Die Azure-Schnellstartvorlagen sind derzeit in englischer Sprache verfügbar.
This ARM template demonstrates the deployment of an AKS instance with advanced networking features into an existing virtual network and Azure AD Integeration. Additionally, the chosen Service Principal is assigned the Network Contributor role against the subnet that contains the AKS cluster.
Diese ARM-Vorlage (Azure-Ressourcen-Manager) wurde von einem Mitglied der Community und nicht von Microsoft erstellt. Jede ARM-Vorlage wird für Sie von dessen Besitzer, nicht von Microsoft, unter einem Lizenzvertrag lizenziert. Microsoft übernimmt keine Zuständigkeiten für ARM-Vorlagen, die von Mitgliedern der Community bereitgestellt und lizenziert werden, und auch nicht für deren Sicherheit, Kompatibilität oder Leistung. ARM-Vorlagen aus der Community werden von keinem Microsoft-Supportprogramm oder -Dienst unterstützt und wie vorhanden ohne jegliche Gewährleistung zur Verfügung gestellt.
Parameter
| Parametername | Beschreibung |
|---|---|
| resourceName | The name of the Managed Cluster resource. |
| location | The Azure location of the AKS resource. |
| dnsPrefix | Optional DNS prefix to use with hosted Kubernetes API server FQDN. |
| osDiskSizeGB | Disk size (in GB) to provision for each of the agent pool nodes. This value ranges from 0 to 1023. Specifying 0 will apply the default disk size for that agentVMSize. |
| agentCount | The number of agent nodes for the cluster. Production workloads have a recommended minimum of 3. |
| agentVMSize | The size of the Virtual Machine. |
| existingServicePrincipalObjectId | Oject ID against which the Network Contributor roles will be assigned on the subnet |
| existingServicePrincipalClientId | Client ID (used by cloudprovider) |
| existingServicePrincipalClientSecret | The Service Principal Client Secret. |
| osType | The type of operating system. |
| kubernetesVersion | The version of Kubernetes. |
| enableHttpApplicationRouting | boolean flag to turn on and off of http application routing |
| networkPlugin | Network plugin used for building Kubernetes network. |
| maxPods | Maximum number of pods that can run on a node. |
| enableRBAC | boolean flag to turn on and off of RBAC |
| existingVirtualNetworkName | Name of an existing VNET that will contain this AKS deployment. |
| existingVirtualNetworkResourceGroup | Name of the existing VNET resource group |
| existingSubnetName | Subnet name that will contain the App Service Environment |
| existingSubnetRoleAssignmentName | Name of the Role Assignment created for the Service Principal in the existing Subnet |
| serviceCidr | A CIDR notation IP range from which to assign service cluster IPs. |
| dnsServiceIP | Containers DNS server IP address. |
| dockerBridgeCidr | A CIDR notation IP for Docker bridge. |
| AAD_ClientAppID | The Application ID for the Client App Service Principal |
| AAD_ServerAppID | The Application ID for the Server App Service Principal |
| AAD_TenantID | The Azure AD Tenant where the cluster will reside |
| AAD_ServerAppSecret | The Service Principal Secret for the Client App Service Principal |
Verwenden der Vorlage
PowerShell
New-AzResourceGroup -Name <resource-group-name> -Location <resource-group-location> #use this command when you need to create a new resource group for your deploymentAzure PowerShell installieren und konfigurieren
New-AzResourceGroupDeployment -ResourceGroupName <resource-group-name> -TemplateUri https://raw.githubusercontent.com/Azure/azure-quickstart-templates/master/quickstarts/microsoft.containerinstance/aks-advanced-networking-aad/azuredeploy.json
Befehlszeile
az group create --name <resource-group-name> --location <resource-group-location> #use this command when you need to create a new resource group for your deploymentInstallieren und Konfigurieren der plattformübergreifenden Azure-Befehlszeilenschnittstelle
az group deployment create --resource-group <my-resource-group> --template-uri https://raw.githubusercontent.com/Azure/azure-quickstart-templates/master/quickstarts/microsoft.containerinstance/aks-advanced-networking-aad/azuredeploy.json