Richard Hagen

We built this as an alternative for anyone else needing this: https://github.com/equinor/radix-oauth-guard :) Would be happy to contribute a PR to oauth2-proxy if its wanted 👍

Tried this tonight, but getting a panic from ADAL(!?) The workload identity token is added to the pod with the usual AZURE_ env variables... ``` panic: runtime error: invalid memory...

Thanks, I added `azure.workload.identity/client-id` annotation manually to the service account, and it stopped panicking! (And when creating the bucket names in the correct storage account, everything worked great! 🙏 )

We should keep chroot enabled on ingress-nginx: https://kubernetes.io/blog/2022/04/28/ingress-nginx-1-2-0/

Use ADAC for ACR when available for limited access pr application https://github.com/Azure/acr/issues/380

Can we just publish this dashboard? https://grafana.ext-mon.radix.equinor.com/d/aba9fa58-56a6-439f-ad70-27f301e95c62/radix-uptime?orgId=1&from=now-30d&to=now 

Response from microsoft: Use Management Policies to avoid accidental deletion Added CanNotDelete lock to avoid accidental deletion

https://learn.microsoft.com/en-us/azure/aks/azure-cni-powered-by-cilium Started `cililum-26` with these network options: ``` AKS_NETWORK_OPTIONS=( --network-plugin "azure" --network-plugin-mode overlay --network-dataplane cilium ) ``` # Setup Advanced Networking with managed Cilium, but bring your own Grafana/Prometheus https://learn.microsoft.com/en-us/azure/aks/advanced-network-observability-bring-your-own-cli?tabs=non-cilium...

To upgrade existing Calico cluster to Cilium: - Remove Calico and network policies - Upgrade network mode to overlay - Install cilium

https://www.augmentedmind.de/2024/01/28/benchmark-azure-vm-in-kubernetes/ https://learn.microsoft.com/en-us/azure/virtual-machines/windows/compute-benchmark-scores https://learn.microsoft.com/en-us/azure/virtual-machines/epsv5-epdsv5-series https://learn.microsoft.com/en-us/azure/virtual-machines/eav4-easv4-series https://learn.microsoft.com/en-us/azure/virtual-machines/easv5-eadsv5-series **ARM**: ARMv8 Neoverse-N1: e8pdsv5eph: $395 **AMD**: AMD EPYC 7452 32-Core Processor: e8av4eph: $432 **AMD**: AMD EPYC 7763 64-Core (Zen 3): e8adsv5eph: $388  # AMD:...