Support VM Disk Encryption
Azure Security Recommendations notice that the disks provisioned as part of the Kubernetes Service cluster are not encrypted. And according to the AKS FAQ (https://docs.microsoft.com/en-us/azure/aks/faq),
"Modifying the resources under the MC_* in the AKS cluster breaks the SLO."
A method to encrypt the disks should be made available.
Lu Liu commented
The lacking of this feature is kind of the last thing preventing us from using AKS in production