Back in December, I did a recording with Richard Campbell the host of RunAsRadio. An IT pro podcast that first aired in 2007- way before I knew podcast was a word. For about half an hour, Richard and I talked about Azure application registrations, enterprise apps, and managed identities. What are they, how can you Read More The post RunAsRadio – App registrations and enterprise apps appeared first on adatum ..read more

Azure Monitor for Prometheus is released in preview in the fall of 2022. Now let’s just get our terminology right. The Prometheus offering is a part of Azure Monitor Metrics. One part of monitor is Logs, and the other one is Metrics. For some time now Prometheus scraping has been available, but the previous implementation Read More The post Azure Monitor Managed Prometheus appeared first on adatum ..read more

A long-awaited feature for many is the ability to authenticate with Azure in a GitHub workflow. For a long time, this has been an integrated feature in Azure DevOps, and for some time GitHub actions have had the ability to authenticate using Azure Application registrations and secrets. But now, we can use federated credentials which Read More The post GitHub actions federated identity with Azure AD appeared first on adatum ..read more

Nordic Infrastructure Conference is back! This is NICs tenth anniversary, and I am glad to say I am once again able to speak at this conference. This year I have one session on Azure Bicep, where I will go through (almost) everything you need to know in order to be productive + some bonus tricks Read More The post Speaking at Nordic Infrastructure Conference appeared first on adatum ..read more

Changes to your Azure resources are quite common, and they are difficult to identify. Until now. Microsoft recently released (in preview) the ability to detect change events using Azure Resource Graph. Meaning you do not have to decipher the administrative events in the activity log of your resources. Much like the change tracking solution for Read More The post Track changes to Azure resources appeared first on adatum ..read more

This is the short, but for me, pretty intense story from when I uploaded 900 blobs of one Gb each to the wrong path in a storage container. Eventually I was able to move these files using azcopy and PowerShell Thanos persistent Prometheus metrics In our Azure Kubernetes environment (AKS) we use Prometheus and Thanos Read More The post How to move Azure blobs up the path appeared first on adatum ..read more

There’s no secret you can get an Azure AD token and access API resources like Microsoft Graph, Azure Resource Manager (ARM), etc. It’s also pretty straightforward to authenticate a custom API using client credentials. In fact, I have written about how to do that previously where we accessed a custom API built on Azure Functions. Read More The post Azure token from a custom app registration appeared first on adatum ..read more

A common problem for many organizations is to share and consume infrastructure templates. Many ended up with a storage account in Azure, but that had some limitations around versioning and sharing of secrets. Directly consuming templates from a Git repository is another option. However, that’s not exactly problem-free either. For example, what happens if a Read More The post Share Bicep modules with private registry appeared first on adatum ..read more

With infrastructure as code, we strive to parameterize, re-use as much as possible, and make our code as modular as possible. As your application infrastructure grows, it might become too much work to have everything decoupled and modular. But for ad-hoc deployments, “bread and butter” resources we can make things very agile. Azure Bicep modules, Read More The post Azure Bicep modules, variables, and T-shirt sizing appeared first on adatum ..read more

Over the past weeks, I have worked on automation within Azure DevOps. One of the tasks was to create a self-service tool for our developers to create new projects where all pre-requisites were taken care of. That means the project itself, service connections (ARM) to access our Azure Kubernetes Service (AKS), Azure AD groups for Read More The post Automate Azure DevOps like a boss appeared first on adatum ..read more