AKS now supports the ability to create clusters with BYOK enabled for nodes using ephemeral OS disk if the chosen VM SKU supports ephemeral. BYOK support provides you the option to use your own customer managed keys (CMK) to encrypt your ephemeral OS Disks, providing you increased control over your encryption keys.
Learn more.