1# AKS - Bicep Patterns
2 
3## Cluster Resource
4 
5```bicep
6resource aks 'Microsoft.ContainerService/managedClusters@2023-07-01' = {
7  name: '${resourcePrefix}-aks-${uniqueHash}'
8  location: location
9  identity: {
10    type: 'SystemAssigned'
11  }
12  properties: {
13    dnsPrefix: '${resourcePrefix}-aks'
14    kubernetesVersion: '1.28'
15    agentPoolProfiles: [
16      {
17        name: 'default'
18        count: 3
19        vmSize: 'Standard_DS2_v2'
20        mode: 'System'
21        osType: 'Linux'
22        enableAutoScaling: true
23        minCount: 1
24        maxCount: 5
25      }
26    ]
27    networkProfile: {
28      networkPlugin: 'azure'
29      serviceCidr: '10.0.0.0/16'
30      dnsServiceIP: '10.0.0.10'
31    }
32  }
33}
34```
35 
36## ACR Pull Role Assignment
37 
38```bicep
39resource acrPullRole 'Microsoft.Authorization/roleAssignments@2022-04-01' = {
40  name: guid(aks.id, containerRegistry.id, 'acrpull')
41  scope: containerRegistry
42  properties: {
43    roleDefinitionId: subscriptionResourceId('Microsoft.Authorization/roleDefinitions', '7f951dda-4ed3-4680-a7ca-43fe172d538d')
44    principalId: aks.properties.identityProfile.kubeletidentity.objectId
45    principalType: 'ServicePrincipal'
46  }
47}
48```
49 
50## Node Pool Configuration
51 
52### System Pool (Required)
53 
54```bicep
55{
56  name: 'system'
57  count: 3
58  vmSize: 'Standard_DS2_v2'
59  mode: 'System'
60  osType: 'Linux'
61}
62```
63 
64### User Pool (Workloads)
65 
66```bicep
67{
68  name: 'workload'
69  count: 2
70  vmSize: 'Standard_DS4_v2'
71  mode: 'User'
72  osType: 'Linux'
73  enableAutoScaling: true
74  minCount: 1
75  maxCount: 10
76}
77```
78 
79## Workload Identity
80 
81```bicep
82properties: {
83  oidcIssuerProfile: {
84    enabled: true
85  }
86  securityProfile: {
87    workloadIdentity: {
88      enabled: true
89    }
90  }
91}
92```
93