Skip to content

Commit 552c772

Browse files
Update and rename vmss-deployment-from-a-hardened-linux-image.md to vmss-deployment-from-hardened-linux-image.md
1 parent 56a4d18 commit 552c772

File tree

1 file changed

+30
-30
lines changed

1 file changed

+30
-30
lines changed

articles/confidential-computing/vmss-deployment-from-a-hardened-linux-image.md renamed to articles/confidential-computing/vmss-deployment-from-hardened-linux-image.md

Lines changed: 30 additions & 30 deletions
Original file line numberDiff line numberDiff line change
@@ -57,8 +57,8 @@ Steps to deploy a scale set using VMSS and a hardened image are as follows:
5757
az group create --name myResourceGroup --location eastus
5858
```
5959
60-
> [!NOTE]
61-
> Confidential VMs are not available in all locations. For currently supported locations, see which [VM products are available by Azure region](https://azure.microsoft.com/global-infrastructure/services/?products=virtual-machines).
60+
> [!NOTE]
61+
> Confidential VMs are not available in all locations. For currently supported locations, see which [VM products are available by Azure region](https://azure.microsoft.com/global-infrastructure/services/?products=virtual-machines).
6262
6363
5. Create a Virtual Machine Scale Set.
6464
@@ -68,37 +68,37 @@ Steps to deploy a scale set using VMSS and a hardened image are as follows:
6868
In this case, the username is auto set to azureuser.
6969
For the admin credentials, you will be able to use the credentials that you set from the hardened image while you create the vm.
7070
71-
> [!NOTE]
72-
> For specalized images, [osprofile properties](/azure/virtual-machines/shared-image-galleries) are handled differently than generalized images.
73-
> Using a [load balancer](/azure/load-balancer/load-balancer-overview) is optional but is encouraged for these reasons.
74-
75-
```azurecli-interactive
76-
az vmss create \
77-
--resource-group myResourceGroup \
78-
--name myScaleSet \
79-
--vm-sku "Standard_DC4as_v5" \
80-
--security-type ConfidentialVM \
81-
--os-disk-security-encryption-type DiskwithVMGuestState \
82-
--os-disk-secure-vm-disk-encryption-set "/subscriptions/.../disk-encryption-sets/<des-name>" \
83-
--image "/subscriptions/.../images/<imageName>/versions/<version>" \
84-
--enable-vtpm true \
85-
--enable-secure-boot true \
86-
--vnet-name <virtual-network-name> \
87-
--subnet <subnet-name> \
88-
--lb "/subscriptions/.../loadBalancers/<lb-name>" \
89-
--specialized true \
90-
--instance-count 2 \
91-
--admin-username "azureuser" \
92-
--admin-password ""
93-
```
94-
95-
5. Access the virtual machine scale set from the portal.
71+
> [!NOTE]
72+
> For specalized images, [osprofile properties](/azure/virtual-machines/shared-image-galleries) are handled differently than generalized images.
73+
> Using a [load balancer](/azure/load-balancer/load-balancer-overview) is optional but is encouraged for these reasons.
74+
75+
```azurecli-interactive
76+
az vmss create \
77+
--resource-group myResourceGroup \
78+
--name myScaleSet \
79+
--vm-sku "Standard_DC4as_v5" \
80+
--security-type ConfidentialVM \
81+
--os-disk-security-encryption-type DiskwithVMGuestState \
82+
--os-disk-secure-vm-disk-encryption-set "/subscriptions/.../disk-encryption-sets/<des-name>" \
83+
--image "/subscriptions/.../images/<imageName>/versions/<version>" \
84+
--enable-vtpm true \
85+
--enable-secure-boot true \
86+
--vnet-name <virtual-network-name> \
87+
--subnet <subnet-name> \
88+
--lb "/subscriptions/.../loadBalancers/<lb-name>" \
89+
--specialized true \
90+
--instance-count 2 \
91+
--admin-username "azureuser" \
92+
--admin-password ""
93+
```
94+
95+
6. Access the virtual machine scale set from the portal.
9696
9797
You can access your cvm scale set and use the admin username and password set previously to log in. Please note that if you choose to update the admin credentials, do so directly in the scale set model using the cli.
9898
99-
> [!NOTE]
100-
> If you are looking to deploy cvm scaled scale using the custom hardened image, please note that some features related to auto scaling will be restricted. Will manual scaling rules continue to work as expected, the autoscaling ability will be limited due to the agentless custom image. More details on the restrictions can be found here for the [provisioning agent](/azure/virtual-machines/linux/disable-provisioning). Alternatively, you can navigate to the metrics tab on the azure portal and confirm the same.
101-
> However, you can continue to set up custom rules based on load balancer metrics such as SYN count, SNAT connection count, etc.
99+
> [!NOTE]
100+
> If you are looking to deploy cvm scaled scale using the custom hardened image, please note that some features related to auto scaling will be restricted. Will manual scaling rules continue to work as expected, the autoscaling ability will be limited due to the agentless custom image. More details on the restrictions can be found here for the [provisioning agent](/azure/virtual-machines/linux/disable-provisioning). Alternatively, you can navigate to the metrics tab on the azure portal and confirm the same.
101+
> However, you can continue to set up custom rules based on load balancer metrics such as SYN count, SNAT connection count, etc.
102102
103103
## Next Steps
104104

0 commit comments

Comments
 (0)