rzetelnekursy

🔹 Feature: Sidecar Containers in Azure App Service 🔹 What It Does: App Service now supports running your main application container alongside up to 8 additional companion (sidecar) containers in the same instance. All containers share the same network namespace — they communicate over localhost — and start, stop, and scale together. The pattern: App Service ├── main container: your application ├── sidecar: Redis (in-instance cache) ├── sidecar: OpenTelemetry Collector (metrics/traces exporter) └── sidecar: local AI model (e.g. Phi-4) What Is It Giving You: ✅ Up to 9 Containers Per Instance: 1 main + up to 8 sidecars. Configure via Azure Portal, ARM, Bicep, Terraform, or Azure CLI. ✅ Shared Network Namespace — Localhost Between Containers: Sidecars are addressable from the main container over localhost: — no VNet config or service discovery needed. ✅ Real Use Cases Without Extra Infrastructure: • Local caching (Redis, Memcached) • Observability (OpenTelemetry Collector, Fluentd) • Local AI inference (Phi-4, small LLMs, embeddings) • Envoy / NGINX reverse proxy • Custom auth proxies or credential brokers ✅ Any Container Registry: Docker Hub, Azure Container Registry, or any OCI-compatible registry. Each sidecar has its own image, tag, environment vars, startup command, and port config. ✅ Managed … Sidecar Containers in Azure App ServiceRead more

🔹 Feature: GitHub Copilot Modernization for .NET 🔹 What It Does: A GitHub Copilot agent that runs across Visual Studio, VS Code, GitHub Copilot CLI, and GitHub.com to upgrade legacy .NET projects to modern .NET and migrate them to Azure. What Is It Giving You: ✅ Six Predefined Upgrade Scenarios: .NET version upgrade (to .NET 8/9/10+), SDK-style project conversion, Newtonsoft.Json → System.Text.Json, System.Data.SqlClient → Microsoft.Data.SqlClient, Azure Functions in-process → isolated worker, and Semantic Kernel Agents → Microsoft Agent Framework. Plus 30+ built-in upgrade skills. ✅ Real Cloud-Migration Tasks Out of the Box: Migrate to Azure SQL DB / SQL MI / PostgreSQL with Managed Identity, Azure Blob & File Storage, Microsoft Entra ID (from Windows AD), Azure Key Vault, Azure Service Bus (from MSMQ/RabbitMQ/SQS), Azure Cache for Redis with Managed Identity, OpenTelemetry on Azure, Event Hubs Kafka, Communication Services email — all with industry best practices applied automatically. ✅ Covers Every .NET Project Type That Matters: ASP.NET Core (MVC, Razor Pages, Web API), ASP.NET Web Forms, Blazor, Azure Functions, WPF, Windows Forms, WinUI, .NET MAUI / Xamarin, class libraries, console apps, MSTest / NUnit / xUnit. C# and Visual Basic. Source: .NET Framework, .NET Core 1.x–3.x, .NET 5+ → .NET … GitHub Copilot Modernization for .NETRead more

🔹 Feature: AKS Cost Analysis — Works With Free-Tier AKS 🔹 What It Does: Microsoft’s open-source example exports AKS cost data to Azure Blob Storage as a daily CSV — breaking down costs by both Kubernetes What Is It Giving You: ✅ Cost Visibility for Free-Tier AKS: The built-in AKS cost analysis add-on requires Standard or Premium tier. This open-source export provides the same namespace-level cost breakdown for Free-tier clusters — ideal for dev/test, learning environments, and small workloads. ✅ Daily CSV in Azure Blob: A results.csv file lands in your storage account every day. Plug it into Power BI, Excel, Looker, or your data lake — your FinOps tooling, your choice. ✅ Two Worlds Joined in One File: Traditional Azure Cost Management data (resource group, region, meter, tags) joined with Kubernetes constructs (namespace, deployment, app/team labels, service). The joined view you’ve always wanted. ✅ Multi-Cluster Aggregation: Configure per-cluster data paths but merge into a single result file — consolidate AKS clusters across subscriptions into one dashboard. Multi-tenant chargeback made simple. ✅ Microsoft Entra Workload Identity: Securely authenticate to Azure Storage without connection strings — Zero Trust-friendly out of the box. ✅ Run as a Kubernetes CronJob: Deploy natively in … AKS Cost Analysis — Works With Free-Tier AKSRead more

🔹 Feature: Azure Logic Apps Automation – https://auto.azure.com/ 🔹 What It Does: A managed SaaS experience for building workflows, AI agents, and integrations MWhat Is It Giving You: ✅ Zero-Friction SaaS Onboarding: Compute, model endpoints, knowledge services, execution sandboxes — already there when you log in. No resource groups, no Cosmos DB to deploy, no integrator needed to wire three APIs together. ✅ 1400+ Enterprise Connectors: Office 365, Dynamics, SAP, Salesforce, ServiceNow, on-prem databases through the on-premises data gateway. n8n’s community-built nodes aren’t even in the same league. ✅ Knowledge as a Service (Built-In RAG): Drop in your documents — the platform handles ingestion, chunking, embeddings, retrieval, and vector store. No Pinecone bill, no LangChain pipeline to maintain. Grounded answers, zero plumbing. ✅ Any Model, Anywhere: Plug in frontier (GPT-5, Claude Opus), open-source, fine-tuned, or local models. Never locked in. ✅ Agents as First-Class Workflow Actions: Three integration patterns — agent loop orchestration, Foundry agents, and managed sandbox execution. Agents run in isolated sandboxes on the same canvas as your triggers and connectors. ✅ Expose Workflows as MCP Tools: Turn any of the 1400+ connectors into an MCP tool, OR expose entire workflows as MCP servers callable by any compatible … Azure Logic Apps Automation – https://auto.azure.com/Read more

🔹 Feature: Azure Kubernetes Service (AKS) Cost Analysis — Per-Namespace, Per-Workload Cost Visibility 🔹 What It Does: Built-in AKS add-on (powered by OpenCost) that breaks down cluster spend by namespace, workload, and underlying Azure resources — directly in Azure Cost Management. Available on AKS Standard or Premium tier (not Free). 💰📊 What Is It Giving You: ✅ Per-Namespace Cost Allocation: Show each namespace’s share of VM, disk, load balancer, and public IP spend — reconciled against your real Azure invoice. Chargeback / showback becomes a portal click instead of a spreadsheet exercise. ✅ Idle, Service, System & Unallocated Breakdown: Idle = available but unused capacity. Service = AKS service charges (Uptime SLA, Defender for Containers, etc.). System = capacity reserved for kubelet and container runtime. Unallocated = resources that couldn’t be tied to a namespace. Stop arguing about where the money went. ✅ Powered by OpenCost: CNCF Incubating project — open methodology, vendor-neutral attribution model. Microsoft just operationalized it inside Azure. ✅ Native Azure Cost Management Integration: Cost data lands in the same Cost Management views (Kubernetes namespaces and Kubernetes assets) as the rest of your Azure spend. One pane of glass for FinOps. ✅ One Flag to Enable: –enable-cost-analysis … Azure Kubernetes Service (AKS) Cost AnalysisRead more

🔹 Feature: AKS on Bare Metal — Run Real Kubernetes Directly on Edge Hardware, No Virtualization 🔹 What It Does: Azure Kubernetes Service on Azure Local (even old devices): no hypervisor, quick setup, ideal for edge hardware. What Is It Giving You: ✅ No Virtualization, No Hypervisor: Kubernetes runs directly on the hardware. Every CPU cycle and byte of memory goes to your workloads — not to a virtualization layer. ✅ Plug & Go Install: Plug a USB drive with an OS image from the Azure portal into the device, power on, wait a couple of minutes, remove the drive. That’s the entire on-site step. ✅ Built for Edge — Retail Back Rooms, Factory Floors, QSRs, Branch Offices: Small-form-factor hardware, low power, often ruggedized. Great fit for existing devices already deployed at the edge. ✅ Survives Intermittent Connectivity: The Kubernetes control plane runs locally on the device. When the link to Azure drops, workloads keep running normally. ✅ Same Azure Management Plane: Azure portal, ARM templates, Bicep, Azure Policy, Azure Monitor, GitOps — same tools you use for AKS in the cloud. Auto Arc-connected from day one. ✅ One Consistent Kubernetes: Same APIs, same lifecycle, same tooling across cloud, hybrid, … AKS on Bare Metal — Run Real Kubernetes Directly on Edge Hardware, No VirtualizationRead more

🔹 Feature: winapp CLI 🔹 What It Does: A CLI tool for Windows app packaging, identity, and platform integration. Works with any framework — .NET, Electron, C++, Rust, Flutter, Tauri. What Is It Giving You: ✅ One CLI, Any Framework: winapp init, pack, sign, cert, manifest, run, create-debug-identity — same commands whether you’re building with .NET, WPF, Win32 C++, Electron, Rust, Tauri, or Flutter. ✅ 12 Manual Steps → 4 Commands: SDK downloads, header generation, manifests, certificates, MSIX packaging — collapsed into a handful of commands. The README literally shows the before/after. ✅ Unlocks Windows-Native Features for Cross-Platform Apps: With package identity, your app gets interactive native notifications, Explorer / Taskbar / Share-sheet integration, protocol handlers (yourapp://), web-to-app linking, on-device AI APIs (local LLM, text/image AI), file type associations, background tasks, startup tasks, app services, and clean install/uninstall + auto-updates. ✅ Install Where You Already Are: WinGet (winget install Microsoft.winappcli), NPM (npm install @microsoft/winappcli –save-dev) for Electron, NuGet, or GitHub Actions / Azure DevOps via setup-WinAppCli for CI/CD pipelines. ✅ VS Code Extension: Press F5 to launch your app with package identity and auto-attach a debugger. No more leaving the editor to test Windows-only features. ✅ AI-Agent Ready: GitHub Copilot … winapp CLI — Single Command-Line Tool for Windows App Packaging, Identity, and Platform IntegrationRead more

🔹 Feature: Windows 365 Disaster Recovery Plus — Real DR for Cloud PCs 🔹 What It Does: Keeps three OS disk copies in different geographies and reserves compute capacity, ensuring successful restore during regional outages. ⚠️ The Compute-Shortage Problem — Microsoft Says So Directly: Standard point-in-time restore and cross-region DR “depend on the target region/zone capacity” (official docs). Translation: during a true outage, thousands of Cloud PCs attempt to fail over simultaneously, the secondary region can run out of compute — leaving your restore to fail. Microsoft explicitly states DR Plus exists as “a secondary opportunity to restore the Cloud PC to the reserved capacity of the alternate region” when point-in-time restore fails due to capacity constraints. What Is It Giving You: ✅ Capacity PRE-RESERVED in the Alternate Region: DR Plus allocates VM resources at configuration time — not at failover. The difference between hope it works and know it works. ✅ Three OS Disk Copies in Another Geography: Initial full copy takes up to 3 days; subsequent incremental copies take minutes. ✅ Real, Published Targets: RPO < 61 minutes, RTO < 31 minutes — numbers your compliance team can actually include in a runbook. ✅ Temporary Cloud PC During … Windows 365 Disaster Recovery Plus — Real DR for Cloud PCsRead more

🔹 Feature: Microsoft Sovereign Private Cloud — A Customer-Operated Cloud Built on Azure Local 🔹 What It Does: A consistent Microsoft cloud experience that runs entirely in your data center — built on Azure Local — for sovereign, regulated, and disconnected environments. What It Is Giving You — Four Scenarios on One Foundation ✅ Azure Local — Infrastructure Foundation: Provides compute, storage, networking, and lifecycle management. Run workloads as VMs or on AKS Arc-enabled clusters. Supports connected hybrid management or fully disconnected, air-gapped deployments — no Microsoft data center required, even for the control plane. ✅ Microsoft 365 Local — Productivity Suite: Run Exchange Server, SharePoint Server, and Skype for Business Server on Azure Local infrastructure that you own and control. Unified management via an Azure-consistent control plane. Operates in hybrid or fully disconnected modes, keeping all email and collaboration data locally. ✅ GitHub Enterprise Local (Preview) — Developer Platform: Deploy GitHub Enterprise Server as a prebuilt virtual appliance on Azure Local. All repositories, metadata, and CI/CD execution remain on-premises, delivering a GitHub-consistent developer experience for government, defense, finance, healthcare, and critical infrastructure. ✅ AI Suite — Foundry Local on Azure Local: Bring AI to your data, not the other … Microsoft Sovereign Private Cloud — A Customer-Operated Cloud Built on Azure LocalRead more

🔹 Feature: Azure ExpressRoute Scalable Gateway (ErGwScale) 🔹 What It Does: ExpressRoute virtual network gateway SKU that scales up to 40 Gbps and autoscales between min/max scale units based on actual utilization. What Is It Giving You: ✅ Up to 40 Gbps Per Gateway: 8M packets/sec, 280k connections/sec, 50k max VM connections, 4M flows. ✅ True Autoscaling: Set min and max scale units (each ~1 Gbps). The platform scales up and down between them — no manual SKU resize, no downtime. ✅ Fixed Scaling When You Need Predictability: Set min = max for deterministic capacity — useful for Private Link traffic or regulated workloads. ✅ No-Downtime Upgrade from ErGw1Az / 2Az / 3Az: Direct upgrade via portal or PowerShell — gateway stays available during the up-to-2-hour upgrade. ✅ Migration Tool for Legacy SKUs: Standard, High Performance, and Ultra Performance migrate via the official ExpressRoute gateway migration tool. ✅ Cap the Max for Cost Control: One knob (max scale unit) caps your worst-case bill — elasticity without surprise invoices. For hybrid enterprises, banks, and heavy on-prem-to-Azure data flows — this is the gateway SKU you’ve been waiting for. 🚀 🌐 https://learn.microsoft.com/en-us/azure/expressroute/scalable-gateway

🔹 Feature: Azure Private Link Service Direct Connect — Bring On-Premises and Multi-Cloud Servers Into Private Link 🔹 What It Does: Allows you to expose your on-premises servers — or servers running in any other cloud — via Azure Private Link. What Is It Giving You: ✅ Private Link for On-Premises Servers: Expose a database, ERP, mainframe, or legacy line-of-business app sitting in your own data center as a Private Link service — consumed by customers, partners, or other tenants through a standard Private Endpoint. No public IP, no internet egress, no Load Balancer in front of the on-prem box. ✅ Private Link for Servers in OTHER Clouds: Privately routable destination = any IP reachable from your Azure VNet via ExpressRoute, S2S VPN, or peering. That includes AWS, GCP, OCI, or any third-party SaaS hosted outside Azure. Multi-cloud Private Link with one consistent consumption model. ✅ Bypass the Load Balancer Requirement: Direct IP-based routing — no Standard Load Balancer needed in the design. Cleaner architecture, fewer components, lower cost. ✅ Custom & Legacy App Friendly: Perfect for applications requiring direct static-IP connections (databases, custom protocols, legacy stacks) that never worked well behind a load balancer forwarder. ✅ User-Defined Routing (UDR) … Azure Private Link Service Direct Connect — Bring On-Premises and Multi-Cloud Servers Into Private LinkRead more

🔹 Feature: Azure Key Vault — Hybrid & On-Premises Secret Management 🔹 What It Does: Azure Key Vault supports on-premises systems with centralized secrets, certificates, and keys, offering hybrid identity, encryption, and security features. What Is It Giving You — Real On-Premises Scenarios: ✅ Azure Local / Azure Stack HCI with BitLocker CSVs: Azure Key Vault stores and manages the encryption keys protecting BitLocker-encrypted Cluster Shared Volumes. Keys are centrally controlled, rotated, and audited in Azure — while the data itself stays on-premises. Lose a node, recover the key. Compliance teams get one place to prove key custody. ✅ On-Premises AKS / Kubernetes: Key Vault serves as the centralized secret store for application secrets, certificates, connection strings, and API keys. Pods pull secrets dynamically through the Secrets Store CSI Driver — no plaintext secrets in Kubernetes Secrets, Git, or container images. Rotate in Key Vault, pods use the new value automatically. ✅ AKS Enabled by Azure Arc (On-Prem Kubernetes): Extend the same pattern to Kubernetes clusters running on your hardware under Azure Arc. Workloads consume secrets and certificates directly from Key Vault while central governance and access control span cloud and on-prem clusters. ✅ SQL Server On-Premises with TDE: Azure … Azure Key Vault — Hybrid & On-Premises Secret ManagementRead more

🔹 Feature: VS Code Browser Agent Tools 🔹 What It Does: Browser agent tools let GitHub Copilot in VS Code drive the integrated browser autonomously — open pages, click buttons, type into fields, take screenshots, run Playwright code, and read console errors. The agent builds your app, opens it in the browser, tests every interaction, discovers bugs, fixes them, and verifies the fix. A complete closed development loop, no human in the test driver’s seat. 🌐🤖 What Is It Giving You: ✅ Full Closed-Loop Dev Cycle: Build → run → test → identify issues → fix → verify, all by the agent. You watch instead of click. ✅ Real Browser Automation: openBrowserPage, navigatePage, clickElement, hoverElement, dragElement, typeInPage, handleDialog, screenshotPage, readPage — plus runPlaywrightCode for any custom interaction you can write. ✅ Visual + Console Debugging: Agent inspects rendered pages, reads console errors, and analyzes screenshots — catches bugs that unit tests miss. ✅ Isolated Sessions by Default: Pages opened by the agent run in private, in-memory browser sessions — no cookies or storage shared with your normal browsing. Sandboxed by design. ✅ Share a Real Page When Needed: “Share with Agent” lets you hand the agent a logged-in browser tab … VS Code Browser Agent ToolsRead more

🔹 Feature: Azure Migrate for VMware → Azure Local — Move Off VMware Without Going All-In on Public Cloud 🔹 What It Does: Migrate VMware VMs directly to your on-premises Azure Local instance using the same Azure Migrate hub you’d use for cloud migrations — orchestrated entirely from the Azure portal. Source disks and data stay on-prem the whole time (only metadata and replication state touch Azure Storage), no agents on the source VMs, and minimal downtime. The pragmatic exit from Broadcom-era VMware licensing — stay on Microsoft-supported hyperconverged infrastructure, keep your data where it is. 🔄🖥️ What Is It Giving You: ✅ Agentless Source Discovery: No agents to install on each VMware VM before migration. Deploy a source appliance to the VMware cluster — it discovers everything for you. ✅ Azure Portal as Single Control Plane: Start, run, and track the entire migration from the Azure Migrate project in the portal. One place to see status across hundreds of VMs. ✅ Data Stays Local — Truly: VM disks and data flow directly from on-prem VMware to on-prem Azure Local. Azure Storage only holds metadata and replication state. Big for regulated workloads where bulk data exiting the data center is … Azure Migrate for VMware → Azure LocalRead more

🔹 Feature: GitHub Sandboxes 🔹 What It Does: GitHub Sandbox provides fast, cheap, isolated, and resumable cloud microVM environments so Copilot can safely run, test, and iterate on code beyond the developer’s local machine. Available alongside local sandboxes — together, they give Copilot a safe place to execute commands, interact with your code and tools, and run agentic workflows without ever touching your host. What Is It Giving You: ✅ MicroVM-Level Isolation in the Cloud: Each Copilot session gets its own ephemeral cloud microVM with hypervisor-grade boundaries. Agentic workflows can install packages, modify files, build containers, and run services — host machine and other sessions stay untouched. ✅ Fast & Cheap to Spin Up: Lightweight microVMs start in seconds, so agentic loops aren’t bottlenecked by environment setup. Pay only for what you use. ✅ Resumable Sessions: Pause an agent run, come back later — the sandbox picks up where it left off. Long-running or interrupted tasks don’t restart from zero. ✅ Local Sandbox Companion: Standard Copilot seat includes a local sandbox built on Microsoft MXC technology — consistent isolation across macOS, Linux, and Windows. Enable with /sandbox enable in any Copilot session. ✅ Built-In Identity, Governance & Policy: Consistent enterprise … GitHub SandboxesRead more

🔹 Feature: Generative AI for Beginners .NET — Free Microsoft Course 🔹 What It Does: Five hands-on lessons from Microsoft teaching .NET developers how to actually build Generative AI applications — not just read theory. Short videos, fully working C# code samples, GitHub Codespaces-ready setup, and coverage from your first chat completion to multi-agent systems with the Microsoft Agent Framework. Free, MIT-licensed, 2.5k+ stars and counting. What Is It Giving You: ✅ Practical, Not Theoretical: Short 5–10 minute videos, complete runnable .NET code, step-by-step guidance. Live coding over slides. ✅ Multi-Backend Setup: Azure OpenAI / Microsoft Foundry for production-grade samples, OR Ollama for local model hosting on your own hardware. ✅ Microsoft Agent Framework Samples (RC): 25+ samples covering console apps, web chat, multi-agent workflows, and Foundry integration. Plus dedicated Claude (Haiku/Sonnet/Opus) integration samples via Microsoft Foundry — including Blazor web chat. web chat. ✅ Zero Friction Setup: One PowerShell script (./setup.ps1) deploys Azure OpenAI + embeddings, configures .NET User Secrets, and you’re coding. Cleanup script included. ✅ Available in 8 Languages: Chinese (Simplified & Traditional), Japanese, Korean, Spanish, German, French, Portuguese — plus English. For every .NET dev tired of generic “what is an LLM” posts and ready to … Generative AI for Beginners .NET — Free Microsoft CourseRead more