01 Run account list command (Windows/macOS/Linux) with custom output filters to list the IDs of the cloud subscriptions available in your Azure cloud account:
az account list
--query '[*].id'
02 The command output should return the requested subscription identifiers (IDs):
[
"abcdabcd-1234-abcd-1234-abcdabcdabcd",
"abcd1234-abcd-1234-abcd-abcd1234abcd"
]
03 Run account set command (Windows/macOS/Linux) with the ID of the Azure cloud subscription that you want to examine as the identifier parameter to set the selected subscription to be the current active subscription (the command does not produce an output):
az account set
--subscription abcdabcd-1234-abcd-1234-abcdabcdabcd
04 Run aks nodepool update command (OSX/Linux/UNIX) with the name of the cluster that you want to configure as the identifier parameter, to enable Federal Information Process Standard (FIPS) for the selected AKS cluster node pool. When you update an existing node pool, the current node image will be replaced with the recommended FIPS-compliant image for the same OS SKU. The command provided below launches an immediate reimage of the node pool, allowing for the deployment of the FIPS-compliant OS. This reimage takes place during the node pool update, and no further actions are required:
az aks nodepool update
--name miningpool01
--cluster-name cc-data-mining-cluster
--resource-group cloud-shell-storage-westeurope
--enable-fips-image
05 The command output should return the configuration information available for the modified AKS cluster node pool:
{
"artifactStreamingProfile": null,
"availabilityZones": null,
"capacityReservationGroupId": null,
"count": 1,
"creationData": null,
"currentOrchestratorVersion": "1.29.8",
"eTag": "abcdabcd-1234-abcd-1234-abcdabcdabcd",
"enableAutoScaling": false,
"enableCustomCaTrust": null,
"enableEncryptionAtHost": null,
"enableFips": true,
"enableNodePublicIp": false,
"enableUltraSsd": null,
"gatewayProfile": null,
"gpuInstanceProfile": null,
"gpuProfile": null,
"hostGroupId": null,
"id": "/subscriptions/abcdabcd-1234-abcd-1234-abcdabcdabcd/resourcegroups/cloud-shell-storage-westeurope/providers/Microsoft.ContainerService/managedClusters/cc-data-mining-cluster/agentPools/miningpool01",
"kubeletConfig": null,
"kubeletDiskType": "OS",
"linuxOsConfig": null,
"maxCount": null,
"maxPods": 30,
"messageOfTheDay": null,
"minCount": null,
"mode": "System",
"name": "miningpool01",
"networkProfile": null,
"nodeImageVersion": "AKSUbuntu-2004gen2fipscontainerd-202409.23.0",
"nodeInitializationTaints": null,
"nodeLabels": null,
"nodePublicIpPrefixId": null,
"nodeTaints": null,
"orchestratorVersion": "1.29.8",
"osDiskSizeGb": 128,
"osDiskType": "Managed",
"osSku": "Ubuntu",
"osType": "Linux",
"podIpAllocationMode": null,
"podSubnetId": null,
"powerState": {
"code": "Running"
},
"provisioningState": "Succeeded",
"proximityPlacementGroupId": null,
"resourceGroup": "cloud-shell-storage-westeurope",
"scaleDownMode": null,
"scaleSetEvictionPolicy": null,
"scaleSetPriority": null,
"securityProfile": {
"enableSecureBoot": false,
"enableVtpm": false,
"sshAccess": "LocalUser"
},
"spotMaxPrice": null,
"tags": null,
"type": "Microsoft.ContainerService/managedClusters/agentPools",
"typePropertiesType": "VirtualMachineScaleSets",
"upgradeSettings": {
"drainTimeoutInMinutes": null,
"maxSurge": "10%",
"nodeSoakDurationInMinutes": null,
"undrainableNodeBehavior": null
},
"virtualMachineNodesStatus": null,
"virtualMachinesProfile": null,
"vmSize": "Standard_D2as_v4",
"vnetSubnetId": null,
"windowsProfile": null,
"workloadRuntime": null
}
06 Repeat steps no. 4 and 5 for each node pool provisioned within the selected AKS cluster.
07 Repeat steps no. 4 - 6 for each AKS cluster that you want to configure, available within the selected Azure subscription.
08 Repeat steps no. 3 – 7 for each subscription created in your Microsoft Azure cloud account.
Security