Edit

Share via

Azure Kubernetes Services (AKS) landing zone accelerator

The Azure Kubernetes Services (AKS) landing zone accelerator provides a reference implementation to help you deploy AKS in an Azure landing zones. The following architecture shows how AKS integrates with shared services and aligns with the design areas.

Diagram that shows the AKS landing zone accelerator architecture.

Establish a platform foundation

A platform foundation provides shared services such as networking, identity, security, and governance. This foundation supports consistent and secure AKS deployments across your environment.

  1. Implement a platform foundation using Azure landing zones. Use the Cloud Adoption Framework's Azure landing zone guidance to deploy shared services that include identity providers, hub-and-spoke networking, and centralized policy enforcement. This foundation simplifies security and management across your cloud environment.

  2. Skip this step if your organization already has a platform foundation. If you already have an Azure landing zone, proceed to deploy the AKS landing zone accelerator.

AKS landing zone accelerator

This AKS landing zone accelerator includes a reference architecture that supports AKS deployments in an Azure landing zone.

  1. Use the templates from the official GitHub repository. Use the AKS landing zone accelerator repo to access ARM template, Bicep, and Terraform templates for deploying AKS infrastructure components fit your environment. Modify environment variables and parameters to align with your organization’s naming conventions, policies, and operational requirements.

  2. Deploy the accelerator in the landing zones management group. Place the AKS workload in the appropriate subscription and management group to ensure alignment with platform governance and policy enforcement.

Evaluate the AKS design areas

Design areas help you align your AKS implementation with Azure landing zone principles. Use the following guides to evaluate and configure each area:

Next steps

Azure billing and Active Directory (if needed)

Identity and access management