Skip to content

Commit 0430b08

Browse files
authored
Update azure-kubernetes-service-cluster-backup-policy.md
1 parent e430b79 commit 0430b08

File tree

1 file changed

+16
-12
lines changed

1 file changed

+16
-12
lines changed

articles/backup/azure-kubernetes-service-cluster-backup-policy.md

Lines changed: 16 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
---
2-
title: Audit and Enforce Backup Operations for Azure Kubernetes Service clusters using Azure Policy
2+
title: Audit and enforce backup operations for Azure Kubernetes Service clusters using Azure Policy
33
description: 'An article describing how to use Azure Policy to audit and enforce backup operations for all Azure Kubernetes Service clusters created in a given scope'
44
ms.topic: how-to
55
ms.date: 08/26/2024
@@ -8,7 +8,7 @@ author: AbhishekMallick-MS
88
ms.author: v-abhmallick
99
---
1010

11-
# Audit and Enforce Backup Operations for Azure Kubernetes Service clusters using Azure Policy
11+
# Audit and enforce backup operations for Azure Kubernetes Service clusters using Azure Policy
1212

1313
One of the key responsibilities of a Backup or Compliance Admin in an organization is to ensure that all business-critical machines are backed up with the appropriate retention.
1414

@@ -53,22 +53,26 @@ To assign Policy 3, follow these steps:
5353
2. Select **Definitions** in the left menu to get a list of all built-in policies across Azure Resources.
5454

5555
3. Filter the list for **Category=Backup** and select the policy named *Install Azure Backup Extension in AKS clusters (Managed Cluster) with a given tag*.
56-
:::image type="content" source="./media/azure-kubernetes-service-cluster-backup-policy/policy-dashboard-inline.png" alt-text="Screenshot showing how to filter the list by category on Policy dashboard." lightbox="./media/backup-azure-auto-enable-backup/policy-dashboard-expanded.png":::
56+
57+
:::image type="content" source="./media/azure-kubernetes-service-cluster-backup-policy/policy-dashboard-inline.png" alt-text="Screenshot showing how to filter the list by category on Policy dashboard." lightbox="./media/azure-kubernetes-service-cluster-backup-policy/policy-dashboard-inline.png":::
58+
59+
5. Select the name of the policy. You're then redirected to the detailed definition for this policy.
5760

58-
4. Select the name of the policy. You're then redirected to the detailed definition for this policy.
59-
![Screenshot showing the Policy Definition pane.](./media/azure-kubernetes-service-cluster-backup-policy/policy-definition-blade.png)
61+
:::image type="content" source="./media/azure-kubernetes-service-cluster-backup-policy/policy-definition-blade.png" alt-text="Screenshot showing the Policy Definition tab." lightbox="./media/azure-kubernetes-service-cluster-backup-policy/policy-definition-blade.png":::
6062

61-
5. Select the **Assign** button at the top of the pane. This redirects you to the **Assign Policy** pane.
63+
7. Select the **Assign** button at the top of the pane. This redirects you to the **Assign Policy** pane.
6264

63-
6. Under **Basics**, select the three dots next to the **Scope** field. It opens up a right context pane where you can select the subscription for the policy to be applied on. You can also optionally select a resource group, so that the policy is applied only for AKS clusters in a particular resource group.
64-
![Screenshot showing the Policy Assignment Basics tab.](./media/azure-kubernetes-service-cluster-backup-policy/policy-assignment-basics.png)
65+
8. Under **Basics**, select the three dots next to the **Scope** field. It opens up a right context pane where you can select the subscription for the policy to be applied on. You can also optionally select a resource group, so that the policy is applied only for AKS clusters in a particular resource group.
66+
67+
:::image type="content" source="media/azure-kubernetes-service-cluster-backup-policy/policy-assignment-basics.png" alt-text="Screenshot showing the Policy Assignment Basics tab." lightbox="media/azure-kubernetes-service-cluster-backup-policy/policy-assignment-basics.png":::
68+
69+
8. In the **Parameters** tab, choose a location from the drop-down, and select the storage account to which the backup extension installed in the AKS cluster in the scope must be associated. You can also choose to specify a tag name and an array of tag values. An AKS cluster that contains any of the specified values for the given tag are excluded from the scope of the policy assignment.
6570

66-
7. In the **Parameters** tab, choose a location from the drop-down, and select the storage account to which the backup extension installed in the AKS cluster in the scope must be associated. You can also choose to specify a tag name and an array of tag values. An AKS cluster that contains any of the specified values for the given tag are excluded from the scope of the policy assignment.
67-
![Screenshot showing the Policy Assignment Parameters pane.](./media/azure-kubernetes-service-cluster-backup-policy/policy-assignment-parameters.png)
71+
:::image type="content" source="./media/azure-kubernetes-service-cluster-backup-policy/policy-assignment-parameters.png" alt-text="Screenshot showing the Policy Assignment Parameters pane." lightbox="./media/azure-kubernetes-service-cluster-backup-policy/policy-assignment-parameters.png":::
6872

69-
8. Ensure that **Effect** is set to deployIfNotExists.
73+
10. Ensure that **Effect** is set to deployIfNotExists.
7074

71-
9. Navigate to **Review+create** and select **Create**.
75+
11. Navigate to **Review+create** and select **Create**.
7276

7377
> [!NOTE]
7478
>

0 commit comments

Comments
 (0)