You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
| microsoft.office365.userCommunication/allEntities/allTasks | Read and update What’s New messages visibility. |
1261
1262
| microsoft.office365.webPortal/allEntities/basic/read | Read basic properties on all resources in microsoft.office365.webPortal. |
1262
1263
@@ -1438,7 +1439,6 @@ Can create and manage all aspects of Microsoft Search settings.
1438
1439
| microsoft.office365.search/allEntities/allProperties/allTasks | Create and delete all resources, and read and update all properties in microsoft.office365.search. |
1439
1440
| microsoft.office365.serviceHealth/allEntities/allTasks | Read and configure Office 365 Service Health. |
1440
1441
| microsoft.office365.supportTickets/allEntities/allTasks | Create and manage Office 365 support tickets. |
| microsoft.office365.webPortal/allEntities/basic/read | Read basic properties on all resources in microsoft.office365.webPortal. |
1443
1443
1444
1444
### Search Editor permissions
@@ -1454,7 +1454,6 @@ Can create and manage the editorial content such as bookmarks, Q and As, locatio
1454
1454
| --- | --- |
1455
1455
| microsoft.office365.messageCenter/messages/read | Read messages in microsoft.office365.messageCenter. |
1456
1456
| microsoft.office365.search/content/allProperties/allTasks | Create and delete content, and read and update all properties in microsoft.office365.search. |
| microsoft.directory/groups/unified/members/update | Update membership of Office 365 Groups. |
1564
1564
| microsoft.directory/groups/unified/owners/update | Update ownership of Office 365 Groups. |
1565
-
| microsoft.azure.serviceHealth/allEntities/allTasks | Read and configure Azure Service Health. |
1566
-
| microsoft.azure.supportTickets/allEntities/allTasks | Create and manage Azure support tickets. |
1567
-
| microsoft.office365.webPortal/allEntities/basic/read | Read basic properties on all resources in microsoft.office365.webPortal. |
1568
1565
| microsoft.office365.serviceHealth/allEntities/allTasks | Read and configure Office 365 Service Health. |
1569
1566
| microsoft.office365.sharepoint/allEntities/allTasks | Create and delete all resources, and read and update standard properties in microsoft.office365.sharepoint. |
1570
1567
| microsoft.office365.supportTickets/allEntities/allTasks | Create and manage Office 365 support tickets. |
Copy file name to clipboardExpand all lines: articles/aks/certificate-rotation.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -32,7 +32,7 @@ AKS generates and uses the following certificates, Certificate Authorities, and
32
32
* The `kubectl` client has a certificate for communicating with the AKS cluster.
33
33
34
34
> [!NOTE]
35
-
> AKS clusters created prior to March 2019 have certificates that expire after two years. Any cluster created after March 2019 or any cluster that has its certificates rotated have certificates that expire after 30 years. To verify when your cluster was created, use `kubectl get nodes` to see the *Age* of your node pools.
35
+
> AKS clusters created prior to March 2019 have certificates that expire after two years. Any cluster created after March 2019 or any cluster that has its certificates rotated have Cluster CA certificates that expire after 30 years. All other certificates expire after two years. To verify when your cluster was created, use `kubectl get nodes` to see the *Age* of your node pools.
36
36
>
37
37
> Additionally, you can check the expiration date of your cluster's certificate. For example, the following command displays the certificate details for the *myAKSCluster* cluster.
Copy file name to clipboardExpand all lines: articles/aks/private-clusters.md
+3-80Lines changed: 3 additions & 80 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -7,93 +7,16 @@ ms.date: 2/21/2020
7
7
8
8
---
9
9
10
-
# Create a private Azure Kubernetes Service cluster (preview)
10
+
# Create a private Azure Kubernetes Service cluster
11
11
12
12
In a private cluster, the control plane or API server has internal IP addresses that are defined in the [RFC1918 - Address Allocation for Private Internets](https://tools.ietf.org/html/rfc1918) document. By using a private cluster, you can ensure that network traffic between your API server and your node pools remains on the private network only.
13
13
14
14
The control plane or API server is in an Azure Kubernetes Service (AKS)-managed Azure subscription. A customer's cluster or node pool is in the customer's subscription. The server and the cluster or node pool can communicate with each other through the [Azure Private Link service][private-link-service] in the API server virtual network and a private endpoint that's exposed in the subnet of the customer's AKS cluster.
15
15
16
-
> [!IMPORTANT]
17
-
> AKS preview features are self-service and are offered on an opt-in basis. Previews are provided *as is* and *as available* and are excluded from the service-level agreement (SLA) and limited warranty. AKS previews are partially covered by customer support on a *best effort* basis. Therefore, the features aren't meant for production use. For more information, see the following support articles:
18
-
>
19
-
> *[AKS Support Policies](support-policies.md)
20
-
> *[Azure Support FAQ](faq.md)
21
-
22
16
## Prerequisites
23
17
24
-
* The Azure CLI version 2.0.77 or later, and the Azure CLI AKS Preview extension version 0.4.18
25
-
26
-
## Currently supported regions
27
-
28
-
* Australia East
29
-
* Australia Southeast
30
-
* Brazil South
31
-
* Canada Central
32
-
* Canada East
33
-
* Cenral US
34
-
* East Asia
35
-
* East US
36
-
* East US 2
37
-
* East US 2 EUAP
38
-
* France Central
39
-
* Germany North
40
-
* Japan East
41
-
* Japan West
42
-
* Korea Central
43
-
* Korea South
44
-
* North Central US
45
-
* North Europe
46
-
* North Europe
47
-
* South Central US
48
-
* UK South
49
-
* West Europe
50
-
* West US
51
-
* West US 2
52
-
* East US 2
53
-
54
-
## Currently Supported Availability Zones
55
-
56
-
* Central US
57
-
* East US
58
-
* East US 2
59
-
* France Central
60
-
* Japan East
61
-
* North Europe
62
-
* Southeast Asia
63
-
* UK South
64
-
* West Europe
65
-
* West US 2
66
-
67
-
## Install the latest Azure CLI AKS Preview extension
68
-
69
-
To use private clusters, you need the Azure CLI AKS Preview extension version 0.4.18 or later. Install the Azure CLI AKS Preview extension by using the [az extension add][az-extension-add] command, and then check for any available updates by using the following [az extension update][az-extension-update] command:
70
-
71
-
```azurecli-interactive
72
-
# Install the aks-preview extension
73
-
az extension add --name aks-preview
74
-
75
-
# Update the extension to make sure you have the latest version installed
76
-
az extension update --name aks-preview
77
-
```
78
-
> [!CAUTION]
79
-
> When you register a feature on a subscription, you can't currently un-register that feature. After you enable some preview features, you can use default settings for all AKS clusters that were created in the subscription. Don't enable preview features on production subscriptions. Use a separate subscription to test preview features and gather feedback.
80
-
81
-
```azurecli-interactive
82
-
az feature register --name AKSPrivateLinkPreview --namespace Microsoft.ContainerService
83
-
```
84
-
85
-
It might take several minutes for the registration status to show as *Registered*. You can check on the status by using the following [az feature list][az-feature-list] command:
86
-
87
-
```azurecli-interactive
88
-
az feature list -o table --query "[?contains(name, 'Microsoft.ContainerService/AKSPrivateLinkPreview')].{Name:name,State:properties.state}"
89
-
```
90
-
91
-
When the state is registered, refresh the registration of the *Microsoft.ContainerService* resource provider by using the following [az provider register][az-provider-register] command:
18
+
* The Azure CLI version 2.2.0 or later
92
19
93
-
```azurecli-interactive
94
-
az provider register --namespace Microsoft.ContainerService
95
-
az provider register --namespace Microsoft.Network
96
-
```
97
20
## Create a private AKS cluster
98
21
99
22
### Create a resource group
@@ -155,6 +78,7 @@ As mentioned, VNet peering is one way to access your private cluster. To use VNe
155
78
9. Go to the virtual network where you have the VM, select **Peerings**, select the AKS virtual network, and then create the peering. If the address ranges on the AKS virtual network and the VM's virtual network clash, peering fails. For more information, see [Virtual network peering][virtual-network-peering].
156
79
157
80
## Dependencies
81
+
158
82
* The Private Link service is supported on Standard Azure Load Balancer only. Basic Azure Load Balancer isn't supported.
159
83
* To use a custom DNS server, deploy an AD server with DNS to forward to this IP 168.63.129.16
160
84
@@ -169,7 +93,6 @@ As mentioned, VNet peering is one way to access your private cluster. To use VNe
169
93
* No support for converting existing AKS clusters into private clusters
170
94
* Deleting or modifying the private endpoint in the customer subnet will cause the cluster to stop functioning.
171
95
* Azure Monitor for containers Live Data isn't currently supported.
Copy file name to clipboardExpand all lines: articles/analysis-services/analysis-services-qs-firewall.md
+2-1Lines changed: 2 additions & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -17,7 +17,8 @@ This quickstart helps you configure a firewall for your Azure Analysis Services
17
17
18
18
- An Analysis Services server in your subscription. To learn more, see [Quickstart: Create a server - Portal](analysis-services-create-server.md) or [Quickstart: Create a server - PowerShell](analysis-services-create-powershell.md)
19
19
- One or more IP address ranges for client computers (if needed).
20
-
- Please Note that Import scenario from Power BI Premium is currently not supported.
20
+
- Some scenarios where Power BI Premium connects to Azure Analysis Services, including data import (refresh) and paginated reports, are currently not supported even when Allow access from Power BI is enabled. The more common scenario of using Live Connect from Power BI Premium is supported. All Power BI Pro scenarios are supported.
0 commit comments