You're reading from Hands-on Kubernetes on Azure, Third Edition Use Azure Kubernetes Service to automate management, scaling, and deployment of containerized applications

Product type Paperback

Published in May 2021

Publisher Packt

ISBN-13 9781801079945

Length 528 pages

Edition 3rd Edition

Languages

JavaScript

Tools

Azure

Concepts

Containerization

Authors (3):

Gunther Lenz

Nills Franssens

Shivakumar Gopalakrishnan

View More author details

Table of Contents (22) Chapters

Preface

Hands-on Kubernetes on Azure – Third Edition

Foreword

Section 1: The Basics FREE CHAPTER

1. Introduction to containers and Kubernetes

2. Getting started with Azure Kubernetes Service

Section 2: Deploying on AKS

3. Application deployment on AKS

4. Building scalable applications

5. Handling common failures in AKS

6. Securing your application with HTTPS

7. Monitoring the AKS cluster and the application

Section 3: Securing your AKS cluster and workloads

8. Role-based access control in AKS

9. Azure Active Directory pod‑managed identities in AKS

10. Storing secrets in AKS

11. Network security in AKS

Section 4: Integrating with Azure managed services

12. Connecting an application to an Azure database

13. Azure Security Center for Kubernetes

14. Serverless functions

15. Continuous integration and continuous deployment for AKS

Index

Control plane network security

In this section, you will explore two ways in which to protect the control plane of your AKS cluster: Authorized IP ranges and private clusters. You'll start by updating your existing cluster to use authorized IP ranges.

Securing the control plane using authorized IP ranges

Configuring authorized IP ranges on AKS will limit which public IP addresses can access the control plane of your AKS cluster. In this section, you will configure authorized IP ranges on your existing cluster. You will limit traffic to a random public IP address to verify that traffic blocking works. You will then configure the IP address from the Azure Cloud Shell to be authorized and will see how that then allows traffic.

To start, browse to the Azure portal and open the pane for your AKS cluster. Select Networking in the left-hand navigation. Then, select the checkbox next to Set authorized IP ranges, and fill in the IP address, 10.0.0.0, in the box below, as...