Microsoft Azure Container Service Engine - SSH
SSH Key Management
SSH Key Generation
When creating container services, you will need an SSH RSA key for access. Use the following articles to create your SSH RSA Key:
- Windows - https://www.digitalocean.com/community/tutorials/how-to-create-ssh-keys-with-putty-to-connect-to-a-vps
- Linux - https://help.ubuntu.com/community/SSH/OpenSSH/Keys#Generating_RSA_Keys
- Mac - https://help.github.com/articles/generating-ssh-keys/#platform-mac
Key Management and Agent Forwarding with Windows Pageant
Pageant enables agent forwarding. This means that you can SSH from any of the master nodes directly to any of the agent nodes. Here are the steps to enable this:
- Download and install Putty Pageant.
- Double Click on pageant.exe to run, and you will notice it appears in your tray
- Right click on Pageant in the tray and click "View Keys"
- Click "Add Key", and add your PPK generated in (#ssh-key-generation).
- Now try out the configuration by opening up Putty.exe
- Type in "azureuser@FQDN" and port 22 where FQDN is the management name returned after deploying a cluster and port:
- Browse to Connection->SSH->Auth and click "Allow agent forwarding":
- Click "Open" to connect to the master. Now ssh directly to an agent, and you will connect automatically. For DC/OS, you can find the hostname of agent from Dashboard on the Nodes page.
Create Port 80 tunnel to the Master
The DC/OS admin router requires an SSH tunnel from port 80 to port 80.
Verify you have nothing listening on port 80:
- on linux or Mac type
sudo netstat -anpe | grep ":80"and stop any service or process listening on port 80
- on windows, at the command prompt type
netstat -ano | findstr /c:":80"and stop any service or process listening on port 80.
Get the "sshMaster0" command:
- If using Powershell or CLI, the output parameters are the last values printed
- If using Portal, to get the output you need to:
SSH to the machine
- on linux or Mac, modify the ssh command from "sshMaster0", and add
-L 80:localhost:80, then use that command to connect
- on Windows, open Putty and in addition to the instructions from agent forwarding, browse to Connection->SSH->Tunnel and add "80" to Source Port and "localhost:80" to Destination.