Install Portworx on AKS


Install the Operator

Enter the following kubectl create command to deploy the operator:

kubectl create -f

Generate the specs

To install Portworx with Kubernetes, you must first generate Kubernetes manifests that you will deploy in your cluster:

  1. Navigate to PX-Central and log in, or create an account.

  2. Click Continue with Portworx Enterprise option:

    Px-central Product Catalog

  3. Choose an appropriate license for your requirement and click Continue:

    Screenshot showing Portworx license selector

NOTE: If you’re using a cloud provider, do not add volumes of different types when configuring storage devices for during spec generation. For example, do not add both GP2 and GP3 for AWS, standard and ssd for GCP, or Standard and Premium for Azure. This can cause performance issues and errors.

NOTE: To deploy Portworx to an Azure Sovereign cloud, you must go to the Customize page and set the value of the AZURE_ENVIRONMENT variable. The following example screenshot shows how you can deploy Portworx to the Azure US Government cloud:

Screenshot showing the AZURE_ENVIRONMENT variable

(Optional) Enable Azure cloud drive encryption using your own key

You can encrypt your Azure cloud drives that are managed by Portwox by using your own key stored in Azure Key Vault.


Azure KeyVault instance created in the same region as the AKS cluster.


  1. Create a Disk Encryption Set ID by using the instructions on this page in the Microsoft documentation.

  2. Append the diskEncryptionSetID value from step 1 to the spec and deploy Portworx using the updated spec:

        - type=Premium_LRS,size=50,diskEncryptionSetID=/subscriptions/<subscription>/resourceGroups/<resource-group>/providers/Microsoft.Compute/diskEncryptionSets/<disk-encryption-set-name>
    secretsProvider: azure-kv

Apply the specs

Apply the generated specs to your cluster.

kubectl apply -f px-spec.yaml

Monitor the Portworx nodes

  1. Enter the following kubectl get command, waiting until all Portworx nodes show as ready in the output:

    kubectl -n kube-system get storagenodes -l name=portworx
  2. Enter the following kubectl describe command with the NAME of one of the Portworx nodes to show the current installation status for individual nodes:

    kubectl -n kube-system describe storagenode <portworx-node-name>
    Type     Reason                             Age                     From                  Message
    ----     ------                             ----                    ----                  -------
    Normal   PortworxMonitorImagePullInPrgress  7m48s                   portworx, k8s-node-2  Portworx image portworx/px-enterprise:2.5.0 pull and extraction in progress
    Warning  NodeStateChange                    5m26s                   portworx, k8s-node-2  Node is not in quorum. Waiting to connect to peer nodes on port 9002.
    Normal   NodeStartSuccess                   5m7s                    portworx, k8s-node-2  PX is ready on this node
    NOTE: In your output, the image pulled will differ based on your chosen Portworx license type and version.


Once you have a running Portworx installation, below sections are useful.

Last edited: Monday, Aug 15, 2022