Files
awesome-kubernetes/v2-docs/azure.md

138 KiB
Raw Blame History

Microsoft Azure

!!! info "Architectural Context" Detailed reference for Microsoft Azure in the context of Cloud Providers (Hyperscalers).

Standard Reference

Agentic Engineering

Model Context Protocol

Azure Integrations

Artificial Intelligence

Generative AI

Azure OpenAI Service

  • (2023) infoworld.com: Getting started with Azure OpenAI [PYTHON / JSON CONTENT] [COMMUNITY-TOOL] — Architectural onboarding guide detailing Azure OpenAI implementations. Covers core model deployment strategies, secure endpoint provisioning, and prompt fine-tuning pipelines.

Developer Enablement

Cloud Architecture

Artificial Intelligence (1)

Azure OpenAI

  • (2023) techcommunity.microsoft.com: Azure OpenAI Landing Zone reference architecture [N/A CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — Provides a comprehensive architectural reference for deploying enterprise-grade generative AI workloads within Azure. It outlines landing zone designs focusing on network isolation, private endpoints, regional failover strategies, and policy-driven governance. Essential for architects seeking structured deployment patterns for secure large language model environments.

Cloud Governance

FinOps and Cost Optimization

Dashboards

  • (2024) techcommunity.microsoft.com: Azure Orphan Resources Grafana Dashboard [JSON / KQL CONTENT] [COMMUNITY-TOOL] — Introduces a highly efficient Grafana visualization dashboard engineered to identify orphaned Azure resources like detached disks, unassigned public IPs, and idle interfaces to streamline resource cleanups and FinOps management.

Identity and Access Management

Azure Active Directory

CLI and Tooling

Cloud Infrastructure

Azure

Enterprise Architecture

Platform Engineering

  • Guides cloud platform teams to construct GitOps-driven workflows.
  • Automatically provisions fully governed, secure, and networked Azure subscriptions using Bicep or Terraform.

Cloud Management

FinOps

Cost Optimization

Cloud Native

Kubernetes

Fleet Management

Cloud Platforms

Public Cloud

Azure (1)

  • (2026) Microsoft Azure [ADVANCED LEVEL] [COMMUNITY-TOOL] — Primary reference portal for Microsoft Azure's cloud-native computing, compute virtualization, storage platforms, AKS orchestration, and global software-defined networking.

Cloud Providers

Azure (2)

AKS

Hands-on Labs
  • AKS Labs - Introduction [ENTERPRISE-STABLE] — Microsoft's structured laboratory ecosystem designed to onboard engineers to Azure Kubernetes Service (AKS). The content delivers a reliable, production-aligned guide covering core infrastructure topics such as advanced networking, cluster security integration, and enterprise scaling mechanics.

AKS Updates

  • Azure Updates AKS 🌟 [DOCUMENTATION] [ENTERPRISE-STABLE] — Official update tracking feed detailing Azure Kubernetes Service platform improvements, retired APIs, and native feature promotions. Curator insights mark it as a vital operational pulse for infrastructure engineers, while live grounding confirms its role in tracking Kubernetes version deprecations and control plane releases.

Cloud Security

DevSecOps

Compliance and Guardrails

  • (2022) ismiletechnologies.com: Secure DevOps Kit For Azure(AzSK) [POWERSHELL CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] — Detailed technical analysis of the Secure DevOps Kit for Azure (AzSK). Addresses historical pipeline security validation patterns; notes its transition and deprecation path in favor of modern native tools like Azure Policy and Defender for Cloud.

Identity and Access Management (1)

Conditional Access

SecOps

Virtual Machines

  • (2021) mandiant.com: Azure Run Command for Dummies [POWERSHELL / BASH CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] — A deep security analysis of the operational usage and vulnerabilities of the VM Run Command feature. Explores lateral movement techniques and mechanisms to restrict, audit, and log execution pipelines.

SecOps and Governance

API Security

Generative AI and SecOps

Microsoft Defender for Cloud

SIEM SOAR Monitoring

Cloud-Native Infrastructure

Infrastructure as Code

AI-Assisted Operations

  • Enhancing Infrastructure as Code Generation with GitHub Copilot for Azure [ENTERPRISE-STABLE] — Curator Insight: Analyzes the application of LLM co-pilots in rapidly writing secure ARM and Bicep configurations. Live Grounding: Demonstrates how contextual AI generators drastically lower human-error risk in pipeline IaC templates. Highly representative of modern 2025/2026 operational shifts.

Compute and Containers

AKS and Storage

Cloud-Native Volume Drivers

Azure Container Apps

Compliance and Policy

Serverless Containers

Virtual Machines (1)

Systems Management

Data Engineering

Azure Data Factory

Infrastructure as Code (1)

Data Platform

Databases

SQL Managed Instance

  • (2024) techcommunity.microsoft.com: Azure SQL Managed Instance pools: new features [N/A CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] — Evaluates architectural improvements within Azure SQL Managed Instance (MI) pools. Focuses on the pre-provisioning of compute resources to dramatically accelerate instance deployment speeds and optimize the cost footprints of multi-tenant microservice database architectures.

Synapse Analytics

Real-Time Analytics

Streaming

SaaS Architecture

Multi-Tenancy

  • (2024) techcommunity.microsoft.com: Microsoft Fabric - Multi-Tenant Architecture [N/A CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] [GUIDE] — Technical blueprint detailing tenant segregation strategies in Microsoft Fabric's multi-tenant software-as-a-service layout. Evaluates partition schemes using discrete workspaces, dedicated capacities, and OneLake access control boundaries to satisfy enterprise compliance requirements.

Storage

Data Lake

  • (2023) k21academy.com: Azure Data Lake Overview For Beginners [N/A CONTENT] [COMMUNITY-TOOL] — Foundational architectural overview of Azure Data Lake Storage (ADLS) Gen2. Synthesizes the core capabilities of hierarchical namespaces with the cost-efficiency of standard Azure Blob Storage, catering specifically to distributed big data analytical workloads such as Spark and Databricks.

Developer Platforms

CICD

Project Tye

Governance

API Management

Deprecations

Cloud Architecture (1)

Assessments

Well-Architected Framework

  • (2023) infoq.com: Microsoft Refreshes its Well-Architected Framework [N/A CONTENT] [COMMUNITY-TOOL] — Detailed review of Microsoft's refreshed Well-Architected Framework (WAF). Explores updated guidance on operational excellence, reliability, security, performance, and cost engineering targeted at modern containerized, serverless, and AI-driven systems.

Compliance

Landing Zones

Containers

Kubernetes Security

Cost Optimization (1)

FinOps (1)

  • (2022) techcommunity.microsoft.com: Azure Orphan Resources [KQL / POWERSHELL CONTENT] [COMMUNITY-TOOL] [GUIDE] — Details the usage of a centralized Azure Workbook solution to identify and remediate orphaned cloud resources (e.g., unattached managed disks, idle load balancers, unused public IPs). Promotes advanced FinOps methodologies to automate resource governance and reduce unnecessary operational spend.

Education

Cloud Architecture (2)

DevOps Learning Path

Resources

  • (2026) azurebrains.com: Azurebrains [N/A CONTENT] [COMMUNITY-TOOL] — A community-focused learning hub providing technical breakdowns, exam preparation content, and implementation tutorials detailing core Azure administrative, infrastructure, and automation services.

Security

Access Control

  • (2023) k21academy.com: Azure RBAC Vs Azure Policies Vs Azure Blueprints [N/A CONTENT] [COMMUNITY-TOOL] [GUIDE] — Architectural comparison of Azure's primary governance frameworks: Azure RBAC (identity authorization), Azure Policy (resource compliance), and Azure Blueprints. Live Grounding notes that while Blueprints remains supported, Microsoft modern practices heavily steer enterprise platform engineering towards Azure Template Specs and Bicep stacks for deployment template compliance.

Compliance Auditing

  • (2021) thomasthornton.cloud: Scout Suite reports using Azure DevOps Pipeline [YAML / PYTHON CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] [GUIDE] — Guides engineering teams in implementing automated multi-cloud configuration auditing. Shows how to integrate Scout Suite within an Azure DevOps pipeline to automatically generate and export compliance audit reports on build completion.

Policy Compliance

  • (2023) Azure Policy Recommended Practices [JSON CONTENT] [COMMUNITY-TOOL] [GUIDE] — Compiles recommended practices for designing, testing, and assigning Azure Policies across management group scopes. Explains policy evaluation lifecycles, execution latency mitigation, and automated remediation patterns via Managed Identities.

Hybrid and Multicloud

Azure Arc

DevOps and GitOps

Infrastructure Automation

  • (2024) azurearcjumpstart.io [HCL / BICEP / BASH CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] [GUIDE] — The premier architectural gateway and orchestration sandbox for Azure Arc adoption. Provides fully-automated reference templates to deploy hybrid resources, Kubernetes environments, and virtual machines across multi-cloud topologies via Infrastructure as Code.

Secure Connectivity

  • (2022) seifbassem.com: SSH into your Azure Arc-enabled servers from anywhere [BASH / POWERSHELL CONTENT] [COMMUNITY-TOOL] [GUIDE] — Illustrates how to achieve secure, credential-based SSH tunneling into hybrid on-premises servers using the Azure Arc relay plane. Negates the operational need for open public-facing management ports or specialized site-to-site VPN setups.

Identity and Access

Access Control (1)

RBAC

Active Directory

Authentication

  • (2020) vcloud-lab.com: Get started and configure certificate-based authentication in Azure [N/A CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] [GUIDE] — Provides step-by-step guidance on setting up Certificate-Based Authentication (CBA) inside Microsoft Entra ID. Explains custom domain settings and client-certificate trust configurations to secure machine-to-machine integrations or restrict administrative console access.

Deprecations (1)

Governance (1)

Operations

RBAC (1)

Infrastructure

CICD (1)

Azure Pipelines

Comparison

Cross-Cloud Pipelines

IaC

  • (2021) thomasthornton.cloud: Deploy Terraform using Azure DevOps [YAML / TERRAFORM CONTENT] [COMMUNITY-TOOL] [GUIDE] — Demonstrates how to build automated, highly secure Terraform pipelines inside Azure DevOps. Explores handling sensitive state files safely within Azure Blob Storage backends and setting up secure Service Connections to authenticate with resource groups.

Managed Pools

  • (2024) learn.microsoft.com: Managed DevOps Pools documentation [N/A CONTENT] [COMMUNITY-TOOL] — Analyzes Managed DevOps Pools in Azure DevOps, outlining host provisioning behaviors, network peering capabilities, and performance optimizations. Reduces the maintenance overhead associated with managing self-hosted virtual machine scale sets for intensive build tasks.

Developer Tooling

CLI Tools

  • (2026) CommandLine Ninja [BASH / POWERSHELL CONTENT] [COMMUNITY-TOOL] — A high-quality community technical portal sharing advanced CLI scripts, terminal short-cuts, Bash and PowerShell recipes, and administrative strategies to aid cloud infrastructure engineers in operational tasks.

Concepts

  • (2024) techcommunity.microsoft.com: Infra in Azure for Developers - The What [N/A CONTENT] [COMMUNITY-TOOL] [GUIDE] — A foundational primer highlighting essential cloud infrastructure paradigms for developers. Bridges application development workflows with operational requirements, explaining how compute, virtual networks, and managed databases interact.

Design Patterns

  • (2023) Enterprise Web App Patterns - Azure Architecture Center [N/A CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] [GUIDE] — Comprehensive patterns from the Azure Architecture Center guiding development of enterprise web apps. Demonstrates decoupling strategies, state management, Zero Trust endpoint security, and microservice communication topologies.

DevTest Labs

  • (2023) learn.microsoft.com: DevTest and DevOps for microservice solutions [N/A CONTENT] [COMMUNITY-TOOL] — Comprehensive documentation outlining Azure DevTest Labs architectures. Emphasizes automated environment shutdown rules, VM sizing policies, and pre-packaged dev artifact ingestion designed to control costs during microservice testing phases.

IaC (1)

Landing Zones (1)

Template Specs

  • (2021) techcommunity.microsoft.com: ARM Template Specs now GA! [ARM JSON / BICEP CONTENT] [COMMUNITY-TOOL] — Details the release of ARM Template Specs. This allows engineering teams to store, version, and share ARM/Bicep template resources securely within Azure, replacing unsecured external repository sharing mechanisms.

Terraform Integration

Networking

Hybrid Connectivity

VPN
  • (2021) techcommunity.microsoft.com: How to create a VPN between Azure and AWS using only managed solutions [N/A CONTENT] [COMMUNITY-TOOL] [GUIDE] — Detailed technical guide outlining the design and deployment of site-to-site IPsec VPN connections between AWS and Azure environments using native managed endpoints. Avoids third-party virtual appliances by leveraging Azure VPN Gateway and AWS Virtual Private Gateway. Live Grounding verifies that although multi-cloud network overlays like Aviatrix exist, this native architecture remains a highly resilient, cost-effective baseline.

Load Balancing

Operating Systems

Azure Linux

  • (2020) ==github.com/microsoft/CBL-Mariner== 4823 [GO / C / SPEC CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Official open-source repository for Azure Linux (CBL-Mariner). Explores the platform's architectural components, highlighting why this lightweight Linux OS is the optimal host-OS layer inside AKS to run critical containerized microservices securely.
  • (2023) theregister.com: Microsoft has made Azure Linux generally available. Repeat, Azure Linux [N/A CONTENT] [COMMUNITY-TOOL] — Reports on the General Availability of Azure Linux (formerly CBL-Mariner), Microsoft's custom-built Linux distribution engineered to run containerized microservice workloads inside AKS. Highlight features include a highly optimized, lightweight, and secured kernel design.

Infrastructure as Code (2)

Azure Bicep

Developer Onboarding

  • (2023) insight-services-apac.github.io: Getting Started with Bicep [BICEP CONTENT] [COMMUNITY-TOOL] [GUIDE] — Onboarding reference designed to accelerate transition from verbose ARM templates to highly concise Azure Bicep syntax. Discusses parameters, tooling environments, and modular structures.

Developer Workflows

IaaS Provisioning

Microsoft Graph Integration

Azure Key Vault

Secret Management

Azure Resource Manager

Reference Architecture Templates

  • (2024) Azure Quickstart Templates 🌟 [BICEP / JSON CONTENT] [COMMUNITY-TOOL] [GUIDE] — A massive repository hosting thousands of open-source ARM and Bicep reference templates, curated to accelerate sandbox provisioning and enterprise pattern standardization.

Scripting Repository

SysOps Automation

  • (2023) Abhisheksinhacoder/collection-of-useful-scripts [POWERSHELL / BASH CONTENT] [COMMUNITY-TOOL] — An open community-maintained index of automation workflows, system utilities, and configuration scripts to handle everyday DevOps, Windows, and Linux provisioning tasks.

Knowledge Bases

Community Hub

Microsoft Learn

Documentation Hub

Azure (3)

  • (2026) Azure Docs [DOCUMENTATION] [COMMUNITY-TOOL] — The technical knowledge library for all Azure platform services. Provides SDK implementations, security designs, CLI tools, and infrastructure-as-code documentation.

Microsoft

  • (2026) Microsoft Docs [DOCUMENTATION] [COMMUNITY-TOOL] — The main technical documentation library for Microsoft's developer tools, platform frameworks, and API definitions.

Networking (1)

Azure (4)

Hybrid Infrastructure

  • (2025) Azure ExpressRoute Resiliency: Best Practices for Production-Critical Workloads [NONE CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — Deeply examines resiliency patterns for Azure ExpressRoute connectivity connecting on-premises data centers to Azure. It covers active-active configuration, secondary ExpressRoute failovers, and VPN backup strategies to prevent downtime during link outages. Indispensable for designing highly available hybrid cloud foundations.

Multi-Tenant

  • (2025) Deploying Virtual Networks Across Tenants Using Azure Virtual Network Manager [NONE CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — Explains how to construct secure virtual network topologies across multiple enterprise Azure tenants using Azure Virtual Network Manager (AVNM). Details centralized mesh-network architectures, security admin rules, and policy distribution. This resource is highly practical for organizations managing complex multi-tenant landing zones.

Ingress

Azure AGC

Istio Integration
  • Application Gateway for Containers: Istio Integration [ADVANCED LEVEL] [ENTERPRISE-STABLE] — A modern engineering analysis detailing the integration of Azure Application Gateway for Containers (AGC) with an internal Istio service mesh topology. Focuses on seamless north-south traffic routing and end-to-end TLS bridging configurations inside Azure cloud architectures.

Networking and Edge

Load Balancing (1)

DNS Traffic Routing

  • (2024) Azure Traffic Manager [BASH / POWERSHELL / BICEP CONTENT] [COMMUNITY-TOOL] — Official engineering design guide detailing global routing methods for Azure Traffic Manager. Compares priority, geographic, subnet, and performance DNS resolution structures for high availability.

Private DNS Resolver

Hybrid Connectivity (1)

VPN Gateways

Identity and Access Management (2)

Observability and Monitoring

Azure Monitor

Log Analytics

Metrics and Telemetry

Prometheus Ecosystem

Multi-Tenancy (1)

Enterprise Architecture (1)

Platform Automation

PowerShell

Azure Storage Utilities

Cloud Management (1)

Configuration Management

Developer Ergonomics

Developer Frameworks

  • (2023) powershellgallery.com: Microsoft.PowerShell.Crescendo [POWERSHELL CONTENT] [ADVANCED LEVEL] [LEGACY] — Comprehensive overview of the Microsoft Crescendo orchestration framework. Demonstrates how to programmatically wrap legacy command-line interfaces inside native PowerShell modules returning object outputs.

Developer Productivity

  • (2024) techcommunity.microsoft.com: Azure PowerShell Tips and Tricks [POWERSHELL CONTENT] [COMMUNITY-TOOL] [GUIDE] — Curated collection of advanced performance optimizations, shell-profiling frameworks, and multi-tenant environment management tips specifically tailored for Azure PowerShell CLI environments.

Device and Policy Management

Directory Services

Open Source Ecosystem

  • (2024) github.com/search?l=powershell [POWERSHELL CONTENT] [COMMUNITY-TOOL] — Real-time query index displaying high-impact open-source automation modules, libraries, and frameworks within the global GitHub PowerShell community.

Scripting Runtimes

  • (2024) PowerShell [POWERSHELL / C# CONTENT] [COMMUNITY-TOOL] — Landing portal and core developer repository for Microsoft PowerShell. Details the cross-platform scripting runtime, object-oriented pipelines, and the extensive module ecosystem utilized for enterprise-scale systems management.

Secret Management (1)

Security and Auditing

Security and Threat Mitigation

Systems Management (1)

Platform Engineering (1)

AI Integration

Agentic Engineering (1)

  • Azure DevOps MCP Server Public Preview [ENTERPRISE-STABLE] — The official public announcement details the release and capabilities of the Azure DevOps MCP server. Highlights the architectural integration of Large Language Models directly into enterprise ADO workflows for automated engineering management.
  • Azure DevOps MCP Server 1718 [ADVANCED LEVEL] [ENTERPRISE-STABLE] — An official Microsoft MCP server repository enabling AI Agents (like Claude or GitHub Copilot) to interact seamlessly with Azure DevOps. Allows agents to manage work items, query repositories, inspect pipeline logs, and orchestrate PR reviews dynamically.

CI-CD Pipelines

AI Integration (1)

Azure DevOps
  • Automate Pull Request Descriptions in Azure DevOps with Azure OpenAI [ADVANCED LEVEL] [ENTERPRISE-STABLE] — A practical implementation guide demonstrating how to integrate Azure OpenAI into Azure DevOps pipelines to automatically generate comprehensive pull request descriptions from code differences. Demonstrates prompt engineering techniques and YAML pipeline configurations to enhance team productivity and standardise PR documentation using generative AI.

Infrastructure as Code (3)

Azure DevOps (1)
  • Automate Terraform Testing with Azure DevOps Pipelines [ADVANCED LEVEL] [ENTERPRISE-STABLE] — Provides a complete implementation walkthrough for embedding robust automated test suites (including tftest and checkov) inside Azure DevOps pipelines. Demonstrates how to validate infrastructure compliance and dry-run infrastructure updates early in the pipeline.
  • Azure DevOps Terraform Pipeline (Complete Guide + YAML Examples) [ADVANCED LEVEL] [ENTERPRISE-STABLE] — A production-grade, step-by-step tutorial on building a fully secure and automated Terraform deployment pipeline within Azure DevOps. Provides robust, reusable YAML template definitions, including state locking configurations, plan validations, and multi-environment promotions.

Language Runtimes

Azure DevOps (2)
  • Install Java 23 in an Azure DevOps Pipeline [SPANISH CONTENT] [COMMUNITY-TOOL] — A technical guide written in Spanish demonstrating how to dynamically configure, install, and leverage the Java 23 SDK runtime inside Azure DevOps build pipelines, using modern Microsoft-hosted and self-hosted runner strategies. [SPANISH CONTENT]

CI-CD Security

Azure DevOps (3)

  • Securing Azure DevOps When Using Private Repositories [COMMUNITY-TOOL] — Analyses secure integration patterns for private Azure DevOps environments. Offers standard reference controls for isolating source code hosting, managing external worker access, and mitigating common misconfiguration patterns across self-hosted agent pools.
  • Update to Azure DevOps Allowed IP Addresses [DOCUMENTATION] [COMMUNITY-TOOL] — Official documentation outlines the network security updates for Azure DevOps, focusing on the transitioning IP address ranges and service tags. Crucial for security engineers managing firewalls and strict ingress/egress rules to maintain uninterrupted pipeline connectivity.
  • Dependabot Version Updates in Azure DevOps [SPANISH CONTENT] [COMMUNITY-TOOL] — A practical guide explaining the installation and automated orchestration of Dependabot-style dependency scanning and automated PR version updates within Azure DevOps repositories. Written in Spanish. [SPANISH CONTENT]

Cloud Security (1)

Identity Federation

  • mattias.engineer: Azure Federated Identity Credentials for GitHub [EN CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] [GUIDE] — An in-depth configuration guide explaining how to design passwordless integrations between GitHub Actions and Microsoft Azure using OpenID Connect (OIDC). Eliminates long-lived static API secrets in favor of short-lived federated credentials.

Platform-as-a-Service

App Services

Java Runtime Development

  • (2024) learn.microsoft.com: Configure a Java app for Azure App Service [JAVA / XML CONTENT] [COMMUNITY-TOOL] — Deep architectural guidance on configuring and tuning enterprise-grade Java web applications (JAR/WAR format) on App Service. Focuses on runtime custom JVM parameters, APM agent injection, and scaling profiles for high-performance enterprise applications.

Security (1)

Identity and Access (1)

Azure AD

Identity Management

Cloud Integration

  • From Zero to Hero with Identity and Access Control in Azure Kubernetes Service [EN CONTENT] [ADVANCED LEVEL] [GUIDE] [ENTERPRISE-STABLE] [GUIDE] — Curator Insight: Architect blueprint for managing Microsoft Entra ID integration in Azure Kubernetes Service. Live Grounding: Walks through configuring fine-grained identity federation and replacing Kubernetes cluster roles with enterprise Azure AD mappings.

Infrastructure Security

Network Protection

  • Building a DDoS Response Plan with Azure DDoS Protection [EN CONTENT] [COMMUNITY-TOOL] — Curator Insight: Architecture plan to withstand high-volume distributed denial-of-service attempts. Live Grounding: Focuses heavily on cloud-native patterns like rate-limiting, load-balancer protection, and Edge integration on Azure platforms.

💡 Explore Related: Googlecloudplatform | Public Cloud Solutions | Managed Kubernetes In Public Cloud