Back to DocsRecipe

Azure Kubernetes Service Primer

Deploy Meridian on AKS with managed identities, private clusters, and production-grade node pools. This recipe covers the essentials for running containerized workloads on Azure's managed Kubernetes offering.

Cluster Provisioning

Azure CNI overlay, system/user node pool split, availability zones.

Workload Identity

OIDC federation, managed identities, Key Vault CSI driver.

Networking

Private clusters, Azure Firewall egress, internal load balancers.

Quick Start

1.Create resource group and AKS cluster with Azure CNI overlay networking.

2.Enable workload identity and configure OIDC issuer for pod-managed identities.

3.Deploy Meridian via Helm with Key Vault CSI for secrets injection.

Node Pool Strategy

Separate system pods (CoreDNS, metrics-server, CSI drivers) onto a dedicated system pool with taints. Run Meridian workloads on a user pool with Standard_D4s_v5 instances across three availability zones. Enable cluster autoscaler with a minimum of two nodes per pool.

Browse RecipesUpdated for AKS 1.29+