Enterprise-Scale
aks-baseline
Our great sponsors
Enterprise-Scale | aks-baseline | |
---|---|---|
19 | 2 | |
1,597 | 643 | |
3.2% | 3.9% | |
8.7 | 6.4 | |
6 days ago | 6 days ago | |
PowerShell | Bicep | |
MIT License | MIT License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Enterprise-Scale
-
Management group structure for enterprise environment?
There is also a terraform version if that is your preferred IaC - https://github.com/Azure/Enterprise-Scale
-
How are you structuring Hub & Spoke vNets?
Take the example from Cloud Adoption Framework enterprise-scale landing zones hub and spoke architecture https://github.com/Azure/Enterprise-Scale/blob/main/docs/reference/adventureworks/README.md. It should'nt be all about vnets, but how you really design the landscape especially for the services you have listed. If you plan to have multiple hubs in different regions and you want a spoke vnet in a hub communicate with another spoke in a different hub you could run into transitive routing issues which you would need Azure Route Server or Azure Virtual WAN to solve. Start from the landing zone architectures because these examples would mostly fit your requirements and are desinged to scale.
The example is for a single region deployment. You are mentioning the potential of more services to be in Azure. Where do you get your subscriptions from? Do you have Enterprise Agreement? If so, then it really doesn't matter and you could reference the example desing. Based on the service you determine the destination subscription. If you have multiple teams/partners working on different services then this design is excellent for RBAC. If you have a small team then you could have a maximum of three subscriptions, from the example desing you could put together the management, connectivity and identity subscription and seperate the resources based on resource groups for RBAC. Each new service that you are offering is in the corp or online subscription and you create your services and vnets and peer them on the basis that should the vnet be corp connected or is exposed to the outside. Something like this https://github.com/Azure/Enterprise-Scale/blob/main/docs/reference/treyresearch/README.md
-
Real live examples or tours of Azure accounts
Make one for yourself and have a play: https://github.com/Azure/Enterprise-Scale
-
How are you managing resource groups in your organization?
If you are a little larger company, you should look at the enterprise-scale part (https://github.com/Azure/Enterprise-Scale)
aks-baseline
We haven't tracked posts mentioning aks-baseline yet.
Tracking mentions began in Dec 2020.
What are some alternatives?
private-aks-cluster-terraform-devops - This sample shows how to create a private AKS cluster using Terraform and Azure DevOps
terraform-azurerm-caf-enterprise-scale - Azure landing zones Terraform module
awesome-kubernetes - A curated list for awesome kubernetes sources :ship::tada:
ALZ-Bicep - This repository contains the Azure Landing Zones (ALZ) Bicep modules that help deliver and deploy the Azure Landing Zone conceptual architecture in a modular approach. https://aka.ms/alz/docs
azure-quickstart-templates - Azure Quickstart Templates
TailwindTraders
opnazure - This template allows you to deploy an OPNsense Firewall Azure VM using the opnsense-bootsrtap installation method
ProvisionGenie - ProvisionGenie 🧞 is an open-source project by Luise Freese & Carmen Ysewijn. We provision Microsoft Teams teams with channels, additional libraries, lists, and more. We educate users to make better decisions and work in Teams like it is intended to be used.
ARI - Azure Resource Inventory - It's a Powerful tool to create EXCEL inventory from Azure Resources with low effort
CloudAdoptionFramework - Code samples and extended documentation to support the guidance provided in the Microsoft Cloud Adoption Framework
kubestriker - A Blazing fast Security Auditing tool for Kubernetes