You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/aks/use-cvm.md
+41-37Lines changed: 41 additions & 37 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -3,18 +3,19 @@ title: Use Confidential Virtual Machines (CVM) in Azure Kubernetes Service (AKS)
3
3
description: Learn how to create Confidential Virtual Machines (CVM) node pools with Azure Kubernetes Service (AKS)
4
4
ms.topic: article
5
5
ms.custom: ignite-2022
6
-
ms.date: 10/04/2022
6
+
ms.date: 05/08/2023
7
7
---
8
8
9
9
# Use Confidential Virtual Machines (CVM) in Azure Kubernetes Service (AKS) cluster
10
10
11
-
You can use the generally available [confidential VM sizes (DCav5/ECav5)][cvm-announce] to add a node pool to your AKS cluster with CVM. Confidential VMs with AMD SEV-SNP support bring a new set of security features to protect data-in-use with full VM memory encryption. These features enable node pools with CVM to target the migration of highly sensitive container workloads to AKS without any code refactoring while benefiting from the features of AKS. The nodes in a node pool created with CVM use a customized Ubuntu 20.04 image specially configured for CVM. For more details on CVM, see [Confidential VM node pools support on AKS with AMD SEV-SNP confidential VMs][cvm].
11
+
You can use [confidential VM sizes (DCav5/ECav5)][cvm-announce] to add a node pool to your AKS cluster with CVM. Confidential VMs with AMD SEV-SNP support bring a new set of security features to protect data-in-use with full VM memory encryption. These features enable node pools with CVM to target the migration of highly sensitive container workloads to AKS without any code refactoring while benefiting from the features of AKS. The nodes in a node pool created with CVM use a customized Ubuntu 20.04 image specially configured for CVM. For more details on CVM, see [Confidential VM node pools support on AKS with AMD SEV-SNP confidential VMs][cvm].
12
12
13
13
Adding a node pool with CVM to your AKS cluster is currently in preview.
14
14
15
-
16
15
## Before you begin
17
16
17
+
Before you begin, make sure you have the following:
18
+
18
19
- An Azure subscription. If you don't have an Azure subscription, you can create a [free account](https://azure.microsoft.com/free).
- An existing AKS cluster in the *westus*, *eastus*, *westeurope*, or *northeurope* region.
@@ -24,57 +25,57 @@ Adding a node pool with CVM to your AKS cluster is currently in preview.
24
25
25
26
The following limitations apply when adding a node pool with CVM to AKS:
26
27
27
-
- You can't use `--enable-fips-image`, ARM64, or Mariner.
28
+
- You can't use `--enable-fips-image`, ARM64, or Azure Linux.
28
29
- You can't upgrade an existing node pool to use CVM.
29
30
- The [DCasv5 and DCadsv5-series][cvm-subs-dc] or [ECasv5 and ECadsv5-series][cvm-subs-ec] SKUs must be available for your subscription in the region where the cluster is created.
30
31
31
32
## Add a node pool with the CVM to AKS
32
33
33
-
To add a node pool with the CVM to AKS, use `az aks nodepool add`and set `node-vm-size` to `Standard_DCa4_v5`. For example:
34
+
- Add a node pool with CVM to AKS using the [`az aks nodepool add`][az-aks-nodepool-add] command and set the `node-vm-size` to `Standard_DCa4_v5`.
34
35
35
-
```azurecli-interactive
36
-
az aks nodepool add \
37
-
--resource-group myResourceGroup \
38
-
--cluster-name myAKSCluster \
39
-
--name cvmnodepool \
40
-
--node-count 3 \
41
-
--node-vm-size Standard_DC4as_v5
42
-
```
36
+
```azurecli-interactive
37
+
az aks nodepool add \
38
+
--resource-group myResourceGroup \
39
+
--cluster-name myAKSCluster \
40
+
--name cvmnodepool \
41
+
--node-count 3 \
42
+
--node-vm-size Standard_DC4as_v5
43
+
```
43
44
44
45
## Verify the node pool uses CVM
45
46
46
-
To verify a node pool uses CVM, use `az aks nodepool show`and verify the `vmSize` is `Standard_DCa4_v5`. For example:
47
+
- Verify a node pool uses CVM using the [`az aks nodepool show`][az-aks-nodepool-show] command and verify the `vmSize` is `Standard_DCa4_v5`.
47
48
48
-
```azurecli-interactive
49
-
az aks nodepool show \
50
-
--resource-group myResourceGroup \
51
-
--cluster-name myAKSCluster \
52
-
--name cvmnodepool \
53
-
--query 'vmSize'
54
-
```
49
+
```azurecli-interactive
50
+
az aks nodepool show \
51
+
--resource-group myResourceGroup \
52
+
--cluster-name myAKSCluster \
53
+
--name cvmnodepool \
54
+
--query 'vmSize'
55
+
```
55
56
56
-
The following example command and output shows the node pool uses CVM:
57
+
The following example command and output shows the node pool uses CVM:
57
58
58
-
```output
59
-
az aks nodepool show \
60
-
--resource-group myResourceGroup \
61
-
--cluster-name myAKSCluster \
62
-
--name cvmnodepool \
63
-
--query 'vmSize'
59
+
```output
60
+
az aks nodepool show \
61
+
--resource-group myResourceGroup \
62
+
--cluster-name myAKSCluster \
63
+
--name cvmnodepool \
64
+
--query 'vmSize'
64
65
65
-
"Standard_DC4as_v5"
66
-
```
66
+
"Standard_DC4as_v5"
67
+
```
67
68
68
69
## Remove a node pool with CVM from an AKS cluster
69
70
70
-
To remove a node pool with CVM from an AKS cluster, use `az aks nodepool delete`. For example:
71
+
- Remove a node pool with CVM from an AKS cluster using the [`az aks nodepool delete`][az-aks-nodepool-delete] command.
71
72
72
-
```azurecli-interactive
73
-
az aks nodepool delete \
74
-
--resource-group myResourceGroup \
75
-
--cluster-name myAKSCluster \
76
-
--name cvmnodepool
77
-
```
73
+
```azurecli-interactive
74
+
az aks nodepool delete \
75
+
--resource-group myResourceGroup \
76
+
--cluster-name myAKSCluster \
77
+
--name cvmnodepool
78
+
```
78
79
79
80
## Next steps
80
81
@@ -85,3 +86,6 @@ In this article, you learned how to add a node pool with CVM to an AKS cluster.
0 commit comments