Azure Kubernetes Service Agic Ingress: 30 Real-World Demos

Azure Application Gateway Ingress Controller, Health Probes, Cert-Manager, External DNS, Lets Encrypt, E2E SSL, WAF,Helm

What you'll learn

You will master each and every Ingress concept on Azure Application Gateway Ingress Controller (AGIC) with 30+ Real-World Demos

You will implement Path based and Domain based Routing using Ingress Service

You will implement 5 demos for Health Probes in combination with Ingress Annotations, Readiness, liveness probes

You will install External DNS and implement automatic addition of DNS records in Azure DNS Zones

You will implement automatic provisioning of production grade SSL Certificates using Cert-Manager and Lets Encrypt

You will implement 6 demos on Ingress SSL which includes SSL TLS, End to End SSL and many more.

You will implement Azure Web Application Firewall usecases in combination with Ingress Service

You will use Helm CLI to install Azure Application Gateway Ingress Controller (AGIC) on Azure AKS Cluster

You will implement a Shared Azure Application Gateway concept with a practical demo

You will implement Azure Application Gateway Ingress Controller (AGIC) Watch Namespaces concept with 2 practical demos.

You will also implement Ingress important concepts cookie based affinity, backend path prefix, backend hostname, override frontend ports and Rewrite Rule sets

Requirements

You must have Kubernetes knowledge and experience to follow with me for hands-on activities.

Description

Course Overview Welcome to this Amazing course on Azure Kubernetes Service AGIC Ingress: 30 Real-World Demos.  Below is the list of modules covered in this course. Course Modules01. AGIC Install Greenfield02. AGIC Default Backend03. AGIC Ingress Paths04. AGIC Ingress URLRouting05. AGIC Backend Path Prefix06. AGIC Backend Hostname07. AGIC Cookie-based Affinity08. AGIC Override Frontend Port09. AGIC Rewrite Rule Set10. AGIC Probes Default and HTTP11. AGIC Probes Readiness Liveness12. AGIC Probes Annotations13. Delegate Domain from AWS Route53 to Azure DNS Zones14. ExternalDNS for AzureDNS on AKS15. AGIC ExternalDNS Basic16. AGIC Domain Name Routing17. AGIC Ingress TLS18. AGIC SSL Redirect19. AGIC Upload SSLCert Application Gateway20. AGIC Backend SSL Application21. AGIC End2End SSL22. AGIC SSL with LetsEncrypt23. AGIC WAF OWASP24. AGIC WAF Policy25. AGIC Private IP26. AGIC and Nginx Ingress27. AGIC Install using Helm28. AGIC Shared Application Gateway29. AGIC Watch Namespaces Each of my courses comes withAmazing Hands-on Step By Step Learning ExperiencesPractical demos for each and every conceptFriendly Support in the Q&A section"30-Day "No Questions Asked" Money Back Guaranteed by Udemy"

Overview

Section 1: Introduction

Lecture 1 Introduction

Lecture 2 Course GitHub Repository Links

Section 2: Demo-01: Install AKS AGIC Add-On using Greenfield Method

Lecture 3 Step-01: Introduction to Azure AKS AGIC

Lecture 4 Step-02: Create Azure AKS Cluster with AGIC Addon and AppGw

Lecture 5 Step-03: Assign network contributor role to AGIC addon Managed Identity

Lecture 6 Step-04: Verify AKS Cluster and Application Gateway

Lecture 7 Step-05: Cost saving by stopping AppGw and AKS Cluster when not in use

Section 3: Demo-02: Azure AGIC - Ingress with Default Backend

Lecture 8 Step-01: Introduction to Ingress Default Backend

Lecture 9 Step-02: Deploy and Verify Ingress with Default Backend

Lecture 10 Step-03: Verify AppGw settings and Clean-up

Section 4: Demo-03: Azure AGIC - Ingress with HTTP Paths and Rules

Lecture 11 Step-01: Introduction to HTTP Paths and Rules

Lecture 12 Step-02: Review Kubernetes Manifests

Lecture 13 Step-03: Deploy and Verify HTTP Root Path and app1 Path

Lecture 14 Step-04: Scale the Deployment and Verify changes in AppGW

Section 5: Demo-04: Azure AGIC - Ingress URL Routing

Lecture 15 Step-01: Introduction to Ingress URL Routing

Lecture 16 Step-02: URL Routing demo with Default Backend in Ingress Service

Lecture 17 Step-03: URL Routing demo with HTTP Path Root Context in Ingress Service

Section 6: Demo-05: Azure AGIC - Ingress Backend Path Prefix

Lecture 18 Step-01: Introduction to Backend Path Prefix Annotation

Lecture 19 Step-02: Implement Backend Path Prefix Annotation Demo

Section 7: Demo-06: Azure AGIC - Ingress Backend Host Name

Lecture 20 Step-01: Introduction to Backend Hostname Annotation

Lecture 21 Step-02: Implement Backend Hostname Annotation Demo

Section 8: Demo-07: Azure AGIC - Ingress Cookie Based Affinity

Lecture 22 Step-01: Introduction to Cookie based Affinity Annotations

Lecture 23 Step-02: Enable Cookie based Affinity and Verify

Lecture 24 Step-03: Enable Distinct Cookie setting and Verify

Section 9: Demo-08: Azure AGIC - Ingress Override Frontend Port

Lecture 25 Step-01: Override Frontend Port Annotation Demo

Section 10: Demo-09: Azure AGIC - Ingress Rewrite Rule Set

Lecture 26 Step-01: Introduction to Rewrite Rule Set Annotation

Lecture 27 Step-02: Implement Rewrite Rule Set Annotation Demo

Section 11: Demo-10: Azure AGIC - Ingress Default and HTTP Health Probes

Lecture 28 Step-01: Introduction to Default and HTTP Health Probes

Lecture 29 Step-02: Implement Default and HTTP Health Probes

Section 12: Demo-11: Azure AGIC - Ingress Readiness and Liveness Health Probes

Lecture 30 Step-01: Introduction to Readiness and Liveness Health Probes

Lecture 31 Step-02: Implement Readiness Probe Demo

Lecture 32 Step-03: Implement Liveness Probe and both probes demo

Section 13: Demo-12: Azure AGIC - Ingress Health Probe Annotations

Lecture 33 Step-01: Demo with AGIC Health Probe Annotations

Section 14: Demo-13: Azure DNS Zones - Delegate Domain Name

Lecture 34 Step-00: Pre-requisite Note for Delegate Domain to Azure DNS Zones

Lecture 35 Step-01: Introduction-to-Delegate-Domain-to-Azure-DNS-Zones

Lecture 36 Step-02: Create Azure DNS Zone, Delegate Domain and Verify

Section 15: Demo-14: Azure AGIC - Install External DNS Controller

Lecture 37 Step-01: Introduction to External DNS Install

Lecture 38 Step-02: Create Role Assignment for Managed Identity

Lecture 39 Step-03: Create Kubernetes Secret with azure.json file

Lecture 40 Step-04: Review and Deploy External DNS Controller

Section 16: Demo-15: Azure AGIC - Ingress spec.rules.host + External DNS

Lecture 41 Step-01: Introduction to Ingress spec.rules.host with External DNS

Lecture 42 Step-02: Implement External DNS Demo with Ingress Service

Section 17: Demo-16: Azure AGIC - Ingress Domain Name Routing

Lecture 43 Step-01: Introduction to Ingress Domain Name Routing Demo

Lecture 44 Step-02: Implement Ingress Domain Name Routing Demo

Section 18: Demo-17: Azure AGIC - Ingress TLS SSL

Lecture 45 Step-01: Introduction to Ingress TLS

Lecture 46 Step-02: Create Self-Signed SSL Cert, Key and Kubernetes Secret

Lecture 47 Step-03: Deploy and Verify Ingress TLS

Section 19: Demo-18: Azure AGIC - Ingress TLS SSL Redirect

Lecture 48 Step-01: Ingress SSL Redirect Demo

Section 20: Demo-19: Azure AGIC - Ingress SSL: Reference AppGw Certs in Ingress Service

Lecture 49 Step-01: Introduction to reference AppGw Certs in Ingress Service

Lecture 50 Step-02: Implement AppGw SSL Certificate Annotation Demo

Section 21: Demo-20: Azure AGIC - Ingress End to End SSL: Build Backend SSL Application

Lecture 51 Step-01: Introduction to Building Backend SSL Application

Lecture 52 Step-02: Implement Backend SSL Demo

Section 22: Demo-21: Azure AGIC - Ingress End to End SSL Implementation

Lecture 53 Step-01: Introduction to End to End SSL Demo

Lecture 54 Step-02: Upload Backend SSL Certificate to Application Gateway

Lecture 55 Step-03: Implement End to End SSL Demo and CleanUp

Section 23: Demo-22: Azure AGIC - Ingress SSL with Cert Manager and Lets Encrypt

Lecture 56 Step-01: Introduction to usage of Cert Manager and Lets Encrypt

Lecture 57 Step-02: Install Cert Manager and Verify

Lecture 58 Step-03: Review and Deploy Cert Manager Cluster Issuer

Lecture 59 Step-04: Deploy Apps and Verify SSL Certs generated by LetsEncrypt

Lecture 60 Step-05: Verify AppGw settings, Access Apps and Cleanup

Section 24: Demo-23: Azure AGIC - Ingress with Web Application Firewall (WAF) and OWASP

Lecture 61 Step-01: Enable WAF and Logs on Application Gateway

Lecture 62 Step-02: Deploy App and Verify with XSS Attack

Lecture 63 Step-03: Verify AppGw Logs and CleanUp

Section 25: Demo-24: Azure AGIC - Ingress with WAF Custom Policy

Lecture 64 Step-01: Introduction to Ingress with WAF Custom Policy

Lecture 65 Step-02: Create WAF Policy

Lecture 66 Step-03: Implement WAF Route Path Demo

Lecture 67 Step-04: Implement WAF HTTP Listener Demo and CleanUp

Section 26: Demo-25: Azure AGIC - Ingress with Application Gateway Private IP

Lecture 68 Step-01: Introduction to using Private IP on AppGw

Lecture 69 Step-02: Implement Private IP with Ingress Service and AppGw

Section 27: Demo-26: Azure AGIC - Multiple Ingress Controllers (Nginx and AGIC)

Lecture 70 Step-01: Introduction to Multiple Ingress Controllers (Nginx and AGIC)

Lecture 71 Step-02: Create Public IP for Nginx Ingress Controller

Lecture 72 Step-03: Install Nginx Ingress Controller using Helm

Lecture 73 Step-04: Verify Nginx Ingress Controller Helm Release

Lecture 74 Step-05: Deploy App1 and App2, Verify Ingress services and cleanup

Lecture 75 Step-06: CleanUp AKS Cluster and Application Gateway

Section 28: Demo-27: Azure AGIC - Install using Helm Charts

Lecture 76 Step-01: Introduction to Installing AGIC using Helm Charts

Lecture 77 Step-02: Create Resource Group, Vnet and Subnets

Lecture 78 Step-03: Create Azure AKS Cluster

Lecture 79 Step-04: Create Azure Application Gateway

Lecture 80 Step-05: Create User Assigned and Fed Identity Credential

Lecture 81 Step-06: Create Role Assignment for VNET, PIP and AppGw

Lecture 82 Step-07: Create helm-config.yaml file

Lecture 83 Step-08: Install AGIC Helm Release on AKS Cluster

Lecture 84 Step-09: Verify the Installed Helm Release

Lecture 85 Step-10: Deploy App1, verify and CleanUp

Section 29: Demo-28: Azure AGIC - Shared Application Gateway with other Azure Resources

Lecture 86 Step-01: Introduction to AGIC Shared Application Gateway

Lecture 87 Step-02: Enabled Shared equals true and Verify with sample app

Lecture 88 Step-03: Create myaciapp1 and test

Lecture 89 Step-04: Create myaciapp2 and test

Lecture 90 Step-05: Implement prohibit myaciapp1 target, test and cleanup

Section 30: Demo-29: Azure AGIC - Watch Namespaces

Lecture 91 Step-01: Introduction to AGIC Watch Namespaces

Lecture 92 Step-02: Deploy App1, App2 and Verify for Watch All Namespace scenario

Lecture 93 Step-03: Upgrade Helm Release with Watch Namespace setting

Lecture 94 Step-04: Deploy App1, App2 and we should see Prod NS configs only

This course is designed for students who have completed my Azure Kubernetes Service with Azure DevOps and Terraform course,Infrastructure Architects or Sysadmins or Developers or DevOps Engineers who are planning to master Internet Edge traffic for Azure AKS Clusters using Load Balancers