The development team of Nordlicht Reisen GmbH, a fictional travel agency, has packaged the offers service in Linux containers (assumption of the exercise): a separate service next to the portal that the portal and partners call for offers, with the data from lesson 2.3 of this course. The portal itself stays on App Service (lessons 3.3 and 4.7); this lesson concerns only this service. Now the question is where these containers run: on Container Apps, on AKS, on App Service or on Container Instances. The team also needs a registry for the images, and it is to be reachable only over the private network. This lesson teaches the choice, not the setup.
Prior knowledge. You set up a registry, Container Instances and Container Apps in "AZ-104, lesson 3.6," and App Service in "AZ-104, lessons 3.7 and 3.8." Background work in Container Apps is shown in "K3, lesson 3.5.7," clusters with Orleans in Container Apps in "K4, lesson 4.5.10," and Dapr on Container Apps in "K4, lesson 4.12.6." The question "Container Apps or AKS" is answered at length by the elective module W1 for the Kladde: "W1, lesson W1.1.1" creates the checklist with evidence, and "W1, lesson W1.2.3" sets up AKS. Zone redundancy of the container services is covered in lesson 3.3 of this course. None of that is repeated here; this lesson asks what to recommend.
The requirement
The requirements sheet uses the template from lesson 0.2 and the starting position G-01 to G-10. All numbers are assumptions of the exercise.
| No. | Requirement | Type | Measure | Weight | Source |
|---|---|---|---|---|---|
| 4.3-01 | On campaign days the offers service grows to ten times the load without manual action (G-09). | Q | normal 3 replicas, peak at most 30; assumption | Must | Sales |
| 4.3-02 | The operations team has no experience with Kubernetes. | R | assumption | Must | Operations |
| 4.3-03 | Images are stored in a private registry that is reachable only over the private network. | R | no public address of the registry; assumption | Must | Security |
| 4.3-04 | The registry survives the failure of a zone. | Q | zone redundancy in germanywestcentral (G-08) |
Must | Operations |
| 4.3-05 | Images can also be pulled from the second region (lesson 3.2 of this course). | Q | westeurope; assumption |
Should | Operations |
| 4.3-06 | Between the offers service and the payment adapter (G-07), all traffic is forbidden unless it is allowed. | Q | network policy "deny unless allowed"; assumption | Should | Security |
| 4.3-07 | All containers run in the EU (G-08). | R | germanywestcentral |
Must | Data protection |
Cost frame. The ranking of the starting position applies: cost goes down before operating convenience, but not before availability at the load peak. Cost drivers are listed below; amounts are on the pricing pages.