AKS components I assumed that you are familiar with the Kubernetes Cluster concepts (elementary level). Therefore I didn’t do any deep dive into the elementary components. The focus of this post is the following topics: The control plane (Kubernetes core component) It’s the core of the Kubernetes Cluster and doesn’t matter on which cloud providerContinue reading “Azure Kubernetes Service (AKS) with Terraform deployment”
Category Archives: Architecture
Azure Arc enabled Kubernetes
Introduction What does “Arc-enabled Kubernetes” mean? it means a Kubernetes Cluster that the Azure Arc Agent has been installed on. Should an instance of Azure Arc be provisioned? No, Azure Arc is a global service. What about data security? very good question! I’ll explain it below. Because first, you have to know how Azure ArcContinue reading “Azure Arc enabled Kubernetes”
Azure Identity & Access Managemen
Introduction As we know Microsoft Azure Cloud platform works seamlessly with Azure Active Directory (AAD). The following products are three of many cloud-based Microsoft products. As demonstrated below each of them has its own RBAC. But only AAD manages the identities and the Azure Subscription & Azure DevOps and also the other products which canContinue reading “Azure Identity & Access Managemen”
Multi-Cloud
Introduction This document gives us the definition of different cloud classifications and focuses on the Multicloud and Hybrid cloud and the organization’s tendency to adapt to the cloud, especially for multi-cloud. This document even refers to the challenges of multi-cloud at the management and technical level and the reasons for them, and in the lastContinue reading “Multi-Cloud”
ITIL
IT Service/ Management Stakeholders of IT services Value and outcomes Value is the perceived benefit, usefulness, or importance of something to a stakeholder. The value of a service is what the customer seeks. The value has subjective quality. The value definition is different in ITIL V3 and V4. Outcome is the result for a stakeholderContinue reading “ITIL”
Clouds : Organization Structure
Azure AWS GCP Azure Policy Guardrails (via the ControlTower Service) Organization Policy Service – Organization Service (optional) Organization Node Root Root Account – Management Group (optional) Organization Unit (optional)(via the Organization Service) Folder (optional) Subscription Account(via the Organization Service) – Resource Group – Project Resources Resources Resources Azure Policy The following types are available: ApplyContinue reading “Clouds : Organization Structure”
Azure Credential Management
Topics Use cases Key/Vault HSM HashiCorp Vault Related topics Onboarding : Azure Data Encryption Onboarding : Azure Data Storages and databases Use cases To manage and safe guard the credentials. What are the credentials? Certificates Keys API Keys Encryption Keys (It’s recommended to use RSA-Keys to encrypt data at rest) Storage Keys Event Hub Access Keys …Continue reading “Azure Credential Management”
Bring Your Enterprise on Cloud
We cannot generalize a migration way to the cloud for all the companies & enterprises. But I have provided a check list of topics which can help to have a good start without wasting the time with staring from scratch. Enterprise Infrastructure On-Prem <-> Cloud Azure VPN Express Route AWS … DNS Azure DNS private,Continue reading “Bring Your Enterprise on Cloud”
Terraform : Cloud
Create organization and workspace in terraform cloud Sign up/in to this URL (https://app.terraform.io/signup/account) Skip all the questions Create an organization 4. Create a workspace (by clicking on create one now) 5. Select the type of the workspace (CLI-driven workflow) 6. Give a name to the workspace. 7. Create the workspace. 8. After creation the workspaceContinue reading “Terraform : Cloud”
Clouds : Shared responsibility model
In doesn’t make difference which cloud vendor you have chosen as the platform. All of them follow the shared responsibility model. What does it mean? It means the cloud provider has the security responsibility of the cloud and cloud customer has the security responsibility in the cloud. Azure AWS GCP IBM Shared responsibility model SharedContinue reading “Clouds : Shared responsibility model”