Merge pull request #17 from bgklein/patch-8

Update best-practices.md
changeworld · Aug 28, 2019 · 988f34f · 988f34f
2 parents 3d2caa7 + bb87b65
commit 988f34f
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/articles/batch/best-practices.md b/articles/batch/best-practices.md
@@ -17,6 +17,14 @@ TODO: Add intro here
 TODO: Add best practices here
 
 ## Compute nodes
+### Authenticate to another service and handle secrets on the node
+The recommended way to authenticate with services is to
+1) Create a certificate
+2) Upload the certificate to Azure Batch
+3) Create a Service Principal in AAD
+4) Add the certificate to the Service Principal
+5) When creating your pool, specify the certificate on the certificates property.
+6) The certificate will then be installed on each of your compute nodes and can be used to authenticate with your Service Principal. This service principal can then access any services it has access to such as KeyVault or EventGrid.
 
 TODO: Add best practices here