You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/confidential-computing/confidential-nodes-aks-get-started.md
+10-7Lines changed: 10 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -24,9 +24,9 @@ In this quickstart, you'll learn how to deploy an Azure Kubernetes Service (AKS)
24
24
1. Have an active Azure Subscription. If you don't have an Azure subscription, [create a free account](https://azure.microsoft.com/free/?WT.mc_id=A261C142F) before you begin
25
25
1. Have the Azure CLI version 2.0.64 or later installed and configured on your deployment machine (Run `az --version` to find the version. If you need to install or upgrade, see [Install Azure CLI](https://docs.microsoft.com/azure/container-registry/container-registry-get-started-azure-cli)
26
26
1.[aks-preview extension](https://github.com/Azure/azure-cli-extensions/tree/master/src/aks-preview) minimum version 0.4.62
27
-
1. Have a minimum of six DCSv2 cores available in your subscription for use. By default, the VM cores quota for the confidential computing per Azure subscription 8 cores. If you plan to provision a cluster that requires more than 8 cores, follow [these](https://docs.microsoft.com/azure/azure-portal/supportability/per-vm-quota-requests) instructions to raise a quota increase ticket
27
+
1. Have a minimum of six **DC<x>s-v2** cores available in your subscription for use. By default, the VM cores quota for the confidential computing per Azure subscription 8 cores. If you plan to provision a cluster that requires more than 8 cores, follow [these](https://docs.microsoft.com/azure/azure-portal/supportability/per-vm-quota-requests) instructions to raise a quota increase ticket
28
28
29
-
### Confidential computing node features
29
+
### Confidential computing node features (DC<x>s-v2)
30
30
31
31
1. Linux Worker Nodes supporting Linux Containers Only
32
32
1. Ubuntu Generation 2 18.04 Virtual Machines
@@ -89,14 +89,14 @@ az aks create \
89
89
--vm-set-type VirtualMachineScaleSets \
90
90
--aks-custom-headers usegen2vm=true
91
91
```
92
-
The above command should provision a new AKS cluster with DCSv2 node pools and automatically install two daemon sets - ([SGX Device Plugin](confidential-nodes-aks-overview.md#sgx-plugin) & [SGX Quote Helper](confidential-nodes-aks-overview.md#sgx-quote))
92
+
The above command should provision a new AKS cluster with **DC<x>s-v2** node pools and automatically install two daemon sets - ([SGX Device Plugin](confidential-nodes-aks-overview.md#sgx-plugin) & [SGX Quote Helper](confidential-nodes-aks-overview.md#sgx-quote))
93
93
94
94
Get the credentials for your AKS cluster using the az aks get-credentials command:
95
95
96
96
```azurecli-interactive
97
97
az aks get-credentials --resource-group myResourceGroup --name myAKSCluster
98
98
```
99
-
Verify the nodes are created properly and the SGX-related daemon sets are running on DCSv2 node pools using kubectl get pods & nodes command as shown below:
99
+
Verify the nodes are created properly and the SGX-related daemon sets are running on **DC<x>s-v2** node pools using kubectl get pods & nodes command as shown below:
100
100
101
101
```console
102
102
$ kubectl get pods --all-namespaces
@@ -125,9 +125,12 @@ First, lets enable the confidential computing-related AKS add-ons on the existin
125
125
```azurecli-interactive
126
126
az aks enable-addons --addons confcom --name MyManagedCluster --resource-group MyResourceGroup
127
127
```
128
-
Now add a DCSv2 node pool to the cluster
129
-
130
-
```azurecli-interactive
128
+
Now add a **DC<x>s-v2** node pool to the cluster
129
+
130
+
> [!NOTE]
131
+
> To use the confidential computing capability your existing AKS cluster need to have at minimum one **DC<x>s-v2** VM SKU based node pool. Learn more on confidential computing DCsv2 VMs SKU's here [available SKUs and supported regions](virtual-machine-solutions.md).
132
+
133
+
```azurecli-interactive
131
134
az aks nodepool add --cluster-name myAKSCluster --name confcompool1 --resource-group myResourceGroup --node-count 1 --node-vm-size Standard_DC4s_v2 --aks-custom-headers usegen2vm=true
0 commit comments