AKS Cluster

The possible infrastructure vary depending on how the PostgreSQL database is provisioned

Options:

  1. Azure AKS with VMs + Azure PostgreSQL
  2. Azure AKS with VMs + PostgreSQL Pod

We offer a provisioning script that depending on the selection, we automatically provision the cluster for you and install the K8S components needed for MetaDefender ICAP Server service. See AKS Cluster Deployment

MetaDefender PostgreSQL database details

Recommendations

For running MetaDefender ICAP Server in a Kubernetes cluster we recommend to use, for production environments, an external database service for PostgreSQL. In case of Azure it is Azure PostgreSQL.

For non-production environments or for stateless use cases, we offer the option of installing the database within the cluster using a standard PostgreSQL image.

Azure VMs + Azure PostgreSQL / PostgreSQL Pod Diagram

Resources Inventory

Networking

Service TypeResource NameDescription
Azure Virtual Network<resource-group-name>-vnet
Azure Subnet<resource-group-name>-aks-subnet
Azure Subnet<resource-group-name>-db-subnet
Azure Private DNS Zone<postgres_db_account_name>.postgres.database.azure.com
Azure Private DNS Zone Virtual Network Link<postgres__db__account_name>.com

Monitoring

Service TypeResource NameDescription
Azure Log Analytics WorkSpace<log_analytics_workspace_name>Workspace for analyzing the AKS Service
Azure Log Analytics SolutionContainerInsightsSolution for gathering metrics of containers

Compute

Service TypeResource NameDescriptionOption
Azure AKS<cluster_name>Azure Kubernetes Service ClusterAll
Azure ProstgreSQL Flexible Serverpostgresql-<postgres_db_account_name>PostgreSQL Server for MetaDefender CoreOption with Azure PostgreSQL
Azure ProstgreSQL Flexible Server Configurationazure.extensionsConfiguration for installing PG_TRGM,DBLINK,BTREE_GIN_Option with Azure PostgreSQL
Type to search, ESC to discard
Type to search, ESC to discard
Type to search, ESC to discard