Azure 快速入门模板目前提供英文版
This ARM template demonstrates the deployment of an AKS instance with advanced networking features into an existing virtual network and Azure AD Integeration. Additionally, the chosen Service Principal is assigned the Network Contributor role against the subnet that contains the AKS cluster.
此 Azure Resource Manager (ARM) 模板由社区的某个成员（而不是由 Microsoft）创建。每个 ARM 模板都根据其所有者（不是 Microsoft）的许可协议向你授予许可。Microsoft 不对由社区成员提供并授予许可的 ARM 模板负责，并且不针对安全性、兼容性和性能进行筛选。社区 ARM 模板不由任何 Microsoft 支持计划或服务提供支持，按“原样”提供，没有任何种类的担保。
参数
| 参数名 | 说明 |
|---|---|
| resourceName | The name of the Managed Cluster resource. |
| location | The Azure location of the AKS resource. |
| dnsPrefix | Optional DNS prefix to use with hosted Kubernetes API server FQDN. |
| osDiskSizeGB | Disk size (in GB) to provision for each of the agent pool nodes. This value ranges from 0 to 1023. Specifying 0 will apply the default disk size for that agentVMSize. |
| agentCount | The number of agent nodes for the cluster. Production workloads have a recommended minimum of 3. |
| agentVMSize | The size of the Virtual Machine. |
| existingServicePrincipalObjectId | Oject ID against which the Network Contributor roles will be assigned on the subnet |
| existingServicePrincipalClientId | Client ID (used by cloudprovider) |
| existingServicePrincipalClientSecret | The Service Principal Client Secret. |
| osType | The type of operating system. |
| kubernetesVersion | The version of Kubernetes. |
| enableHttpApplicationRouting | boolean flag to turn on and off of http application routing |
| networkPlugin | Network plugin used for building Kubernetes network. |
| maxPods | Maximum number of pods that can run on a node. |
| enableRBAC | boolean flag to turn on and off of RBAC |
| existingVirtualNetworkName | Name of an existing VNET that will contain this AKS deployment. |
| existingVirtualNetworkResourceGroup | Name of the existing VNET resource group |
| existingSubnetName | Subnet name that will contain the App Service Environment |
| existingSubnetRoleAssignmentName | Name of the Role Assignment created for the Service Principal in the existing Subnet |
| serviceCidr | A CIDR notation IP range from which to assign service cluster IPs. |
| dnsServiceIP | Containers DNS server IP address. |
| dockerBridgeCidr | A CIDR notation IP for Docker bridge. |
| AAD_ClientAppID | The Application ID for the Client App Service Principal |
| AAD_ServerAppID | The Application ID for the Server App Service Principal |
| AAD_TenantID | The Azure AD Tenant where the cluster will reside |
| AAD_ServerAppSecret | The Service Principal Secret for the Client App Service Principal |
使用模板
PowerShell
New-AzResourceGroup -Name <resource-group-name> -Location <resource-group-location> #use this command when you need to create a new resource group for your deployment安装和配置 Azure PowerShell
New-AzResourceGroupDeployment -ResourceGroupName <resource-group-name> -TemplateUri https://raw.githubusercontent.com/Azure/azure-quickstart-templates/master/quickstarts/microsoft.containerinstance/aks-advanced-networking-aad/azuredeploy.json
命令行
az group create --name <resource-group-name> --location <resource-group-location> #use this command when you need to create a new resource group for your deployment安装和配置 Azure 跨平台命令行界面
az group deployment create --resource-group <my-resource-group> --template-uri https://raw.githubusercontent.com/Azure/azure-quickstart-templates/master/quickstarts/microsoft.containerinstance/aks-advanced-networking-aad/azuredeploy.json