You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/machine-learning/how-to-secure-kubernetes-inferencing-environment.md
+5-5Lines changed: 5 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -7,15 +7,15 @@ ms.author: larryfr
7
7
ms.reviewer: bozhlin
8
8
ms.service: azure-machine-learning
9
9
ms.subservice: core
10
-
ms.date: 08/31/2022
10
+
ms.date: 02/06/2025
11
11
ms.topic: how-to
12
12
ms.custom: build-spring-2022, cliv2, sdkv2
13
13
# Customer intent: I would like to have machine learning with all private IP only
14
14
---
15
15
16
16
# Secure Azure Kubernetes Service inferencing environment
17
17
18
-
If you have an Azure Kubernetes (AKS) cluster behind of VNet, you would need to secure Azure Machine Learning workspace resources and a compute environment using the same or peered VNet. In this article, you'll learn:
18
+
If you have an Azure Kubernetes (AKS) cluster behind of VNet, you would need to secure Azure Machine Learning workspace resources and a compute environment using the same or peered VNet. In this article, you learn:
19
19
* What is a secure AKS inferencing environment
20
20
* How to configure a secure AKS inferencing environment
21
21
@@ -53,7 +53,7 @@ After you have VNet information for AKS cluster and if you already have workspac
53
53
* If you have other storage that is used by your Azure Machine Learning workloads, add a new private endpoint for that storage. The private endpoint should be in the same or peered VNet as AKS cluster and have private DNS zone integration enabled.
54
54
* Add a new private endpoint to your workspace. This private endpoint should be in the same or peered VNet as your AKS cluster and have private DNS zone integration enabled.
55
55
56
-
If you have AKS cluster ready but don't have workspace created yet, you can use AKS cluster VNet when creating the workspace. Use the AKS cluster VNet information when following the [create secure workspace](./tutorial-create-secure-workspace.md) tutorial. Once the workspace has been created, add a new private endpoint to your workspace as the last step. For all the above steps, it's important to ensure that all private endpoints should exist in the same AKS cluster VNet and have private DNS zone integration enabled.
56
+
If you have AKS cluster ready but don't have workspace created yet, you can use AKS cluster VNet when creating the workspace. Use the AKS cluster VNet information when following the [create secure workspace](./tutorial-create-secure-workspace.md) tutorial. Once the workspace is created, add a new private endpoint to your workspace as the last step. For all the above steps, it's important to ensure that all private endpoints should exist in the same AKS cluster VNet and have private DNS zone integration enabled.
57
57
58
58
Special notes for configuring a secure AKS inferencing environment:
59
59
* Use system-assigned managed identity when creating workspace, as storage account with private endpoint only allows access with system-assigned managed identity.
@@ -62,15 +62,15 @@ Special notes for configuring a secure AKS inferencing environment:
62
62
* If your workspace is also behind a VNet, follow the instructions in [securely connect to your workspace](./how-to-secure-workspace-vnet.md#securely-connect-to-your-workspace) to access the workspace.
63
63
* For storage account private endpoint, make sure to enable `Allow Azure services on the trusted services list to access this storage account`.
64
64
65
-
>[!Note]
65
+
>[!NOTE]
66
66
>
67
67
> If your AKS that is behind a VNet has been stopped and **restarted**, you need to:
68
68
> 1. First, follow the steps in [Stop and start an Azure Kubernetes Service (AKS) cluster](/azure/aks/start-stop-cluster) to delete and recreate a private endpoint linked to this cluster.
69
69
> 1. Then, reattach the Kubernetes computes attached from this AKS in your workspace.
70
70
>
71
71
> Otherwise, the creation, update, and deletion of endpoints/deployments to this AKS cluster will fail.
72
72
73
-
## Next steps
73
+
## Related content
74
74
75
75
This article is part of a series on securing an Azure Machine Learning workflow. See the other articles in this series:
0 commit comments