Mastering Cloud Kubernetes: Navigating Azure's Kubernetes Service Maze

on YouTube ↗32m

" summary

Azure AKS is semi‑managed — control plane is managed but data nodes remain yours — and this session lists concrete add‑ons and limits: workload identity replaces secrets with OIDC federated credentials (two‑line code change, tokenless access), Vertical Pod Autoscaler adjusts resources (Windows unsupported, ~1,000‑pod limit), and Carpenter/no‑out‑provisioning dynamically creates and deletes node pools (preview, requires Azure CNI/limitations). CSI Secret Provider mounts Key Vault secrets (rotates but needs pod restart), App Configuration maps to ConfigMaps, image‑cleaner reclaims disk, plus KEDA, kube‑reboot and reloader.

AI-written summary · about

" chapters (11)

1. 0:00Introduction
2. 2:11Cloud Kubernetes challenges
3. 7:08Azure workload identity
4. 12:44Vertical pod autoscaler
5. 15:10Karpenter provisioning
6. 21:15CSI secret provider
7. 24:06Azure app configuration
8. 26:38Image cleaner
9. 28:23Azure policy enforcement
10. 29:06Kubernetes tools round
11. 31:39Q&A

" related talks

• 13mKubernetes Ecosystem in AzureSean KcKenna · KubeCon + CloudNativeCon Europe 2021
• 01h 01mDevOps with Azure Kubernetes ServiceJakob Ehn · NDC London 2021
• 01h 02mAKS Survival Pack: what to consider before going all-in with AKSKristina Devochko · NDC Oslo 2023
• 01h 01mKubernetes, Azure and .NET - What's it all about?Shahid Iqbal · NDC Minnesota 2019
• 36mDeep Dive: Azure SIGLachlan Evenson, Stephen Augustus · KubeCon + CloudNativeCon Europe 2019
• 33mIdentity and Access Management in KubernetesNelson Contreras · KCD Lima, Perú 2024
• 33mManaged Kubernetes Service: Day Zero Survival PackKristina Devochko · KCD Ukraine 2023
• 57mAzure Kubernetes Service (AKS) for BeginnersPrakash Tripathi · Full Stack Virtual Conference 2021