---
# System prepended metadata

title: Edge365 ssh aks node
tags: [Edge365]

---

# Edge365 ssh aks node

1. Prepare your RSA key ready
2. Configuring VMSS and update VMs under it
3. Have a azure VM that can connect to node
4. Copy RSA key to the above VM
5. VM can ssh into node



### 1. Prepare your RSA key ready
* copy ssh key from azure resource
* ssh-keygen -m PEM -t rsa -b 4096

You need to prepare two files, id_rsa(private-key) and id_rsa.pub(public-key).

### 2. Configuring VMSS and update VMs under it

* Update public ssh key in vm node under VMSS.
You need to add VMSS extension VMAccessForLinux
--resource-group MC_edge365_edge365_southeastasia(find it in resource-group portal)
--vmss-name aks-agentpool-XXXXXXX
--name VMAccessForLinux
--protected-settings "{\"username\":\"azureuser\",\"ssh_key\":\"public ssh key here\"

```
az vmss extension set --resource-group MC_EDGE365-DEV_EDGE365-DEV_SOUTHEASTASIA --vmss-name aks-agentpool-61981316-vmss --name VMAccessForLinux --publisher Microsoft.OSTCExtensions --version 1.4 --protected-settings "{\"username\":\"azureuser\",\"ssh_key\":\"ssh-rsa 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\"}
```
* update VMSS instances

`az vmss update-instances --instance-ids '*' --resource-group MC_edge365-dev_edge365-dev_southeastasia --name aks-agentpool-61981316-vmss`

### 3. Have a azure VM that can connect to node

Find a azure vm like edge365-mongodb-0 which can connect to vmss instances through private-ip

### 4. Copy RSA key to the above VM
Login into azure vm and copy private-key (id_rsa) from step1
chmod 400 private-key

### 5. VM can ssh into node
You can ssh to aks node by ssh -i private-key azureuser@private-ip

```
ssh -i id_rsa azureuser@10.225.0.5
```

reference: https://ystatit.medium.com/azure-ssh-into-aks-nodes-471c07ad91ef

###### tags: `Edge365`
