In this brief article, we look at the process of adding Azure Kubernetes Service (AKS) to ArgoCD as an external cluster. When AKS is integrated with Azure Active Directory, it requires the use of kubelogin for non-interactive scenarios. …

In this brief article, we look at how to identify common emails originating from Azure, particularly in the context of various alerts and security issues. Recognizing these emails can simplify the process of finding communications that have come from Microsoft Azure. Most communications from Azure regarding service or security issues…

In this video, we look at the Azure Quota Service API and compare the new Microsoft.Quota (in public preview since Nov 2022) versus the Microsoft.Capacity providers from quota management perspective. The blog posts from February 2021, “Automating quota management with Azure Quota REST API” and “Using the new Quota REST…

In this brief article, we look at how to install Azure Function or Azure App Service “Site Extensions” directly using Kudu REST APIs. Some Independent Software Vendors (ISVs) such as Datadog and Dynatrace package their monitoring agents as “site extensions” for Azure App Services. Site extensions can be installed using…

In this video, we look at how to use the ArmApiControl in createUiDefinition.json to query and display Azure PostgreSQL Flexible Server location-based capabilities within DropDown UI elements in Azure Portal. Azure PostgreSQL Flexible Server service has different capabilities that are based on the Azure subscription and region where it is…

In this video, we look at what is the least-privilege permission, or Azure AD role, that an app identity needs to be able to create a Service Principal from a multi-tenant application registration in another Azure AD tenant. By least-privilege we mean that we don’t want our app identity to…

As part of a v-team of colleagues from different teams within Microsoft, I had the opportunity to join John Downs and Sujit D’Mello to talk about multitenant architecture considerations and approaches on The Azure Podcast Episode 430 — Multi-tenant Architectures. We touched on some of the higher-level concepts and requirements…

In this video, we look at how to use NGINX Plus to get the TCP Proxy Protocol v2 TLV from the Azure Private Link Service and extract and decode the numeric linkIdentifier (aka LINKID) of the private endpoint connection. Update March 2023: There is now better integration with cloud specific…

In this article, I try to create a short mapping of key AWS IAM (Identity and Access Management) concepts to similar ones in Microsoft Azure. If you see things that are wrong or incomplete, please leave a comment with what I should fix. For a more general AWS and Azure…