This article describes how to execute an ACI application in a Workflow using the Workflow RUN button that allows users to start the application job and monitor it.
2.0 Execute the ACI Application using Azure Service Principal
Ensure that the Compute Clusters are configured in Fortanix Confidential Computing Manager. A compute cluster is a set of nodes that run containerized applications. Compute clusters are used to run Fortanix Confidential Computing Manager workflows. For more information on how to configure a compute cluster in Fortanix CCM and access the cluster, refer to Section 3.0: Configure the Cluster using Azure Service Principal.
2.2 Create a Cluster
Ensure that you have set up a cluster using Azure Service Principal as a worker node in the Fortanix CCM. For more information, refer to the Administrator's Guide: Fortanix CCM with Azure Service Principal.
3.0 Configure the Cluster using Azure Service Principal
Perform the following steps to configure the Azure Service Principal credentials in Fortanix CCM:
- Click the Infrastructure → Compute Clusters menu item in the Fortanix CCM UI left navigation bar and click the + ADD COMPUTE CLUSTER button to configure a new compute cluster.
Figure 1: Add Compute Cluster
- On the Add Cluster page, enter the following details:
- Name: Enter a required name of the cluster.
- Description: Enter the required details about the cluster. However, this is optional.
- Type: Select the ACI via Service Principal option from the drop down menu.
Figure 2: Add Cluster Form
- After you select the ACI via Service Principal option, rest of the parameters appear on the screen.
- Location: The Azure region where the deployment occurs . If the required location is not available in the provided list, select the Other option and manually enter the specific location.
- ACI configuration:
- App ID: The Azure Active Directory application ID or client ID used for application identification.
- App Passcode: The application secret required for authentication.
- Tenant ID: The unique identifier of the Azure Active Directory instance, known as the Directory ID.
- Subscription: The subscription ID where all resources are managed; it contains information related to resources.
- Resource Group: The resource group designated for managing all containers and deployments. Figure 3: Other Parameters
- Click the ADD CLUSTER button to save the cluster configuration.
Figure 4: Compute Cluster Created
The compute cluster is now successfully created.
4.0 Configure the ACI Application Workflow
For more information, refer to the User's Guide: Create, Update, Clone, and Delete Workflows.
Perform the following steps to configure the workflow:
- Navigate to the Workflows → Approved menu item in the Fortanix CCM UI left navigation bar.
- From the list of approved workflows, select a workflow that has a single application since Fortanix CCM supports only single job deployments.
Figure 5: Select Approved Workflow
- In the detailed view of the selected workflow, you will notice the disabled RUN button. The RUN button will be disabled if you have not configured the Azure account and Location. Click the icon to configure these details and enable the RUN button.
Figure 6: Configuration Button
- In the RUN WORKFLOW window, enter the following details:
- Deployment Type: The workflow deployment type. Select the Azure Confidential Instances (Single Job) option from the drop down menu.
- Azure account: Select the ACI cluster option from the drop down menu.
- Location: The Azure region where the deployment occurs.
Figure 7: Configure Specification
- Click the SAVE CONFIGURATION button to save the changes.
5.0 Run the ACI Application Workflow
Ensure that you have created an image registry in the Fortanix CCM UI. For more information, refer to User's Guide: Image Registry. A registry for the image used in the ACI application workflow is required to be created in the Fortanix CCM account, so at runtime, the credentials are passed to the Azure container instance to pull the image.
Perform the following steps to run the ACI workflow application:
- Configure the image pull secret.
- Click the RUN button in the detailed view of an approved workflow enabled in the Section 4.0: Configuring the ACI Application Workflow.
Figure 9: Run the application
- In the RUN WORKFLOW window, confirm the values of each parameter and click the RUN button to run the workflow.
Figure 10: Run workflow
Observe the running indicator at the bottom of the workflow.
If there is a need to halt the execution at any point, click the STOP button. This action will re-enable the RUN button.
- The Execution Log will display the execution status if the application executes successfully.
Figure 11: Running workflow
The EXECUTION LOG window provides a detailed log of the run. You can also download the log using the DOWNLOAD button.
Figure 12: Log details