{"id":28,"date":"2021-01-05T18:05:00","date_gmt":"2021-01-05T18:05:00","guid":{"rendered":"http:\/\/blog.firatyasar.com\/?p=28"},"modified":"2021-03-31T18:25:33","modified_gmt":"2021-03-31T18:25:33","slug":"aks-cluster-isolation","status":"publish","type":"post","link":"https:\/\/blog.firatyasar.com\/?p=28","title":{"rendered":"AKS – Cluster Isolation"},"content":{"rendered":"\n

Bir den fazla cluster’\u0131 y\u00f6netmek operat\u00f6rler i\u00e7in farkl\u0131 zorluklar\u0131 beraberinde getirir. Y\u00f6netim maliyetlerinden ka\u00e7\u0131nmak ve cluster say\u0131s\u0131n\u0131 d\u00fc\u015f\u00fcrmek i\u00e7in d\u00fc\u015f\u00fcn\u00fclmesi gereken \u015fey izolation’d\u0131r. <\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Bir organizasyon i\u00e7erisinde fiziksel cluster say\u0131s\u0131 azalt\u0131lmak istenirse ayn\u0131 cluster’\u0131 kullanacak farkl\u0131 tak\u0131mlar\u0131n ve bunlara ba\u011fl\u0131 olarak da uygulamalar\u0131n izole edilmeleri gerekir. Bu ama\u00e7la i\u015f y\u00fcklerini ve kaynaklar\u0131 ayn\u0131 cluster \u00fczerinde birbirlerinden izole edebilmek i\u00e7in namespace yap\u0131lar\u0131 kullan\u0131l\u0131r.<\/p>\n\n\n\n

\u00dczerinde birden \u00e7ok uygulamay\u0131 bar\u0131nd\u0131ran cluster’lar ayn\u0131 altyap\u0131y\u0131 payla\u015ft\u0131klar\u0131 i\u00e7in bar\u0131nd\u0131rd\u0131klar\u0131 i\u015f y\u00fcklerinin g\u00fcvenli oldu\u011funu idda etmek yanl\u0131\u015f olur. Bu sebeple g\u00fcvenlik seviyesini daha yukar\u0131 \u00e7ekebilmek i\u00e7in security policy ve RBAC mekanizmalar\u0131n\u0131n kullan\u0131lmas\u0131 gerekir.<\/p>\n\n\n\n

E\u011fer belirli i\u015f y\u00fckleri i\u00e7in %100 bir izolasyon ihtiyac\u0131 varsa bun noktada \u00f6nerilen bu i\u015f y\u00fckleri i\u00e7in ayr\u0131 cluster’lar konumland\u0131rmakt\u0131r.<\/p>\n\n\n\n

Tabi ayr\u0131 cluster kullanmak bize g\u00fcvenlik anlam\u0131nda tamamen izolasyon sa\u011flasa da maliyet ve y\u00f6netim anlam\u0131nda ek y\u00fck getirecektir. Ayr\u0131ca b\u00f6yle bir tercihte %100 utilize edilemeyen cluster kapasiteleri cloud kullan\u0131lan ortamlarda eksta maliyet olu\u015fturmu\u015f olacakt\u0131r.<\/p>\n\n\n\n

Bu sebeplerden dolay\u0131 uygulamalar\u0131n izolasyon ihtiya\u00e7lar\u0131 iyi g\u00f6zlemlenmeli e\u011fer yeterli olacaksa namespace gibi mant\u0131ksal izolasyon ile bu ihtiya\u00e7lar kar\u015f\u0131lanmal\u0131 ve security policy ve RBAC gibi mekanizmalar ile desteklenmelidir. Fakat \u00e7ok daha s\u0131k\u0131 izolasyon gereksinimi olan durumlarda ikinci cluster ihtiyac\u0131 d\u00fc\u015f\u00fcn\u00fclmelidir.<\/p>\n\n\n

Add second node pool on different subnet<\/a>\nAdd second node pool to aks<\/a>\nagentic AI<\/a>\nAI Agents<\/a>\naks<\/a>\nAKS Cluster Security<\/a>\nAKS free tier<\/a>\nAKS node image upgrade<\/a>\nAks Node pool<\/a>\nAKS OS Patch<\/a>\nAKS OS Upgrade<\/a>\nAKS SLA<\/a>\nAKS SLO<\/a>\nAKS spot nodepool<\/a>\nAKS spot nodes<\/a>\naks ssd disk<\/a>\nAKS Uptime SLA<\/a>\nAKS Version Upgrade<\/a>\nAPI Gateway<\/a>\nAPI Gateway communication<\/a>\nAPI Gateway Design<\/a>\nAPI Gateway Design Pattern<\/a>\nAPI Gateway pattern<\/a>\nazure<\/a>\nAzure AKS<\/a>\nazure kubernetes service<\/a>\nAzure Open AI<\/a>\nAzure SaaS<\/a>\nbackstage<\/a>\nBackstage on azure<\/a>\nBackstage plugins<\/a>\ncontainer image scan<\/a>\nDeveloper Experience platform<\/a>\nfiratyasar<\/a>\nIDP<\/a>\nkube-advisor<\/a>\nkubernetes<\/a>\nMicrosoft<\/a>\nMulti Tenancy<\/a>\nPlatform Engineering<\/a>\npv<\/a>\npvc<\/a>\nSaaS<\/a>\nSaas Application<\/a>\nspot vm<\/a><\/p>\n\n\n

Firat<\/p>\n","protected":false},"excerpt":{"rendered":"

Bir den fazla cluster’\u0131 y\u00f6netmek operat\u00f6rler i\u00e7in farkl\u0131 zorluklar\u0131 beraberinde getirir. Y\u00f6netim maliyetlerinden ka\u00e7\u0131nmak ve cluster say\u0131s\u0131n\u0131 d\u00fc\u015f\u00fcrmek i\u00e7in d\u00fc\u015f\u00fcn\u00fclmesi gereken \u015fey izolation’d\u0131r. Bir organizasyon i\u00e7erisinde fiziksel cluster say\u0131s\u0131 azalt\u0131lmak istenirse ayn\u0131 cluster’\u0131 kullanacak farkl\u0131 tak\u0131mlar\u0131n ve bunlara ba\u011fl\u0131 olarak da uygulamalar\u0131n izole edilmeleri gerekir. Bu ama\u00e7la i\u015f y\u00fcklerini ve kaynaklar\u0131 ayn\u0131 cluster \u00fczerinde birbirlerinden\u2026 Read More »<\/a><\/span><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/blog.firatyasar.com\/index.php?rest_route=\/wp\/v2\/posts\/28"}],"collection":[{"href":"https:\/\/blog.firatyasar.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.firatyasar.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.firatyasar.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.firatyasar.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=28"}],"version-history":[{"count":1,"href":"https:\/\/blog.firatyasar.com\/index.php?rest_route=\/wp\/v2\/posts\/28\/revisions"}],"predecessor-version":[{"id":30,"href":"https:\/\/blog.firatyasar.com\/index.php?rest_route=\/wp\/v2\/posts\/28\/revisions\/30"}],"wp:attachment":[{"href":"https:\/\/blog.firatyasar.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=28"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.firatyasar.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=28"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.firatyasar.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=28"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}