Azure AKS Prerequisites

This page outlines the prerequisite requirements for deploying Cortex DCI on a Kubernetes/AKS cluster using the "helm-only" deployment model.

For help with deploying your AKS cluster please refer to Azure's documentation on Kubernetes instantiation.

Basic Installation Prerequisites

• Azure subscription
• Storage Account
  • Make sure to disable
    • Blob soft delete
    • Container soft delete
• Managed Identity

Cluster preparation is performed by a client-user with System Admin permissions and keys to their Azure account.

Customer-managed Encryption Keys

Customer management of encryption keys is optional and recommended for production environments and systems handling sensitive data.

You may select either Microsoft-managed keys or customer-managed keys in Azure AKS.

To learn more about encryption in Azure's Key Vault service go here

Instructions for generating keys are found here.

To learn how to enable host-based encryption in AKS go here.

Hosted Externalized Dependencies

NOTE

Creating hosted-externalized infrastructure dependencies (especially Mongo, Redis, and MinIO) is considered the best practice for both development and production environments of Cortex Fabric.

Customers who opt for this setup are responsible for creating accounts with the dependency providers, procuring the required licenses, implementing appropriate plans for their solutions, monitoring their usage, and managing those accounts.

For development/demo environments customers may opt to install Cortex with the internalized dependencies as directed in the Installation Guide.

• Mongo on Azure
• MinIO
• Redis on Azure