Exam AZ-400 All Questions

View all questions & answers for the AZ-400 exam

Exam AZ-400 topic 8 question 27 discussion

Actual exam question from Microsoft's AZ-400

Question #: 27
Topic #: 8

DRAG DROP -
You have an Azure Kubernetes Service (AKS) cluster.
You need to deploy an application to the cluster by using Azure DevOps.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:

Show Suggested Answer

Suggested Answer:

You can set up a CI/CD pipeline to deploy your apps on a Kubernetes cluster with Azure DevOps by leveraging a Linux agent, Docker, and Helm.
Step 1: Create a service principle in Azure Active Directory (Azure AD)
We need to assign 3 specific service principals with specific Azure Roles that need to interact with our ACR and our AKS.
Create a specific Service Principal for our Azure DevOps pipelines to be able to push and pull images and charts of our ACR.
Create a specific Service Principal for our Azure DevOps pipelines to be able to deploy our application in our AKS.
Step 2: Add a Helm package and deploy a task to the deployment pipeline
This is the DevOps workflow with containers:

Step 3: Add a Docker Compose task to the deployment pipeline.
Dockerfile file is a script leveraged by Docker, composed of various commands (instructions) and arguments listed successively to automatically perform actions on a base image in order to create a new Docker image by packaging the app.
Reference:
https://cloudblogs.microsoft.com/opensource/2018/11/27/tutorial-azure-devops-setup-cicd-pipeline-kubernetes-docker-helm/

by Tesshu at April 4, 2021, 11:38 p.m.

Comments

Submit Cancel

Tesshu

Highly Voted 3 years, 8 months ago

I believe correct answer is: 1. Create a service principal in Azure Active Directory 2. Configure RBAC roles in the cluster 3. Add a helm package and deploy a task to the deployment pipeline You shouldn't be using docker composed if you already have helm. Also in the link specified in the answer it explains that you need to configure the required permissions for the service principal (that is why we need number 2) https://cloudblogs.microsoft.com/opensource/2018/11/27/tutorial-azure-devops-setup-cicd-pipeline-kubernetes-docker-helm/

upvoted 93 times

Concay

3 years, 6 months ago

Docker compose is not for aks. Helm is template to map varriable for kubernetes cluster

upvoted 6 times

...

rdemontis

2 years, 8 months ago

Your answer is correct, I agree with you!

upvoted 2 times

...

Albelev

3 years, 7 months ago

you are right, it is also mentioned here https://techcommunity.microsoft.com/t5/azure-developer-community-blog/building-microservices-with-azure-kubernetes-service-and-azure/ba-p/359965

upvoted 1 times

...

Saterial

3 years, 7 months ago

This is correct, K8s works off of RBAC so you need to have it configured.

upvoted 1 times

...

Load full discussion...

...

syu31svc

Highly Voted 2 years, 4 months ago

Service account, Docker compose and Azure Function App options are invalid So order is 1) Create service principal 2) Configure RBAC 3) Helm

upvoted 12 times

...

vsvaid

Most Recent 12 months ago

Create SP Configure RBAC for cluster Add Helm

upvoted 2 times

...

varinder82

1 year ago

Final answer after going thorough all the comments 1) Create service principal 2) Configure RBAC 3) Helm

upvoted 2 times

...

renzoku

1 year, 4 months ago

1. Create a service principal in Azure Active Director: To authenticate and authorize Azure DevOps to interact with the AKS cluster. 2. Configure RBAC roles in the cluster: Before deploying the application, you should set up Role-Based Access Control (RBAC) roles in the AKS cluster to define the appropriate permissions for the service principal. 3. Add a Helm package and deploy a task to the deployment pipeline: Package manager for Kubernetes, and it allows you to define, install, and upgrade even the most complex Kubernetes applications. You will use Helm to package your application and deploy it to the AKS cluster.

upvoted 3 times

...

Pamban

1 year, 6 months ago

how we can create service principal without having app registration??

upvoted 1 times

UrbanRellik

6 months, 1 week ago

The modern 2024 method is to register an app in Azure. When you create the app registration, you can assign a service principal or system-managed identity.

upvoted 1 times

...

Eltooth

2 years, 7 months ago

Create a service principal in Azure Active Directory Configure RBAC roles in the cluster Add a helm package and deploy a task to the deployment pipeline

upvoted 5 times

...

Dady9

3 years, 8 months ago

SP in AD RBAC Add Docker Compose?

upvoted 3 times

antococ

3 years, 3 months ago

nope, SP in AAD, RBAC, Helm

upvoted 8 times

...