Welcome to Wolkwacht

Azure Kubernetes Security Demystified: From Nodes to Pods Introduction Kubernetes has become the standard for hosting containerized applications, with Azure Kubernetes Service (AKS) being one of the most popular managed options. AKS simplifies management by handling the control plane, but securing the environment remains the customer’s responsibility. The shared responsibility model requires you to focus on strengthening worker nodes, controlling cluster access, and ensuring that workloads and pods operate with the least privileges. Security in Kubernetes involves multiple layers. The base layer is the host security of the virtual machines in the node pools. Next is the cluster layer, where identity, networking, and governance must be carefully established and maintained. At the top, securing pods and containers that run your business logic is crucial to prevent privilege escalation or unauthorized communication. This approach, known as “defense in depth,” emphasizes addressing security across various boundaries instead of relying on a single tool or configuration for full protection. ...

Why Amazon’s Kubernetes service is a compliance lever, not just duplication This article is part of the Azure Kubernetes Chronicles: Multi-Cluster Edition. Read the series introduction here. Whenever companies discuss Kubernetes in Azure, AKS naturally comes up because it’s the go-to managed service for those within Microsoft’s ecosystem. However, across Europe, another name is gaining attention: Amazon Elastic Kubernetes Service, or EKS. For many organizations, EKS isn’t just another option; it’s become a vital part of their strategic planning. ...

Azure Kubernetes Chronicles 8: Fleet in Focus Azure’s multi-cluster powerhouse — and where it falls short This article is part of the Azure Kubernetes Chronicles: Multi-Cluster Edition. Read the series introduction here. When Microsoft introduced Azure Kubernetes Fleet Manager, it was met with both excitement and curiosity. For years, platform teams running multiple AKS clusters had been piecing together governance with scripts, policies, and half-baked federation approaches. Fleet arrived with the promise of simplification: a central way to govern clusters, propagate policies, and even distribute workloads across Azure regions. ...

From the dream of one perfect cluster to the messy truth of enterprise sprawl This episode is part of the Azure Kubernetes Chronicles: Multi-Cluster Edition. Read the series introduction here. When Kubernetes first entered the enterprise, many platform teams envisioned a single, perfect cluster; a hub where all workloads could reside, scale smoothly, and be governed consistently. The reality turned out very different. Today, almost no enterprise runs just one cluster. Instead, organizations find themselves managing multiple clusters scattered across regions, cloud providers, and even edge sites. This isn’t random chaos; it’s the result of regulatory demands, business continuity strategies, performance requirements, and the rise of edge computing. ...

From Fleet to Edge — navigating Kubernetes across clouds and continents When Kubernetes first entered the enterprise, many architects imagined a single, perfect cluster: one hub for all workloads, scalable, resilient, and secure. Reality had other plans. Enterprises today run multiple clusters across regions, providers, and even at the edge: • AKS in Azure for mainline production. • EKS in AWS to meet regulatory or resilience mandates. • k3s clusters on Raspberry Pi or NUCs powering retail stores, factories, and hospitals. ...

Introduction: Why Centralized Management of AKS Clusters Matters Kubernetes adoption in enterprises has skyrocketed. What begins as a single proof-of-concept cluster often grows into dozens across various teams, environments, and regions. For organizations using Azure Kubernetes Service (AKS), this growth is even more common: different business units create clusters for their workloads, data residency rules require data to stay in specific locations, and production systems need failover capabilities across regions. ...

Digital Sovereignty and the Public Cloud: Navigating Azure in a European context Introduction: Why digital sovereignty matters Over the past decade, cloud adoption has shifted from an optional innovation to the standard approach for many. In Europe, Microsoft Azure, Amazon Web Services, and Google Cloud are the foundation of digital infrastructure. However, a key question has arisen: who really controls your data and workloads? This is the heart of digital sovereignty, the ability of a state, organization, or individual to shape their digital future. It’s not just about where data is stored, but also about who can access it, under what laws, and with what safeguards in place. For cloud engineers and DevOps professionals, sovereignty may have seemed abstract until it began to affect core architecture decisions, such as encryption, multi-cloud strategy, and operational governance. ...

Harnessing Chaos: Implementing Chaos Engineering with Azure Chaos Studio and Gremlin on AKS Chaos Engineering is a crucial practice for modern cloud operations, enabling teams to identify hidden weaknesses and potential failures in complex systems before they become a problem. By deliberately causing failures in a controlled setting, you can observe how your system responds, measure its resilience, and ultimately strengthen its robustness. This practice really stands out in cloud-native environments like Azure Kubernetes Service (AKS), where the details and interconnections can sometimes obscure vulnerabilities. Azure Chaos Studio is a set of cloud-native tools designed explicitly for Azure environments, seamlessly integrating, scaling, and providing insights directly within the Azure ecosystem. When paired with Gremlin — a widely used chaos engineering platform — organizations can craft thorough chaos engineering strategies that enhance system reliability, security, and operational performance. This blog will discuss the architecture, practical setup steps, scripts, and validation techniques, all closely aligned with the principles outlined in Azure’s Well-Architected Framework. Through real examples and tested scripts, you’ll discover how to leverage the power of controlled chaos to build resilient and dependable cloud solutions. ...

Azure Kubernetes Chronicles part 5: Autoscaling with KEDA Autoscaling is a transformative approach for modern cloud-native application architectures, particularly within Kubernetes and microservices environments. As the adoption of these technologies accelerates, implementing automated workload adjustments based on real-time demand becomes imperative. This capability enhances user experience and ensures continuous high availability and cost efficiency. Consider the diverse applications: whether deploying a customer-facing web application, processing extensive data sets, or orchestrating backend task queues, the proficiency in automating workload scaling is essential for operational success and resource optimization. ...

As a cloud professional, I constantly seek ways to streamline application delivery while reducing operational overhead. Whether you’re building APIs, microservices, or event-driven backends, choosing the right platform can significantly impact speed to market and maintainability. Introducing Azure Container Apps (ACA) — a fully managed, serverless platform designed specifically for running containerized workloads without the complexity of orchestrating and managing Kubernetes infrastructure. Built on top of Kubernetes and powered by open-source technologies like Dapr and KEDA (Kubernetes Event Driven Autoscaling), ACA offers the best of both worlds: the power and flexibility of containers with the simplicity and developer focus of a Platform-as-a-Service (PaaS). ...