Skip to content

Commit 363ebb6

Browse files
committed
edit
1 parent 39a2e6c commit 363ebb6

File tree

1 file changed

+13
-11
lines changed

1 file changed

+13
-11
lines changed

articles/operational-excellence/relocation-kubernetes-service.md

Lines changed: 13 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
---
22
title: Relocate Azure Kubernetes cluster to another region
3-
description: Learn how to relocate a Azure Kubernetes cluster to another region
3+
description: Learn how to relocate an Azure Kubernetes cluster to another region
44
author: anaharris-ms
55
ms.author: anaharris
66
ms.reviewer: anaharris
@@ -26,7 +26,7 @@ Before you begin the relocation planning stage, first review the following prere
2626

2727
- Ensure that the target region has enough capacity (VM SKUs) to accommodate the new cluster nodes.
2828

29-
- Validate that you have resource creation permissions to the target subscription and check that Azure policy isn’t restricting the regions to which AKS can be deployed.
29+
- Validate that you have resource creation permissions to the target subscription. Check that Azure policy isn’t restricting the regions to which AKS can be deployed.
3030

3131
- (Optional) Collect the Infrastructure as code (IaC) templates or scripts with which you provisioned the source AKS cluster.
3232

@@ -43,7 +43,7 @@ Before you begin the relocation planning stage, first review the following prere
4343

4444
- Document public TLS certificate management and distribution.
4545

46-
- Capture any IP addresses defined in the AKS API service whitelist.
46+
- Capture any IP addresses defined in the AKS API service allowlist.
4747

4848
- Understand all dependent resources. Some of the resources could be:
4949

@@ -58,21 +58,23 @@ Before you begin the relocation planning stage, first review the following prere
5858
- Azure DNS
5959
- [Azure Firewall](./relocation-firewall.md)
6060
- [Azure Monitor (Container Insights)](./relocation-monitor.md)
61-
- [Azure Container registry](relocation-container-registry.md) For optimal performance when pulling images, the registry should exist in the target region. Azure Container Registry can replicate images between ACR instances. If you use Azure Container Registry to authenticate to the container registry, the new AKS cluster’s managed identity can be the granted ‘AcrPull’ RBAC role.
61+
- [Azure Container registry](relocation-container-registry.md) can replicate images between ACR instances. For optimal performance when pulling images, the registry should exist in the target region.
62+
>[!NOTE]
63+
>If you use Azure Container Registry to authenticate to the container registry, the new AKS cluster’s managed identity can be the granted `AcrPull` RBAC role.
6264
- Azure Managed Disks
6365
- Azure Files
6466

6567
## Prepare
6668

6769
Before you begin the cluster relocation process, make sure to complete the following preparations:
6870

69-
1. Deploy Virtual Network with a number of subnets of sufficient size to accommodate the AKS cluster nodes, and, optionally, pods if using Azure CNI networking
71+
1. Deploy the virtual network with a number of subnets of sufficient size to accommodate the AKS cluster nodes and pods, if using Azure CNI networking.
7072

71-
1. If you are using Azure Key Vault, [Deploy the Key Vault](./relocation-key-vault.md).
73+
1. If you're using Azure Key Vault, [Deploy the Key Vault](./relocation-key-vault.md).
7274

73-
1. Ensure that the relevant TLS ingress certificates are available for deployment, ideally in a secure store such as Azure Key Vault.
75+
1. Ensure that the relevant TLS ingress certificates are available for deployment, ideally in a secure store such as Azure Key Vault.
7476

75-
1. Deploy a container registry. Either sync the source registry images automatically or re-build and push new images to the target registry using a CI/CD pipeline or script.
77+
1. Deploy a container registry. Either sync the source registry images automatically or rebuild and push new images to the target registry using a CI/CD pipeline or script.
7678

7779
1. [Deploy an Azure Monitor workspace](./relocation-log-analytics.md).
7880

@@ -86,11 +88,11 @@ Before you begin the cluster relocation process, make sure to complete the follo
8688

8789
## Redeploy
8890

89-
Deploy the AKS cluster without any data migration, by following the steps below:
91+
Deploy the AKS cluster without any data migration, by following these steps:
9092

9193
1. Manually run the existing IaC artifacts on a local workstation to create the target environment in Azure.
9294

93-
1. If there are no existing IaC assets, the current cluster configuration [can be exported as an ARM template](/azure/azure-resource-manager/templates/export-template-portal) and executed against the target region. [IaC templates](/azure/templates/) are created from scratch or are modified versions of sample templates using Bicep, JSON, Terraform or another solution.
95+
1. If there are no existing IaC assets, the current cluster configuration [can be exported as an ARM template](/azure/azure-resource-manager/templates/export-template-portal) and executed against the target region. [IaC templates](/azure/templates/) are created from scratch or are modified versions of sample templates using Bicep, JSON, Terraform, or another solution.
9496

9597
>[!NOTE]
9698
>- Private Link connections, ACR connected registries and Azure Monitor workspace data sources are not currently exported using this method and must therefore be removed from the generated template before execution.
@@ -99,7 +101,7 @@ Deploy the AKS cluster without any data migration, by following the steps below:
99101
- *Pull* Manifests are pulled from a repo and applied by a controller running within the cluster, known as a GitOps approach.
100102
- *Push.* Manifests are pushed to the cluster using the Kubernetes API service and kubectl command line tool, either from a CI/CD pipeline or local workstation.
101103

102-
1. Perform testing and validation on the new cluster to ensure it performs as anticipated.
104+
1. Perform testing and validation on the new cluster to ensure that it performs as anticipated.
103105

104106
1. Change your public DNS entries to point to the external ingress IP of the target cluster (Azure Public Load Balancer IP or Application Gateway Public IP).
105107

0 commit comments

Comments
 (0)