You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: AKS-Arc/aks-edge-deployment-config-json.md
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -4,7 +4,7 @@ description: Description of deployment configuration JSON parameters in AKS Edge
4
4
author: sethmanheim
5
5
ms.author: sethm
6
6
ms.topic: conceptual
7
-
ms.date: 07/11/2024
7
+
ms.date: 02/20/2025
8
8
ms.custom: template-concept
9
9
---
10
10
@@ -21,7 +21,7 @@ You can find the complete JSON schema file at `C:\Program Files\AksEdge\aksedge-
21
21
|`DeploymentType`|[`SingleMachineCluster` / `ScalableCluster`]| Specifies deployment type. In `ScalableCluster`, you can add more machines to the cluster infrastructure. |`SingleMachineCluster`|Single-machine and full deployment|
22
22
|`Init.ServiceIPRangeStart`|IPv4 address `A.B.C.x`.|Reserved IP start address for your Kubernetes services. This IP range must be free on your subnet **A.B.C.0**.| None |Single-machine and full deployment|
23
23
|`Init.ServiceIPRangeSize`|`[0-127]`|Number of reserved IP start addresses for your Kubernetes services. Based on the size, we allocate a range of free IP addresses on your subnet. |`0`|Single-machine and full deployment|
24
-
|`Init.KmsPlugin.Enable`|Boolean|Enabling the KMS Plugin| false |Single-machine and full deployment|
24
+
|`Init.KmsPlugin.Enable`|Boolean|Enables the KMS plugin| false |Single-machine and full deployment|
Copy file name to clipboardExpand all lines: AKS-Arc/aks-edge-howto-secret-encryption.md
+16-16Lines changed: 16 additions & 16 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -4,7 +4,7 @@ description: Learn how to enable the KMS plugin for AKS Edge Essentials clusters
4
4
author: sethmanheim
5
5
ms.author: sethm
6
6
ms.topic: how-to
7
-
ms.date: 02/13/2025
7
+
ms.date: 02/20/2025
8
8
ms.custom: template-how-to
9
9
ms.reviewer: leslielin
10
10
---
@@ -50,21 +50,21 @@ For deployment instructions, see [Single machine deployment](aks-edge-howto-sing
50
50
> [!NOTE]
51
51
> You can only enable or disable the KMS plugin when you create a new deployment. Once you set the flag, it can't be changed.
52
52
53
-
## Verify the KMS plugin is enabled
54
-
To verify that the KMS plugin is enabled, run the command below and ensure that the health status of **kms-providers** is **OK**:
53
+
## Verify that the KMS plugin is enabled
55
54
56
-
```powershell
57
-
kubectl get --raw='/readyz?verbose'
58
-
```
55
+
To verify that the KMS plugin is enabled, run the following command and ensure that the health status of **kms-providers** is **OK**:
59
56
60
-
```output
61
-
[+]ping ok
62
-
[+]Log ok
63
-
[+]etcd ok
64
-
[+]kms-providers ok
65
-
[+]poststarthook/start-encryption-provider-config-automatic-reload ok
66
-
```
57
+
```powershell
58
+
kubectl get --raw='/readyz?verbose'
59
+
```
67
60
61
+
```output
62
+
[+]ping ok
63
+
[+]Log ok
64
+
[+]etcd ok
65
+
[+]kms-providers ok
66
+
[+]poststarthook/start-encryption-provider-config-automatic-reload ok
67
+
```
68
68
69
69
To create secrets in AKS Edge Essentials clusters, see [Managing Secrets using kubectl](https://kubernetes.io/docs/tasks/configmap-secret/managing-secret-using-kubectl/#use-raw-data) in the Kubernetes documentation.
70
70
@@ -82,17 +82,17 @@ If there are errors with the KMS plugin, follow this procedure:
82
82
83
83
If the version is older, upgrade to the latest version. For more information, see [Upgrade an AKS cluster](aks-edge-howto-update.md).
84
84
85
-
2. View the `readyz` API. If the problem persists, verify that the KMS plugin is enabled. Please refer to the [Verify the KMS plugin is enabled](#verify-the-kms-plugin-is-enabled)above
85
+
1. View the `readyz` API. If the problem persists, verify that the KMS plugin is enabled. See the [Verify that the KMS plugin is enabled](#verify-that-the-kms-plugin-is-enabled)section.
86
86
87
87
If you receive "**[-]**" before the `kms-providers` field, collect diagnostic logs for debugging. For more information, see [Get kubelet logs from cluster nodes](aks-get-kubelet-logs.md).
88
88
89
-
3. Repair KMS. If there are still errors, the machine running the AKS Edge Essentials cluster might be paused or turned off for an extended period of time (over 30 days). To get KMS back into a healthy state, you can use the `Repair-Kms` command to restore any necessary tokens:
89
+
1. Repair KMS. If there are still errors, the machine running the AKS Edge Essentials cluster might be paused or turned off for an extended period of time (over 30 days). To get KMS back into a healthy state, you can use the `Repair-Kms` command to restore any necessary tokens:
90
90
91
91
```powershell
92
92
Repair-AksEdgeKms
93
93
```
94
94
95
-
4. If you still encounter errors, contact [Microsoft Customer Support](aks-edge-troubleshoot-overview.md) and [collect logs](aks-get-kubelet-logs.md).
95
+
1. If you still encounter errors, contact [Microsoft Customer Support](aks-edge-troubleshoot-overview.md) and [collect logs](aks-get-kubelet-logs.md).
Copy file name to clipboardExpand all lines: AKS-Arc/reference/aks-edge-ps/repair-aksedgekms.md
+9-8Lines changed: 9 additions & 8 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,19 +1,19 @@
1
1
---
2
2
title: Repair-AksEdgeKms for AKS Edge
3
-
author: AnushkaKhare-Eng
4
3
description: The Repair-AksEdgeKms command repairs the KMS plugin for an existing cluster
4
+
author: sethmanheim
5
5
ms.topic: reference
6
-
ms.date: 2/18/2025
7
-
ms.author: khareanushka
8
-
ms.lastreviewed: 2/18/2025
9
-
ms.reviewer:
6
+
ms.date: 2/20/2025
7
+
ms.author: sethm
8
+
ms.lastreviewed: 2/20/2025
9
+
ms.reviewer: khareanushka
10
10
11
11
---
12
12
13
13
14
14
# Repair-AksEdgeKms
15
15
16
-
Repair the KMS plugin for an existing cluster.
16
+
Repairs the KMS plugin for an existing cluster.
17
17
18
18
## Syntax
19
19
@@ -23,10 +23,11 @@ Repair-AksEdgeKms
23
23
24
24
## Description
25
25
26
-
This command repairs the KMS plugin for an existing cluster. This function is supported only for single node and scalable clusters.The command below rehydrates nodeagent tokens required for key rotation to get KMS back in a healthy state.
26
+
This command repairs the KMS plugin for an existing cluster. This function is supported only for single node and scalable clusters. To get the KMS plugin back to a healthy state, the command rehydrates **nodeagent** tokens required for key rotation.
0 commit comments