You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/confidential-computing/confidential-nodes-aks-get-started.md
+6-7Lines changed: 6 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -5,7 +5,7 @@ author: agowdamsft
5
5
ms.service: container-service
6
6
ms.subservice: confidential-computing
7
7
ms.topic: quickstart
8
-
ms.date: 03/18/2020
8
+
ms.date: 04/08/2021
9
9
ms.author: amgowda
10
10
ms.custom: contentperf-fy21q3
11
11
---
@@ -20,9 +20,8 @@ Features of confidential computing nodes include:
20
20
21
21
- Linux worker nodes supporting Linux containers.
22
22
- Generation 2 virtual machine (VM) with Ubuntu 18.04 VM nodes.
23
-
- Intel SGX-based CPU with Encrypted Page Cache Memory (EPC). For more information, see [Frequently asked questions for Azure confidential computing](./faq.md).
24
-
- Support for Kubernetes version 1.16+.
25
-
- Intel SGX DCAP Driver preinstalled on the AKS nodes. For more information, see [Frequently asked questions for Azure confidential computing](./faq.md).
23
+
- Intel SGX capable CPU to help run your containers in confidentiality protected enclave leveraging Encrypted Page Cache Memory (EPC). For more information, see [Frequently asked questions for Azure confidential computing](./faq.md).
24
+
- Intel SGX DCAP Driver preinstalled on the confidential computing nodes. For more information, see [Frequently asked questions for Azure confidential computing](./faq.md).
26
25
27
26
> [!NOTE]
28
27
> DCsv2 VMs use specialized hardware that's subject to higher pricing and region availability. For more information, see the [available SKUs and supported regions](virtual-machine-solutions.md).
@@ -160,7 +159,7 @@ spec:
160
159
image: oeciteam/sgx-test:1.0
161
160
resources:
162
161
limits:
163
-
kubernetes.azure.com/sgx_epc_mem_in_MiB: 5# This limit will automatically place the job into a confidential computing node. Alternatively, you can target deployment to node pools
162
+
sgx.intel.com/epc: 5Mi# This limit will automatically place the job into a confidential computing node and mount the required driver volumes. Alternatively, you can target deployment to node pools with node selector.
164
163
restartPolicy: Never
165
164
backoffLimit: 0
166
165
```
@@ -201,7 +200,7 @@ Enclave called into host to print: Hello World!
201
200
To remove the confidential computing node pool that you created in this quickstart, use the following command:
202
201
203
202
```azurecli-interactive
204
-
az aks nodepool delete --cluster-name myAKSCluster --name myNodePoolName --resource-group myResourceGroup
203
+
az aks nodepool delete --cluster-name myAKSCluster --name confcompool1 --resource-group myResourceGroup
205
204
```
206
205
207
206
To delete the AKS cluster, use the following command:
@@ -219,4 +218,4 @@ az aks delete --resource-group myResourceGroup --name myAKSCluster
0 commit comments