Skip to content

Commit 8386b10

Browse files
rwestMSFTrwestMSFT
authored
Content freshness pass (#36058)
1 parent 007a9ae commit 8386b10

File tree

10 files changed

+233
-226
lines changed

10 files changed

+233
-226
lines changed

‎docs/linux/quickstart-sql-server-containers-azure.md‎

Lines changed: 32 additions & 30 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ title: "Quickstart: Deploy a SQL Server Container Cluster on Azure Kubernetes Se
33
description: This tutorial shows how to deploy a SQL Server high availability solution with Azure Kubernetes Service or Azure Red Hat OpenShift.
44
author: rwestMSFT
55
ms.author: randolphwest
6-
ms.date: 10/20/2025
6+
ms.date: 12/11/2025
77
ms.service: sql
88
ms.subservice: linux
99
ms.topic: quickstart
@@ -334,24 +334,24 @@ You create a manifest to describe the container, based on the SQL Server [mssql-
334334

335335
Copy the preceding code into a new file, named `sqldeployment.yaml`. Update the following values:
336336

337-
- MSSQL_PID `value: "Developer"`: Sets the container to run SQL Server Developer edition. Developer edition isn't licensed for production data. If the deployment is for production use, set the appropriate edition (`Enterprise`, `Standard`, or `Express`). For more information, see [How to license SQL Server](https://www.microsoft.com/sql-server/sql-server-2022-pricing).
337+
| Parameter | Value | Description |
338+
| --- | --- | --- |
339+
| `MSSQL_PID` | `Developer` | Sets the container to run [!INCLUDE [sssql22-md](../includes/sssql22-md.md)] Developer edition. Developer edition isn't licensed for production data. If the deployment is for production use, set the appropriate edition (`Enterprise`, `Standard`, or `Express`). For more information, see [How to license SQL Server](https://www.microsoft.com/sql-server/sql-server-2022-pricing). |
340+
| `persistentVolumeClaim` | `mssql-data` | This value requires an entry for `claimName` that maps to the name used for the persistent volume claim. This tutorial uses `mssql-data`. |
341+
| `name` | `MSSQL_SA_PASSWORD` | Configures the container image to set the `sa` password, as defined in this section. |
338342

339-
[!INCLUDE [editions-sql-server-developer](includes/editions-sql-server-developer.md)]
340-
341-
- `persistentVolumeClaim`: This value requires an entry for `claimName:` that maps to the name used for the persistent volume claim. This tutorial uses `mssql-data`.
342-
343-
- `name: MSSQL_SA_PASSWORD`: Configures the container image to set the `sa` password, as defined in this section.
344-
345-
```yaml
346-
valueFrom:
347-
secretKeyRef:
348-
name: mssql
349-
key: MSSQL_SA_PASSWORD
350-
```
343+
```yaml
344+
valueFrom:
345+
secretKeyRef:
346+
name: mssql
347+
key: MSSQL_SA_PASSWORD
348+
```
351349

352-
When Kubernetes deploys the container, it refers to the secret named `mssql` to get the value for the password.
350+
When Kubernetes deploys the container, it refers to the secret named `mssql` to get the value for the password.
353351

354-
- `securityContext`: Defines privilege and access control settings for a pod or container. In this case, it's specified at the pod level, so all containers adhere to that security context. In the security context, we define the `fsGroup` with the value `10001`, which is the Group ID (GID) for the `mssql` group. This value means that all processes of the container are also part of the supplementary GID `10001` (`mssql`). The owner for volume `/var/opt/mssql` and any files created in that volume will be GID `10001` (the `mssql` group).
352+
| Parameter | Description |
353+
| --- | --- |
354+
| `securityContext` | Defines privilege and access control settings for a pod or container. In this case, it's specified at the pod level, so all containers adhere to that security context. In the security context, we define the `fsGroup` with the value `10001`, which is the Group ID (GID) for the `mssql` group. This value means that all processes of the container are also part of the supplementary GID `10001` (`mssql`). The owner for volume `/var/opt/mssql` and any files created in that volume will be GID `10001` (the `mssql` group). |
355355

356356
> [!WARNING]
357357
> By using the `LoadBalancer` service type, the SQL Server instance is accessible remotely (via the Internet) at port 1433.
@@ -495,22 +495,24 @@ You create a manifest to describe the container, based on the SQL Server [mssql-
495495

496496
Copy the preceding code into a new file, named `sqldeployment.yaml`. Update the following values:
497497

498-
- MSSQL_PID `value: "Developer"`: Sets the container to run SQL Server Developer edition. Developer edition isn't licensed for production data. If the deployment is for production use, set the appropriate edition (`Enterprise`, `Standard`, or `Express`). For more information, see [How to license SQL Server](https://www.microsoft.com/sql-server/sql-server-2022-pricing).
498+
| Parameter | Value | Description |
499+
| --- | --- | --- |
500+
| `MSSQL_PID` | `Developer` | Sets the container to run [!INCLUDE [sssql22-md](../includes/sssql22-md.md)] Developer edition. Developer edition isn't licensed for production data. If the deployment is for production use, set the appropriate edition (`Enterprise`, `Standard`, or `Express`). For more information, see [How to license SQL Server](https://www.microsoft.com/sql-server/sql-server-2022-pricing). |
501+
| `persistentVolumeClaim` | `mssql-data` | This value requires an entry for `claimName` that maps to the name used for the persistent volume claim. This tutorial uses `mssql-data`. |
502+
| `name` | `MSSQL_SA_PASSWORD` | Configures the container image to set the `sa` password, as defined in this section. |
499503

500-
- `persistentVolumeClaim`: This value requires an entry for `claimName:` that maps to the name used for the persistent volume claim. This tutorial uses `mssql-data`.
501-
502-
- `name: MSSQL_SA_PASSWORD`: Configures the container image to set the `sa` password, as defined in this section.
503-
504-
```yaml
505-
valueFrom:
506-
secretKeyRef:
507-
name: mssql
508-
key: MSSQL_SA_PASSWORD
509-
```
504+
```yaml
505+
valueFrom:
506+
secretKeyRef:
507+
name: mssql
508+
key: MSSQL_SA_PASSWORD
509+
```
510510

511-
When OpenShift deploys the container, it refers to the secret named `mssql` to get the value for the password.
511+
When OpenShift deploys the container, it refers to the secret named `mssql` to get the value for the password.
512512

513-
- `securityContext`: Defines privilege and access control settings for a pod or container. There are settings applied at both the pod and container level. At the pod level, this option defines the `fsGroupChangePolicy` with the value `OnRootMismatch`. This ensures that the `fsGroup` selected by OpenShift is used for all the files in the `/var/opt/mssql` volume. At the container level, this option permits the `NET_BIND_SERVICE` capability, which allows the container to bind to ports lower than 1024.
513+
| Parameter | Description |
514+
| --- | --- |
515+
| `securityContext` | Defines privilege and access control settings for a pod or container. There are settings applied at both the pod and container level. At the pod level, this option defines the `fsGroupChangePolicy` with the value `OnRootMismatch`. This ensures that the `fsGroup` selected by OpenShift is used for all the files in the `/var/opt/mssql` volume. At the container level, this option permits the `NET_BIND_SERVICE` capability, which allows the container to bind to ports lower than 1024. |
514516

515517
> [!WARNING]
516518
> By using the `LoadBalancer` service type, the SQL Server instance is accessible remotely (via the Internet) at port 1433.
@@ -584,7 +586,7 @@ You can use the following applications to connect to the SQL Server instance.
584586

585587
To connect with `sqlcmd`, run the following command.
586588

587-
```cmd
589+
```console
588590
sqlcmd -S <External IP address> -U sa -P "<password>"
589591
```
590592

‎docs/linux/sql-server-linux-ad-auth-rotate-keytabs.md‎

Lines changed: 7 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ description: Recommendations on rotating keytabs for SQL Server on Linux using a
44
author: amitkh-msft
55
ms.author: amitkh
66
ms.reviewer: vanto, randolphwest
7-
ms.date: 05/02/2025
7+
ms.date: 12/11/2025
88
ms.service: sql
99
ms.subservice: linux
1010
ms.topic: how-to
@@ -125,13 +125,12 @@ adutil keytab createauto -k /var/opt/mssql/secrets/mssql.keytab -p 1433 -H mssql
125125
adutil keytab create -k /var/opt/mssql/secrets/mssql.keytab -p sqluser --password '<newpassword>' --kvno 3
126126
```
127127

128-
`-k:` is the path to the current keytab that is being used by [!INCLUDE [ssnoversion-md](../includes/ssnoversion-md.md)] and set using the option `network.kerberoskeytabfile` in the `mssql.conf` file.
129-
130-
`-H:` is the fully qualified domain name of the [!INCLUDE [ssnoversion-md](../includes/ssnoversion-md.md)] host.
131-
132-
`-p:` is the port that [!INCLUDE [ssnoversion-md](../includes/ssnoversion-md.md)] service is configured to listen on in the first command. In the second command, `-p` represents the `network.privilegedadaccount` that you're going to update the password for.
133-
134-
`kvno:` value needs to be the current kvno + 1. The current **kvno** value is obtained from step 3.
128+
| Parameter | Description |
129+
| --- | --- |
130+
| `-k` | The path to the current keytab that is being used by [!INCLUDE [ssnoversion-md](../includes/ssnoversion-md.md)] and set using the option `network.kerberoskeytabfile` in the `mssql.conf` file. |
131+
| `-H` | The fully qualified domain name of the [!INCLUDE [ssnoversion-md](../includes/ssnoversion-md.md)] host. |
132+
| `-p` | The port that [!INCLUDE [ssnoversion-md](../includes/ssnoversion-md.md)] service is configured to listen on in the first command. In the second command, `-p` represents the `network.privilegedadaccount` that you're going to update the password for. |
133+
| `kvno` | Value needs to be the current kvno + 1. The current **kvno** value is obtained from step 3. |
135134
136135
Once you run the above commands, you must provide your choice of encryption type for the keytab entries. Ensure you choose the right one for your environment.
137136

0 commit comments

Comments
 (0)