Navigating the AKS NGINX Ingress Retirement The Kubernetes community officially retired the ingress-nginx project in March 2026While Microsoft is providing a grace period, they will cease all support and critical security patches for the managed NGINX add-on on November 30, 2026 Why Istio Service Mesh is the Strategic Choice While the Application Routing Gateway API…
Istio in AKS Deployment: Ingress vs Gateway API & Azure Self-Manged This PART – 1 Covers Following Topics.. The PART – 2 Will Soon Be Covering Following Topics.. It has become increasingly challenging to understand the critical differences and appropriate use cases among the various service mesh and ingress solutions available, particularly in cloud-native environments…
Problem Summary – Azure Function App Not Connecting to Storage Account In a secure enterprise setup, an Azure Function App running on Elastic Premium failed to: Despite successful deployment, the portal showed below error: Azure Portal –>Resource Health–>Availability and Performance–>Functions that are not triggering Environment Architecture Function App Configuration Storage Account Configuration This setup enforces…
Deploying containers to Azure App Service should be seamless, but often, the “Azure Web App Container not starting” error or “Errors routing requests to application container” during a slot swap can bring your CI/CD pipeline to a halt. In this guide, we’ll walk through the exact steps to diagnose and resolve these issues using Azure…
Azure SPN secret expiry guide for 2026. Automate detection, notification, and rotation using Microsoft Graph API, managed identities, and Azure Automation. You may also be interested in my other AKS-related blogs 1. Prerequisites Checklist – SPN Secret Expiry Before running the runbook, following prerequisites are required A. Required Modules IMP Note: Please upload the following…
You may also be interested in my other AKS-related blogs About AKS Private Cluster A private AKS cluster is a configuration where the control plane (API server) is assigned an internal IP address rather than a public one. The connection relies on the Azure Private Link service and a private endpoint located in your AKS…
Understanding Azure AKS networking and how pod IPs are allocated, routed, and consumed in each Azure AKS networking model helps architects avoid IP exhaustion, complex routing, and scaling bottlenecks. By selecting the right Azure AKS networking approach—whether Azure CNI Overlay, Node Subnet, or Pod Subnet—teams can design AKS clusters that scale efficiently and remain operationally…
Problem Statement: Get Pending Pods Details: You can refer to my earlier blog for more essential kubectl commands documented here Troubleshooting and Resolution Steps for AKS FailedScheduling Warning FailedScheduling default-scheduler 0/34 nodes are available: 1 Too many pods, 1 node(s) had untolerated taint {store: true}, 3 node(s) had untolerated taint {CriticalAddonsOnly: true}, 30 Insufficient…
Managing Azure Kubernetes Service (AKS) clusters becomes much easier when you know the right kubectl commands. This guide is designed for AKS administrators, DevOps engineers, and Kubernetes professionals who want to streamline their daily cluster operations. Note: All Kubectl commands I’m executing below are executed on Windows CMD 1. Kubectl Cheat Sheet – Shortcut to…
The previous posts in this series (How to Safely Disable SAS Key Access in Azure Storage Accounts (Covering Real-World Scenarios)- Part 1), showed how disable SAS key considering scenario where the Storage Account Without Private Endpoint and no Firewall Restrictions. The next step is to consider scenario where Storage Account Without Private Endpoint but behind…
Learn how to safely disable SAS key access in Azure Storage Accounts using real-time scenarios. This guide explains risks, mitigation steps, Blob and File Share strategies, KQL analysis, and best practices aligned with Microsoft’s recommended security model. Introduction: Why Disable SAS Key Access in Azure Storage? Shared Access Signatures (SAS) and storage account keys are…
We recently encountered VPN Traffic Issue due to Azure VPN PPS limit – all on-premises users were unable to establish a connection to the Azure cloud via the existing Site-to-Site (S2S) setup. Azure VPN traffic issue Summary of Checks Performed – Azure VPN PPS Limit The investigation confirmed that the following potential causes were not…