Notes to Self on AltaModa Technologies

Azure Kubernetes Service

Sat, 20 Jun 2026 09:22:00 +0000

The PowerShell module provides cluster details in JSON format. To gather AKS cluster info:

Get-AzAksCluster -ResourceGroupName <resource-group-name> -Name <cluster-name>

NOTE: AzCLI and Azure PowerShell module emit different JSON.

Fri, 19 Jun 2026 18:33:00 +0000

Managed Identity provides a secure service principal for an Azure (typically compute) resource for accessing other resources.

Prefer over credential-based (e.g., user/pwd) authentication with an OAuth token flow. Entra’s OAuth 2.0 Client Credentials Grant Flow
24-hour token expiration; Azure refreshs at 12 hours
- Uninterrupted if Entra unavailable < 24 hours
Certificate based, rather than credentials
- Certs valid for 90 days; Azure rotates at 45 days

User-assigned
- Created and managed as a separate resource
- Owner responsible for deprovising
- May be assigned to multiple resources
System-assigned
- Available for some Azure resources
- Azure manages, including deprovisioning (shares the resource’s lifecycle)
- Assigned to exactly 1 resource
- Naming: uses the same name as the resource

Fri, 28 Feb 2025 14:24:00 +0000

ReplicaSet: scales application to have multiple instances of the same pod
Deployment: ReplicaSet + rolling update + rollback + versioning
StatefulSet: Adds Unique Identity, Persistent Network Identity, Persistent Storage
DaemonSet: Runs exactly one pod per node. Includes pod scheduling, pod identity, rollback strategy.