Steps update.

Author: EthanChangAED

articles/iot-operations/manage-layered-network/howto-configure-aks-edge-essentials-layered-network.md

@@ -63,16 +63,17 @@ The next step is to set up an Arc-enabled cluster in level 3 that's compatible f
 # [K3S Cluster](#tab/k3s)
 
 - Follow the [Prepare your Azure Arc-enabled Kubernetes cluster](../deploy-iot-ops/howto-prepare-cluster.md) to set up and Arc-enable your K3s cluster.
-  1. In addition, you need to configure the custom DNS for this cluster.
-      - If you choose to use a local DNS server, and have completed the steps in previous section. You can proceed the cluster setup.
-      - If you choose to use CoreDNS, you need to complete the **Create a cluster** section with internet access, then configure the [CoreDNS](howto-configure-layered-network.md#configure-custom-dns) for this cluster.
+  1. You can perpare your K3s cluster with internet access.
+  1. After install the required software components and setup the K3s cluster, you can restrict the internt access for this cluster and rely on the **custom DNS** that is prepared from earlier steps to direct the network traffic to the Layered Network Management component at level 4.
+      - If you choose to use CoreDNS instead of DNS server, you need to configure the [CoreDNS](howto-configure-layered-network.md#configure-custom-dns) after setup the K3S cluster.
   1. Proceed to Arc-enable the cluster.
 
 # [AKS Edge Essentials](#tab/aksee)
 
 - Follow the [Prepare your Azure Arc-enabled Kubernetes cluster](../deploy-iot-ops/howto-prepare-cluster.md) to set up and Arc-enable your AKS Edge Essentials cluster.
-  1. You have to complete the **DNS server** configuration from previous section before start.
+  1. You can prepare the AKS Edg Essentials with internet access.
   1. For the step of **Get the `objectID`** you  run the command on a different machine that have internet access.
+  1. After setting up the AKS Edge Essentials cluster, you can restrict the internt access for this cluster and rely on the **DNS server** that is prepared from earlier steps to direct the network traffic to the Layered Network Management component at level 4. 
 
 ---
 

articles/iot-operations/manage-layered-network/howto-configure-l4-cluster-layered-network.md

@@ -138,9 +138,6 @@ Follow the steps in [Single machine deployment](/azure/aks/hybrid/aks-edge-howto
    az provider register -n "Microsoft.ExtendedLocation"
    az provider register -n "Microsoft.Kubernetes"
    az provider register -n "Microsoft.KubernetesConfiguration"
-   az provider register -n "Microsoft.IoTOperations"
-   az provider register -n "Microsoft.DeviceRegistry"
-   az provider register -n "Microsoft.SecretSyncController"
    ```
 1. Use the [az group create](/cli/azure/group#az-group-create) command to create a resource group in your Azure subscription to store all the resources:
     ```bash
@@ -193,7 +190,7 @@ Create the Layered Network Management custom resource.
     kind: Lnm
     metadata:
       name: level4
-      namespace: azure-iot-operations
+      namespace: default
     spec:
       image:
         pullPolicy: IfNotPresent

articles/iot-operations/manage-layered-network/howto-deploy-aks-layered-network.md

@@ -78,43 +78,97 @@ These steps deploy Layered Network Management to the AKS cluster. The cluster is
       allowList:
         enableArcDomains: true
         domains:
-        - destinationUrl: "*.ods.opinsights.azure.com"
+        - destinationUrl: "*.arc.azure.net"
           destinationType: external
-        - destinationUrl: "*.oms.opinsights.azure.com"
+        - destinationUrl: "*.data.mcr.microsoft.com"
           destinationType: external
-        - destinationUrl: "*.monitoring.azure.com"
+        - destinationUrl: "*.dp.kubernetesconfiguration.azure.com"
           destinationType: external
-        - destinationUrl: "*.handler.control.monitor.azure.com"
+        - destinationUrl: "*.guestnotificationservice.azure.com"
           destinationType: external
-        - destinationUrl: "quay.io"
+        - destinationUrl: "*.his.arc.azure.com"
           destinationType: external
-        - destinationUrl: "*.quay.io"
+        - destinationUrl: "*.login.microsoft.com"
           destinationType: external
-        - destinationUrl: "docker.io"
+        - destinationUrl: "*.login.microsoftonline.com"
           destinationType: external
-        - destinationUrl: "*.docker.io"
+        - destinationUrl: "*.obo.arc.azure.com"
           destinationType: external
-        - destinationUrl: "*.docker.com"
+        - destinationUrl: "*.servicebus.windows.net"
           destinationType: external
-        - destinationUrl: "gcr.io"
-          destinationType: external
-        - destinationUrl: "*.googleapis.com"
+        - destinationUrl: "graph.microsoft.com"
           destinationType: external
         - destinationUrl: "login.windows.net"
           destinationType: external
+        - destinationUrl: "management.azure.com"
+          destinationType: external
+        - destinationUrl: "mcr.microsoft.com"
+          destinationType: external
+        - destinationUrl: "sts.windows.net"
+          destinationType: external
+        - destinationUrl: "*.ods.opinsights.azure.com"
+          destinationType: external
         - destinationUrl: "graph.windows.net"
           destinationType: external
         - destinationUrl: "msit-onelake.pbidedicated.windows.net"
           destinationType: external
-        - destinationUrl: "*.vault.azure.net"
+        - destinationUrl: "*.azurecr.io"
+          destinationType: external
+        - destinationUrl: "*.azureedge.net"
+          destinationType: external
+        - destinationUrl: "*.blob.core.windows.net"
+          destinationType: external
+        - destinationUrl: "*.prod.hot.ingestion.msftcloudes.com"
+          destinationType: external
+        - destinationUrl: "*.prod.microsoftmetrics.com"
+          destinationType: external
+        - destinationUrl: "adhs.events.data.microsoft.com"
+          destinationType: external
+        - destinationUrl: "dc.services.visualstudio.com"
+          destinationType: external
+        - destinationUrl: "go.microsoft.com"
+          destinationType: external
+        - destinationUrl: "packages.microsoft.com"
+          destinationType: external
+        - destinationUrl: "www.powershellgallery.com"
           destinationType: external
-        - destinationUrl: "*.k8s.io"
+        - destinationUrl: "*.gw.arc.azure.com"
           destinationType: external
-        - destinationUrl: "*.pkg.dev"
+        - destinationUrl: "*.gcs.prod.monitoring.core.windows.net"
+          destinationType: external
+        - destinationUrl: "*.prod.warm.ingest.monitor.core.windows.net"
+          destinationType: external
+        - destinationUrl: "*.prod.hot.ingest.monitor.core.windows.net"
+          destinationType: external
+        - destinationUrl: "azure.archive.ubuntu.com"
+          destinationType: external
+        - destinationUrl: "crl.microsoft.com"
+          destinationType: external
+        - destinationUrl: "*.table.core.windows.net"
+          destinationType: external
+        - destinationUrl: "*.blob.storage.azure.net"
+          destinationType: external
+        - destinationUrl: "*.docker.com"
+          destinationType: external
+        - destinationUrl: "*.docker.io"
+          destinationType: external
+        - destinationUrl: "*.googleapis.com"
           destinationType: external
         - destinationUrl: "github.com"
           destinationType: external
-        - destinationUrl: "raw.githubusercontent.com"
+        - destinationUrl: "collect.traefik.io"
+          destinationType: external
+        - destinationUrl: "contracts.canonical.com"
+          destinationType: external
+        - destinationUrl: "database.clamav.net"
+          destinationType: external
+        - destinationUrl: "esm.ubuntu.com"
+          destinationType: external
+        - destinationUrl: "livepatch.canonical.com"
+          destinationType: external
+        - destinationUrl: "motd.ubuntu.com"
+          destinationType: external
+        - destinationUrl: "update.traefik.io"
           destinationType: external
         sourceIpRange:
         - addressPrefix: "0.0.0.0"
@@ -131,7 +185,7 @@ These steps deploy Layered Network Management to the AKS cluster. The cluster is
 1. To validate the instance, run:
 
     ```bash
-    kubectl get pods -n azure-iot-operations
+    kubectl get pods
     ```
 
     The output should look like:
@@ -145,7 +199,7 @@ These steps deploy Layered Network Management to the AKS cluster. The cluster is
 1. To view the service, run:
 
     ```bash
-    kubectl get services -n azure-iot-operations
+    kubectl get services
     ```
 
     The output should look like the following example: