In this post, I’ll explain to you how you can use Azure Policy to restrict the creation of load balancers with a public IP in AKS using Azure policy. Azure policy is a way to ensure your Azure deployments follow your standards. Policies are a set of restrictive rules, that control what can be deployed […]
Category: Azure
Image security scanning in Azure Container Registry
I was chatting with a customer last week about the Azure Container Registry. One of the questions that came up was image scanning. There is an integration between the Azure Container Registry and Azure Defender that will perform image scanning. The goal of this blog post is to explore these capabilities and have a look […]
Setting up shared image gallery cross-tenant using the Azure CLI
The Azure shared image gallery is a service in Azure that helps you manage and store images in a central location. It’s then easy to share those images with other subscriptions. It is however not that easy to share those images with other subscriptions if those subscriptions are tied to a different AAD tenant. There’s […]
Using Pulumi and Python to create a private Azure Kubernetes Service cluster
Pulumi is a somewhat new kid on the infrastructure-as-code block. I’ve been looking for an opportunity to work with Pulumi for a while, and a recent customer engagement caused me to investigate it in a bit more detail. This led me to create this post, exploring how to create a private AKS cluster and a […]
Key Vault CSI driver integrated with AAD-managed pod identities
Tomorrow I’m joining the 425 show on Twitch for a discussion on AAD-managed pod identities and how to integrate them with Key Vault. This blog post is both a sneak preview of what we’ll be discussing tomorrow as well as a review of the episode if you want to study things more in-depth after it […]