AKS on Azure Stack HCI February Update

Published 02-19-2021 01:53 PM 1,929 Views
Microsoft

Hi All,

 

I am excited to let you know that the first update for AKS on Azure Stack HCI of 2021 is now available.  You can evaluate the AKS on Azure Stack HCI February Update by registering for the Public Preview here: https://aka.ms/AKS-HCI-Evaluate (If you have already downloaded AKS on Azure Stack HCI – this evaluation link has now been updated with the February Update).

 

Some of the new changes in the AKS on Azure Stack HCI February Update include:

 

Support for completely Static IP environments

With this update we no longer require a DHCP server for any part of the AKS-HCI infrastructure.  When you deploy AKS-HCI you can now specify if you want to use DHCP or Static IP addresses.  If you choose to use Static IP addresses – we will ask you to provide two IP address ranges.  The first range will be used for any Kubernetes control plane and worker node virtual machines that we create, while the second range will be used for any containerized applications that you deploy on top of AKS-HCI.

 

Integration with Active Directory

When we first launched the public preview of AKS-HCI, we talked about all the security work we had in the pipeline (in this blog post: https://techcommunity.microsoft.com/t5/azure-stack-blog/security-capabilities-in-azure-kubernetes-se...).  With the February Update for AKS-HCI we are now introducing integration with Active Directory.  This means that when you create a new Kubernetes cluster you can now enable Active Directory integration.  The effect of this is:

  • Your kubeconfig file will no longer contain a secret hash
  • You can specify users or user groups in your Active Directory environment who have access to the Kubernetes cluster
  • You can even use Active Directory and Kubernetes RBAC to give users in your environment limited access to only a subset of deployments in your Kubernetes cluster

 

Evaluation in Azure

Finally – many of you let us know that while you were interested in learning more about AKS-HCI – it was hard to get the hardware necessary for a full AKS-HCI deployment.  In response to this we have created a guide for evaluating AKS-HCI inside an Azure VM: https://aka.ms/aks-hci-evalonazure

 

Obviously, this is not meant for production environments.  And if you want to run containers on Azure you should just be using AKS!  But this provides an easy way to get up and running with AKS-HCI with zero hardware – so you can figure out how it could work for you.

 

There have been several other changes and fixes that you can read about in the February Update release notes (https://github.com/Azure/aks-hci/releases/tag/AKS-HCI-2102)

 

Once you have downloaded and installed the AKS on Azure Stack HCI February Update – you can report any issues you encounter, and track future feature work on our GitHub Project at https://github.com/Azure/aks-hci

 

I look forward to hearing from you all!

 

Cheers,

Ben

%3CLINGO-SUB%20id%3D%22lingo-sub-2150439%22%20slang%3D%22en-US%22%3EAKS%20on%20Azure%20Stack%20HCI%20February%20Update%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2150439%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20All%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI%20am%20excited%20to%20let%20you%20know%20that%20the%20first%20update%20for%20AKS%20on%20Azure%20Stack%20HCI%20of%202021%20is%20now%20available.%26nbsp%3B%20You%20can%20evaluate%20the%20AKS%20on%20Azure%20Stack%20HCI%20February%20Update%20by%20registering%20for%20the%20Public%20Preview%20here%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Faka.ms%2FAKS-HCI-Evaluate%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Faka.ms%2FAKS-HCI-Evaluate%3C%2FA%3E%26nbsp%3B(If%20you%20have%20already%20downloaded%20AKS%20on%20Azure%20Stack%20HCI%20%E2%80%93%20this%20evaluation%20link%20has%20now%20been%20updated%20with%20the%20February%20Update).%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ESome%20of%20the%20new%20changes%20in%20the%20AKS%20on%20Azure%20Stack%20HCI%20February%20Update%20include%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3ESupport%20for%20completely%20Static%20IP%20environments%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3EWith%20this%20update%20we%20no%20longer%20require%20a%20DHCP%20server%20for%20any%20part%20of%20the%20AKS-HCI%20infrastructure.%26nbsp%3B%20When%20you%20deploy%20AKS-HCI%20you%20can%20now%20specify%20if%20you%20want%20to%20use%20DHCP%20or%20Static%20IP%20addresses.%26nbsp%3B%20If%20you%20choose%20to%20use%20Static%20IP%20addresses%20%E2%80%93%20we%20will%20ask%20you%20to%20provide%20two%20IP%20address%20ranges.%26nbsp%3B%20The%20first%20range%20will%20be%20used%20for%20any%20Kubernetes%20control%20plane%20and%20worker%20node%20virtual%20machines%20that%20we%20create%2C%20while%20the%20second%20range%20will%20be%20used%20for%20any%20containerized%20applications%20that%20you%20deploy%20on%20top%20of%20AKS-HCI.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EIntegration%20with%20Active%20Directory%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3EWhen%20we%20first%20launched%20the%20public%20preview%20of%20AKS-HCI%2C%20we%20talked%20about%20all%20the%20security%20work%20we%20had%20in%20the%20pipeline%20(in%20this%20blog%20post%3A%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fazure-stack-blog%2Fsecurity-capabilities-in-azure-kubernetes-service-on-azure-stack%2Fba-p%2F1705759%22%20target%3D%22_blank%22%3Ehttps%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fazure-stack-blog%2Fsecurity-capabilities-in-azure-kubernetes-service-on-azure-stack%2Fba-p%2F1705759%3C%2FA%3E).%26nbsp%3B%20With%20the%20February%20Update%20for%20AKS-HCI%20we%20are%20now%20introducing%20integration%20with%20Active%20Directory.%26nbsp%3B%20This%20means%20that%20when%20you%20create%20a%20new%20Kubernetes%20cluster%20you%20can%20now%20enable%20Active%20Directory%20integration.%26nbsp%3B%20The%20effect%20of%20this%20is%3A%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3EYour%20kubeconfig%20file%20will%20no%20longer%20contain%20a%20secret%20hash%3C%2FLI%3E%0A%3CLI%3EYou%20can%20specify%20users%20or%20user%20groups%20in%20your%20Active%20Directory%20environment%20who%20have%20access%20to%20the%20Kubernetes%20cluster%3C%2FLI%3E%0A%3CLI%3EYou%20can%20even%20use%20Active%20Directory%20and%20Kubernetes%20RBAC%20to%20give%20users%20in%20your%20environment%20limited%20access%20to%20only%20a%20subset%20of%20deployments%20in%20your%20Kubernetes%20cluster%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EEvaluation%20in%20Azure%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3EFinally%20%E2%80%93%20many%20of%20you%20let%20us%20know%20that%20while%20you%20were%20interested%20in%20learning%20more%20about%20AKS-HCI%20%E2%80%93%20it%20was%20hard%20to%20get%20the%20hardware%20necessary%20for%20a%20full%20AKS-HCI%20deployment.%26nbsp%3B%20In%20response%20to%20this%20we%20have%20created%20a%20guide%20for%20evaluating%20AKS-HCI%20inside%20an%20Azure%20VM%3A%20%3CA%20href%3D%22https%3A%2F%2Faka.ms%2Faks-hci-evalonazure%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Faka.ms%2Faks-hci-evalonazure%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EObviously%2C%20this%20is%20not%20meant%20for%20production%20environments.%26nbsp%3B%20And%20if%20you%20want%20to%20run%20containers%20on%20Azure%20you%20should%20just%20be%20using%20AKS!%26nbsp%3B%20But%20this%20provides%20an%20easy%20way%20to%20get%20up%20and%20running%20with%20AKS-HCI%20with%20zero%20hardware%20%E2%80%93%20so%20you%20can%20figure%20out%20how%20it%20could%20work%20for%20you.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThere%20have%20been%20several%20other%20changes%20and%20fixes%20that%20you%20can%20read%20about%20in%20the%20February%20Update%20release%20notes%20(%3CA%20href%3D%22https%3A%2F%2Fgithub.com%2FAzure%2Faks-hci%2Freleases%2Ftag%2FAKS-HCI-2102%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fgithub.com%2FAzure%2Faks-hci%2Freleases%2Ftag%2FAKS-HCI-2102%3C%2FA%3E)%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EOnce%20you%20have%20downloaded%20and%20installed%20the%20AKS%20on%20Azure%20Stack%20HCI%20February%20Update%20%E2%80%93%20you%20can%20report%20any%20issues%20you%20encounter%2C%20and%20track%20future%20feature%20work%20on%20our%20GitHub%20Project%20at%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fgithub.com%2FAzure%2Faks-hci%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fgithub.com%2FAzure%2Faks-hci%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI%20look%20forward%20to%20hearing%20from%20you%20all!%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ECheers%2C%3C%2FP%3E%0A%3CP%3EBen%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-2150439%22%20slang%3D%22en-US%22%3E%3CP%3EI%20am%20excited%20to%20let%20you%20know%20that%20the%20first%20update%20for%20AKS%20on%20Azure%20Stack%20HCI%20of%202021%20is%20now%20available.%26nbsp%3B%20You%20can%20evaluate%20the%20AKS%20on%20Azure%20Stack%20HCI%20February%20Update%20by%20registering%20for%20the%20Public%20Preview%20here%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Faka.ms%2FAKS-HCI-Evaluate%22%20rel%3D%22noopener%20noreferrer%22%20target%3D%22_blank%22%3Ehttps%3A%2F%2Faka.ms%2FAKS-HCI-Evaluate%3C%2FA%3E%26nbsp%3B(If%20you%20have%20already%20downloaded%20AKS%20on%20Azure%20Stack%20HCI%20%E2%80%93%20this%20evaluation%20link%20has%20now%20been%20updated%20with%20the%20February%20Update).%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22AKSHCI.png%22%20style%3D%22width%3A%20347px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F256155i49AC92E401DBCB41%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22AKSHCI.png%22%20alt%3D%22AKSHCI.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-TEASER%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2150439%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAzure%20Kubernetes%20Service%20on%20Azure%20Stack%20HCI%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Co-Authors
Version history
Last update:
‎Feb 19 2021 12:59 PM
Updated by: