Five-Project Series

Manage Azure Kubernetes Service with Terraform you own this product

intermediate Terraform • basic Microsoft Azure • basic networking • basic Kubernetes • basic Go • basic Microsoft Azure DevOps
skills learned
manage infrastructure as code • automate IaC with pipelines • validate infrastructure as code • deploy Azure Kubernetes Service clusters
Ned Bellavance
5 weeks · 7-9 hours per week average · INTERMEDIATE

pro $24.99 per month

  • access to all Manning books, MEAPs, liveVideos, liveProjects, and audiobooks!
  • choose one free eBook per month to keep
  • exclusive 50% discount on all purchases

lite $19.99 per month

  • access to all Manning books, including MEAPs!


5, 10 or 20 seats+ for your team - learn more

It’s time to migrate! You’re a DevOps engineer for E-CO, an e-commerce organization that sells products to outdoor enthusiasts. E-CO’s line-of-business applications are currently hosted on premises, but E-CO is looking to save on operational costs, increase app availability, and streamline IT operations. Its solution: migrate its applications to Microsoft Azure while leveraging Azure Kubernetes Service.

In this series of liveProjects, you’ll provision Azure AKS infrastructure using Terraform and CI/CD pipelines, secure the AKS deployment by integrating Azure Active Directory, and automate the creation and deployment of Helm charts. Lastly, you’ll deploy the apps to AKS with CI/CD Azure DevOps pipelines. When you’ve completed these projects, you’ll have hands-on experience with widely used cloud-based tools as well as highly marketable new skills.

These projects are designed for learning purposes and are not complete, production-ready applications or solutions.

here's what's included

Project 1 Create an AKS Cluster with Terraform

Mission: Proof of Concept. E-CO, an e-commerce organization that sells products for outdoor enthusiasts, wants to migrate its containerized, on-premises applications to the public cloud. Instead of managing its own Kubernetes clusters built on Azure VMs, E-CO has chosen to use Azure Kubernetes Service (AKS) and to host its containerized applications on Microsoft Azure. As a member of E-CO’s platform team, you’ll spearhead this critical project, starting with ensuring that E-CO’s applications can stand up to an AKS cluster. You’ll use Terraform to develop the necessary code for deploying an AKS cluster, and you’ll write Terratest functions in Go to validate that the deployment functions as expected. When you’re done, you’ll have a tested, deployed, and validated AKS cluster that will stand the test of time.

Project 2 Azure DevOps with AKS

You’re the DevOps engineer at E-CO, an e-commerce organization that’s ready to retire its aging data center equipment and migrate its containerized, on-premises line-of-business applications to the cloud. Your task is to create a Continuous Integration and Delivery (CI/CD) pipeline to manage the lifecycle of E-CO’s infrastructure and software, following a GitOps workflow. You’ll use Microsoft Azure DevOps to create a project to host the workflow, and you’ll create Microsoft Azure Pipelines to define the workflow from Continuous Integration to Delivery to Deployment. After verifying the functionality of the Terraform code, you’ll deploy and check the code in production. When you’re done, you’ll have several pipelines running in Azure DevOps that check the box for E-CO’s desired GitOps workflow.

Project 3 Secure an AKS Cluster

The security group at EC-O, an e-commerce organization that sells products for outdoor enthusiasts, wants to secure their newly deployed AKS cluster. As EC-O’s DevOps engineer, your job is to configure the AKS cluster with the appropriate level of security and Azure Active Directory integration, enforcing a role-based cluster access policy. You’ll update the Terraform files associated with the AKS cluster, test the deployment process, and update the production cluster. By the end of this project, you’ll have a secure AKS cluster—and the peace of mind that comes with it—thanks to your skillful use of RBAC and Azure Active Directory.

Project 4 Monitor an AKS Cluster

The security group at EC-O, an e-commerce organization that sells products for outdoor enthusiasts, wants to monitor their newly deployed AKS cluster using Microsoft Azure Monitor, Grafana, and Prometheus—all currently being leveraged by various EC-O teams. As EC-O’s DevOps engineer, you’ll connect the AKS cluster with Azure Monitor and configure the proper integrations with Grafana and Prometheus. As part of the process, you’ll also update the Terraform files associated with the AKS cluster, create a new module for Azure Monitor, and verify the results with a test application. When you’re done, you’ll have an AKS cluster that uses Azure Monitor for container instances with Prometheus scraping and Grafana integration, as well as valuable hands-on experience.

Project 5 Deploy Apps to an AKS Cluster

The application development teams at EC-O, an e-commerce organization that sells products for outdoor enthusiasts, want to institute a well-defined solution for publishing and deploying their containerized applications (packaged using Helm) to AKS clusters. Their goals are to orchestrate the process of testing and publishing Helm charts to a centralized, private repository and to automate application updates from their Helm charts, from development to staging to production. As E-CO’s DevOps engineer, you’ll use the Azure Container Registry to store the Helm charts and Azure DevOps pipelines to orchestrate the publishing of new versions of a chart and deploy the update to multiple environments. Using Terraform, you’ll set up the AKS cluster, Azure Container Registry, and Azure DevOps pipelines. By the end, you’ll have helped E-CO’s teams achieve their goals—and positioned yourself one step closer to a promotion!

book resources

When you start each of the projects in this series, you'll get full access to the following book for 90 days.

choose your plan


only $41.67 per month
  • five seats for your team
  • access to all Manning books, MEAPs, liveVideos, liveProjects, and audiobooks!
  • choose another free product every time you renew
  • choose twelve free products per year
  • exclusive 50% discount on all purchases
  • Manage Azure Kubernetes Service with Terraform project for free

project author

Ned Bellavance

In his 20+ years as an IT professional, Ned Bellavance has gained extensive experience with Microsoft Azure and Amazon Web Services. A Microsoft MVP since 2017 and a HashiCorp Ambassador since 2020, he’s the founder of Ned in the Cloud, LLC. As a one-man tech juggernaut, he develops courses for the online education platform Pluralsight, runs the Day Two Cloud podcast, and delivers educational content through his YouTube channel and live instruction.

Ned has written several books including HashiCorp Terraform Certified Associate Preparation Guide, HashiCorp Vault Certified Associate Preparation Guide, and Introducing Azure Kubernetes Service. His three guiding principles are: embrace discomfort, fail often, and be kind. You can find out more about Ned and his activities by visiting


These liveProjects are for IT operations professionals and DevOps engineers who would like to automate the deployment and management of Azure-based infrastructure using Terraform. To begin these liveProjects you’ll need to be familiar with the following:

  • Terraform v1.0+
  • Go v1.17+
  • Terratest v0.38+
  • Azure CLI v2.22+
  • Your favorite IDE with Terraform and Go plug-ins
  • Microsoft Azure subscription
  • Logical reasoning and design
  • Terraform (intermediate)
  • Microsoft Azure (basic)
  • Networking (basic)
  • Kubernetes (basic)
  • Go (basic)

you will learn

In this liveProject series, you’ll learn to provision, secure, monitor, and maintain an Azure Kubernetes Service platform.

  • Manage Infrastructure as Code (IaC)
  • Automate IaC with pipelines
  • Validate Infrastructure as Code
  • Deploy Azure Kubernetes Service clusters


You choose the schedule and decide how much time to invest as you build your project.
Project roadmap
Each project is divided into several achievable steps.
Get Help
While within the liveProject platform, get help from other participants and our expert mentors.
Compare with others
For each step, compare your deliverable to the solutions by the author and other participants.
book resources
Get full access to select books for 90 days. Permanent access to excerpts from Manning products are also included, as well as references to other resources.