terraform-aks-appgw-acr-keyvault-loganalytics

KO | EN

gitlite — search

#docker #typescript #python #machine-learning #nextjs #javascript #css #tailwindcss #windows #deep-learning #webapp #tailwind

terraform-aks-appgw-acr-keyvault-loganalytics

★ 34 Open GitHub ↗

Fully configured AKS cluster deployed through Terraform with Application Gateway, Azure Key Vault, Azure Container Registry, Pod Identity and Log Analytics

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# Terraform - Azure Kubernetes Service deployment

Setting up an Azure Kubernetes Service (AKS) using terraform, is fairly easy. Setting up a full-fledged AKS cluster that can read images from Azure Container Registry (ACR), fetch secrets from Azure Key Vault using Pod Identity while all traffic is routed via an AKS managed Application Gateway is much harder.

This repository serves as a boilerplate for the scenario described above, and fully deploys and configures your Azure Kubernetes Service in the cloud using a single terraform deployment.

## Architecture

![Architecture Diagram AKS deployment](https://raw.githubusercontent.com/bart-jansen/terraform-aks-appgw-acr-keyvault-loganalytics/main/images/archdiagram_k8s.png)

The architecture consists of the following components:

__Public IP__ —
 Public IP addresses enable Azure resources to communicate to Internet and public-facing Azure services.

__Application Gateway__ —
Azure Application Gateway is a web traffic load balancer that enables you to manage traffic to your web applications.

__Azure Kubernetes Service (AKS)__ —
AKS is an Azure service that deploys a managed Kubernetes cluster.

__Virtual Network__ —
An Azure Virtual Network (VNet) is used to securely communicate between AKS and Application Gateway and control all outbound connections.

__Virtual Network subnets__ —
Application Gateway and AKS are deployed in their own subnets within the same virtual network.

__External Data Sources__ —
Microservices are typically stateless and write state to external data stores, such as CosmosDB.

__Azure Key Vault__ —
Azure Key Vault is a cloud service for securely storing and accessing secrets and certificates.

__Pod Identity__ —
Pod Identity enables Kubernetes applications to access cloud resources securely with Azure Active Directory.

__Azure Active Directory__ —
Azure Active Directory (Azure AD) is Microsoft's cloud-based identity and access management service. Pod Identity uses Azure AD to create and manage other Azure resources such as Azure Application Gateway and Azure Key Vault.

__Azure Container Registry__ —
Container Registry is used to store private Docker images, which are deployed to the cluster. AKS can authenticate with Container Registry using its Azure AD identity.

__KEDA__ —
KEDA is a Kubernetes-based Event Driven Autoscaler that (horizontally) scales a container by adding additional pods based on the number of events needing to be processed.

## Input Variables

| Name | Description | Default |
|------|-------------|---------|
| `app_name` | Application name (used as suffix in all resources) |  | 
| `location` | Azure region where to create resources | West Europe | 
| `domain_name_label` | Unique domain name label for AKS Cluster |  | 
| `kubernetes_version` | Kubernetes version of the node pool | 1.19.7 | 
| `vm_size_node_pool` | VM Size of the node pool | Standard_D2s_v3 | 
| `node_pool_min_count` | VM minimum amount of nodes for the node pool | 3 | 
| `node_pool_max_count` | VM maximum amount of nodes for the node pool | 5 | 
| `helm_pod_identity_version` | Helm chart version of aad-pod-identity | 4.1.1 | 
| `helm_csi_secrets_version` | Helm chart version of secrets-store-csi-driver-provider-azure | 0.0.18 | 
| `helm_agic_version` | Helm chart version of ingress-azure-helm-package | 1.4.0 | 
| `helm_keda_version` | Helm chart version of keda helm package | 2.3.2 |

## Output variables

| Name | Description |
|------|-------------|
| `aks_name` | Name of the AKS cluster |
| `appgw_name` | Name of the Application Gateway used by AKS |
| `appgw_fqdn` | Domain name of the cluster (e.g. `label.westeurope.cloudapp.azure.com`) |
| `acr_name` | Name of the Azure Container Registry |
| `keyvault_name` | Name of the Azure Key Vault |
| `log_analytics_name` | Name of the Log Analytics workspace |
| `vnet_name` | Name of the Virtual Network |
| `rg_name` | Name of the Resource Group |

terraform-aks-appgw-acr-keyvault-loganalytics

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README