You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/chaos-studio/chaos-studio-private-networking.md
+5-5Lines changed: 5 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -10,13 +10,13 @@ ms.service: chaos-studio
10
10
---
11
11
# VNet injection in Chaos Studio
12
12
13
-
Azure [Virtual Network](../virtual-network/virtual-networks-overview.md) (VNet) is the fundamental building block for your private network in Azure. VNet enables many types of Azure resources to securely communicate with each other, the internet, and on-premises networks. VNet is similar to a traditional network that you'd operate in your own data center, but brings with it additional benefits of Azure's infrastructure such as scale, availability, and isolation.
13
+
Azure [Virtual Network](../virtual-network/virtual-networks-overview.md) (VNet) is the fundamental building block for your private network in Azure. VNet enables many types of Azure resources to securely communicate with each other, the internet, and on-premises networks. VNet is similar to a traditional network that you'd operate in your own data center, but brings with it other benefits of Azure's infrastructure such as scale, availability, and isolation.
14
14
15
15
VNet injection allows a Chaos resource provider to inject containerized workloads into your VNet so that resources without public endpoints can be accessed via a private IP address on the VNet.
16
16
17
17
## Resource type support
18
18
Currently, you can only enable certain resource types for Chaos Studio VNet injection.
19
-
***Azure Kubernetes Service** targets can be enabled with VNet injection through Azure Portal and Azure CLI.
19
+
***Azure Kubernetes Service** targets can be enabled with VNet injection through the Azure portal and Azure CLI.
20
20
***Key Vault** targets can be enabled with VNet injection through the Azure CLI.
21
21
22
22
## Use Chaos Studio with a private AKS cluster
@@ -29,11 +29,11 @@ To configure VNet injection, use the following steps.
29
29
### [Azure portal](#tab/azure-portal)
30
30
31
31
1. Within the Azure portal, navigate to **Subscriptions**, then **Resource providers** within your subscription.
32
-
1. Register the `Microsoft.ContainerInstance` and `Microsoft.Relay` resource providers, if they aren't already registered, by selecting the provider and then the **Register** button. Additionally, re-register the `Microsoft.ChaosStudio` resource provider.
32
+
1. Register the `Microsoft.ContainerInstance` and `Microsoft.Relay` resource providers, if they aren't already registered, by selecting the provider and then the **Register** button. Additionally, re-register the `Microsoft.Chaos` resource provider.
33
33

34
34
1. Navigate to Azure Chaos Studio and select **Targets**. Find your desired AKS cluster and select **Enable targets**, then **Enable service-direct targets**.
35
35

36
-
1. Select the cluster's Virtual Network. If the VNet already includes Subnets named `ChaosStudioContainerSubnet` and `ChaosStudioRelaySubnet`, select them. If they don't already exist, they will be automatically created for you.
36
+
1. Select the cluster's Virtual Network. If the VNet already includes Subnets named `ChaosStudioContainerSubnet` and `ChaosStudioRelaySubnet`, select them. If they don't already exist, they'll be automatically created for you.
37
37

38
38
1. Select **Review + Enable** and **Enable**.
39
39

@@ -132,7 +132,7 @@ Now your private AKS cluster can be used with Chaos Studio! Use the following in
132
132
133
133
## Limitations
134
134
* VNet injection is currently only possible in subscriptions/regions where Azure Container Instances and Azure Relay are available.
135
-
* When you create a Target resource that you'll enable with VNet injection, you need `Microsoft.Network/virtualNetworks/subnets/write` access to the virtual network. For example, if the AKS cluster is deployed to VNet_A, then you must have permissions to create subnets in VNet_A in order to enable VNet injection for the AKS cluster. You have to specify a subnet (in VNet_A) that the container will be deployed to.
135
+
* When you create a Target resource that you'll enable with VNet injection, you need `Microsoft.Network/virtualNetworks/subnets/write` access to the virtual network. For example, if the AKS cluster is deployed to VNet_A, then you must have permissions to create subnets in VNet_A in order to enable VNet injection for the AKS cluster.
136
136
137
137
<!--
138
138

0 commit comments