Greetings to my fellow Technology Advocates and Specialists.
In this Session, I will provide complete details on Azure Container Apps
I had the Privilege to talk on this topic in ONE Azure Communities:-
| NAME OF THE AZURE COMMUNITY |
TYPE OF SPEAKER SESSION |
| Azure Back to School - 2023 |
Virtual |
| EVENT ANNOUNCEMENTS:- |
 |
| CODE REPOSITORY:- |
Greetings to my fellow Technology Advocates and Specialists.
In this Session, I will provide complete details on Azure Container Apps
I had the Privilege to talk on this topic in ONE Azure Communities:-
| NAME OF THE AZURE COMMUNITY |
TYPE OF SPEAKER SESSION |
| Azure Back to School - 2023 |
Virtual |
| EVENT ANNOUNCEMENTS:- |
 |
| AZURE CONTAINER APPS OVERVIEW:- |
| # |
OVERVIEW POINTERS |
| 1. |
Fully managed environment on a Serverless platform. |
| 2. |
Run containers while leaving behind the concerns of managing cloud infrastructure and complex container orchestrators. |
| 3. |
Use Case #1: Deploy API endpoints. |
| 4. |
Use Case #2: Hosting Background Processing Jobs. |
| 5. |
Use Case #3: Handling Event Driven Processing. |
| 6. |
Use Case #4: Running Microservices. |
| AZURE CONTAINER APPS COMPONENTS:- |
…
|
| AZURE CONTAINER APPS OVERVIEW:- |
| # |
OVERVIEW POINTERS |
| 1. |
Fully managed environment on a Serverless platform. |
| 2. |
Run containers while leaving behind the concerns of managing cloud infrastructure and complex container orchestrators. |
| 3. |
Use Case #1: Deploy API endpoints. |
| 4. |
Use Case #2: Hosting Background Processing Jobs. |
| 5. |
Use Case #3: Handling Event Driven Processing. |
| 6. |
Use Case #4: Running Microservices. |
| AZURE CONTAINER APPS COMPONENTS:- |
 |
| # |
COMPONENTS |
DESCRIPTION |
| 1. |
Environment |
Isolation boundary around a collection of container apps, Same virtual network for multiple container apps in the same environment, Multiple container apps in the same environment writes logs to same log Analytics workspace. |
| 2. |
Revisions |
Container apps versioning, first revision is provisioned automatically when container app is deployed, can retain up to 100 revisions, split traffic between active revisions (running multiple revisions concurrently), gradually moving towards Blue Green Deployments. |
| 3. |
Replica |
As container app revision scales out, new instances of revisions are created. These instances are known as replica. |
| 4. |
Containers |
Grouped together in Pods inside revision snapshots. Supports any Runtime or Programming Language. |
| 5. |
Container Apps(apps): |
First type of compute resource. Apps are services that run continuously. If containers in an app fails, it restarts automatically. |
| 6. |
Container Apps(jobs): |
Second type of compute resource. Jobs are tasks that start, run for finite duration and then exit. Each task is a single unit of work. Tasks can be executed - manually, scheduled, or event driven. |
| WHAT IS APPLICATION LIFECYCLE MANAGEMENT IN AZURE CONTAINER APPS:- |
| 1. It revolves around revisions. |
| 2. More revisions are created as containers changes. |
| 3. When a New Revision is created - Azure Container App when updated with a revision scope change. |
| 4. Single Revision Mode: Deactivate old Revisions (Manually or automatically) with the option to reactivate later. |
| 5. Multiple Revision Mode: Allow the revisions to be available. |
| 6. Zero Downtime Deployment. |
| WHAT IS ZERO DOWNTIME DEPLOYMENT OF AZURE CONTAINER APPS:- |
| 1. Zero downtime deployment has 2 factors to consider - a) Single revision mode; b) Multiple revision mode. |
| 2. Single revision mode: a) No downtime while creating a new revision; b) existing revision is not deactivated until new revision is created; c) If ingress is enabled, the existing revision continues to receive 100% of the traffic until the new revision is ready. |
| 3. Multiple revision mode: a) Its in our control when revisions are activated or deactivated; b) which revisions receives ingress traffic; c) Depending upon if traffic splitting rule is configured with latest Revision set to true, traffic does not switch to latest revision until its ready. |
| 4. A new revision is considered ready when one of its replicas starts and becomes ready. A replica is ready when all of its containers start and pass their startup and readiness probes. |
| WHAT ARE THE CONDITIONS WHEN CONTAINERS IN REVISION ARE SHUTDOWN:- |
| 1. When a container app scales in. |
| 2. While deactivating a revision, containers in the revision are shutdown. |
| 3. When a container app is deleted. |
| AZURE CONTAINER APPS PLANS:- |
| # |
PLAN TYPES |
DESCRIPTION |
| 1. |
Dedicated |
Customized compute options where you're billed for instances allocated to each workload profile. |
| 2. |
Consumption |
Serverless architecture, can scale in and out on-demand, can scale to zero, pay only for running apps and chosen when the container app does not have specific hardware requirements. |
| AZURE CONTAINER APPS SCALING CHARACTERISTICS:- |
| # |
SCALE CRITERIA |
DESCRIPTION |
IMAGE |
| 1. |
HTTP Traffic |
The number of concurrent HTTP requests are split between former and new Container Apps Revision |
 |
| 2. |
Event Driven |
Scaling is determined by number of messages in the queue. |
 |
| 3. |
CPU or Memory |
Scaling is determined by increase of CPU and memory consumption. |
- |
| 4. |
KEDA Scaler |
Individual microservices can scale according to any KEDA Scale trigger. |
 |
| AZURE CONTAINER APPS STORAGE MOUNTS:- |
| Different types of storage for Container Apps: a.) Container File System; b.) Ephemeral Storage; c.) Azure Files
|
| CONTAINER FILE SYSTEM:- |
| 1. Temporary and is lost when container is shutdown or restarted. |
| 2. Files are visible only to the process running in the current container. |
| 3. No Capacity Guarantee, depends upon the disk space allocated to the container. |
| EPHEMERAL STORAGE:- |
| 1. Files are available until the lifetime of the replica. |
| 2. If the container in the replica is restarted, files in the volume are still available. |
| 3. Any containers in the replica can mount to the same volume. |
| 4. Multiple Ephemeral Volumes can be mounted to a container in the replica. |
| 5. Total amount of vCPUs allocated to Replica governs the available storage. |
| AZURE FILES:- |
| 1. Files are available in file share. |
| 2. Multiple containers can mount to the same file share whether they belong to another Replica, another Revision, or another container App. |
| 3. Multiple file share can be mounted to a container. |
| AZURE CONTAINER APPS HEALTH PROBES:- |
| 1. Probes are setup using TCP or HTTP(s). |
| 2. Probes supported by Azure Container Apps - a.) Startup [if application started successfully] b.) Liveness [if application is still running and responsive.] c.) Readiness [if a replica is ready to handle requests.] |
| 3. HTTP Probes: Validates the status of application dependencies before reporting a healthy status. |
| 4. TCP Probes: Validates the status of application dependencies before reporting a healthy status. |
| AZURE CONTAINER APPS SECURITY CONSIDERATIONS:- |
| 1. Manage Secrets. |
| 2. Managed Identities. |
| MANAGE SECRETS:- |
| 1. STORE SECRET IN CONTAINER APPS:-
|
| a. Azure Container Apps allows to securely store sensitive values. |
| b. Secrets are defined at application level. These are then available to all revisions in the container apps. |
| c. New Revisions is not created when we add, remove or change secrets. |
| d. One Application Revision can reference one or more secrets. |
| e. Multiple Application Revision can reference same secrets. |
| f. When a secret is updated or deleted, change is not reflected automatically to the existing revisions. So one of the 2 approaches should be considered - i.) Deploy a New Revision; ii.) Restart an existing revision. |
| g. After declaring secrets at the application level, we can reference them in volume mounts when you create a new revision in your container app. |
| h. When secrets are mounted in a volume, each secret is mounted as a file in the volume. |
| i. The file name is the name of the secret. |
| j. The file contents are the value of the secret. |
| k. We can load all secrets in a volume mount, or we can load specific secrets. |
| 2. REFERENCE SECRET FROM KEY VAULT:-
|
| a. Container Apps automatically retrieves the secret value from Key Vault. |
| b. To reference a secret from Key Vault, you must first enable managed identity in your container app and grant the identity access to the Key Vault secrets. |
| MANAGED IDENTITIES:- |
| Azure Container Apps supports both a.) System Assigned Managed Identity; and b.) User Assigned Managed Identity. |
| LIMITATIONS IN AZURE CONTAINER APPS:- |
| 1. Azure Container Apps cannot run privileged containers. |
| 2. Linux based container images are required. |
| 3. We can only add one of each probe type per container. |
| 4. Executables probes aren't supported. |
| 4. Port values must be integers; Named ports aren't supported. |
| 5. gRPC isn't supported. |
Hope You Enjoyed the Session!!!
Stay Safe | Keep Learning | Spread Knowledge
Top comments (0)