kdb Insights Enterprise on Azure Marketplace
kdb Insights Enterprise is available on the Azure Marketplace!
KX Managed App Plan
Resources and infrastructure spin up and the application is deployed within your provided subscription. Leveraging the Azure Managed Application mechanism, KX will have access to the relevant resource groups and will be able to manage the application on your behalf.
Follow the Install Prerequisites to get your system ready before installing kdb Insights Enterprise.
Access kdb Insights Enterprise on Azure Marketplace to start the installation.
kdb Insights Enterprise on Azure Marketplace is deployed as a Managed Application and what is provisioned in your subscription depends on your configuration choices.
The following third party dependencies are installed and used by kdb Insights Enterprise:
- Keycloak - identity & access management
- PostgreSQL - underlying Keycloak database
- Cert Manager - certificate management
- nginx Ingress Controller - ingress, load balancing and routing
The following third party dependency is optional and will only be deployed if you select this in your configuration:
- Rook-Ceph as a distributed storage system.
The following Azure resources are created and deployed during installation:
- Azure Kubernetes Service (AKS) - Kubernetes cluster hosting the kdb Insights Enterprise components
- Azure Container Instances - execute parts of the deployment (they may disappear after a some time)
- Deployment Script - the actual commands executed during the deployment (they may disappear after a some time)
- Azure Storage Account
- used to store the kdb data if no Rook-Ceph is selected during installation
- used internally by kdb Insights Enterprise for audit logging and metrics
- Azure Policies - to help assess compliance of the deployment
- Log Analytics Workspace - allows you to access data from the Azure Monitor Logs store
- Azure Virtual Network - encapsulates all the network traffic that is internal to the deployment
- Public IP address - makes your deployment accessible from your network
- Azure Load Balancer - provides outbound connections for the deployment
- Network interfaces - the interconnection between a virtual machine and a virtual network
- Private Endpoints - allow ingress of traffic from your virtual network to an Azure resource securely
- Private DNS zone - to resolve the private endpoint IP address to the fully qualified domain name (FQDN) of the connection string
- Network security groups - to filter network traffic between Azure resources in an Azure virtual network
The kdb Insights Enterprise helm charts and images are stored in our Azure Container Registry ACR and are all pulled from here at deployment time, except for Keycloak. The CLI will be used to upgrade your application when new versions are available.