Microsoft Certified: DevOps Engineer ExpertDesign and implement pipelinesHard
A DevOps team needs to deploy an application to an Azure Kubernetes Service (AKS) cluster. The deployment process involves applying several Kubernetes manifest files (YAML) and then running a custom script to perform post-deployment configuration on the cluster. The team wants to use an Azure DevOps release pipeline for this. To ensure that the pipeline can interact with the AKS cluster, which type of service connection should be configured in Azure DevOps?
- AGeneric service connection
- BDocker Registry service connection
- CGitHub service connection
- DAzure Resource Manager service connection
Show answer & explanationAnswer & explanation
Correct answer: D. Azure Resource Manager service connection
To deploy to Azure Kubernetes Service (AKS) from Azure DevOps using native tasks (like 'Kubernetes@1' or 'AzureCLI@2' with AKS commands), an Azure Resource Manager service connection is required. This connection allows Azure DevOps to authenticate with your Azure subscription and interact with AKS resources.
Why the other options are wrong
- A. A Generic service connection is used for connecting to arbitrary external services via basic authentication, not for Azure-specific resource management.
- B. A Docker Registry service connection is for connecting to container registries to pull or push images, not for deploying to AKS itself.
- C. A GitHub service connection is for integrating with GitHub repositories, not for deploying to Azure resources.
Azure Resource Manager Service Connection
An Azure Resource Manager service connection in Azure DevOps establishes a secure link between your Azure DevOps organization and an Azure subscription. It uses a Service Principal to authenticate and authorize Azure DevOps pipelines to deploy and manage resources within that subscription.
- Essential for deploying to Azure services like AKS, App Service, VMs.
- Uses Service Principal for secure, role-based access.
- Supports various authentication methods (e.g., automated, manual).
Memory trick: ARM is the key to unlock Azure's door.