Private AKS built with Terraform and GH-Actions demo

Prerequisites

Fork this repo
Create a new Azure Entra Application and with Federated credentials assigned to your repo.
Create the following GH Actions secrets:
- azure_client_id: The Application (client) ID of the Azure AD Application.
- azure_tenant_id: The Directory (tenant) ID of the Azure AD Application.
- azure_subscription_id: The Subscription ID of the Azure Subscription.
Be sure to give the Azure Entra Application you created permissions to the Azure Subscription you are going to use.
Create a storage account and update the main.tf backend configuration with the storage account name and container name.
Be sure to give the Azure Entra Application you created permissions to the Storage Account you are going to use with the Storage Blob Data Contributor role and Storage Account Key Operator Service Role role.

❗ The pre-commit hooks are only running on staged files.

To set up pre-commit hooks for terraform files, run the following commands:

brew install pre-commit
pre-commit install

If you want to uninstall the pre-commit hooks, run the following command:

pre-commit uninstall

There are 2 feature flags located in the main variable.tf file that can be used to enable/disable features.

ℹ️ Az cli preview: Be sure to install the az cli preview version to be able to use the az aks update command.

The terraform workflow, will create the amongst others, an AKS cluster with VNetIntegration.

Now the AKS cluster has a public IP but the communication between the API server and the nodes are private.