Cloud provisioning for container hosting

Cloud provisioning

• Goal to create infrastructure that is:
  • Managable
  • Scalable
  • Secure
• Managed as code
  • Terraform
  • AZ CLI
• Azure examples

This presentation is a follow-on from:

• Building blocks for hosting containers
• Productionising containers
• Git version control (part 1)
• Gitflow (part 2)

---

Kubernetes

• Container orchestration
• Pods and services

---

Services broker requests to an orchestrated set of pods

Download SVG | PNG

---

Pods may be replicated across multiple worker nodes

Download SVG | PNG

---

Bigger picture

• Service in project context
• Service-specific requirements
  • Container registry
  • Secret management
  • Secure access (bastion hosts)
  • Networks

---

Bigger picture

• Service in a wider context
• Adjunct requirements
  • Managing Terraform state
  • Cloud security
  • Logging and monitoring
  • DNS
  • User management (Active Directory)
  • Networks

---

Bigger picture

Download SVG | PNG

---

Examples

• Terraform (Kubernetes)
  • Azure Kubernetes Service (AKS)
• Terraform (App Service)
  • Azure App Service
  • Azure Container Registry (ACR)
  • Azure Key Vault

---

Help

If you’d like help organising and preparing your digital strategy, working with your team to foster a data-driven open culture, or just hands-on-keyboard training in infrastructure-as-code, please get in touch.

View as a presentation