Skip to content

Commit d85701d

Browse files
committed
More articles
1 parent 9aab204 commit d85701d

17 files changed

+85
-83
lines changed

AKS-Arc/TOC.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -566,7 +566,7 @@
566566
href: aks-hybrid-preview-uninstall.md
567567
- name: Troubleshooting overview
568568
href: troubleshoot-overview.md
569-
- name: Azure Arc enabled Kubernetes
569+
- name: Azure Arc-enabled Kubernetes
570570
href: known-issues-arc.yml
571571
- name: Pre-installation validation tests
572572
href: validation-tests.md

AKS-Arc/certificates-overview.md

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
---
2-
title: Overview of certificate management in AKS enabled by Azure Arc
3-
description: Learn how to manage certificates for secure communication between in-cluster components in AKS by provisioning and managing certificates in AKS enabled by Arc.
2+
title: Overview of certificate management in AKS on Windows Server
3+
description: Learn how to manage certificates for secure communication between in-cluster components in AKS by provisioning and managing certificates in AKS on Windows Server.
44
author: sethmanheim
55
ms.topic: conceptual
66
ms.date: 01/10/2024
@@ -13,15 +13,15 @@ ms.reviewer: sulahiri
1313

1414
---
1515

16-
# Overview of certificate management in AKS enabled by Azure Arc
16+
# Overview of certificate management in AKS on Windows Server
1717

1818
[!INCLUDE [applies-to-azure stack-hci-and-windows-server-skus](includes/aks-hci-applies-to-skus/aks-hybrid-applies-to-azure-stack-hci-windows-server-sku.md)]
1919

20-
AKS enabled by Azure Arc uses a combination of certificate and token-based authentication to secure communication between services (or agents) responsible for different operations within the platform. Certificate-based authentication uses a digital certificate to identify an entity (agent, machine, user, or device) before granting access to a resource.
20+
AKS on Windows Server uses a combination of certificate and token-based authentication to secure communication between services (or agents) responsible for different operations within the platform. Certificate-based authentication uses a digital certificate to identify an entity (agent, machine, user, or device) before granting access to a resource.
2121

2222
## Cloud agent
2323

24-
When you deploy AKS enabled by Arc, AKS installs agents that are used to perform various functions within the cluster. These agents include:
24+
When you deploy AKS on Windows Server, AKS installs agents that are used to perform various functions within the cluster. These agents include:
2525

2626
- Cloud agent: a service that is responsible for the underlying platform orchestration.
2727
- Node agent: a service that resides on each node that does the actual work of virtual machine creation, deletion, etc.
@@ -39,16 +39,16 @@ Each entity is valid for a specific period (the default is 90 days), at the end
3939

4040
## Certificate types
4141

42-
There are two types of certificates used in AKS enabled by Arc:
42+
There are two types of certificates used in AKS on Windows Server:
4343

4444
- Cloud agent CA certificate: the certificate used to sign/validate client certificates. This certificate is valid for 365 days (1 year).
4545
- Client certificates: certificates issued by the cloud agent CA certificate for clients to authenticate to the cloud agent. These certificates are usually valid for 90 days.
4646

4747
Microsoft recommends that you update clusters within 60 days of a new release, not only for ensuring that internal certificates and tokens are kept up to date, but also to make sure that you get access to new features, bug fixes, and to stay up to date with critical security patches. During these monthly updates, the update process rotates any tokens that can't be auto-rotated during normal operations of the cluster. Certificate and token validity is reset to the default 90 days from the date that the cluster is updated.
4848

49-
## Secure communication with certificates in AKS enabled by Arc
49+
## Secure communication with certificates in AKS on Windows Server
5050

51-
Certificates are used to build secure communication between in-cluster components. AKS provides zero-touch, out-of-the-box provisioning, and management of certificates for built-in Kubernetes components. In this article, you'll learn how to provision and manage certificates in AKS enabled by Arc.
51+
Certificates are used to build secure communication between in-cluster components. AKS provides zero-touch, out-of-the-box provisioning, and management of certificates for built-in Kubernetes components. In this article, you'll learn how to provision and manage certificates in AKS on Windows Server.
5252

5353
## Certificates and CAs
5454

AKS-Arc/concepts-security.md

Lines changed: 9 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -1,27 +1,27 @@
11
---
2-
title: Security concepts in AKS enabled by Azure Arc
3-
description: Learn about securing the infrastructure and applications on a Kubernetes cluster in AKS enabled by Arc.
2+
title: Security concepts in AKS on Windows Server
3+
description: Learn about securing the infrastructure and applications on a Kubernetes cluster in AKS on Windows Server.
44
author: sethmanheim
55
ms.topic: conceptual
66
ms.date: 03/31/2025
77
ms.author: sethm
88
ms.lastreviewed: 1/14/2022
99
ms.reviewer: leslielin
1010

11-
# Intent: As an IT Pro, I want to learn how to improve the security of the applications and infrastructure in AKS enabled by Azure Arc.
11+
# Intent: As an IT Pro, I want to learn how to improve the security of the applications and infrastructure in AKS on Windows Server.
1212
# Keyword: security concepts infrastructure security
1313

1414
---
1515

16-
# Security concepts in AKS enabled by Azure Arc
16+
# Security concepts in AKS on Windows Server
1717

1818
[!INCLUDE [applies-to-azure stack-hci-and-windows-server-skus](includes/aks-hci-applies-to-skus/aks-hybrid-applies-to-azure-stack-hci-windows-server-sku.md)]
1919

20-
Security in AKS enabled by Azure Arc involves securing the infrastructure and the applications running on the Kubernetes cluster. AKS enabled by Arc supports hybrid deployment options for Azure Kubernetes Service (AKS). This article describes the security-hardening measures and the built-in security features used to secure the infrastructure and the applications on Kubernetes clusters.
20+
Security in AKS on Windows Server involves securing the infrastructure and the applications running on the Kubernetes cluster. AKS on Windows Server supports hybrid deployment options for Azure Kubernetes Service (AKS). This article describes the security-hardening measures and the built-in security features used to secure the infrastructure and the applications on Kubernetes clusters.
2121

2222
## Infrastructure security
2323

24-
AKS enabled by Arc applies various security measures to secure its infrastructure. The following diagram highlights these measures:
24+
AKS on Windows Server applies various security measures to secure its infrastructure. The following diagram highlights these measures:
2525

2626
:::image type="content" source="media/concepts-security/security-infrastructure.png" alt-text="Illustration showing the infrastructure security of Azure Kubernetes Service." lightbox="media/concepts-security/security-infrastructure.png":::
2727

@@ -39,7 +39,7 @@ The following table describes the security-hardening aspects of AKS on Windows S
3939

4040
## Application security
4141

42-
The following table describes the different application security options available in AKS enabled by Arc:
42+
The following table describes the different application security options available in AKS on Windows Server:
4343

4444
> [!NOTE]
4545
> You have the option to use the open source application-hardening options available in the open source ecosystem you choose.
@@ -52,7 +52,7 @@ The following table describes the different application security options availab
5252

5353
## Built-in security features
5454

55-
This section describes the built-in security features that are currently available in AKS enabled by Azure Arc:
55+
This section describes the built-in security features that are currently available in AKS on Windows Server:
5656

5757
| Security objective | Feature |
5858
|----------- | --------- |
@@ -65,7 +65,7 @@ This section describes the built-in security features that are currently availab
6565

6666
## Next steps
6767

68-
In this topic, you learned about the concepts for securing AKS enabled by Azure Arc, and about securing applications on Kubernetes clusters.
68+
In this article, you learned about the concepts for securing AKS on Windows Server, and about securing applications on Kubernetes clusters.
6969

7070
- [Secure communication with certificates](./secure-communication.md)
7171
- [Encrypt etcd secrets](./encrypt-secrets.md)

AKS-Arc/container-security.md

Lines changed: 5 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,22 +1,23 @@
11
---
2-
title: Container security in AKS enabled by Azure Arc
3-
description: Learn ways to implement security on containers used to package and deploy applications in AKS enabled by Arc.
2+
title: Container security in AKS on Windows Server
3+
description: Learn ways to implement security on containers used to package and deploy applications in AKS on Windows Server.
44
author: sethmanheim
55
ms.topic: how-to
66
ms.date: 01/10/2024
77
ms.author: sethm
88
ms.lastreviewed: 1/14/2022
99
ms.reviewer: EkeleAsonye
10+
1011
# Intent: As an IT Pro, I want to learn how to secure containers in AKS Arc.
1112
# Keyword: container security
1213

1314
---
1415

15-
# Container security in AKS enabled by Azure Arc
16+
# Container security in AKS on Windows Server
1617

1718
[!INCLUDE [applies-to-azure stack-hci-and-windows-server-skus](includes/aks-hci-applies-to-skus/aks-hybrid-applies-to-azure-stack-hci-windows-server-sku.md)]
1819

19-
This article describes various methods to secure the containers used to package and deploy applications and avoid introducing security vulnerabilities in AKS enabled by Azure Arc.
20+
This article describes various methods to secure the containers used to package and deploy applications and avoid introducing security vulnerabilities in AKS on Windows Server.
2021

2122
Containers provide operational and security benefits because applications and services are separated within an environment. Containers also help to reduce the effects of system-wide failures because of their abstraction, which ensures uptime and prevents attacks that could compromise applications or services. Containers typically run on an abstracted layer on top of the host operating system, and the abstraction offers some barrier of separation and the opportunity to apply a layered defense model.
2223

AKS-Arc/create-daemonsets.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
---
2-
title: Create a Kubernetes DaemonSet in AKS enabled by Azure Arc
3-
description: Learn how to create a DaemonSet in Azure Kubernetes Service (AKS) enabled by Azure Arc.
2+
title: Create a Kubernetes DaemonSet in AKS on Windows Server
3+
description: Learn how to create a DaemonSet in Azure Kubernetes Service (AKS) on Windows Server.
44
author: sethmanheim
55
ms.topic: how-to
66
ms.date: 06/26/2024
@@ -17,7 +17,7 @@ ms.reviewer: EkeleAsonye
1717

1818
[!INCLUDE [applies-to-azure stack-hci-and-windows-server-skus](includes/aks-hci-applies-to-skus/aks-hybrid-applies-to-azure-stack-hci-windows-server-sku.md)]
1919

20-
This article describes how to create and use a Kubernetes *DaemonSet* in AKS enabled by Azure Arc to ensure that a copy of a pod is always available on every worker node in a cluster. You can use a DaemonSet to improve cluster performance by ensuring that an app runs on all the worker nodes, and to deploy pods that do maintenance and provide support services for nodes.
20+
This article describes how to create and use a Kubernetes *DaemonSet* in AKS on Windows Server to ensure that a copy of a pod is always available on every worker node in a cluster. You can use a DaemonSet to improve cluster performance by ensuring that an app runs on all the worker nodes, and to deploy pods that do maintenance and provide support services for nodes.
2121

2222
## Overview of DaemonSets
2323

AKS-Arc/create-deployments.md

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,9 +1,9 @@
11
---
2-
title: Create deployments in AKS enabled by Azure Arc
3-
description: Learn how to create deployments in Azure Kubernetes Service (AKS) Arc.
2+
title: Create deployments in AKS on Windows Server
3+
description: Learn how to create deployments in Azure Kubernetes Service (AKS) on Windows Server.
44
author: sethmanheim
55
ms.topic: how-to
6-
ms.date: 06/26/2024
6+
ms.date: 04/04/2025
77
ms.author: sethm
88
ms.lastreviewed: 03/04/2022
99
ms.reviewer: EkeleAsonye
@@ -15,7 +15,7 @@ ms.reviewer: EkeleAsonye
1515

1616
[!INCLUDE [applies-to-azure stack-hci-and-windows-server-skus](includes/aks-hci-applies-to-skus/aks-hybrid-applies-to-azure-stack-hci-windows-server-sku.md)]
1717

18-
This article provides an overview of Kubernetes deployments, and describes how to create and update these deployments in AKS enabled by Azure Arc.
18+
This article provides an overview of Kubernetes deployments, and describes how to create and update these deployments in AKS on Windows Server.
1919

2020
## Kubernetes deployments overview
2121

AKS-Arc/create-kubernetes-cluster.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ ms.custom: mode-portal
1313
# Keyword: local Kubernetes cluster
1414

1515
---
16-
# Quickstart: Create a local Kubernetes cluster on AKS enabled by Azure Arc using Windows Admin Center
16+
# Quickstart: Create a local Kubernetes cluster on AKS on Windows Server using Windows Admin Center
1717

1818
[!INCLUDE [aks-hybrid-applies-to-azure-stack-hci-windows-server-sku](includes/aks-hci-applies-to-skus/aks-hybrid-applies-to-azure-stack-hci-windows-server-sku.md)]
1919

@@ -65,7 +65,7 @@ This section describes how to use the Create Kubernetes cluster wizard through t
6565

6666
## Next steps
6767

68-
In this quickstart, you deployed a Kubernetes cluster. For more information about AKS enabled by Azure Arc, and to learn how to deploy and manage Linux applications on AKS enabled by Arc, continue to the following tutorial:
68+
In this quickstart, you deployed a Kubernetes cluster. For more information about AKS on Windows Server, and to learn how to deploy and manage Linux applications on AKS on Windows Server, continue to the following tutorial:
6969

7070
- [Tutorial: Deploy Linux applications](deploy-linux-application.md)
7171
- [Set up multiple administrators](./set-multiple-administrators.md)

AKS-Arc/create-pods.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
---
2-
title: Create and delete pods in AKS enabled by Azure Arc
3-
description: Learn how to create and delete pods in Azure Kubernetes Service (AKS) enabled by Arc.
2+
title: Create and delete pods in AKS on Windows Server
3+
description: Learn how to create and delete pods in Azure Kubernetes Service (AKS) on Windows Server.
44
author: sethmanheim
55
ms.topic: how-to
66
ms.date: 10/21/2024
@@ -17,7 +17,7 @@ ms.reviewer: abha
1717

1818
[!INCLUDE [applies-to-azure stack-hci-and-windows-server-skus](includes/aks-hci-applies-to-skus/aks-hybrid-applies-to-azure-stack-hci-windows-server-sku.md)]
1919

20-
Kubernetes uses pods to run an instance of your application. This article describes how to create and delete pods when managing your workloads in AKS enabled by Azure Arc.
20+
Kubernetes uses pods to run an instance of your application. This article describes how to create and delete pods when managing your workloads in AKS on Windows Server.
2121

2222
A pod represents a single instance of an application. Each pod has one or more containers deployed together on a single host. A pod is the smallest unit of execution in Kubernetes. An internal IP address and port are assigned to a pod, through which containers within the pod can share a common storage and network. Like a service, volume, and namespace, a pod is a basic Kubernetes object. Pods run on nodes and have a definite lifecycle, during which they run until their containers are removed.
2323

AKS-Arc/create-replicasets.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
---
2-
title: Create a ReplicaSet in AKS enabled by Azure Arc
3-
description: Learn how to create a ReplicaSet in Azure Kubernetes Service (AKS) enabled by Arc.
2+
title: Create a ReplicaSet in AKS on Windows Server
3+
description: Learn how to create a ReplicaSet in Azure Kubernetes Service (AKS) on Windows Server.
44
author: sethmanheim
55
ms.topic: how-to
66
ms.date: 06/26/2024
@@ -15,7 +15,7 @@ ms.reviewer: EkeleAsonye
1515

1616
[!INCLUDE [applies-to-azure stack-hci-and-windows-server-skus](includes/aks-hci-applies-to-skus/aks-hybrid-applies-to-azure-stack-hci-windows-server-sku.md)]
1717

18-
This article describes how to create, scale, and delete *ReplicaSets* in AKS enabled by Azure Arc. ReplicaSets are used to ensure that a stable set of replica pods are running at any given time.
18+
This article describes how to create, scale, and delete *ReplicaSets* in AKS on Windows Server. ReplicaSets are used to ensure that a stable set of replica pods are running at any given time.
1919

2020
## Overview of ReplicaSets
2121

AKS-Arc/create-statefulset.md

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,12 +1,13 @@
11
---
2-
title: Create StatefulSets in AKS enabled by Azure Arc
3-
description: Learn how to create StatefulSets in Azure Kubernetes Service (AKS) enabled by Arc.
2+
title: Create StatefulSets in AKS on Windows Server
3+
description: Learn how to create StatefulSets in Azure Kubernetes Service (AKS) on Windows Server.
44
author: sethmanheim
55
ms.topic: how-to
66
ms.date: 06/26/2024
77
ms.author: sethm
88
ms.lastreviewed: 1/14/2022
99
ms.reviewer: EkeleAsonye
10+
1011
# Intent: As an IT Pro, I need to learn how to create Stateful Sets in AKS.
1112
# Keyword: Stateful Sets
1213
---
@@ -15,7 +16,7 @@ ms.reviewer: EkeleAsonye
1516

1617
[!INCLUDE [aks-hybrid-applies-to-azure-stack-hci-windows-server-sku](includes/aks-hci-applies-to-skus/aks-hybrid-applies-to-azure-stack-hci-windows-server-sku.md)]
1718

18-
This article describes how to create, update, and delete *StatefulSets*, which are used to maintain the state of an application beyond a pod lifecycle in an AKS deployment in AKS enabled by Azure Arc.
19+
This article describes how to create, update, and delete *StatefulSets*, which are used to maintain the state of an application beyond a pod lifecycle in an AKS deployment in AKS on Windows Server.
1920

2021
## Overview of StatefulSets
2122

0 commit comments

Comments
 (0)