Page Comparison

Project Details 

Subscription* 

Your account subscription.
NOTE: All resources in an Azure subscription are billed together.  

Resource Group*

• Select the name of your resource group. The resource group is a collection of resources that share the same lifecycle, permissions, and policies.

• You can also create a new resource group using the Create new option.

NOTE: You must add this role Managed Application Contributor Role at the subscription level if you want to add a new Resource Group. 

Instance details 

Region* 

Select the same region as of Resource group. 

Kyvos Cluster Name*

Enter a unique name that you want to provide for the Kyvos application. 

Use Custom Image

To use customized Operating System Image.

If you select this checkbox, the followings fields are displayed.

• Gallery Subscription ID:Enter the subscription ID in which gallery resides.

• Gallery Resource Group Name: Enter the Resource Group name in which gallery resides.

• Gallery Name:Enter the name of the shared image gallery.

• Gallery Image Definition Name: Enter the name of the image definition.

• Gallery Image Version Name: Enter the name of the image version.

Authentication Information

SSH Public Key Source

Select the option to use existing key stored key in Azure or public key from the list.

• Use existing key stored key in Azure: Select the stored keys from the list.

• Use existing public key: Enter SSH public key.

SSH Private key

Provide an RSA private key in the single-line format.

Secret Key For Kyvos Bundle Download

Enter the Secret key to access Kyvos bundle.

License File Value

Enter a valid Kyvos license key. It should be in 64-bit encoded format.

Enable Managed Identity Creation

• Select either Yes or No.

• If you select Yes, a new managed identity created and attached to the Kyvos VMs.

• If you select No, the Managed Identity Name list is displayed. Select the name of the user Managed Identity to be attached with all Kyvos VMs.

Compute Cluster

Compute Cluster Type

Select Kyvos Native from the list:

Kyvos Native Type

If you select the Kyvos Native option from the Compute Cluster Type list, the Kyvos Native Type list is displayed.

Select one of the following options from the list:

• Query Engine

• Kubernetes

Virtual Machine for Kyvos Manager

Select this checkbox to use Virtual Machine for Kyvos Manager. The Kyvos Manager and Web Server Configurations section will be displayed.

NOTE: For Wizard-based deployment (STACK-based), you must clear the Virtual Machine for Kyvos Manager checkbox. The Kyvos Manager and Web Server Configurations section will not be displayed.

Kyvos Manager and Web Server Configurations

Instance Type

Select the size of Kyvos Manager instance.
This is the default instance type
2x Standard D4s v4
4 vcpus, 16 GB memory

NOTE: You can also change the Instance size using the Change Size link.

Disk Type

Select the disk type applicable for Kyvos Manager Instance.

Disk Size

Enter the required disk size for each Kyvos Manager Instance in GB.

Repository for Kyvos Manager

Select the repository for Kyvos Manager from the list.

• Bundled Postgres : To select bundled Postgres as a repository for Kyvos Manager. 

• Create New Azure Postgres : To create a new external Azure Postgres repository for Kyvos Manager. 

• Use Existing Azure Postgres : To use the existing external Azure Postgres repository for Kyvos Manager. 

Kyvos Manager Repository Username

Enter the user name used for Kyvos Manager Repository.

Kyvos Manager Repository Database

Enter the database name used for Kyvos Manager Repository.

Kyvos Manager Azure Postgres Server Name

Enter the name of the existing Kyvos Manager Azure Postgres Server.

Kyvos Manager Repository Password

Enter the password used for Postgres.
NOTE: Password must contain 8 to 128 characters from three of the following categories: English uppercase letters or English lowercase letters, numbers (0 through 9), and non-alphanumeric characters (for example, !, $, #, %).

Kyvos Manager Azure Postgres Server Resource Group Name

Enter the Resource Group in which above Kyvos Manager Azure Postgres Server resides.

NOTE: This option is only displayed when you select the Use Existing Azure Postgres as Kyvos Manager repository.

Kyvos Manager Postgres TLS Type

Select Yes if Kyvos Manager Postgres is TLS enabled.

External Repository for Kyvos

Select this checkbox to create to create a PostgreSQL based repository using Azure. Otherwise, the Pre-bundled PostgreSQL based Kyvos repository will be used.

Kyvos Repository

Select Kyvos repository from the list. You can create a new instance or use the existing repository.

Virtual Machine Type For Kyvos Postgres

Virtual Machine type which will be launched for Kyvos PostgreSQL.

Click the Change Size link to select the required VM size. Select the Virtual Machine size and click Select.

Enable HA For Kyvos Postgres

Select Yes to enable High Availability for Kyvos PostgreSQL pricing tier.

Backup Retention For Kyvos Postgres

Enter number of days the backup should be kept for Kyvos PostgreSQL. The value can be between 7 to 35.

Kyvos Repository Password

Enter the password used for Postgres. Note: Password must contain 8 to 128 characters from three of the following categories: English uppercase letters or English lowercase letters, numbers (0 through 9), and non-alphanumeric characters (for example, !, $, #, %).

Web Portal High Availability

Selecting this checkbox will enable Web Server Configurations.

NOTE: One additional Web Server instance will be created along with Kyvos Manager instance as you selected Web Portal High Availability.

BI Configurations

Instance Type

Select the size of BI instances.
This is the default instance type
2x Standard D8s v4
8 vcpus, 32 GB memory

NOTE: You can also change the Instance size using the Change Size link.

BI Instance High Availability

Select this to enable High Availability for BI Instances.

Disk Type

Select the disk type applicable for BI Instance.

Disk Size

Enter the disk size applicable for each BI Instance in GB.

Query Engines Configurations

Instance Type*  

Select the size of Query Engine instances.

NOTE: By default, the 1x Standard E4ds v4 Query Engine instance size is displayed. Click the Change Size link to select the required VM size. Select the Virtual Machine size and click Select. 

Instance Count

Enter the number of Query Engine instances that you want to create in the Kyvos Cluster. or You can use the Instance Count slider to increase or decrease the Query Engine instance count. 

NOTE: You can select a minimum of 3 Query Engine instances and a maximum of 30 Query Engine instances.

Disk Count per Query Engine

Select the disk size applicable for each Query Engine Instance.

Disk Type

Select the disk type applicable for QE Instance.

Disk Size

Enter the disk size applicable for each QE Instance in GB.

Create New Key Vault

Select Yes to create a new key Vault.

Select No to use existing key vault and complete the following fields:

• Vault URL: Provide the Key Vault URL to use existing Key Vault.
  NOTE: If the field is left blank, a new Key Vault will be created.

• Vault Resource Group: Enter name of the Resource group in which key vault is deployed.

Create (VNet)

• Select Yes to deploy Kyvos using existing virtual network, and complete the following parameters:  

  • Virtual Network: Select a virtual network where you want to deploy Kyvos cluster with a CIDR range between /16 to /24.

  • Private DNS Zone Resource ID: Resource ID of existing Private DNS Zone which will be used with Flexible Server. If you want to create new Private DNS Zone, leave the value blank.
    NOTE: This field is displayed only when you use the Flexible Server for Kyvos or Kyvos Manager repository.

• Select No to deploy Kyvos using existing virtual Network, and complete the following parameters:  

  • Select Virtual Network: Select the Virtual Network in which VMs will be running.

  • VM Subnet Name: Select the name of the subnet in which VMs will be running. The Subnet should be a part of above Virtual Network.

  • Application Gateway Subnet Name: Select the name of the subnet in which Application Gateway will be created. The Subnet should be a part of above Virtual Network. A separate subnet is required for Application Gateway.

  • Kubernetes Subnet Name: Enter the name of the subnet in which Azure Kubernetes Service (AKS) will be created. The subnet must be part of the specified Virtual Network and be a separate /23 subnet specifically for AKS.
    NOTE: This option is displayed only when if you select the Kubernetes option from the Kyvos Native Type list.

  • Create Security Group:

    • Yes: Enter the range of IP addresses allowed to access Kyvos Instances. Enter0.0.0.0/0 to allow all users access in the Network Security Group Ip WhiteList option.

    • No: Enter the name of the security group that can be used to access the VMs in the Security Group Name option.

Select the Deploy with Enhanced Security checkbox to enhance Security Enables advance security for Storage Account, Key Vault and Virtual Machines.
Complete the following fields:

• Firewall IP White List: Enter IP rules to be set for the Key Vault and Azure Storage Account. Value should be comma-separated values passed as list. Exa- ["0.0.0.0"]

• Enable Firewall on Storage Account: Select this checkbox to enable Firewall rule on Storage Account.

• Select Databricks Virtual Network: Select the name of the Databricks Virtual Network.

• Select Databricks private subnet: Select the name of the private Subnet in which Databricks VMs will be running. The Subnet should be part of above Virtual Network.

• Select Databricks public subnet: Select the name of the public subnet in which Databricks VMs will be running. The Subnet should be part of the above Virtual Network.

Parameter

Description

Create (VNet)

• Select Yes to deploy Kyvos using existing virtual network, and complete the following parameters:  

  • Virtual Network: Select a virtual network where you want to deploy Kyvos cluster with a CIDR range between /16 to /24.

  • Private DNS Zone Resource ID: Resource ID of existing Private DNS Zone which will be used with Flexible Server. If you want to create new Private DNS Zone, leave the value blank.
    NOTE: This field is displayed only when you use the Flexible Server for Kyvos or Kyvos Manager repository.

• Select No to deploy Kyvos using existing virtual Network, and complete the following parameters:  

  • Select Virtual Network: Select the Virtual Network in which VMs will be running.

  • VM Subnet Name: Select the name of the subnet in which VMs will be running. The Subnet should be a part of above Virtual Network.

  • Application Gateway Subnet Name: Select the name of the subnet in which Application Gateway will be created. The Subnet should be a part of above Virtual Network. A separate subnet is required for Application Gateway.

  • Kubernetes Subnet Name: Enter the name of the subnet in which Azure Kubernetes Service (AKS) will be created. The subnet must be part of the specified Virtual Network and be a separate /23 subnet specifically for AKS.
    NOTE: This option is displayed only when if you select the Kubernetes option from the Kyvos Native Type list.

  • Create Security Group:

    • Yes: Enter the range of IP addresses allowed to access Kyvos Instances. Enter0.0.0.0/0 to allow all users access in the Network Security Group Ip WhiteList option.

    • No: Enter the name of the security group that can be used to access the VMs in the Security Group Name option.

Advanced Network Configuration