You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/machine-learning/how-to-secure-kubernetes-inferencing-environment.md
+3-3Lines changed: 3 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -7,15 +7,15 @@ ms.author: larryfr
7
7
ms.reviewer: bozhlin
8
8
ms.service: azure-machine-learning
9
9
ms.subservice: core
10
-
ms.date: 08/31/2022
10
+
ms.date: 02/06/2025
11
11
ms.topic: how-to
12
12
ms.custom: build-spring-2022, cliv2, sdkv2
13
13
# Customer intent: I would like to have machine learning with all private IP only
14
14
---
15
15
16
16
# Secure Azure Kubernetes Service inferencing environment
17
17
18
-
If you have an Azure Kubernetes (AKS) cluster behind of VNet, you would need to secure Azure Machine Learning workspace resources and a compute environment using the same or peered VNet. In this article, you'll learn:
18
+
If you have an Azure Kubernetes (AKS) cluster behind of VNet, you would need to secure Azure Machine Learning workspace resources and a compute environment using the same or peered VNet. In this article, you learn:
19
19
* What is a secure AKS inferencing environment
20
20
* How to configure a secure AKS inferencing environment
21
21
@@ -53,7 +53,7 @@ After you have VNet information for AKS cluster and if you already have workspac
53
53
* If you have other storage that is used by your Azure Machine Learning workloads, add a new private endpoint for that storage. The private endpoint should be in the same or peered VNet as AKS cluster and have private DNS zone integration enabled.
54
54
* Add a new private endpoint to your workspace. This private endpoint should be in the same or peered VNet as your AKS cluster and have private DNS zone integration enabled.
55
55
56
-
If you have AKS cluster ready but don't have workspace created yet, you can use AKS cluster VNet when creating the workspace. Use the AKS cluster VNet information when following the [create secure workspace](./tutorial-create-secure-workspace.md) tutorial. Once the workspace has been created, add a new private endpoint to your workspace as the last step. For all the above steps, it's important to ensure that all private endpoints should exist in the same AKS cluster VNet and have private DNS zone integration enabled.
56
+
If you have AKS cluster ready but don't have workspace created yet, you can use AKS cluster VNet when creating the workspace. Use the AKS cluster VNet information when following the [create secure workspace](./tutorial-create-secure-workspace.md) tutorial. Once the workspace is created, add a new private endpoint to your workspace as the last step. For all the above steps, it's important to ensure that all private endpoints should exist in the same AKS cluster VNet and have private DNS zone integration enabled.
57
57
58
58
Special notes for configuring a secure AKS inferencing environment:
59
59
* Use system-assigned managed identity when creating workspace, as storage account with private endpoint only allows access with system-assigned managed identity.
0 commit comments