Book Image

Hands-On Kubernetes on Azure

By : Shivakumar Gopalakrishnan, Gunther Lenz
Book Image

Hands-On Kubernetes on Azure

By: Shivakumar Gopalakrishnan, Gunther Lenz

Overview of this book

Microsoft is now one of the most significant contributors to Kubernetes open source projects. Kubernetes helps to create, configure, and manage a cluster of virtual machines that are preconfigured to run containerized applications. This book will be your guide to performing successful container orchestration and deployment of Kubernetes clusters on Azure. You will get started by learning how to deploy and manage highly scalable applications, along with understanding how to set up a production-ready Kubernetes cluster on Azure. As you advance, you will learn how to reduce the complexity and operational overheads of managing a Kubernetes cluster on Azure. By the end of this book, you will not only be capable of deploying and managing Kubernetes clusters on Azure with ease, but also have the knowledge of best practices for working with advanced AKS concepts for complex systems.
Table of Contents (16 chapters)
Free Chapter
Section 1: The Basics
Section 2: Deploying on AKS
Section 3: Leveraging Advanced Azure PaaS Services in Combination with AKS

Authentication versus authorization

Authentication (AuthN) is very often mixed up with authorization (AuthZ). It generally takes multiple attempts to understand the difference and we still get confused. The source of confusion is that most people think the authentication provider and the authorization provider are the same. In our WordPress example, WordPress provides the authentication (has the username and password) and authorization (stores the users under admin or user roles, for example). The implementation in the code (at least initially) would be mixing up authentication and authorization also (if (admin) do this; else do that). Even the names can be confusing. OAuth is an authorization protocol, whereas we are using the oauth2_proxy for authentication.

Authentication deals with identity (who are you?), and in general requires a trusted provider (such as Google, GitHub...