Skip to main content
Version: v4

On Azure (AKS)

Terraform for all of it is in verana-deploy-examples (AKS cluster, static public IP, ingress-nginx, cert-manager, Azure DNS record); its README states whether it has been verified. The steps below are the CLI path to the same result.

Steps​

  1. Cluster. az aks create --resource-group agents --name agents --node-count 2 --node-vm-size Standard_B2s --generate-ssh-keys. AKS provides the managed-csi storage class.
  2. Ingress controller. Install ingress-nginx with a LoadBalancer Service; Azure assigns a public IP. Create a static public IP in the node resource group first if you want it stable.
  3. DNS. In Azure DNS, create an A record agent.example.com to that IP.
  4. cert-manager. Install cert-manager and a Let's Encrypt ClusterIssuer with the HTTP-01 solver on class nginx.
  5. Storage class. storage.storageClassName: managed-csi.
  6. Continue with Deploy on Kubernetes with Helm.

Notes​

  • Secrets: Key Vault with the Secrets Store CSI driver, or External Secrets Operator.