Azure Container Marketplace (Fleet AKS)

Deploy Blekline NHIM sidecar on managed AKS via Azure Marketplace Container offer.

View as Markdown

Target: a Kubernetes Container offer for platform teams who must install third-party software from Azure Marketplace onto managed AKS. The offer is prepared (CNAB + operator runbook) but not published in Partner Center yet.

Two-step buyer path (when live)

  1. Entitlement — Purchase Fleet SaaS on Azure Marketplace (or accept an Enterprise private offer). Activate on the landing page.
  2. Deploy — Install the Container offer on your AKS cluster (or use Helm from K8s fleet deploy).

Billing and MACC accrual follow the SaaS subscription (portal checkout). The Container offer deploys software into your subscription.

What gets deployed

  • NHIM sidecar (blekline-ingress Helm chart)
  • ClusterIP :8787never expose on public Ingress
  • Default enforcement stage: audit (pilot-safe)

Honesty

  • Production masking runs in-cluster — not hosted /api/mask.
  • Container deploy does not replace Fleet SaaS entitlement unless your contract specifies BYOL-only pricing.
  • Optional eBPF kernel plane (Enterprise R4) is a separate DaemonSet — see eBPF kernel plane.

Operators: private runbook docs/enterprise-private/AZURE_CONTAINER_OFFER_OPERATOR_GUIDE.md.