Skip to content

Commit 2b3ef55

Browse files
AnnaMHuffAnnaMHuff
authored
Merge pull request #312043 from asudbring/tsk554554-sfi-bastion
Update container networking article: inline VM creation with SSH key auth and Bastion improvements
2 parents 653d411 + 2fea15a commit 2b3ef55

1 file changed

Lines changed: 151 additions & 7 deletions

File tree

‎articles/virtual-network/deploy-container-networking-docker-linux.md‎

Lines changed: 151 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ author: asudbring
66
ms.author: allensu
77
ms.service: azure-virtual-network
88
ms.topic: how-to
9-
ms.date: 08/28/2023
9+
ms.date: 02/23/2026
1010
ms.custom:
1111
- template-how-to
1212
- linux-related-content
@@ -22,11 +22,143 @@ The Azure CNI plugin enables per container/pod networking for stand-alone docker
2222

2323
- An Azure account with an active subscription. [Create an account for free](https://azure.microsoft.com/pricing/purchase-options/azure-account?cid=msft_learn).
2424

25-
[!INCLUDE [virtual-network-create-with-bastion.md](~/reusable-content/ce-skilling/azure/includes/virtual-network-create-with-bastion.md)]
25+
## Create a resource group
26+
27+
1. In the portal, search for and select **Resource groups**.
28+
29+
1. Select **+ Create**.
30+
31+
1. In the **Basics** tab of **Create a resource group**, enter, or select the following information:
32+
33+
| Setting | Value |
34+
| ------- | ----- |
35+
| Subscription | Select your subscription. |
36+
| Resource group | Enter **test-rg**. |
37+
| Region | Select **East US 2**. |
38+
39+
1. Select **Review + create**.
40+
41+
1. Select **Create**.
42+
43+
## Create a virtual network
44+
45+
The following procedure creates a virtual network with a resource subnet.
46+
47+
1. In the portal, search for and select **Virtual networks**.
48+
49+
1. On the **Virtual networks** page, select **+ Create**.
50+
51+
1. On the **Basics** tab of **Create virtual network**, enter, or select the following information:
52+
53+
| Setting | Value |
54+
|---|---|
55+
| **Project details** | |
56+
| Subscription | Select your subscription. |
57+
| Resource group | Select **test-rg**. |
58+
| **Instance details** | |
59+
| Name | Enter **vnet-1**. |
60+
| Region | Select **East US 2**. |
61+
62+
1. Select **Next** to proceed to the **Security** tab.
63+
64+
1. Select **Next** to proceed to the **IP Addresses** tab.
65+
66+
1. In the address space box in **Subnets**, select the **default** subnet.
67+
68+
1. In **Edit subnet**, enter or select the following information:
69+
70+
| Setting | Value |
71+
|---|---|
72+
| **Subnet details** | |
73+
| Subnet template | Leave the default **Default**. |
74+
| Name | Enter **subnet-1**. |
75+
| Starting address | Leave the default of **10.0.0.0**. |
76+
| Subnet size | Leave the default of **/24 (256 addresses)**. |
77+
78+
1. Select **Save**.
79+
80+
1. Select **Review + create** at the bottom of the screen, and when validation passes, select **Create**.
81+
82+
## Deploy Azure Bastion
83+
84+
Azure Bastion uses your browser to connect to VMs in your virtual network over Secure Shell (SSH) or Remote Desktop Protocol (RDP) by using their private IP addresses. The VMs don't need public IP addresses, client software, or special configuration. For more information about Azure Bastion, see [Azure Bastion](/azure/bastion/bastion-overview).
85+
86+
>[!NOTE]
87+
>[!INCLUDE [Pricing](~/reusable-content/ce-skilling/azure/includes/bastion-pricing.md)]
88+
89+
1. In the search box at the top of the portal, enter **Bastion**. Select **Bastions** in the search results.
90+
91+
1. Select **+ Create**.
92+
93+
1. In the **Basics** tab of **Create a Bastion**, enter, or select the following information:
94+
95+
| Setting | Value |
96+
|---|---|
97+
| **Project details** | |
98+
| Subscription | Select your subscription. |
99+
| Resource group | Select **test-rg**. |
100+
| **Instance details** | |
101+
| Name | Enter **bastion**. |
102+
| Region | Select **East US 2**. |
103+
| Tier | Select **Developer**. |
104+
| **Configure virtual networks** | |
105+
| Virtual network | Select **vnet-1**. |
106+
107+
1. Select **Review + create**.
108+
109+
1. Select **Create**.
26110

27111
It can take a few minutes for the Bastion host to deploy. You can continue with the steps while the Bastion host is deploying.
28112

29-
[!INCLUDE [create-test-virtual-machine-linux.md](~/reusable-content/ce-skilling/azure/includes/create-test-virtual-machine-linux.md)]
113+
## Create a virtual machine
114+
115+
1. In the search box at the top of the portal, enter **Virtual machine**. Select **Virtual machines** in the search results.
116+
117+
1. Select **+ Create** then **Azure virtual machine**.
118+
119+
1. In **Create a virtual machine** enter, or select the following information in the **Basics** tab:
120+
121+
| Setting | Value |
122+
| ------- | ----- |
123+
| **Project details** | |
124+
| Subscription | Select your subscription. |
125+
| Resource group | Select **test-rg**. |
126+
| **Instance details** | |
127+
| Virtual machine name | Enter **vm-1**. |
128+
| Region | Select **(US) East US 2**. |
129+
| Availability options | Select **No infrastructure redundancy required**. |
130+
| Security type | Select **Standard**. |
131+
| Image | Select **Ubuntu Server 24.04 LTS - x64 Gen2**. |
132+
| VM architecture | Leave the default of **x64**. |
133+
| Size | Select a size. |
134+
| **Administrator account** | |
135+
| Authentication type | Select **SSH public key**. |
136+
| Username | Enter a username. |
137+
| SSH public key source | Select **Generate new key pair**. |
138+
| Key pair name | Enter **vm-1-key**. |
139+
| **Inbound port rules** | |
140+
| Public inbound ports | Select **None**. |
141+
142+
1. Select **Next: Disks** then **Next: Networking**.
143+
144+
1. In the Networking tab, enter, or select the following information:
145+
146+
| Setting | Value |
147+
| ------- | ----- |
148+
| **Network interface** | |
149+
| Virtual network | Select **vnet-1**. |
150+
| Subnet | Select **subnet-1 (10.0.0.0/24)**. |
151+
| Public IP | Select **None**. |
152+
| Network interface (NIC) network security group | Select **Advanced**. |
153+
| Configure network security group | Select **Create new**.</br> In **Name** enter **nsg-1**.</br> Select **OK**. |
154+
155+
1. Leave the rest of the options at the defaults and select **Review + create**.
156+
157+
1. Select **Create**.
158+
159+
1. A **Generate new key pair** pop-up appears. Select **Download private key and create resource**.
160+
161+
1. The private key file downloads to your computer. Save the private key file to a known location on your computer. This key is used to connect to the virtual machine with Azure Bastion in a later step.
30162

31163
## Add IP configuration
32164

@@ -79,9 +211,15 @@ Sign-in to the virtual machine you created previously with the Azure Bastion hos
79211

80212
1. Select **vm-1**.
81213

82-
1. In the **Overview** of **vm-1**, select **Connect** then **Bastion**.
214+
1. In the **Overview** of **vm-1**, select **Connect** then **Connect via Bastion**.
83215

84-
1. Enter the username and password you created when you deployed the virtual machine in the previous steps.
216+
1. In the **Bastion** connection page, enter or select the following information:
217+
218+
| Setting | Value |
219+
| ------- | ----- |
220+
| Authentication Type | Select **SSH Private Key from Local File**. |
221+
| Username | Enter the username you created. |
222+
| Local File | Select the **vm-1-key** private key file you downloaded. |
85223

86224
1. Select **Connect**.
87225

@@ -101,9 +239,15 @@ For more information about the Azure CNI plugin, see [Microsoft Azure Container
101239

102240
1. Select **vm-1**.
103241

104-
1. In the **Overview** of **vm-1**, select **Connect** then **Bastion**.
242+
1. In the **Overview** of **vm-1**, select **Connect** then **Connect via Bastion**.
105243

106-
1. Enter the username and password you created when you deployed the virtual machine in the previous steps.
244+
1. In the **Bastion** connection page, enter or select the following information:
245+
246+
| Setting | Value |
247+
| ------- | ----- |
248+
| Authentication Type | Select **SSH Private Key from Local File**. |
249+
| Username | Enter the username you created. |
250+
| Local File | Select the **vm-1-key** private key file you downloaded. |
107251

108252
1. Select **Connect**.
109253

0 commit comments

Comments
 (0)