Securing AKS & ACR with Private Endpoint [1/2]

[@kausthubhk4161]

Can you please clear this point for me : what is the point of a private cluster if we are able to execute commands via the invoke command?

[@amjads8971]

You will need a separate subnet for bastion host right ?

[@devopsengineer1798]

what abt private acr and private cluster

[@pulsorion]

Wow...exactly what I need! Thank you! By the way, is it possible to deploy (through azure devops pipeline/release) machine learning models (private network + mlops) with a private AKS / private ACR + ACI?

[@HoussemDellai]

Yes you can deploy build agent in the Jumpbox VM and it would have access to private AKS.

[@pulsorion]

@@HoussemDellai Oh... Is it possible to link me a doc about that? I didn't know it was possible. I tried to get a private ACI with my mlops architecture, but there is not much information about that...

[@HoussemDellai]

@@pulsorion here is part 1: techcommunity.microsoft.com/t5/core-infrastructure-and-security/private-aks-and-acr-using-private-endpoint-part-1-2/ba-p/3088721 part 2 is coming next week

[@pulsorion]

@@HoussemDellai Thank you!

[@nakshinakshi3438]

Very useful information...related to private aks.

[@nagasatishvadlamuri8486]

hi very use full session which is so help to me.. And please let me know to we App gateway load balancer in ingress file using App service custom managed wildcard certificate purchased from Azure and i stored in Azure key vault . how we use that certificate in ingress file in aks cluster

[@rameshd3951]

Very Nice One !!!