- Conduct project kick-off meeting - Technical workshop to gather current environment information (e.g. existing applications and systems, Azure network, number of end users, application deployment prerequisites, storage requirements, security standards etc.) - Technical workshop to gather functional and nonfunctional requirements of systems - Identify high-level risks and provide mitigation suggestions - Finalize Azure infrastructure architecture for AKS spokes implementation - Infrastructure Architecture Design document
.
- Enablement Stage - Define repository for storing YAML configuration files - Design YAML files aligned to CLP's security standard to provision and configure K8s objects for ISTIO deployment (ISTIO Classic API) - Ingress Gateway - Gateway - VirtualServices - Azure Key Vault secrets
.
- Includes scoping, planning, and executing a Pilot or Proof of Concept (PoC) of selected onpremises estate (infrastructure, data and applications) on Azure, helping the customer evaluate Azure capabilities. The applications will be running on Windows Server, Linux, Azure Arc-enabled Virtual Machines (Windows, Linux and/or SQL Server), SQL Server and/or open-source database platforms (e.g. MySQL, Postgres, MariaDB). Target destination can include: Remediate Stage - Remediate network hub-and-spoke architecture readiness, such as VNET, subnet, NSGs, route tables - Provide advisory on firewall URLs and ports whitelisting, Kubernetes network policies - Provide advisory on updating DNS records (Azure DNS, Azure Private DNS Zones and external DNS services) - Define repository for storing Terraform scripts - Preparation of application development and publicfacing SSL/TLS certificates - Provisioning of QA, Production, DR QA, DR Production environments through Terraform scripts: - Creation and infrastructure-level configuration of Azure Kubernetes Services (AKS) - Creation and infrastructure-level configuration of Azure Container Registry (ACR) - Creation and infrastructure-level configuration of Azure NetApp File (ANF) volumes - Creation of Azure Policies - Creation of Microsoft Defender policies - Setup connection between Azure Kubernetes Services and private Azure Container Registry - DR drill of AKS environments (DR QA, DR Production) include all manual procedures steps e.g. DNS adjustment, manual app data restore - DR plan and report of AKS environments (DR QA, DR Production)