Microsoft Azure Kubernetes Service

End-to-end machine learning lifecycle Azure Stream Analytics Real-time analytics on fast-moving streaming data Data Lake Analytics Distributed analytics service that makes big data easy Event Hubs Receive telemetry from millions of devices Power BI Embedded White label Power BI to quickly and easily provide exceptional customer facing dashboards and analytics in your own applications Azure Analysis Services Enterprise-grade analytics engine as a service Data Catalog Get more value from your enterprise data assets Azure AI Bot Service Create bots and connect them across channels Azure Data Explorer Fast and highly scalable data exploration service Azure Data Factory Hybrid data integration at enterprise scale, made easy Azure Data Share A simple and safe service for sharing big data with external organizations Microsoft Purview Govern, protect, and manage your data estate Azure Chaos Studio Improve application resilience by introducing faults and simulating outages Azure Managed Grafana Deploy Grafana dashboards as a fully managed Azure service Microsoft Graph Data Connect A secure, high-throughput connector designed to copy select Microsoft 365 productivity datasets into your Azure tenant Compute Virtual Machines Provision Windows and Linux VMs in seconds Virtual Machine Scale Sets Manage and scale up to thousands of Linux and Windows VMs Azure Kubernetes Service (AKS) Deploy and scale containers on managed Kubernetes Azure Functions Execute event-driven serverless code functions with an end-to-end development experience Azure Service Fabric Deploy and operate always-on, scalable, distributed apps App Service Quickly create powerful cloud apps for web and mobile Azure Container Instances Launch containers with hypervisor isolation Batch Cloud-scale job scheduling and compute management Cloud Services Create highly-available, infinitely-scalable cloud applications and APIs Azure Lab Services Set up virtual labs for classes, training, hackathons, and other related scenarios Azure Dedicated Host A dedicated physical server to host your Azure VMs for Windows and Linux Azure Stack Hub Azure Stack Hub is sold as an integrated hardware system, with software pre-installed on validated hardware Azure Spot Virtual Machines Provision unused compute capacity at deep discounts to run interruptible workloads Azure Quantum Jump in and explore a diverse selection of today's quantum hardware, software, and solutions Azure Spring Apps Build and deploy Spring Boot applications with a fully managed service from Microsoft and VMware Azure Kubernetes Service Edge Essentials Azure Kubernetes Service Edge Essentials is an on-premises Kubernetes implementation of Azure Kubernetes Service (AKS) that automates running containerized applications at scale. Containers Azure Kubernetes Service (AKS) Deploy and scale containers on managed Kubernetes Azure Container Instances Launch containers with hypervisor isolation Azure Service Fabric Deploy and operate always-on, scalable, distributed apps Azure Container Registry Build, store, secure, and replicate container images and artifacts Azure Functions Execute event-driven serverless code functions with an end-to-end development experience Azure Red Hat OpenShift Deploy and scale containers on managed Red Hat OpenShift Azure Container Apps Build and deploy modern apps and microservices using serverless containers Azure Kubernetes Fleet Manager Seamlessly manage Kubernetes clusters at scale Azure Kubernetes Service Edge Essentials Azure Kubernetes Service Edge Essentials is an on-premises Kubernetes implementation of Azure Kubernetes

Kubernetes Azure Kubernetes Service in 2018.One of the good things about Azure Kubernetes Service is that it doesn’t require you to pay for the Control Plane, making it relatively cost-effective, especially compared to other managed alternatives. On top of that, it integrates very well with all types of Microsoft products.So far, Azure Kubernetes Services has been the fastest to release all newer versions of Kubernetes and their patches. However, it is not fully automatic, meaning you must manually update some cluster components to a newer version. Azure is working on a fully automatic solution to fix this, but that is still in development.However, Azure Kubernetes Service does have an automatic node health repair function. This is great for maintaining nodes’ health, availability, and stability. As we already told you, the Control Plane is free, and you only have to pay per node.What impressed me the most about Azure Kubernetes Service is that it offers an excellent developer environment. For example, you can use the Kubernetes extension in VS Code to deploy your codes to Azure Kubernetes Service directly. Further, you can also use the Bridge to connect with AKS.It allows you to develop, debug and run your codes directly in a development machine, as this machine was a part of your cluster. This removes the need to replicate dependencies to your IDE or development machine.Introduction To Azure Kubernetes Service (AKS) | Azure Container Service | Azure Training | Edureka6. Amazon Elastic Kubernetes Service (EKS)Amazon Elastic Kubernetes Service is one of the most popular and widely used managed Kubernetes services out there, according to a survey conducted by CCNF. This service offers deployment options on both EC2 and Fargate, meaning you can even use it on-premises and on Amazon infrastructure and other public clouds.Amazon Elastic Kubernetes Service simplifies and automates the deployment and management process of Kubernetes clusters. This service is based on the latest released open-source Kubernetes tool, meaning you will never lack any of the features and benefits of Kubernetes. Additionally, EKS is fully compatible with the Kubernetes ecosystem.How it worksHowever, one major drawback of Amazon Elastic Kubernetes Service

HTTPS key secret stored in Key Vault. For instructions, visit Disabled1.0.0Configure Kubernetes clusters with Flux v2 configuration using Git repository and local secretsDeploy a 'fluxConfiguration' to Kubernetes clusters to assure that the clusters get their source of truth for workloads and configurations from the defined Git repository. This definition requires local authentication secrets stored in the Kubernetes cluster. For instructions, visit Disabled1.0.0Configure Kubernetes clusters with Flux v2 configuration using Git repository and SSH secretsDeploy a 'fluxConfiguration' to Kubernetes clusters to assure that the clusters get their source of truth for workloads and configurations from the defined Git repository. This definition requires a SSH private key secret stored in Key Vault. For instructions, visit Disabled1.0.0Configure Kubernetes clusters with Flux v2 configuration using public Git repositoryDeploy a 'fluxConfiguration' to Kubernetes clusters to assure that the clusters get their source of truth for workloads and configurations from the defined Git repository. This definition requires no secrets. For instructions, visit Disabled1.0.0Configure Kubernetes clusters with specified Flux v2 Bucket source using local secretsDeploy a 'fluxConfiguration' to Kubernetes clusters to assure that the clusters get their source of truth for workloads and configurations from the defined Bucket. This definition requires local authentication secrets stored in the Kubernetes cluster. For instructions, visit Disabled1.0.0Configure Kubernetes clusters with specified GitOps configuration using HTTPS secretsDeploy a 'sourceControlConfiguration' to Kubernetes clusters to assure that the clusters get their source of truth for workloads and configurations from the defined git repo. This definition requires HTTPS user and key secrets stored in Key Vault. For instructions, visit AuditIfNotExists, deployIfNotExists, DeployIfNotExists, disabled, Disabled1.1.0Configure Kubernetes clusters with specified GitOps configuration using no secretsDeploy a 'sourceControlConfiguration' to Kubernetes clusters to assure that the clusters get their source of truth for workloads and configurations from the defined git repo. This definition requires no secrets. For instructions, visit AuditIfNotExists, deployIfNotExists, DeployIfNotExists, disabled, Disabled1.1.0Configure Kubernetes clusters with specified GitOps configuration using SSH secretsDeploy a 'sourceControlConfiguration' to Kubernetes clusters to assure that the clusters get their source of truth for workloads and configurations from the defined git repo. This definition requires a SSH private key secret in Key Vault. For instructions, visit AuditIfNotExists, deployIfNotExists, DeployIfNotExists, disabled, Disabled1.1.0Configure Microsoft Entra ID integrated Azure Kubernetes Service Clusters with required Admin Group AccessEnsure to improve cluster security by centrally govern Administrator access to Microsoft Entra ID integrated AKS clusters.DeployIfNotExists, Disabled2.1.0Configure Node OS Auto upgrade on Azure Kubernetes ClusterUse Node OS auto-upgrade to control node-level OS security updates of Azure Kubernetes Service (AKS) clusters. For more info, visit Disabled1.0.1Deploy - Configure diagnostic settings for Azure Kubernetes Service to Log Analytics workspaceDeploys the diagnostic settings for Azure Kubernetes Service to stream resource logs to a Log Analytics workspace.DeployIfNotExists, Disabled3.0.0Deploy Azure Policy Add-on to Azure Kubernetes Service clustersUse Azure Policy Add-on to manage and report on the compliance state of your Azure Kubernetes Service (AKS) clusters. For more information, see Disabled4.1.0Deploy Image Cleaner on Azure Kubernetes ServiceDeploy Image Cleaner on Azure Kubernetes clusters. For more info, visit Disabled1.0.4Deploy Planned Maintenance to schedule and control upgrades for

About Microsoft Defender for Containers in Disabled2.0.1Azure Kubernetes Service Clusters should have local authentication methods disabledDisabling local authentication methods improves security by ensuring that Azure Kubernetes Service Clusters should exclusively require Azure Active Directory identities for authentication. Learn more at: Deny, Disabled1.0.1Azure Kubernetes Service Clusters should use managed identitiesUse managed identities to wrap around service principals, simplify cluster management and avoid the complexity required to managed service principals. Learn more at: Disabled1.0.1Azure Kubernetes Service Private Clusters should be enabledEnable the private cluster feature for your Azure Kubernetes Service cluster to ensure network traffic between your API server and your node pools remains on the private network only. This is a common requirement in many regulatory and industry compliance standards.Audit, Deny, Disabled1.0.1Azure Policy Add-on for Kubernetes service (AKS) should be installed and enabled on your clustersAzure Policy Add-on for Kubernetes service (AKS) extends Gatekeeper v3, an admission controller webhook for Open Policy Agent (OPA), to apply at-scale enforcements and safeguards on your clusters in a centralized, consistent manner.Audit, Disabled1.0.2Azure running container images should have vulnerabilities resolved (powered by Microsoft Defender Vulnerability Management)Container image vulnerability assessment scans your registry for commonly known vulnerabilities (CVEs) and provides a detailed vulnerability report for each image. This recommendation provides visibility to vulnerable images currently running in your Kubernetes clusters. Remediating vulnerabilities in container images that are currently running is key to improving your security posture, significantly reducing the attack surface for your containerized workloads.AuditIfNotExists, Disabled1.0.1Both operating systems and data disks in Azure Kubernetes Service clusters should be encrypted by customer-managed keysEncrypting OS and data disks using customer-managed keys provides more control and greater flexibility in key management. This is a common requirement in many regulatory and industry compliance standards.Audit, Deny, Disabled1.0.1Configure Azure Kubernetes Service clusters to enable Defender profileMicrosoft Defender for Containers provides cloud-native Kubernetes security capabilities including environment hardening, workload protection, and run-time protection. When you enable the SecurityProfile.Defender on your Azure Kubernetes Service cluster, an agent is deployed to your cluster to collect security event data. Learn more about Microsoft Defender for Containers: Disabled4.3.0Configure installation of Flux extension on Kubernetes clusterInstall Flux extension on Kubernetes cluster to enable deployment of 'fluxconfigurations' in the clusterDeployIfNotExists, Disabled1.0.0Configure Kubernetes clusters with Flux v2 configuration using Bucket source and secrets in KeyVaultDeploy a 'fluxConfiguration' to Kubernetes clusters to assure that the clusters get their source of truth for workloads and configurations from the defined Bucket. This definition requires a Bucket SecretKey stored in Key Vault. For instructions, visit Disabled1.0.0Configure Kubernetes clusters with Flux v2 configuration using Git repository and HTTPS CA CertificateDeploy a 'fluxConfiguration' to Kubernetes clusters to assure that the clusters get their source of truth for workloads and configurations from the defined Git repository. This definition requires a HTTPS CA Certificate. For instructions, visit Disabled1.0.1Configure Kubernetes clusters with Flux v2 configuration using Git repository and HTTPS secretsDeploy a 'fluxConfiguration' to Kubernetes clusters to assure that the clusters get their source of truth for workloads and configurations from the defined Git repository. This definition requires a