Roadmap › Kubernetes (K8s) & AKS › Module: Deploying and Operating
Lessons in this course (15)
15. AKS specifics
Intermediate★ Must knowLesson 15 of 15
bash
az group create -n rg-shop -l centralindia
az aks create -g rg-shop -n aks-shop --node-count 3 --enable-managed-identity \
--attach-acr myacr --enable-oidc-issuer --enable-workload-identity --generate-ssh-keys
az aks get-credentials -g rg-shop -n aks-shop
az aks get-upgrades -g rg-shop -n aks-shop -o table
az aks upgrade -g rg-shop -n aks-shop --kubernetes-version <version>
az aks nodepool add -g rg-shop --cluster-name aks-shop -n gpupool --node-vm-size Standard_NC6s_v3 --node-taints sku=gpu:NoSchedule- Control plane free tier vs Standard tier (financially backed SLA) vs Premium (LTS).
- System node pool (critical add-ons) + user node pools; spot node pools for cheap batch.
- Networking: kubenet (legacy), Azure CNI / Azure CNI Overlay, Cilium dataplane.
- Integrations: ACR, Key Vault CSI driver, Workload Identity, Azure Monitor/Container Insights + Managed Prometheus/Grafana, Application Gateway for Containers, Azure Policy, Defender for Containers, KEDA and Dapr add-ons, AKS Automatic (opinionated, managed configuration).
- Alternatives when you don't need full Kubernetes: Azure Container Apps (built on Kubernetes + KEDA + Envoy, fully managed).