Microsoft Azure¶
The azure CPI can be used with Microsoft Azure.
- Release: cloudfoundry/bosh-azure-cpi-release
- Issues: GitHub Issues
- Slack: cloudfoundry#bosh-azure-cpi
Non-Azure Compute Gallery stemcell images are deprecated
The legacy managed-image and unmanaged-VHD stemcell paths are deprecated. New deployments must use Azure Compute Gallery with managed disks. Existing deployments should follow the migration guidance.
Concepts¶
The following table maps BOSH concepts to their Azure-native equivalents.
| BOSH | Microsoft Azure |
|---|---|
| Availability Zone | Availability Zone |
| Virtual Machine | Virtual Machine |
| Network Subnet | Virtual Network Subnet |
| Virtual IP | Public IP |
| Persistent Disk | Disk Storage and Managed Disks |
| Disk Snapshot | Managed Disk Snapshot |
| Stemcell | Azure Compute Gallery Images |
| Agent Settings | Config Drive; BOSH Registry |
Feature Support¶
The following sections describe some specific BOSH features supported by the CPI.
Network¶
The CPI supports multiple NICs being attached to a single VM.
| Network Type | Support |
|---|---|
| Manual | Multiple networks per instance |
| Dynamic | Multiple networks per instance |
| VIP | Single network per instance |
Encryption¶
Managed Disks¶
When using Managed Disks, encryption is automatically used by all disks and cannot be disabled. By default, all aspects of the encryption are internally managed by Azure. Starting with Azure CPI v52.0.0, it is possible to configure customer-managed keys for root, ephemeral, and persistent disks using Disk Encryption Sets.
| Disk Type | Encryption | Customer-managed Keys |
|---|---|---|
| Root Disk | Required, default | Supported (v52.0.0+) |
| Ephemeral Disk | Required, default | Supported (v52.0.0+) |
| Persistent Disk | Required, default | Supported (v52.0.0+) |
Storage Accounts¶
When using Storage Accounts, encryption keys can be managed through the Azure Key Vault to ensure disks are encrypted. There are no specific properties which need to be configured through CPI configuration.
| Disk Type | Encryption | Customer-managed Keys |
|---|---|---|
| Root Disk | Required, default | Supported |
| Ephemeral Disk | Required, default | Supported |
| Persistent Disk | Required, default | Supported |
Key Rotation - encryption keys can be configured and rotated from within the Azure Portal (learn more), and Azure transparently handles re-encryption of data.
Miscellaneous¶
| Feature | Support |
|---|---|
| Multi-CPI | Not Supported |
| Native Disk Resize | Supported, v39+ |
| Native Disk Update | Supported, v50+ |
| Generic VM Resource Configuration | Supported, v33+ |
| Compute Gallery | Supported, v52.0.1+ |