Azure Kubernetes Service
Azure Kubernetes Service¶
Zone Failover / HA¶
Yes
Regional Failover / HA¶
Manually, not automatically through cloud provider.
While technically doable, no different than manually deploying a new application stack in another region.
Encryption at Rest¶
Host based encryption allows for data and cache stored at rest by platform or customer managed keys.
Defaults to server side encryption at rest
Encryption in Transit¶
Prefect application based requires SSL / TLS.
SSL / TLS can be optionally configured within the cluster, but is not native to AKS.
Istio is used for kubernetes service mesh, and can be configured for intra-cluster encryption.