https://github.com/tedspinks/terraform-aks-examples

Terraform examples for deploying Azure Kubernetes Service (AKS) clusters, with a mix of features and integrations with other Azure services.
https://github.com/tedspinks/terraform-aks-examples

Last synced: 3 days ago
JSON representation

Terraform examples for deploying Azure Kubernetes Service (AKS) clusters, with a mix of features and integrations with other Azure services.

• Host: GitHub
• URL: https://github.com/tedspinks/terraform-aks-examples
• Owner: TedSpinks
• Created: 2023-03-17T13:54:51.000Z (almost 2 years ago)
• Default Branch: main
• Last Pushed: 2023-08-13T17:21:06.000Z (over 1 year ago)
• Last Synced: 2024-11-05T14:51:57.524Z (about 2 months ago)
• Language: HCL
• Homepage:
• Size: 66.4 KB
• Stars: 0
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
# terraform-aks-examples

## Purpose

Azure Kubernetes Services (AKS) has tons of features and options, including the ability to leverage other Azure services such as Firewall and Application Gateway. The purpose of this repository is to exemplify how to combine common AKS features, as well as to document incompatible features through variable descriptions and code comments.

## Background

Initially, the Terraform examples in this repo were just a library of code snippets that I used for enabling this feature or that feature, as I worked on projects. However, as I started combining features, I realized that their interaction brought a lot of complexity - often the choice of one feature would introduce new requirements and/or severely limit other choices. The examples in this repo show how to properly combine features and avoid common gotchas.

# Major Features Covered

- Implement Microsoft's [Baseline Architecture for AKS](https://learn.microsoft.com/en-us/azure/architecture/reference-architectures/containers/aks/baseline-aks)

- BYO VNet + IP range, as opposed to the default AKS-created VNet + IP range

- Azure AD auth + Azure RBAC

- Container Insights (monitoring)

- Cluster Auto-Upgrade (with maintenance windows)

- Cluster Autoscaler

- Choice of 3 network plugins: Kubenet, Azure CNI, Azure CNI Overlay

- Private K8s API Server

- Application Gateway Ingress Controller (AGIC)

- Azure Firewall for controlling egress traffic

# Examples

## 1. AKS cluster with default VNet

The [first example](/examples/aks_cluster_with_default_vnet) adds many of the above-listed features, but it does not support BYO VNet or any of the features that rely on that, such as implementing Microsoft's Baseline Architecture for AKS and its shared AGIC and shared Azure Firewall.

As such, it is a very simple example, with only a single Terraform module. Because it *always* uses the default AKS-created VNet (10.224.0.0/12) and subnet (10.224.0.0/16), it's mostly only suited for lab and learning environments, where duplicating these IP Ranges won't cause any problems.

For any professional use, you will almost certainly need to integrate AKS into your existing IP scheme, which takes us to...

## 2. AKS cluster with BYO VNet

The [second example](/examples/aks_cluster_with_byo_vnet) is much more useful in that it illustrates how to create a VNet for AKS clusters within your exsiting IP scheme. It includes the integration of an AGIC subnet and a shared "hub" VNet for Azure Firewall and Azure Bastion services. This example mirrors Microsoft's [Baseline Architecture for AKS](https://learn.microsoft.com/en-us/azure/architecture/reference-architectures/containers/aks/baseline-aks).