Provision Azure services
Background
In order to understand the various Snyk integration points to Azure, we are going to deploy and configure some supporting resources. The objective for these exercises is to demonstrate how Snyk secures your workloads. We will provide basic patterns intended for use in learning environments. For a deeper dive and learning more about Azure, we suggest referencing Microsoft's self-paced training modules.
Deploy Azure Kubernetes Service (AKS)
The following examples are based on an Azure Quickstart for deploying AKS using the CLI. We will deploy a cluster as well as a sample multi-container application. The application will include both a web front end as well as a Redis instance.
Create a resource group
We begin by creating an Azure resource group to logical organize the resources we will deploy and manage. Here, we will also define the location where our resources will run in Azure. In this case, we will deploy to the
eastus location. From your terminal, run the following command:1
az group create --name mySnykAKSResourceGroup --location eastus
Copied!
When successfully completed, you will see output similar to the following:
1
{
2
"id": "/subscriptions/<guid>/resourceGroups/mySnykAKSResourceGroup",
3
"location": "eastus",
4
"managedBy": null,
5
"name": "mySnykAKSResourceGroup",
6
"properties": {
7
"provisioningState": "Succeeded"
8
},
9
"tags": null,
10
"type": "Microsoft.Resources/resourceGroups"
11
}
Copied!
You can also validate the creation of the resource group in the Azure portal as illustrate below:
Create the AKS cluster
Next, we are going to create a cluster named
mySnykAKSCluster in our recently created mySnykAKSResourceGroup. Our cluster will have one node and will have monitoring enabled.1
az aks create --resource-group mySnykAKSResourceGroup --name mySnykAKSCluster --node-count 1 --enable-addons monitoring --generate-ssh-keys
Copied!
This may take several minutes to complete. You will see the following outputs in the terminal:
1
Finished service principal creation[##########################] 100.0000%
2
- Running...
3
AAD role propagation done[[##########################] 100.0000%
Copied!
Once the deployment completes the CLI will return a lengthy JSON response containing details about your cluster. You can also view this within the Azure portal:
Figure 1
Figure 2
Figure 3
Connect to the cluster
To manage our AKS cluster, we will use kubectl. Since we are using the Azure CLI, we will need to install
kubectl with the following command:1
az aks install-cli
Copied!
Next, we will need to configure
kubectl to connect to AKS by downloading our credentials and configuring the CLI to use these.1
az aks get-credentials --resource-group mySnykAKSResourceGroup --name mySnykAKSCluster
Copied!
If successful, you should see output similar to this:
1
Merged "mySnykAKSCluster" as current context in $HOME/.kube/config
Copied!
Now, we are ready to verify our connection to our cluster.
1
kubectl get nodes
Copied!
When the node is ready, you should see an example output similar to the following:
1
NAME STATUS ROLES AGE VERSION
2
aks-nodepool1-27048785-vmss000000 Ready agent 5m v1.15.10
Copied!
Last modified 8d ago
Export as PDF
Copy link
Edit on GitHub