Single Region Kubernetes

Overview

Build best-practice single region Kubernetes cluster(s) on Azure to run modern containerized applications. This solution is packaged as a production-ready Terraform module. You’ll be in control of the code and empowered to make customizations to meet your specific needs.

Kubernetes Features

• Fully managed and setup with sensible defaults to minimize administration.
• Default node pool is auto-scaling and configured to exclusively host critical system applications. The virtual machine size, minimum count, and maximum counts can be adjusted to suite your needs.
• Supports any number of node pools, each supporting various OS platforms, virtual machine sizes, labels, and taints to optimise for your use case.
• Intergrates with existing Log Analytics Workspace or can be set up with a dedicated log analytics workspace.

Networking Features

• Pod-to-pod networking is configured to use Azure CNI on a dedicated Virtual Network that can optionally be peered into a hub and spoke topology or connected to an Azure Virtual WAN.
• An Application Gateway is provisioned and dynamically managed by Kubernetes to route HTTP(s) ingress traffic.
• Egress traffic is routed through a Standard SKU Load Balancer which provides zero touch management and highly resilient connectivity.

Security Features

• User-assigned Managed Identities are setup to provide the minimum set of permissions required for the Azure Kubernetes Service.
• Internet RDP or SSH connectivity is blocked by default. Azure Bastion is included as an available module and example. It provides system administrators secure SSH and RDP access to nodes.
• Authorized IP Ranges are configurable to limit the public IP Address ranges that can reach the Kubernetes and Key Vault API endpoints.
• A dedicated Key Vault is provisioned and utilized to securely manage Disk Encryption Keys and safely store Windows, Linux and Kubernetes credentials.
• The Kubernetes Cluster is configured with Role Based Access Controls and integrated with Azure AD for authentication.
• The Kubernetes Cluster is integrated with Azure Policy. It applies enforcements and safeguards of your workloads. The restricted standards for Linux-based workloads initiative is enforced by default.

Overview

Akuda Pty Ltd grants you an on-going, non-exclusive license to use the purchased Code.

The license grants permission to all Employees and Contractors of the Licensee to access and use the purchased Code.

What you can do with it

• Use the Code to provision unlimited infrastructure.
• Modify the Code to create derivative Code. Derivative Code is subject to this license.
• Use the Code to provision infrastructure where the infrastructure supports SaaS applications sold to End Users.

What you can't do with it

• Create End Products that are designed to allow End Users to build their own infrastructure using the Code.
• Provision infrastructure that is the property of any individual or entity other than the Licensee.
• Redistribute the Code or derivatives.

License Definitions

• Licensee is the individual and/or business entity who has purchased a License.
• Code is the source code and assets made available to the Licensee after purchasing an Akuda licensed solution.
• End Product is any artifact produced that incorporates the Infrastructure Code.
• End User is a user of an End Product.
• Employee is a full-time or part-time employee of the Licensee.
• Contractor is an individual or business entity contracted to perform services for the Licensee.

Enforcement

If you are found to be in violation of the license, access to your purchases may be terminated. When license violation is blatant and malicious (such as intentionally redistributing the Code), legal remedies may be pursued.

Liability

Akuda Pty Ltd liability to you for costs, damages, or other losses arising from your use of the Infrastructure Code, including third-party claims against you, is limited to a refund of your license. Akuda Pty Ltd may not be held liable for any consequential damages related to your use of the Code.

Overview

Akuda Pty Ltd grants you an on-going, non-exclusive license to use the purchased Code.

The license grants permission to all Employees and Contractors of the Licensee to access and use the purchased Code when providing professional services to clients.

Clients can access and use the purchased infrastructure code subject to the Standard License conditions.

What you can do with it

• Use the Code to provision unlimited infrastructure that is the property of Clients.
• Modify the Code to create derivative Code. Derivative Code is subject to this license.
• Share the Code with Clients where you were contracted to provide relevant professional services.

What you can't do with it

• Create End Products that are designed to allow End Users to build their own infrastructure using the Code.
• Provision infrastructure that is the property of any individual or entity other than Clients of the Licensee.
• Redistribute the Code or derivatives publicly or to any individual or entity other than Clients of the Licensee.

License Definitions

• Licensee is the individual and/or business entity who has purchased a License.
• Code is the source code and assets made available to the Licensee after purchasing an Akuda licensed solution.
• End Product is any artifact produced that incorporates the Infrastructure Code.
• Client is a business entity who has contracted you to provide professional services.
• End User is a user of an End Product.
• Employee is a full-time or part-time employee of the Licensee.
• Contractor is an individual or business entity contracted to perform services for the Licensee.

Enforcement

If you are found to be in violation of the license, access to your purchases may be terminated. When license violation is blatant and malicious (such as intentionally redistributing the Code), legal remedies may be pursued.

Liability

Akuda Pty Ltd liability to you for costs, damages, or other losses arising from your use of the Infrastructure Code, including third-party claims against you, is limited to a refund of your license. Akuda Pty Ltd may not be held liable for any consequential damages related to your use of the Code.