Skip to content

Commit

Permalink
MSFT reviews addressed
Browse files Browse the repository at this point in the history
  • Loading branch information
angarg05 committed Aug 1, 2022
1 parent 30c55c0 commit 61ee315
Show file tree
Hide file tree
Showing 6 changed files with 5 additions and 5 deletions.
4 changes: 2 additions & 2 deletions articles/aks/use-multiple-node-pools.md
Original file line number Diff line number Diff line change
Expand Up @@ -171,11 +171,11 @@ az aks nodepool add \
```

### Add a confidential VM (with AMD SEV-SNP support) node pool (preview)
AKS node pools now support the generally available [confidential VM sizes (DCav5/ECav5)](https://aka.ms/AMD-ACC-VMs-GA-Inspire-2022) to create confidential VM node pools. Confidential VMs with AMD SEV-SNP support bring a new set of security features to protect date-in-use with full VM memory encryption. This enables confidential VM node pools to target the migration of highly sensitive container workloads to AKS without any code refactoring while benefiting from the full AKS feature support. To learn more, check out our [latest offering](../confidential-computing/confidential-node-pool-in-aks.md).
AKS node pools now support the generally available [confidential VM sizes (DCav5/ECav5)](https://aka.ms/AMD-ACC-VMs-GA-Inspire-2022) to create confidential VM node pools. Confidential VMs with AMD SEV-SNP support bring a new set of security features to protect date-in-use with full VM memory encryption. This enables confidential VM node pools to target the migration of highly sensitive container workloads to AKS without any code refactoring while benefiting from the full AKS feature support. To learn more, check out our [latest offering](../confidential-computing/confidential-node-pool-aks.md).

[!INCLUDE [preview features callout](./includes/preview/preview-callout.md)]

Add a confidential node pool using the [az aks nodepool add][az-aks-nodepool-add] command. This time, specify the name *cvmnodepool*, and use the `--node-vm-size` parameter to specify the *Standard_DC2as_v5* size:
Add a confidential node pool using the [az aks nodepool add][az-aks-nodepool-add] command. Specify the name *cvmnodepool*, and use the `--node-vm-size` parameter to specify the *Standard_DC2as_v5* size:

```azurecli-interactive
az aks nodepool add \
Expand Down
2 changes: 1 addition & 1 deletion articles/confidential-computing/TOC.yml
Original file line number Diff line number Diff line change
Expand Up @@ -43,7 +43,7 @@
- name: Confidential node pools in AKS
items:
- name: Add a confidential VM node pool to your AKS cluster
href: confidential-node-pool-in-aks.md
href: confidential-node-pool-aks.md
- name: Concept
expanded: true
items:
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -24,7 +24,7 @@ In addition to the hardened security profile, confidential node pools on AKS als
- Lift and Shift with full AKS feature support - to enable a seamless lift-and-shift of Linux container workloads
- Heterogenous Node Pools - to store sensitive data in a VM-level TEE node pool with memory encryption keys generated from the chipset itself

:::image type="content" source="media/confidential-vm-node-pools-on-aks/snp-on-aks-architechture-image.png" alt-text="Graphic of VM nodes in AKS with encrypted code and data in confidential VM node pools 1 and 2, on top of the hypervisor":::
:::image type="content" source="media/confidential-vm-node-pools-on-aks/snp-on-aks-architecture-image.png" alt-text="Graphic of VM nodes in AKS with encrypted code and data in confidential VM node pools 1 and 2, on top of the hypervisor":::

Get started and add confidential node pools to existing AKS cluster with [this quick start guide](../aks/use-multiple-node-pools.md#add-a-confidential-vm-with-amd-sev-snp-support-node-pool-preview).

Expand Down
2 changes: 1 addition & 1 deletion articles/confidential-computing/index.yml
Original file line number Diff line number Diff line change
Expand Up @@ -93,7 +93,7 @@ landingContent:
- text: App enclave nodes in AKS
url: confidential-nodes-aks-overview.md
- text: Confidential VM node pool in AKS
url: confidential-node-pool-in-aks.md
url: confidential-node-pool-aks.md
- linkListType: quickstart
links:
- text: CLI based provisioning with a hello from enclave container app on AKS
Expand Down
Empty file added cli/azure/aks
Empty file.

0 comments on commit 61ee315

Please sign in to comment.