Azure on Patoune-IT

Connecting to an Azure database without direct access using socat and kubectl port-forward

Wed, 27 May 2026 10:00:00 +0200

In professional environments, Azure databases (PostgreSQL, MySQL, SQL Server…) are often exposed exclusively via a Private Endpoint: they are only reachable within the Azure private network, with no public IP. The result: from your development workstation, it is impossible to connect directly using a client like DBeaver or psql.

However, the AKS cluster (Azure Kubernetes Service) running in the same VNet does have access. This guide explains how to leverage that fact to create a secure tunnel to the database, without modifying any network rules or opening a single public port.

Managing Azure Policies at Scale: A Terraform and azapi Approach

Tue, 28 Apr 2026 10:00:00 +0200

How to manage Azure Policies at scale with Terraform and azapi: versioned catalog per service, override management, DoNotEnforce strategy and CI/CD pipeline.

Azure Private DNS and AKS: resolving Private Endpoints from the cluster

Tue, 11 Feb 2025 10:00:00 +0200

Private DNS zones, Virtual Network Links, split-horizon DNS, and a concrete PostgreSQL Flexible Server example accessible from AKS.

Azure Policy: reading Activity Logs to diagnose a Deny

Tue, 10 Dec 2024 10:00:00 +0200

How to filter Activity Logs on Microsoft.Authorization to identify which assignment blocked which resource, and why.

Azure Resource Graph: auditing resources and policies with KQL

Tue, 05 Nov 2024 10:00:00 +0200

KQL queries for Azure Resource Graph: find non-compliant resources, audit policies, and go beyond the limited views of the Azure portal.

Azure Policy: customizing the Deny error message

Tue, 14 May 2024 10:00:00 +0200

How to define a clear and actionable error message in an Azure Policy Deny to guide the user instead of blocking them without explanation.

Introducing Microsoft Retina

Mon, 25 Mar 2024 23:03:19 +0100

Discovering Microsoft Retina, an open-source network monitoring tool for AKS: CLI and CRD capture modes, Basic and Advanced metrics pushed to Prometheus.