Azure on Wolkwacht

From OrbStack to AKS: Installing Dapr on a Managed Cluster

Sat, 26 Sep 2026 00:00:00 +0000

Transferring a Dapr-enabled application from local Kubernetes to AKS should be straightforward. The annotations, app ID, application port, sidecar API, and workload manifest stay familiar. The key difference is ownership: a temporary local setup transforms into a shared runtime that requires a version policy, availability plan, network access, identity strategy, and support structure.

This post moves the sample from Installing Dapr on Kubernetes Locally with OrbStack to an existing AKS cluster. We will compare the open-source installation path with the AKS Dapr extension, install the extension, verify the control plane, and deploy the same NGINX workload.

Secrets Management Showdown: Azure Key Vault CSI Driver vs. External Secrets Operator

Wed, 09 Sep 2026 00:00:00 +0000

The real question is not whether to use the Azure Key Vault provider for the Secrets Store CSI Driver or the External Secrets Operator (ESO). Instead, it’s whether your workload should access secret data as mounted files or via native Kubernetes Secret objects.

That choice influences application design, rotation, incident handling, RBAC, observability, Helm compatibility, and GitOps. In short: CSI offers a more secure default for applications that consume files; ESO provides a more practical platform default when Kubernetes-native compatibility is a priority. This decision involves both GitOps and security considerations.

Secure Azure Kubernetes Service (AKS)

Thu, 13 Aug 2026 11:01:01 +0000

Azure Kubernetes Service (AKS) removes most of the undifferentiated heavy lifting of running Kubernetes, but it does not remove your responsibility for securing what runs on top of it.

Reducing AKS Costs: Autoscaling, Spot Nodes, Rightsizing, and FinOps Practices

Thu, 23 Jul 2026 11:01:01 +0000

Introduction: Cost Is an Outcome of Scheduling Decisions

Running AI Workloads on Azure Kubernetes Service: From Platform Control to Model Serving

Fri, 26 Jun 2026 07:31:53 +0000

Most teams begin their AI journey by using a managed model API. This approach works initially but can become problematic when costs become…

Optimizing Azure Container Apps Costs: Scaling to Zero, Workload Profiles, and FinOps

Tue, 16 Jun 2026 09:56:49 +0000

Azure Container Apps enables teams to deploy APIs, background processors, scheduled jobs, and event-driven services without directly…

Azure Kubernetes Application Network, Part 3: AI Gateway, Observability and Production Fit

Wed, 10 Jun 2026 06:14:44 +0000

Part 1 introduced AppNet, while Part 2 demonstrated its use in zero-trust and multi-cluster patterns. This concluding section explores a…

Azure Kubernetes Application Network, Part 2: Zero-Trust and Multi-Cluster Patterns

Sun, 07 Jun 2026 15:18:29 +0000

In Part 1, we discussed the AppNet architecture, setup process, and waypoint model. This second part shifts focus from mechanics to…

Azure Kubernetes Application Network, Part 1: What AppNet Is and How to Get Started

Thu, 04 Jun 2026 11:00:05 +0000

The space between 'we have ingress' and 'we run a full service mesh with sidecars on every pod' has always been a challenging middle…

When Your Cluster Isn’t Sufficient: Introducing Virtual Pools in AKS

Sun, 22 Mar 2026 08:32:23 +0000

There’s a moment in every Kubernetes journey when the cluster begins to feel… heavy. Not broken, not misconfigured, but stretched in ways…

GitOps on Azure Kubernetes Service: Building a Production-Ready Platform with Flux

Wed, 18 Mar 2026 07:42:06 +0000

Kubernetes platforms seldom fail due to the technology itself; instead, failures are usually caused by operational issues.

The First Security Conversation You Have Too Late: Hardening an Existing Azure Environment

Tue, 23 Dec 2025 15:45:32 +0000

Most cloud security stories begin in the wrong place.

The Unseen Work of a Cloud Architect: A Story About Building Azure the Hard (and Right) Way

Fri, 05 Dec 2025 13:02:59 +0000

The Unseen Work of a Cloud Architect: A Story About Building Azure the Hard (and Right) Way

The story of implementing an Azure cloud environment rarely starts with technology. It begins with a seemingly simple conversation: someone in the business has a goal, a team has a new initiative, or an executive has read an article promising faster innovation, better resilience, or lower operational costs. The request sounds straightforward: “We want to move to Azure.” But it’s never that simple. Not because Azure is inherently complex, though it can be, but because cloud architecture is more about managing people, expectations, culture, pressure, and an ever-changing regulatory landscape.

Operating AKS from your workstation

Sun, 30 Nov 2025 13:04:13 +0000

Inside Microsoft’s New AKS Desktop

Beyond the Cloud: Running Kubernetes with Talos: Comparing Talos, k3s, AKS, and EKS

Tue, 25 Nov 2025 07:53:31 +0000

“If Kubernetes is the engine, Talos is the chassis built specifically for it.”

Azure Kubernetes Chronicles 12: The Future of Multi-Cluster

Tue, 28 Oct 2025 13:06:57 +0000

Fleet, Arc, sovereign clouds, and the edge-first world of 2030

Using the AKS-MCP Server in Day-to-Day Operations

Thu, 23 Oct 2025 06:26:36 +0000

Azure Kubernetes Service (AKS) has long been the leading platform for containerized workloads on Microsoft Azure. While AKS offers…

Azure Kubernetes Chronicles 11: Governing the Chaos

Tue, 21 Oct 2025 07:57:15 +0000

Unifying identity, policy, networking, and observability across clouds and edge

Azure Kubernetes Chronicles 10: Kubernetes at the Edge with k3s

Mon, 13 Oct 2025 09:28:48 +0000

From Raspberry Pi retail stores to 5G towers — the hidden force reshaping enterprise IT

Azure Kubernetes Security Demystified: From Nodes to Pods

Mon, 06 Oct 2025 09:21:22 +0000

Azure Kubernetes Security Demystified: From Nodes to Pods

Introduction

Kubernetes has become the standard for hosting containerized applications, with Azure Kubernetes Service (AKS) being one of the most popular managed options. AKS simplifies management by handling the control plane, but securing the environment remains the customer’s responsibility. The shared responsibility model requires you to focus on strengthening worker nodes, controlling cluster access, and ensuring that workloads and pods operate with the least privileges.
Security in Kubernetes involves multiple layers. The base layer is the host security of the virtual machines in the node pools. Next is the cluster layer, where identity, networking, and governance must be carefully established and maintained. At the top, securing pods and containers that run your business logic is crucial to prevent privilege escalation or unauthorized communication. This approach, known as “defense in depth,” emphasizes addressing security across various boundaries instead of relying on a single tool or configuration for full protection.

Azure Kubernetes Chronicles 9: EKS in the Enterprise

Wed, 01 Oct 2025 07:47:46 +0000

Why Amazon’s Kubernetes service is a compliance lever, not just duplication

Azure Kubernetes Chronicles 8: Fleet in Focus

Wed, 24 Sep 2025 11:36:24 +0000

Azure’s multi-cluster powerhouse — and where it falls short

Azure Kubernetes Chronicles 7: The Multi-Cluster Reality

Thu, 18 Sep 2025 07:00:03 +0000

From the dream of one perfect cluster to the messy truth of enterprise sprawl

Azure Kubernetes Chronicles: Multi-Cluster Edition

Fri, 12 Sep 2025 08:01:27 +0000

From Fleet to Edge — navigating Kubernetes across clouds and continents

Azure Kubernetes Chronicles 6:

Wed, 03 Sep 2025 10:31:37 +0000

Managing Multiple AKS Clusters with Azure Fleet

Harnessing Chaos: Implementing Chaos Engineering with Azure Chaos Studio and Gremlin on AKS

Tue, 01 Jul 2025 12:42:28 +0000

Chaos Engineering is a crucial practice for modern cloud operations, enabling teams to identify hidden weaknesses and potential failures in…

Azure Kubernetes Chronicles part 5:

Wed, 07 May 2025 06:53:40 +0000

Autoscaling with KEDA

From Code to Cloud: A Hands-On Guide to Azure Container Apps

Thu, 03 Apr 2025 14:48:31 +0000

As a cloud professional, I constantly seek ways to streamline application delivery while reducing operational overhead. Whether you’re building APIs, microservices, or event-driven backends, choosing the right platform can significantly impact speed to market and maintainability.

Introducing Azure Container Apps (ACA) — a fully managed, serverless platform designed specifically for running containerized workloads without the complexity of orchestrating and managing Kubernetes infrastructure. Built on top of Kubernetes and powered by open-source technologies like Dapr and KEDA (Kubernetes Event Driven Autoscaling), ACA offers the best of both worlds: the power and flexibility of containers with the simplicity and developer focus of a Platform-as-a-Service (PaaS).

Azure Kubernetes Chronicles part 4

Thu, 13 Mar 2025 10:41:00 +0000

Dataprotection

Azure Kubernetes Chronicles part 3

Fri, 28 Feb 2025 07:07:29 +0000

Observability

Azure Kubernetes Chronicles

Tue, 11 Feb 2025 09:17:00 +0000

Networking using eBPF

Azure Kubernetes Chronicles

Tue, 28 Jan 2025 08:05:02 +0000

Container Network Interfaces

Confidential Computing

Mon, 20 Nov 2023 15:43:00 +0100

The implementation of confidential compute on Azure

Azure Day on Kubernetes + KubeCon/CloudNativeCon Europe 2023

Sat, 22 Apr 2023 09:56:20 +0200

Recap of KubeConEU 2023 and Azure Day with Kubernetes.

AKS Edge Essentials

Tue, 04 Apr 2023 09:09:51 +0200

First look at AKS Edge essentials

Microsoft Certified: Azure Solutions Architect Expert

Sat, 01 May 2021 09:48:16 +0200

Article description.

Microsoft Certified: Azure Administrator Associate

Wed, 02 Dec 2020 00:00:00 +0000

Today I passed my first Azure exam for this year, Microsoft Certified: Azure Administrator Associate. My goal is to achieve two other certificates in the coming two months, Microsoft Certified: DevOps Engineer Expert and Microsoft Certified: Azure Solutions Architect Expert. For the first certification this is one of the required exams. Next will be AZ-400 Designing and Implementing Microsoft DevOps Solutions

In preparation for this exam I read the blueprint and the modules offered on Microsoft Learn. Also I used AZ-104 Microsoft Azure Administrator Exam Certification 2020 by Scott Duffy on Udemy.com and I also followed AZ-303: Microsoft Azure Architect Technologies training which was offered by my company and has some overlap with AZ-104 topic wise. Next to that I used a free account on Azure to get hands on experience with Azure. The exam itself is not difficult and consist only of 65 multiple choice questions. I had some questions where I was not allowed to go back to the earlier question and didn’t show up in the question review screen. The last four questions where around a case study. All in all a very doable exam if you have some hands on experience and of course make sure that you read the questions! View my Azure Administrator Associate credential on Credly.