-
Notifications
You must be signed in to change notification settings - Fork 21
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add Azure AKS Cluster Template #806
Conversation
56df32f
to
572aa14
Compare
572aa14
to
125b7c8
Compare
125b7c8
to
24570a4
Compare
fe13060
to
288561f
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
autoscaling: | ||
enabled: false | ||
minCount: 2 | ||
maxCount: 100 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
NIT: The default value is a bit large IMO, the same 5
as in system
probably a better default.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I wanted to be close to the defaults that Azure suggests while creating the AKS cluster using their platform but I'm ok to decrease it.
288561f
to
ae89115
Compare
This PR introduces the following changes:
azure-aks
clusters has been added.propagateCredentials: false
. This is particularly needed for AKS clusters, as they do not require credential propagation.There are two API options for creating AKS clusters:
ManagedCluster
andASOManagedCluster
. TheASOManagedCluster
approach was chosen because theManagedCluster
will eventually be deprecated. See CAPZ ManagedCluster vs. ASOManagedCluster.ASO Credentials
ASO (azure service operator) requires Azure credentials to be defined in a Kubernetes Secret and does not support reading creds from
AzureClusterIdentity
(source: https://github.com/kubernetes-sigs/cluster-api-provider-azure/blob/main/docs/proposals/20230123-azure-service-operator.md#security-model).Closes #744