzahl

KCD Munich 2022: How to Prevent Your Kubernetes Cluster From Being Hacked

Nico Meisenzahl

Microsoft DevOps Forum 2021 – DevOps & Security

Nico Meisenzahl

Festive Tech Calendar: Festive time with AKS networking

Nico Meisenzahl

Containerized Workloads sind mittlerweile nicht mehr aus unserem Alltag wegzudenken. Warum also nicht auch Container und deren Vorteile als Grundlage unserer Build- und Deployment-Pipelines nutzen? Nico wird in seinem Talk über die Grundlagen und Vorteile von Containerized Pipelines sprechen sowie nützliche Best Practices vorstellen, die sich direkt umsetzen lassen. Darüber hinaus wird Nico die folgenden Themen anhand von Demos präsentieren und vertiefen: * Pipeline Workload auf Kubernetes mit Hilfe von Gitlab Runner * Docker Image Builds mit Kaniko * Ausblick auf Kubernetes-native Pipelines mit Tekton

Containerized Build & Deployment Pipelines

Nico Meisenzahl

Hijack a Kubernetes Cluster - a Walkthrough

Nico Meisenzahl

Container Days: Hijack a Kubernetes Cluster - a Walkthrough

Nico Meisenzahl

Nico will show how to prevent your Kubernetes cluster from being hijacked by introducing you to best practices as well as useful open-source projects based on real-world examples. You’ll learn everything you need to know to build and run secure Kubernetes clusters including: - basics like shift left and container image security - ensure supply chain security - implement Kubernetes policies - introduce Kubernetes network security - rely on Container Runtime Security - many more… Don't miss this session to learn everything you need to know to securely run your Kubernetes-based workloads.

Container Day Security: How to Prevent Your Kubernetes Cluster From Being Hacked

Nico Meisenzahl

Session at ContainerDay Security 2023 on the 8th of March in Hamburg. Nico will show how to prevent your Kubernetes cluster from being hijacked by introducing you to best practices as well as useful open-source projects based on real-world examples. You’ll learn everything you need to know to build and run secure Kubernetes clusters including: - basics like shift left and container image security - ensure supply chain security - implement Kubernetes policies - introduce Kubernetes network security - rely on Container Runtime Security - many more… Don't miss this session to learn everything you need to know to securely run your Kubernetes-based workloads.

How to Prevent Your Kubernetes Cluster From Being Hacked by Nico Meisenzahl

ContainerDay Security 2023

How to Prevent Your Kubernetes Cluster From Being Hacked by Nico Meisenzahl

ContainerDay Security 2023

ContainerConf 2022: Kubernetes is awesome - but...

Nico Meisenzahl

… you should also know when not to use it. This is what Philip and Nico will talk about in this session. They will share all the things they have learned and seen over the past years. Philip and Nico share real-world examples of what they've seen in projects and tell you what went wrong and what could have been done better. And why Kubernetes has been the wrong choice for some of them. Applications and use-cases that do not fit Kubernetes are just one example we will talk about. Join this talk to learn how to take full advantage of Kubernetes and learn where it fits to run your workload successfully. That said: We love Kubernetes!

Cloud Love Conference: Kubernetes is awesome, but...

Nico Meisenzahl

Whether you want to get started with Governance or improve your current process, this talk will show you how to improve your compliance by implementing policy-based CI/CD (Continuous Integration / Continuous Delivery) with Open Policy Agent. Nico will tell you all the details about Open Policy Agent and how you can easily integrate it into your existing CI/CD pipelines. Join this session to learn all the details on how to stay compliant with project dependencies or control your Infrastructure and Kubernetes deployment pipelines.

Continuous Lifecycle: Enhance Your Compliance and Governance With Policy-Base...

Nico Meisenzahl

KCD Munich 2022: Hijack a Kubernetes Cluster - a Walkthrough

Nico Meisenzahl

Microsoft Partners - Application Autoscaling Made Easy With Kubernetes Event-...

Tom Kerkhove

Similaire à Azure Rosenheim Meetup: Azure Service Operator (20)

AzDevCom 2022 - YAMLize your infrastructure with the Azure Service Operator a...

All Things Cloud Native Meetup: Azure Kubernetes Service Basics

GitLab Remote Meetup: Enhance Your Kubernetes CI/CD Pipelines with GitLab & O...

GitLab London Meetup: How Containerized Pipelines and Kubernetes Can Boost Yo...

Effiziente CI/CD-Pipelines – mit den richtigen Tools klappt das

How to Prevent Your Kubernetes Cluster From Being Hacked

KCD Munich 2022: How to Prevent Your Kubernetes Cluster From Being Hacked

Microsoft DevOps Forum 2021 – DevOps & Security

Festive Tech Calendar: Festive time with AKS networking

Containerized Build & Deployment Pipelines

Hijack a Kubernetes Cluster - a Walkthrough

Container Days: Hijack a Kubernetes Cluster - a Walkthrough

Container Day Security: How to Prevent Your Kubernetes Cluster From Being Hacked

How to Prevent Your Kubernetes Cluster From Being Hacked by Nico Meisenzahl

ContainerConf 2022: Kubernetes is awesome - but...

Cloud Love Conference: Kubernetes is awesome, but...

Continuous Lifecycle: Enhance Your Compliance and Governance With Policy-Base...

KCD Munich 2022: Hijack a Kubernetes Cluster - a Walkthrough

Microsoft Partners - Application Autoscaling Made Easy With Kubernetes Event-...

Dernier

How to Troubleshoot Apps for the Modern Connected Worker

ThousandEyes

The 7 Things I Know About Cyber Security After 25 Years | April 2024

Rafal Los

GenAI Risks & Security Meetup 01052024.pdf

lior mazor

Automating Google Workspace (GWS) & more with Apps Script

wesley chun

[2024]Digital Global Overview Report 2024 Meltwater.pdf

hans926745

GenCyber Cyber Security Day Presentation

Michael W. Hawkins

What are drone anti-jamming systems? The drone anti-jamming systems and anti-spoof technology protect against interference, jamming, and spoofing of the UAVs. To protect their security, countries are beginning to research drone anti-jamming systems, also known as drone strike weapons. The anti-jam and anti-spoof technology protects against interference, jamming and spoofing. A drone strike weapon is a drone attack weapon that can attack and destroy enemy drones. So what is so unique about this amazing system?

What Are The Drone Anti-jamming Systems Technology?

Antenna Manufacturer Coco

2024: Domino Containers - The Next Step. News from the Domino Container commu...

Martijn de Jong

🐬 The future of MySQL is Postgres 🐘

RTylerCroy

In this session, we will delve into strategic approaches for optimizing knowledge management within Microsoft 365, amidst the evolving landscape of Copilot. From leveraging automatic metadata classification and permission governance with SharePoint Premium, to unlocking Viva Engage for the cultivation of knowledge and communities, you will gain actionable insights to bolster your organization's knowledge-sharing initiatives. In this session, we will also explore how to facilitate solutions to enable your employees to find answers and expertise within Microsoft 365. You will leave equipped with practical techniques and a deeper understanding of how there is more to effective knowledge management than just enabling Copilot, but building actual solutions to prepare the knowledge that Copilot and your employees can use.

Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...

Drew Madelung

Scaling API-first – The story of a global engineering organization

Radu Cotescu

Evaluating the top large language models.pdf

ChristopherTHyatt

How to Troubleshoot Apps for the Modern Connected Worker

ThousandEyes

Histor y of HAM Radio presentation slide

vu2urc

BooK Now Call us at +918448380779 to hire a gorgeous and seductive call girl for sex. Take a Delhi Escort Service. The help of our escort agency is mostly meant for men who want sexual Indian Escorts In Delhi NCR. It should be noted that any impersonator will get 100 attention from our Young Girls Escorts in Delhi. They will assume the position of reliable allies. VIP Call Girl With Original Photos Book Tonight +918448380779 Our Cheap Price 1 Hour not available 2 Hours 5000 Full Night 8000 TAG: Call Girls in Delhi, Noida, Gurgaon, Ghaziabad, Connaught Place, Greater Kailash Delhi, Lajpat Nagar Delhi, Mayur Vihar Delhi, Chanakyapuri Delhi, New Friends Colony Delhi, Majnu Ka Tilla, Karol Bagh, Malviya Nagar, Saket, Khan Market, Noida Sector 18, Noida Sector 76, Noida Sector 51, Gurgaon Mg Road, Iffco Chowk Gurgaon, Rajiv Chowk Gurgaon All Delhi Ncr Free Home Deliver

08448380779 Call Girls In Greater Kailash - I Women Seeking Men

Delhi Call girls

A Domino Admins Adventures (Engage 2024)

Gabriella Davis

Handwritten Text Recognition for manuscripts and early printed texts

Maria Levchenko

Presentation on how to chat with PDF using ChatGPT code interpreter

naman860154

Boost Fertility New Invention Ups Success Rates.pdf

sudhanshuwaghmare1

Strategies for Landing an Oracle DBA Job as a Fresher

Remote DBA Services

Dernier (20)

How to Troubleshoot Apps for the Modern Connected Worker

The 7 Things I Know About Cyber Security After 25 Years | April 2024

GenAI Risks & Security Meetup 01052024.pdf

Automating Google Workspace (GWS) & more with Apps Script

[2024]Digital Global Overview Report 2024 Meltwater.pdf

GenCyber Cyber Security Day Presentation

What Are The Drone Anti-jamming Systems Technology?

2024: Domino Containers - The Next Step. News from the Domino Container commu...

🐬 The future of MySQL is Postgres 🐘

Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...

Scaling API-first – The story of a global engineering organization

Evaluating the top large language models.pdf

How to Troubleshoot Apps for the Modern Connected Worker

Histor y of HAM Radio presentation slide

08448380779 Call Girls In Greater Kailash - I Women Seeking Men

A Domino Admins Adventures (Engage 2024)

Handwritten Text Recognition for manuscripts and early printed texts

Presentation on how to chat with PDF using ChatGPT code interpreter

Boost Fertility New Invention Ups Success Rates.pdf

Strategies for Landing an Oracle DBA Job as a Fresher

Azure Rosenheim Meetup: Azure Service Operator

1. Azure Service Operator Provision Your Resources in a Cloud-Native Way Azure Rosenheim Meetup 2021

2. Nico Meisenzahl • Senior Cloud & DevOps Consultant at white duck • Microsoft MVP, GitLab Hero & Docker Community Leader • Container, Kubernetes, Cloud-Native & DevOps © white duck GmbH 2021 Phone: +49 8031 230159 0 Email: nico.meisenzahl@whiteduck.de Twitter: @nmeisenzahl LinkedIn: https://www.linkedin.com/in/nicomeisenzahl Blog: https://meisenzahl.org

3. Agenda • what is Azure Service Operator? • bundle your app with its infrastructure • manage your infrastructure with GitOps © white duck GmbH 2021

4. Azure Service Operator (ASO) • “…helps you provision Azure resources and connect your applications to them from within Kubernetes.” • Why? • Bundle your app with its infrastructure • GitOps • … © white duck GmbH 2021

5. Azure Service Operator (ASO) • open-source project by Microsoft Azure • still pretty new • V1 but not production-ready yet • 280 stars, 53 Contributors • 3200 commit, first one in July 2019 • first use case was a self-service portal for an enterprise customer • monthly community call © white duck GmbH 2021

6. ASO – how it works • Custom Resource Definitions (CRDs) for each of the Azure services • e.g. ResourceGroup, RedisCache, CosmosDB, … • A Kubernetes controller that watches for changes of the CRDs and then acting on them • creates, update, delete the Azure resources © white duck GmbH 2021

7. ASO - technical details • can be installed via Helm Chart on any Kubernetes Cluster • requires • Cert-Manager • Service Principal or Managed Identity (requires AKS) • Azure AD Pod Identity (part of ASO, requires AKS) • Controller is based on Kubebuilder © white duck GmbH 2021

10. Demo: Bundle your app with its infrastructure • combine app and infrastructure in one deployment • inject secrets & connections strings via auto-generated secrets © white duck GmbH 2021

11. Manage your infrastructure with GitOps • GitOps? • Git as the single source of truth • Push vs pull pipeline • tools like Argo CD & Flux CD can help © white duck GmbH 2021

12. More on ASO • detailed blog post on ASO • https://medium.com/01001101/azure-service-operator-manage- your-azure-resources-with-kubernetes-69f49d9dbbc5 • Cloud Native Club - ASO episode • https://www.youtube.com/watch?v=d02hiMHLmsg © white duck GmbH 2021

13. Questions? Slides: https://www.slideshare.net/nmeisenzahl Demo: https://github.com/nmeisenzahl/aso-fluxcd-sample Nico Meisenzahl (Senior Cloud & DevOps Consultant) Phone: +49 8031 230159 0 Email: nico.meisenzahl@whiteduck.de Twitter: @nmeisenzahl LinkedIn: https://www.linkedin.com/in/nicomeisenzahl Blog: https://meisenzahl.org © white duck GmbH 2021

Azure Rosenheim Meetup: Azure Service Operator

Recommandé

Recommandé

Contenu connexe

Tendances

Tendances (20)

Similaire à Azure Rosenheim Meetup: Azure Service Operator

Similaire à Azure Rosenheim Meetup: Azure Service Operator (20)

Dernier

Dernier (20)

Azure Rosenheim Meetup: Azure Service Operator