AKS - Add-ons

Container Monitoring

addonProfiles: \{
  omsagent: \{
    enabled: true
    config: \{
      logAnalyticsWorkspaceResourceID: logAnalytics.id
    \}
  \}
\}

Azure CNI Networking

networkProfile: \{
  networkPlugin: 'azure'
  networkPolicy: 'calico'
\}

Azure Key Vault Provider

addonProfiles: \{
  azureKeyvaultSecretsProvider: \{
    enabled: true
    config: \{
      enableSecretRotation: 'true'
    \}
  \}
\}

Application Gateway Ingress Controller

addonProfiles: \{
  ingressApplicationGateway: \{
    enabled: true
    config: \{
      applicationGatewayId: appGateway.id
    \}
  \}
\}

Add-ons Summary

Add-on	Purpose
omsagent	Container Insights monitoring
azureKeyvaultSecretsProvider	Mount Key Vault secrets as volumes
ingressApplicationGateway	Application Gateway as ingress controller
azurepolicy	Azure Policy for Kubernetes