Kubernetes Multi-Tenancy

Kubernetes Multi-Tenancy

1. Automation

   • Deployment Centre
     • Github
       • Github repo
       • Github actions
     • ADO
       • Azure Repo
       • Az pipelines
   • Upgrades
     • Contro plane
       • K8s version
     • Worker nodes
       • Node images
       • Security patches
     • Change window

2. Security

   • CIS benchmarks
     • Vulnerability
     • Compliance
   • Secret store drivers
     • Azure key vault
     • Hashicorp Vault
   • Disk Encryption
     • Data disk
     • OS disk
   • compliant node
     • FIPS compliant
     • Confidential compute

3. Deployment

   • imperative
     • Portal
     • Powershell
     • az CLI
   • Declarative
     • Terraform
     • ARM
     • Bicep
     • Ansible
   • Segragation
     • Physical
       • Multiple clusters
       • Node Pools
         • VMSS
           • Pay-as-you-go
           • Reservation
           • Spot
         • Type
           • User
           • System
         • Operating system
           • Linux
           • Ubuntu
         • Groups
           • Availability Set
           • Availability zone
           • proximity placement
         • Scaling
           • Manual
           • Autoscaling
             • HPA
             • KEDA
           • Scale-down
     • Logical
       • K8s Namespace
   • Pod scheduling
     • Generic
       • Node selectors
     • exclusive
       • Node Taints &Tolerations

4. Observability

   • Control plane Logs /metrics
     • Cluster-autoscalar
     • kubescheduler
     • All-metrics
       • Destination
         • Storage account
         • Partner solutions
           • Datadog
           • Dynatrace
         • Event hub
     • Kube-api
   • Nodes & Apps
     • Prometheus Endpoints
       • Grafana
   • Self Healing
     • Readiness Probe
     • Liveness probe

5. Network

   • Ingress
     • Microservice
     • App gateway
     • Nginx
   • Egress
     • Firewalls
       • Public IP's
       • Load balancers
   • POD to POD
     • Service
     • Service Mesh
       • Kuma
       • Light wieght
   • policies
     • community
     • Ecosystem
   • Plugins
     • Standalone
     • Hybrid

6. Misc

   • Disaster recovery
   • API Gateway
   • High availability
   • Jobs
     • Scheduled
     • K8s cron
     • Batch
   • Event-driven
   • Dev-tools
     • local
     • Azure dev space
     • IDE

7. Storage

   • off-cluster
     • K8s storage class
   • Appication Data
     • Cluster
       • persistent volume
     • POD
       • K8s volume
     • Container
       • Filesystem
   • COnfiguration Data
     • Non-sensitive
       • Config-map
     • Sensitive
       • K8s secrts
   • Backup
     • Velero

8. Troubleshooting

   • Support policies
   • Resource viewer
   • Daignostic logs
   • Best practices

9. Controlplane Managed

   • K8s version
   • SKU
   • Connectivity
     • Public
     • Private
       • DNS
       • Private link

10. Identity /RBAC

    • Azure AD
      • Azure RBAC
      • Managed Identity
        • User managaed
        • System Managed
      • Service Principal
      • MFA
      • Pod identity