You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/governance/policy/concepts/policy-for-kubernetes.md
+14-10Lines changed: 14 additions & 10 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -126,7 +126,7 @@ must enable the **Microsoft.PolicyInsights** resource providers.
126
126
127
127
1. You need the Azure CLI version 2.12.0 or later installed and configured. Run `az --version` to
128
128
find the version. If you need to install or upgrade, see
129
-
[Install the Azure CLI](/cli/azure/install-azure-cli).
129
+
[Install the Azure CLI](../../../azure-resource-manager/management/resource-providers-and-types.md#azure-cli).
130
130
131
131
1. Register the resource providers and preview features.
132
132
@@ -158,7 +158,7 @@ must enable the **Microsoft.PolicyInsights** resource providers.
158
158
```
159
159
160
160
1. Install version _2.12.0_ or higher of the Azure CLI. For more information, see
161
-
[Install the Azure CLI](/cli/azure/install-azure-cli).
161
+
[Install the Azure CLI](../../../azure-resource-manager/management/resource-providers-and-types.md#azure-cli).
162
162
163
163
Once the above prerequisite steps are completed, install the Azure Policy Add-on in the AKS cluster
164
164
you want to manage.
@@ -211,17 +211,17 @@ similar to the following output:
211
211
212
212
This article describes how to [create](#create-azure-policy-extension), [show extension status](#show-azure-policy-extension), and [delete](#delete-azure-policy-extension) the Azure Policy for Kubernetes extension.
213
213
214
-
For an overview of the extensions platform, see [Azure Arc cluster extensions](/azure/azure-arc/kubernetes/conceptual-extensions).
214
+
For an overview of the extensions platform, see [Azure Arc cluster extensions](../../../azure/azure-arc/kubernetes/conceptual-extensions).
215
215
216
216
## Prerequisites
217
217
218
218
> Note: If you have already deployed Azure Policy for Kubernetes on an Azure Arc cluster using Helm directly without extensions, follow the instructions listed to [delete the Helm chart](#remove-the-add-on-from-azure-arc-enabled-kubernetes). Once the deletion is done, you can then proceed.
219
219
1. Ensure your Kubernetes cluster is a supported distribution.
220
220
221
-
> Note: Azure Policy for Arc extension is supported on [the following Kubernetes distributions](/azure/azure-arc/kubernetes/validation-program).
222
-
1. Ensure you have met all the common prerequisites for Kubernetes extensions listed [here](/azure/azure-arc/kubernetes/extensions) including [connecting your cluster to Azure Arc](/azure/azure-arc/kubernetes/quickstart-connect-cluster).
221
+
> Note: Azure Policy for Arc extension is supported on [the following Kubernetes distributions](../../../azure/azure-arc/kubernetes/validation-program).
222
+
1. Ensure you have met all the common prerequisites for Kubernetes extensions listed [here](/azure/azure-arc/kubernetes/extensions) including [connecting your cluster to Azure Arc](../../../azure/azure-arc/kubernetes/quickstart-connect-cluster).
223
223
224
-
> Note: Azure Policy extension is supported for Arc enabled Kubernetes clusters [in these regions](/global-infrastructure/services/?products=azure-arc).
224
+
> Note: Azure Policy extension is supported for Arc enabled Kubernetes clusters [in these regions](../../../global-infrastructure/services/?products=azure-arc).
225
225
1. Open ports for the Azure Policy extension. The Azure Policy extension uses these domains and ports to fetch policy
226
226
definitions and assignments and report compliance of the cluster back to Azure Policy.
227
227
@@ -234,7 +234,7 @@ For an overview of the extensions platform, see [Azure Arc cluster extensions](/
234
234
235
235
1. Before installing the Azure Policy extension or enabling any of the service features, your subscription must enable the **Microsoft.PolicyInsights** resource providers.
236
236
> Note: To enable the resource provider, follow the steps in
237
-
[Resource providers and types](/azure/azure-resource-manager/management/resource-providers-and-types#azure-portal)
237
+
[Resource providers and types](../../../azure/azure-resource-manager/management/resource-providers-and-types#azure-portal)
238
238
or run either the Azure CLI or Azure PowerShell command:
239
239
- Azure CLI
240
240
@@ -356,7 +356,7 @@ cluster service principal.
356
356
357
357
1. You need the Azure CLI version 2.12.0 or later installed and configured. Run `az --version` to
358
358
find the version. If you need to install or upgrade, see
359
-
[Install the Azure CLI](/cli/azure/install-azure-cli).
359
+
[Install the Azure CLI](../../../azure-resource-manager/management/resource-providers-and-types.md#azure-cli).
360
360
361
361
1. To enable the resource provider, follow the steps in
362
362
[Resource providers and types](../../../azure-resource-manager/management/resource-providers-and-types.md#azure-portal)
@@ -382,7 +382,7 @@ cluster service principal.
382
382
383
383
1. The Kubernetes cluster must be version _1.14_ or higher.
1. Your Kubernetes cluster enabled for Azure Arc. For more information, see
388
388
[onboarding a Kubernetes cluster to Azure Arc](../../../azure-arc/kubernetes/quickstart-connect-cluster.md).
@@ -470,12 +470,16 @@ kubectl get pods -n gatekeeper-system
470
470
471
471
## <aname="install-azure-policy-add-on-for-aks-engine"></a>Install Azure Policy Add-on for AKS Engine (preview)
472
472
473
+
> Note: AKS Engine is soon to begin deprecation. We recommend that you install the [Azure Policy Extension using Arc-enabled Kubernetes](#install-azure-policy-extension-for-azure-arc-enabled-kubernetes) instead.
474
+
475
+
1. Ensure your Kubernetes cluster is a supported distribution.
476
+
473
477
Before installing the Azure Policy Add-on or enabling any of the service features, your subscription
474
478
must enable the **Microsoft.PolicyInsights** resource provider and create a role assignment for the
475
479
cluster service principal.
476
480
477
481
1. You need the Azure CLI version 2.0.62 or later installed and configured. Run `az --version` to
478
-
find the version. If you need to install or upgrade, see [Install the Azure CLI](/cli/azure/install-azure-cli).
482
+
find the version. If you need to install or upgrade, see [Install the Azure CLI](../../../azure-resource-manager/management/resource-providers-and-types.md#azure-cli).
479
483
480
484
1. To enable the resource provider, follow the steps in
481
485
[Resource providers and types](../../../azure-resource-manager/management/resource-providers-and-types.md#azure-portal)
0 commit comments