9:00 AM - 10:30 AM

This webinar series opens with an overview of this series and brief explanation of the scope of this series. This first session will also cover when to use Azure Kubernetes Service (AKS), which will give context on the topics included in this series. Then we will start with AKS networking and considerations, because it is one of the underlying core infrastructure layers of an AKS cluster that are difficult to change later without redeploying a cluster and risking downtime. Networking connects all the moving parts running on Kubernetes as a platform for managing multiple containerized workloads that handles efficient resource management. Important: this session is part of 4-part series on Azure Kubernetes Service AKS. Please visit the series overview to learn about and register for all four sessions. Topics Covered Learn about Azure specific implementations of Kubernetes networking and best practices for your AKS cluster: Choose a networking model, e.g. Kubenet, CNI, CNI Overlay, etc., Virtual Network integration, including IP address planning, private network integration Cluster ingress and egress Network security best practices, network policies. Learning Objectives In this session, you will learn how to: Decide which AKS networking model per use case and best practices. Design and plan the virtual network for your cluster, including subnet design and IP address planning. Secure network traffic in/out of the cluster as well as intra-cluster traffic per best practices. Understand which networking considerations are difficult to reverse decision on without re-deployment and risking downtime. Pre-requisite: Basic Kubernetes knowledge required Basic understanding of Azure as a platform Basic understanding of Kubernetes fundamentals and core concepts. Refer to this Microsoft learn module on Introduction to Kubernetes, especially how Kubernetes works lesson before joining this session. Intended Audience This series is relevant for all technical roles, e.g. architects, application engineers, as well as platform and operations engineers. Engage live with FastTrack engineers Each session in this AKS series includes a dedicated anonymous Q&A. #fasttrack-azure This event is not recorded so feel free to come off mute and ask questions directly to the engineers. Check out more FastTrack events

9:00 AM - 10:30 AM

Building upon the previous session on AKS networking best practices, we'll learn about securing your cluster and the underlying compute infrastructure, as well as Azure platform integrations to secure your workloads. Important: this session is part of 4-part series on Azure Kubernetes Service AKS. Please visit the series overview to learn about and register for all four sessions. Topics Covered Please note network security is covered in part 1 of this series. Securing Kubernetes, control plane vs data plane, cluster-level security vs - application-level security Node security (compute isolation) Kubernetes secrets, Azure Key Vault integration Access & Identity, role-based access control (RBAC) best practices, Azure workload identities Container security, run time security, container registry security, Azure Defender for - Containers integration Learning Objectives In this session, you will learn how to: Apply role-based access control to cluster level and application level components Secure secrets and optimize secrets management with Azure Key Vault integration Secure container images and run time with Microsoft Defender for Containers. Pre-requisite: Basic Kubernetes knowledge required Basic understanding of Azure as a platform Basic understanding of Kubernetes fundamentals and core concepts. Refer to this Microsoft learn module on Introduction to Kubernetes, especially how Kubernetes works lesson before joining this session. Intended Audience This series is relevant for all technical roles, e.g. architects, application engineers, as well as platform and operations engineers. Engage live with FastTrack engineers Each session in this AKS series includes a dedicated anonymous Q&A. #fasttrack-azure This event is not recorded so feel free to come off mute and ask questions directly to the engineers. Check out more FastTrack events