/zh-cn/tags/azure/ Recent content in Azure on Confidential Containers Hugo zh-cn © The Linux Foundation. All rights reserved. The Linux Foundation has registered trademarks and uses trademarks. For a list of trademarks of The Linux Foundation, please see our <a href="https://www.linuxfoundation.org/trademark-usage/">Trademark Usage</a> page. /zh-cn/docs/examples/azure-simple/ Mon, 01 Jan 0001 00:00:00 +0000 /zh-cn/docs/examples/azure-simple/ <blockquote> <p><strong>说明：</strong> 本文为英文文档的中文译版，英文原版请参见 <a href="https://confidentialcontainers.org/docs/examples/azure-simple/">Azure 示例（英文版）</a>。</p> </blockquote> <p>本文将介绍如何在 Azure Kubernetes Service (AKS) 上配置 CAA（即 Peer Pods），具体包括：</p> <ul> <li>一个基于 Azure Kubernetes Service (AKS) 的单工作节点 Kubernetes 集群</li> <li>运行在该 Kubernetes 集群上的 CAA</li> <li>一个由 CAA PodVM 支撑的 Nginx Pod</li> </ul> <p>Confidential Containers 也支持将 Azure Key Vault 用作 Trustee 的资源后端。 <a href="../../attestation/resources/kbs-backed-by-akv">更多信息</a></p> <h2 id="前提条件">前提条件<a class="td-heading-self-link" href="#%e5%89%8d%e6%8f%90%e6%9d%a1%e4%bb%b6" aria-label="Heading self-link"></a></h2><p>安装所需工具：</p> <ul> <li>安装 <a href="https://kubernetes.io/docs/tasks/tools/">kubectl</a></li> <li>安装 <a href="https://helm.sh/docs/intro/install">Helm</a></li> <li>安装 <code>az</code> CLI <a href="https://learn.microsoft.com/en-us/cli/azure/install-azure-cli">工具</a></li> <li>确保已安装 <code>curl</code>、<code>git</code>、<code>jq</code> 和 <code>sipcalc</code></li> </ul> <h2 id="azure-准备工作">Azure 准备工作<a class="td-heading-self-link" href="#azure-%e5%87%86%e5%a4%87%e5%b7%a5%e4%bd%9c" aria-label="Heading self-link"></a></h2><h3 id="登录-azure">登录 Azure<a class="td-heading-self-link" href="#%e7%99%bb%e5%bd%95-azure" aria-label="Heading self-link"></a></h3><p>以下许多步骤均需先登录 Azure 账号：</p> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"><span class="line"><span class="cl">az login </span></span></code></pre></div><p>获取你的订阅 ID：</p> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"><span class="line"><span class="cl"><span class="nb">export</span> <span class="nv">AZURE_SUBSCRIPTION_ID</span><span class="o">=</span><span class="k">$(</span>az account show --query id --output tsv<span class="k">)</span> </span></span></code></pre></div><p>设置区域：</p>