Skip to content

Conversation

@pauldotyu
Copy link
Contributor

New blog post: Deploying to AKS Automatic with Terraform and Helm

  • Introduces AKS Automatic and details its security defaults, emphasizing Azure RBAC and the lack of static kubeconfig credentials.
  • Provides Terraform configuration examples for deploying AKS Automatic clusters using the AzApi provider, including role assignment for RBAC access.
  • Explains two authentication strategies for the Helm provider: using Azure bearer tokens (via the external provider and Azure CLI) and using the exec plugin with kubelogin for dynamic credential retrieval.
  • Includes code samples for deploying Helm charts to AKS Automatic, demonstrating how to integrate Helm deployments into Terraform workflows securely.
  • Offers additional resources and links for further reading on AKS Automatic, AzApi, Helm provider, kubelogin, and Azure RBAC roles.

Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR adds a comprehensive blog post that guides readers through deploying applications to AKS Automatic clusters using Terraform and the Helm provider, with a focus on Azure RBAC token-based authentication strategies.

Key changes:

  • Introduces AKS Automatic's security-first approach and explains why traditional kubeconfig-based authentication doesn't work
  • Provides detailed Terraform configurations using the AzApi provider to deploy AKS Automatic clusters
  • Demonstrates two authentication methods for the Helm provider: Azure CLI bearer tokens via the external provider, and the exec plugin with kubelogin

pauldotyu and others added 8 commits December 4, 2025 10:41
…dex.md

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
…dex.md

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
…dex.md

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
…dex.md

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
…dex.md

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
@pauldotyu pauldotyu force-pushed the deploy_to_aks_automatic_with_terraform_helm_provider branch from d8f7c8f to 8c8b4ca Compare December 9, 2025 21:19
@pauldotyu pauldotyu force-pushed the deploy_to_aks_automatic_with_terraform_helm_provider branch 2 times, most recently from f245933 to 180155a Compare December 10, 2025 01:37
@pauldotyu pauldotyu force-pushed the deploy_to_aks_automatic_with_terraform_helm_provider branch from 180155a to 3c75f44 Compare December 10, 2025 01:45
@pauldotyu pauldotyu requested a review from Copilot December 10, 2025 17:40
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated 7 comments.

pauldotyu and others added 4 commits December 11, 2025 09:58
…dex.md

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
…dex.md

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
…dex.md

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
…dex.md

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
@pauldotyu pauldotyu force-pushed the deploy_to_aks_automatic_with_terraform_helm_provider branch from 5cd1243 to b7901cb Compare December 19, 2025 18:13
Copy link
Contributor

@chzbrgr71 chzbrgr71 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants