AKS cluster creation in Azure - Mini Project: Build & Apply

AKS Cluster Creation

📖 Scenario: You are working as a cloud engineer for a company that wants to deploy containerized applications using Azure Kubernetes Service (AKS). Your task is to create a basic AKS cluster with essential configurations.

🎯 Goal: Build a simple Azure Kubernetes Service (AKS) cluster configuration using Azure CLI commands step-by-step.

📋 What You'll Learn

Create a resource group named myResourceGroup in the eastus region.

Define the AKS cluster name as myAKSCluster.

Create the AKS cluster with 2 nodes of size Standard_DS2_v2.

Enable monitoring add-on for the AKS cluster.

💡 Why This Matters

🌍 Real World

Creating AKS clusters is a common task for deploying containerized applications in Azure cloud environments.

💼 Career

Cloud engineers and DevOps professionals frequently create and manage AKS clusters to support scalable and managed Kubernetes workloads.

1

Create the Azure resource group

Use the Azure CLI command to create a resource group named myResourceGroup in the eastus region.

Azure

# Use az group create command to create the resource group
# Your code here

Hint

The command az group create creates a resource group. Use --name to specify the group name and --location for the region.

2

Define the AKS cluster name variable

Create a shell variable called AKS_CLUSTER_NAME and set it to myAKSCluster.

Azure

az group create --name myResourceGroup --location eastus
# Define AKS_CLUSTER_NAME variable
# Your code here

Hint

Use AKS_CLUSTER_NAME=myAKSCluster to define the variable in shell.

3

Create the AKS cluster with 2 nodes

Use the Azure CLI command to create an AKS cluster named $AKS_CLUSTER_NAME in the resource group myResourceGroup with 2 nodes of size Standard_DS2_v2.

Azure

az group create --name myResourceGroup --location eastus
AKS_CLUSTER_NAME=myAKSCluster
# Create AKS cluster with 2 nodes and Standard_DS2_v2 size
# Your code here

Hint

Use az aks create with --resource-group, --name, --node-count, and --node-vm-size. Add --generate-ssh-keys to create SSH keys automatically.

4

Enable monitoring add-on for the AKS cluster

Update the AKS cluster creation command to enable the monitoring add-on by adding --enable-addons monitoring.

Azure

az group create --name myResourceGroup --location eastus
AKS_CLUSTER_NAME=myAKSCluster
az aks create --resource-group myResourceGroup --name $AKS_CLUSTER_NAME --node-count 2 --node-vm-size Standard_DS2_v2 --generate-ssh-keys
# Add monitoring addon to the AKS cluster creation command
# Your code here

Hint

Add --enable-addons monitoring to the az aks create command to enable monitoring.

Practice

1. What is the main purpose of creating an AKS cluster in Azure?

easy

A. To host traditional web applications without containers

B. To create virtual machines for general computing

C. To store large amounts of unstructured data

D. To run and manage containerized applications using Kubernetes

Solution

1. Step 1: Understand AKS functionality

   AKS (Azure Kubernetes Service) is designed to run and manage containerized applications using Kubernetes orchestration.

2. Step 2: Differentiate from other Azure services

   Virtual machines, storage, and web hosting are handled by other Azure services, not AKS.

3. Final Answer:

   To run and manage containerized applications using Kubernetes -> Option D

4. Quick Check:

   AKS = Kubernetes container management [OK]

Hint: AKS is for Kubernetes container orchestration [OK]

Common Mistakes:

• Confusing AKS with VM creation
• Thinking AKS is for storage
• Assuming AKS hosts non-container apps

2. Which Azure CLI command correctly creates an AKS cluster named myCluster in resource group myGroup with 3 nodes?

easy

A. az create aks --rg myGroup --cluster-name myCluster --count 3

B. az aks create --resource-group myGroup --name myCluster --node-count 3

C. az aks new --group myGroup --cluster myCluster --nodes 3

D. az aks deploy --resource-group myGroup --name myCluster --nodes 3

Solution

1. Step 1: Identify correct Azure CLI syntax

   The correct command to create an AKS cluster uses az aks create with parameters --resource-group, --name, and --node-count.

2. Step 2: Compare options

   Only az aks create --resource-group myGroup --name myCluster --node-count 3 uses the correct command and parameter names as per Azure CLI documentation.

3. Final Answer:

   az aks create --resource-group myGroup --name myCluster --node-count 3 -> Option B

4. Quick Check:

   Correct CLI syntax = az aks create --resource-group myGroup --name myCluster --node-count 3 [OK]

Hint: Use 'az aks create' with --resource-group, --name, --node-count [OK]

Common Mistakes:

• Using wrong command verbs like 'new' or 'deploy'
• Incorrect parameter names like --group or --nodes
• Mixing command order or missing required flags

3. What will be the result of this command?

az aks create --resource-group myGroup --name myCluster --node-count 2 --enable-managed-identity --ssh-key-value ~/.ssh/id_rsa.pub

medium

A. Creates an AKS cluster with 2 nodes, managed identity, and SSH access enabled

B. Creates an AKS cluster with 2 nodes but disables SSH access

C. Fails because --enable-managed-identity is not a valid flag

D. Creates an AKS cluster with 2 nodes but without managed identity

Solution

1. Step 1: Analyze command flags

   The command uses --enable-managed-identity to enable managed identity and --ssh-key-value to set SSH public key for node access.

2. Step 2: Understand expected behavior

   This command creates a cluster with 2 nodes, managed identity enabled, and SSH access configured using the provided key.

3. Final Answer:

   Creates an AKS cluster with 2 nodes, managed identity, and SSH access enabled -> Option A

4. Quick Check:

   Managed identity + SSH key = Creates an AKS cluster with 2 nodes, managed identity, and SSH access enabled [OK]

Hint: Managed identity and SSH flags enable secure access [OK]

Common Mistakes:

• Assuming --enable-managed-identity is invalid
• Thinking SSH is disabled without extra flags
• Confusing managed identity with service principal

4. You run this command but get an error:

az aks create --resource-group myGroup --name myCluster --node-count two

What is the likely cause?

medium

A. The cluster name cannot be 'myCluster'

B. The resource group name is invalid

C. The node count must be a number, not a word

D. The command is missing the --enable-managed-identity flag

Solution

1. Step 1: Check parameter types

   The --node-count parameter expects a numeric value, but 'two' is a word, causing a syntax error.

2. Step 2: Validate other parameters

   Resource group and cluster name are valid strings; managed identity flag is optional.

3. Final Answer:

   The node count must be a number, not a word -> Option C

4. Quick Check:

   Numeric node count required = The node count must be a number, not a word [OK]

Hint: Node count must be numeric, not text [OK]

Common Mistakes:

• Using words instead of numbers for counts
• Assuming resource group or name causes error
• Thinking managed identity flag is mandatory

5. You want to create an AKS cluster with 4 nodes, enable managed identity, and use a custom SSH key located at /keys/mykey.pub. Which command is correct?

hard

A. az aks create --resource-group myGroup --name myCluster --node-count 4 --enable-managed-identity --ssh-key-value /keys/mykey.pub

B. az aks create --resource-group myGroup --name myCluster --nodes 4 --enable-msi --ssh-key /keys/mykey.pub

C. az aks create --resource-group myGroup --name myCluster --node-count 4 --enable-managed-identity

D. az aks create --resource-group myGroup --name myCluster --node-count 4 --ssh-key-value /keys/mykey.pub

Solution

1. Step 1: Verify required parameters

   The command must specify --node-count 4, --enable-managed-identity, and --ssh-key-value with the correct path.

2. Step 2: Check option correctness

   az aks create --resource-group myGroup --name myCluster --node-count 4 --enable-managed-identity --ssh-key-value /keys/mykey.pub uses correct parameter names and includes all required flags. Other options have incorrect flags or missing parameters.

3. Final Answer:

   az aks create --resource-group myGroup --name myCluster --node-count 4 --enable-managed-identity --ssh-key-value /keys/mykey.pub -> Option A

4. Quick Check:

   Correct flags and values = az aks create --resource-group myGroup --name myCluster --node-count 4 --enable-managed-identity --ssh-key-value /keys/mykey.pub [OK]

Hint: Use full flag names and correct SSH key path [OK]

Common Mistakes:

• Using shorthand or incorrect flags like --nodes or --ssh-key
• Omitting managed identity flag
• Forgetting to specify SSH key path