Skip to content

Commit 8ebf497

Browse files
committed
Container insights security notes for new agent
1 parent 258c947 commit 8ebf497

File tree

2 files changed

+7
-3
lines changed

2 files changed

+7
-3
lines changed

articles/aks/enable-fips-nodes.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -23,6 +23,7 @@ The Federal Information Processing Standard (FIPS) 140-2 is a US government stan
2323
* To update the underlying packages or modules used for FIPS, you must use [Node Image Upgrade][node-image-upgrade].
2424
* Container images on the FIPS nodes haven't been assessed for FIPS compliance.
2525
* Mounting of a CIFS share fails because FIPS disables some authentication modules. To work around this issue, see [Errors when mounting a file share on a FIPS-enabled node pool][errors-mount-file-share-fips].
26+
* AKS Monitoring Addon supports FIPS enabled node pools with Ubuntu, Azure Linux, and Windows starting with Agent version 3.1.17 (Linux) and Win-3.1.17 (Windows).
2627

2728

2829
> [!IMPORTANT]

articles/azure-monitor/containers/container-insights-overview.md

Lines changed: 6 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -24,9 +24,7 @@ Container insights sends data to a [Log Analytics workspace](../logs/data-platfo
2424

2525
:::image type="content" source="media/container-insights-overview/aks-monitor-data.png" lightbox="media/container-insights-overview/aks-monitor-data.png" alt-text="Diagram of collection of monitoring data from Kubernetes cluster using Container insights and related services." border="false":::
2626

27-
28-
29-
### Supported configurations
27+
## Supported configurations
3028
Container insights supports the following environments:
3129

3230
- [Azure Kubernetes Service (AKS)](../../aks/index.yml)
@@ -46,6 +44,11 @@ Container insights supports the following environments:
4644
>
4745
> Container insights support for Windows Server 2022 operating system is in public preview.
4846
47+
## Security
48+
49+
- Container Insights supports FIPS enabled Linux and Windows node pools starting with Agent version 3.1.17 (Linux) & Win-3.1.17 (Windows).
50+
- Starting with Agent version 3.1.17 (Linux) and Win-3.1.17 (Windows), Container Insights agents images (both Linux and Windows) are signed and for Windows agent, binaries inside the container are signed as well
51+
4952
## Access Container insights
5053

5154
Access Container insights in the Azure portal from **Containers** in the **Monitor** menu or directly from the selected AKS cluster by selecting **Insights**. The Azure Monitor menu gives you the global perspective of all the containers that are deployed and monitored. This information allows you to search and filter across your subscriptions and resource groups. You can then drill into Container insights from the selected container. Access Container insights for a particular cluster from its page in the Azure portal.

0 commit comments

Comments
 (0)