You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: AKS-Hybrid/aks-edge-concept-networking.md
+3-3Lines changed: 3 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -4,7 +4,7 @@ description: Basic networking concepts for AKS Edge Essentials
4
4
author: fcabrera23
5
5
ms.author: fcabrera
6
6
ms.topic: conceptual
7
-
ms.date: 10/06/2023
7
+
ms.date: 07/11/2024
8
8
ms.custom: template-concept
9
9
---
10
10
@@ -13,7 +13,7 @@ ms.custom: template-concept
13
13
This article describes how to configure the networking between the Windows host OS and the Linux and Windows nodes' virtual machines. For more information about AKS Edge Essentials architecture, see the [AKS Edge Essentials overview](./aks-edge-overview.md).
14
14
15
15
>[!TIP]
16
-
>The following guide describes different networking concepts and configurations available in AKS Edge Essentials. If you are using a single machine cluster, the installer and deployment mechanism handle all the necessary networking configuration. No extra steps or configuration are needed to deploy your cluster.
16
+
>The following guide describes different networking concepts and configurations available in AKS Edge Essentials. If you use a single machine cluster, the installer and deployment mechanism handle all the necessary networking configuration. No extra steps or configuration are needed to deploy your cluster.
17
17
18
18
## Networking
19
19
@@ -34,7 +34,7 @@ The following key networking concepts for AKS Edge Essentials align with Kuberne
34
34
35
35
If AKS Edge Essentials is deployed using a single machine cluster or a scalable cluster, we support different types of switches, IP address assignation, and configurations, as shown in the following table.
Copy file name to clipboardExpand all lines: AKS-Hybrid/aks-edge-howto-access-tpm.md
+29-40Lines changed: 29 additions & 40 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -4,13 +4,13 @@ description: Learn how to access the TPM from a Linux virtual machine.
4
4
author: rcheeran
5
5
ms.author: rcheeran
6
6
ms.topic: how-to
7
-
ms.date: 10/10/2023
7
+
ms.date: 07/12/2024
8
8
ms.custom: template-how-to, linux-related-content
9
9
---
10
10
11
11
# TPM access for AKS Edge Essentials
12
12
13
-
A [Trusted Platform Module (TPM)](/windows/security/information-protection/tpm/trusted-platform-module-top-node) chip is a secure crypto-processor that is designed to carry out cryptographic operations. This technology is designed to provide hardware-based, security-related functions. You can enable or disable the TPM passthrough feature that enables the AKS Edge Essentials virtual machine to use the Windows host OS TPM. The TPM passthrough feature provides read-only access to cryptographic keys stored inside the TPM.
13
+
A [Trusted Platform Module (TPM) chip](/windows/security/information-protection/tpm/trusted-platform-module-top-node) is a secure crypto-processor that is designed to carry out cryptographic operations. This technology is designed to provide hardware-based, security-related functions. You can enable or disable the TPM passthrough feature that enables the AKS Edge Essentials virtual machine to use the Windows host OS TPM. The TPM passthrough feature provides read-only access to cryptographic keys stored inside the TPM.
14
14
15
15
This article describes how to develop sample code in C# to read cryptographic keys stored inside the device's discrete TPM.
16
16
@@ -20,9 +20,7 @@ This article describes how to develop sample code in C# to read cryptographic ke
20
20
## Prerequisites
21
21
22
22
- A Windows host OS with a TPM or vTPM (if you're using a Windows host OS virtual machine).
23
-
24
23
- Enable TPM access from the CBL-Mariner virtual machine with TPM passthrough enabled. In your **aksedge-config** file, in the `machines` section, set the `Machine.LinuxNode.TpmPassthrough` value to `True`. You can only enable or disable TPM access when creating a new deployment. Once you set the flag, it can't be changed unless you remove the deployment or node.
25
-
26
24
- Ensure that the Non-Volatile(NV) index (default index=3001) is initialized with 8 bytes of data. The default **AuthValue** used by the sample is **{1,2,3,4,5,6,7,8}**, which corresponds to the NV (Windows) sample in the **TSS.MSR** libraries when writing to the TPM. All index initialization must take place on the Windows host before reading from the CBL-Mariner VM. For more information about TPM samples, see [TSS.MSR](https://github.com/microsoft/TSS.MSR).
27
25
28
26
> [!CAUTION]
@@ -37,25 +35,17 @@ The following steps show how to create a sample executable to access a discrete
37
35
:::image type="content" source="media/aks-edge/vs-new-solution.png" alt-text="Screenshot showing Visual Studio create new solution." lightbox="media/aks-edge/vs-new-solution.png":::
38
36
39
37
1. Type the **Project Name**, **Location** and **Solution Name** fields, then select **Next**.
40
-
41
38
1. Choose a target framework. The latest .NET 6.0 Long Term Support (LTS) version is preferred. After you choose a target framework, select **Create**. Visual Studio creates a new console app solution.
42
-
43
39
1. In **Solution Explorer**, right-click the project name and select **Manage NuGet Packages**.
44
-
45
40
1. Select **Browse** and then search for **Microsoft.TSS**. For more information about this package, see [Microsoft.TSS](https://www.nuget.org/packages/Microsoft.TSS). Choose the **Microsoft.TSS** package from the list, then select **Install**.
46
-
47
41
1. Edit the **Program.cs** file and replace the contents with the [tpm-read-nv sample code - Program.cs](https://github.com/Azure/iotedge-eflow/blob/main/samples/tpm-read-nv/Program.cs).
48
-
49
42
1. Select **Build > Build solution** to build the project. Verify that the build is successful.
50
-
51
43
1. In **Solution Explorer**, right-click the project, then select **Publish**.
52
-
53
44
1. In the **Publish** wizard, choose **Folder > Folder**. Select **Browse** and then choose an output location for the executable file to be generated. Select **Finish**. After the publish profile is created, select **Close**.
54
-
55
45
1. On the **Publish** tab, select **Show all settings**. Change the following configuration, then select **Save**:
56
46
57
-
- Target Runtime: **linux-x64**.
58
-
- Deployment mode: **Self-contained**.
47
+
- Target Runtime: **linux-x64**.
48
+
- Deployment mode: **Self-contained**.
59
49
60
50
1. Select **Publish**, then wait for the executable to be created.
61
51
@@ -66,37 +56,36 @@ If publishing succeeds, you should see the new files created in your output fold
66
56
Once the executable file and dependency files are created, copy the folder to the CBL-Mariner virtual machine. The following steps show how to copy all the necessary files and how to run the executable inside the CBL-Mariner virtual machine.
67
57
68
58
1. Open an elevated PowerShell session.
59
+
1. Change the directory to the parent folder that contains the published files.
69
60
70
-
1. Change directory to the parent folder that contains the published files.
71
-
72
-
For example, if your published files are under the folder **TPM** in the directory **C:\Users\<User>**, you can use the following command to change to the parent folder:
61
+
For example, if your published files are under the folder **TPM** in the directory **C:\Users\<User>**, you can use the following command to change to the parent folder:
73
62
74
-
```powershell
75
-
cd "C:\Users\<User>"
76
-
```
63
+
```powershell
64
+
cd "C:\Users\<User>"
65
+
```
77
66
78
67
1. Modify the **TPMRead.runtimeconfig.json** file to avoid an [ICU globalization issue](https://github.com/dotnet/core/issues/2186#issuecomment-472629489) inside the Linux VM:
79
68
80
-
1. Open **TPMRead.runtimeconfig.json**.
81
-
2. Add the following line inside the `configProperties` section:
69
+
1. Open **TPMRead.runtimeconfig.json**.
70
+
2. Add the following line inside the `configProperties` section:
82
71
83
-
```json
84
-
"System.Globalization.Invariant": true
85
-
```
72
+
```json
73
+
"System.Globalization.Invariant": true
74
+
```
86
75
87
76
1. Create a **tar** file with all the files created in previous steps.
88
77
89
-
For example, if you have all your files under the folder **TPM**, you can use the following command to create the **TPM.tar** file:
78
+
For example, if you have all your files under the folder **TPM**, you can use the following command to create the **TPM.tar** file:
90
79
91
-
```powershell
92
-
tar -cvzf TPM.tar ".\TPM"
93
-
```
80
+
```powershell
81
+
tar -cvzf TPM.tar ".\TPM"
82
+
```
94
83
95
84
1. Once the **TPM.tar** file is successfully created, use the `Copy-AksEdgeNodeFile` cmdlet to copy the **tar** file to the CBL-Mariner VM. For example, if you have the **tar** file name **TPM.tar** in the directory **C:\Users\<User>**, you can use the following command to copy to the CBL-Mariner VM:
1. Run the following command to extract all the content from the **tar** file:
102
91
@@ -106,19 +95,19 @@ Once the executable file and dependency files are created, copy the folder to th
106
95
107
96
1. After extraction, add executable permission to the main executable file. For example, if your project name was **TPMRead**, your main executable is named **TPMRead**. Run the following command to make it executable:
Copy file name to clipboardExpand all lines: AKS-Hybrid/aks-edge-howto-expose-service.md
+4-4Lines changed: 4 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -4,19 +4,19 @@ description: Learn how to expose a Kubernetes service with AKS Edge Essentials.
4
4
author: fcabrera23
5
5
ms.author: fcabrera
6
6
ms.topic: how-to
7
-
ms.date: 10/12/2023
7
+
ms.date: 07/12/2024
8
8
ms.custom: template-how-to
9
9
---
10
10
11
11
# Expose Kubernetes services to external devices
12
12
13
-
If you're working with Kubernetes applications, you might need to make Kubernetes services accessible to external devices so they can interact with the workloads you've deployed. This article explains how to expose Kubernetes services running on an AKS Edge Essentials cluster to external devices. Depending on the networking configuration you used to set up the Kubernetes cluster, there are two different ways to expose the services:
13
+
If you work with Kubernetes applications, you might need to make Kubernetes services accessible to external devices so they can interact with the workloads you've deployed. This article explains how to expose Kubernetes services running on an AKS Edge Essentials cluster to external devices. Depending on the networking configuration you used to set up the Kubernetes cluster, there are two different ways to expose the services:
14
14
15
15
1. Single machine cluster with port forwarding.
16
-
2. Scalable cluster with external virtual switch.
16
+
1. Scalable cluster with external virtual switch.
17
17
18
18
> [!NOTE]
19
-
> If you are using Kubernetes services, make sure to set up the `Init.ServiceIPRangeSize` and `Init.ServiceIPRangeStart` parameters during deployment. For more information, see [Deployment configuration JSON parameters](./aks-edge-deployment-config-json.md).
19
+
> If you use Kubernetes services, make sure to set up the `Init.ServiceIPRangeSize` and `Init.ServiceIPRangeStart` parameters during deployment. For more information, see [Deployment configuration JSON parameters](./aks-edge-deployment-config-json.md).
20
20
21
21
## Option 1: single machine cluster with port forwarding
Copy file name to clipboardExpand all lines: AKS-Hybrid/aks-edge-howto-metric-server.md
+4-4Lines changed: 4 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,16 +1,16 @@
1
1
---
2
-
title: Deploy metric server
3
-
description: Steps to deploy metric server.
2
+
title: Deploy metrics server on an AKS Edge Essentials cluster
3
+
description: Learn about the steps to deploy a metrics server on an AKS Edge Essentials cluster.
4
4
author: rcheeran
5
5
ms.author: rcheeran
6
6
ms.topic: how-to
7
-
ms.date: 10/10/2023
7
+
ms.date: 07/11/2024
8
8
ms.custom: template-how-to
9
9
---
10
10
11
11
# Metrics server on an AKS Edge Essentials cluster
12
12
13
-
The [metrics server](https://github.com/kubernetes-sigs/metrics-server) is a tool that inspects your containers' resource consumption. You can find the [YAML file](https://github.com/Azure/AKS-Edge/blob/main/samples/others/metrics-server.yaml) for the metrics server deployment in the **/Samples/Other** folder in the [GitHub repo](https://github.com/Azure/AKS-Edge/).
13
+
The [metrics server](https://github.com/kubernetes-sigs/metrics-server) is a tool that inspects your containers' resource consumption. You can find the [YAML file](https://github.com/Azure/AKS-Edge/blob/main/samples/others/metrics-server.yaml) for the metrics server deployment in the **/Samples/Other** folder [in the GitHub repo](https://github.com/Azure/AKS-Edge/).
0 commit comments