Public Preview: Secure ingestion and pod placement for Azure Monitor pipeline

We are announcing several capabilities in public preview with Azure Monitor pipeline.

• Secure Ingress to Azure Monitor pipeline from external endpoints (TLS/mTLS) with Bring Your Own Certificates: BYOC empowers enterprises to maintain control and flexibility over certificate management, meeting regulatory and security requirements while integrating with existing PKI infrastructure. With this release, Azure Monitor pipeline supports both TLS and mutual TLS (mTLS) for TCP-based receivers, allowing customers to:
• Configure mTLS with their own certificates for client and server authentication
• Configure TLS with their own server certificates and client CA certificate
• Pod placement: Azure Monitor pipeline provides native controls for managing how Azure Monitor pipeline instances are scheduled across Kubernetes cluster nodes. The execution Placement configuration allows customers to:
• Target specific nodes based on their capabilities (e.g., high-resource nodes, specific zones)
• Control instance distribution to prevent resource contention
• Enforce isolation policies for high-scale deployments

Learn more:

• Azure Monitor pipeline TLS configuration
• Azure Monitor pipeline pod placement