You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/aks/private-clusters.md
+3-80Lines changed: 3 additions & 80 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -7,93 +7,16 @@ ms.date: 2/21/2020
7
7
8
8
---
9
9
10
-
# Create a private Azure Kubernetes Service cluster (preview)
10
+
# Create a private Azure Kubernetes Service cluster
11
11
12
12
In a private cluster, the control plane or API server has internal IP addresses that are defined in the [RFC1918 - Address Allocation for Private Internets](https://tools.ietf.org/html/rfc1918) document. By using a private cluster, you can ensure that network traffic between your API server and your node pools remains on the private network only.
13
13
14
14
The control plane or API server is in an Azure Kubernetes Service (AKS)-managed Azure subscription. A customer's cluster or node pool is in the customer's subscription. The server and the cluster or node pool can communicate with each other through the [Azure Private Link service][private-link-service] in the API server virtual network and a private endpoint that's exposed in the subnet of the customer's AKS cluster.
15
15
16
-
> [!IMPORTANT]
17
-
> AKS preview features are self-service and are offered on an opt-in basis. Previews are provided *as is* and *as available* and are excluded from the service-level agreement (SLA) and limited warranty. AKS previews are partially covered by customer support on a *best effort* basis. Therefore, the features aren't meant for production use. For more information, see the following support articles:
18
-
>
19
-
> *[AKS Support Policies](support-policies.md)
20
-
> *[Azure Support FAQ](faq.md)
21
-
22
16
## Prerequisites
23
17
24
-
* The Azure CLI version 2.0.77 or later, and the Azure CLI AKS Preview extension version 0.4.18
25
-
26
-
## Currently supported regions
27
-
28
-
* Australia East
29
-
* Australia Southeast
30
-
* Brazil South
31
-
* Canada Central
32
-
* Canada East
33
-
* Cenral US
34
-
* East Asia
35
-
* East US
36
-
* East US 2
37
-
* East US 2 EUAP
38
-
* France Central
39
-
* Germany North
40
-
* Japan East
41
-
* Japan West
42
-
* Korea Central
43
-
* Korea South
44
-
* North Central US
45
-
* North Europe
46
-
* North Europe
47
-
* South Central US
48
-
* UK South
49
-
* West Europe
50
-
* West US
51
-
* West US 2
52
-
* East US 2
53
-
54
-
## Currently Supported Availability Zones
55
-
56
-
* Central US
57
-
* East US
58
-
* East US 2
59
-
* France Central
60
-
* Japan East
61
-
* North Europe
62
-
* Southeast Asia
63
-
* UK South
64
-
* West Europe
65
-
* West US 2
66
-
67
-
## Install the latest Azure CLI AKS Preview extension
68
-
69
-
To use private clusters, you need the Azure CLI AKS Preview extension version 0.4.18 or later. Install the Azure CLI AKS Preview extension by using the [az extension add][az-extension-add] command, and then check for any available updates by using the following [az extension update][az-extension-update] command:
70
-
71
-
```azurecli-interactive
72
-
# Install the aks-preview extension
73
-
az extension add --name aks-preview
74
-
75
-
# Update the extension to make sure you have the latest version installed
76
-
az extension update --name aks-preview
77
-
```
78
-
> [!CAUTION]
79
-
> When you register a feature on a subscription, you can't currently un-register that feature. After you enable some preview features, you can use default settings for all AKS clusters that were created in the subscription. Don't enable preview features on production subscriptions. Use a separate subscription to test preview features and gather feedback.
80
-
81
-
```azurecli-interactive
82
-
az feature register --name AKSPrivateLinkPreview --namespace Microsoft.ContainerService
83
-
```
84
-
85
-
It might take several minutes for the registration status to show as *Registered*. You can check on the status by using the following [az feature list][az-feature-list] command:
86
-
87
-
```azurecli-interactive
88
-
az feature list -o table --query "[?contains(name, 'Microsoft.ContainerService/AKSPrivateLinkPreview')].{Name:name,State:properties.state}"
89
-
```
90
-
91
-
When the state is registered, refresh the registration of the *Microsoft.ContainerService* resource provider by using the following [az provider register][az-provider-register] command:
18
+
* The Azure CLI version 2.2.0 or later
92
19
93
-
```azurecli-interactive
94
-
az provider register --namespace Microsoft.ContainerService
95
-
az provider register --namespace Microsoft.Network
96
-
```
97
20
## Create a private AKS cluster
98
21
99
22
### Create a resource group
@@ -155,6 +78,7 @@ As mentioned, VNet peering is one way to access your private cluster. To use VNe
155
78
9. Go to the virtual network where you have the VM, select **Peerings**, select the AKS virtual network, and then create the peering. If the address ranges on the AKS virtual network and the VM's virtual network clash, peering fails. For more information, see [Virtual network peering][virtual-network-peering].
156
79
157
80
## Dependencies
81
+
158
82
* The Private Link service is supported on Standard Azure Load Balancer only. Basic Azure Load Balancer isn't supported.
159
83
* To use a custom DNS server, deploy an AD server with DNS to forward to this IP 168.63.129.16
160
84
@@ -169,7 +93,6 @@ As mentioned, VNet peering is one way to access your private cluster. To use VNe
169
93
* No support for converting existing AKS clusters into private clusters
170
94
* Deleting or modifying the private endpoint in the customer subnet will cause the cluster to stop functioning.
171
95
* Azure Monitor for containers Live Data isn't currently supported.
Copy file name to clipboardExpand all lines: articles/analysis-services/analysis-services-qs-firewall.md
+2-1Lines changed: 2 additions & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -17,7 +17,8 @@ This quickstart helps you configure a firewall for your Azure Analysis Services
17
17
18
18
- An Analysis Services server in your subscription. To learn more, see [Quickstart: Create a server - Portal](analysis-services-create-server.md) or [Quickstart: Create a server - PowerShell](analysis-services-create-powershell.md)
19
19
- One or more IP address ranges for client computers (if needed).
20
-
- Please Note that Import scenario from Power BI Premium is currently not supported.
20
+
- Some scenarios where Power BI Premium connects to Azure Analysis Services, including data import (refresh) and paginated reports, are currently not supported even when Allow access from Power BI is enabled. The more common scenario of using Live Connect from Power BI Premium is supported. All Power BI Pro scenarios are supported.
Copy file name to clipboardExpand all lines: articles/automation/shared-resources/variables.md
+17-17Lines changed: 17 additions & 17 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -26,7 +26,7 @@ Since Automation variables are persisted, they are available even if the runbook
26
26
27
27
When creating a variable, you can specify its encryption and storage by Azure Automation as a secure asset. Other secure assets include credentials, certificates, and connections. Azure Automation encrypts these assets and stores them using a unique key that is generated for each Automation account. The key is stored in a system-managed Key Vault. Before storing a secure asset, Azure Automation loads the key from the Key Vault and then uses it to encrypt the asset.
28
28
29
-
Azure Automation stores each encrypted variable securely. Its value can't be retrieved using the [Get-AzAutomationVariable](https://docs.microsoft.com/powershell/module/az.automation/get-azautomationvariable?view=azps-3.5.0) cmdlet that ships as part of the Azure PowerShell module. The only way to retrieve an encrypted value is by using the **Get-AutomationVariable** activity in a runbook or DSC configuration.
29
+
Azure Automation stores each encrypted variable securely. Its value can't be retrieved using the [Get-AzAutomationVariable](https://docs.microsoft.com/powershell/module/az.automation/get-azautomationvariable?view=azps-3.5.0) cmdlet that ships as part of the Azure PowerShell module. The only way to retrieve an encrypted value is by using the `Get-AutomationVariable` activity in a runbook or DSC configuration.
30
30
31
31
>[!NOTE]
32
32
>This article has been updated to use the new Azure PowerShell Az module. You can still use the AzureRM module, which will continue to receive bug fixes until at least December 2020. To learn more about the new Az module and AzureRM compatibility, see [Introducing the new Azure PowerShell Az module](https://docs.microsoft.com/powershell/azure/new-azureps-module-az?view=azps-3.5.0). For Az module installation instructions on your Hybrid Runbook Worker, see [Install the Azure PowerShell Module](https://docs.microsoft.com/powershell/azure/install-az-ps?view=azps-3.5.0). For your Automation account, you can update your modules to the latest version using [How to update Azure PowerShell modules in Azure Automation](../automation-update-azure-modules.md).
@@ -41,7 +41,7 @@ When you create a variable with the Azure portal, you must specify a data type f
41
41
* Boolean
42
42
* Null
43
43
44
-
The variable isn't restricted to the designated data type. You must set the variable using Windows PowerShell if you want to specify a value of a different type. If you indicate **Not defined**, the value of the variable is set to **null**, and you must set the value with the [Set-AzAutomationVariable](https://docs.microsoft.com/powershell/module/az.automation/set-azautomationvariable?view=azps-3.5.0) cmdlet or the **Set-AutomationVariable** activity.
44
+
The variable isn't restricted to the designated data type. You must set the variable using Windows PowerShell if you want to specify a value of a different type. If you indicate **Not defined**, the value of the variable is set to Null, and you must set the value with the [Set-AzAutomationVariable](https://docs.microsoft.com/powershell/module/az.automation/set-azautomationvariable?view=azps-3.5.0) cmdlet or the `Set-AutomationVariable` activity.
45
45
46
46
You can't use the portal to create or change the value for a complex variable type. However, you can provide a value of any type using Windows PowerShell. Complex types are retrieved as a [PSCustomObject](/dotnet/api/system.management.automation.pscustomobject).
47
47
@@ -60,31 +60,31 @@ For the Az module, the cmdlets in the following table are used to create and man
60
60
61
61
## Activities to access variables
62
62
63
-
The activities in the following table are used to access variables in runbooks and DSC configurations. The difference between **Get-AzAutomationVariable** and **Get-AutomationVariable** is explained for encrypted variables at the start of this article.
63
+
The activities in the following table are used to access variables in runbooks and DSC configurations. The difference between `Get-AzAutomationVariable` and `Get-AutomationVariable` is explained for encrypted variables at the start of this article.
64
64
65
65
| Activity | Description |
66
66
|:---|:---|
67
-
|**Get-AutomationVariable**|Retrieves the value of an existing variable.|
68
-
|**Set-AutomationVariable**|Sets the value for an existing variable.|
67
+
|`Get-AutomationVariable`|Retrieves the value of an existing variable.|
68
+
|`Set-AutomationVariable`|Sets the value for an existing variable.|
69
69
70
70
> [!NOTE]
71
-
> Avoid using variables in the *Name* parameter of **Get-AutomationVariable** in a runbook or DSC configuration. Use of this parameter can complicate the discovery of dependencies between runbooks or DSC configurations and Automation variables at design time.
71
+
> Avoid using variables in the `Name` parameter of `Get-AutomationVariable` in a runbook or DSC configuration. Use of this parameter can complicate the discovery of dependencies between runbooks or DSC configurations and Automation variables at design time.
72
72
73
73
The functions in the following table are used to access and retrieve variables in a Python2 runbook.
74
74
75
75
|Python2 Functions|Description|
76
76
|:---|:---|
77
-
|automationassets.get_automation_variable|Retrieves the value of an existing variable. |
78
-
|automationassets.set_automation_variable|Sets the value for an existing variable. |
77
+
|`automationassets.get_automation_variable`|Retrieves the value of an existing variable. |
78
+
|`automationassets.set_automation_variable`|Sets the value for an existing variable. |
79
79
80
80
> [!NOTE]
81
-
> You must import the **automationassets** module at the top of your Python runbook to access the asset functions.
81
+
> You must import the `automationassets` module at the top of your Python runbook to access the asset functions.
82
82
83
83
## Creating a new Automation variable
84
84
85
85
### Create a new variable using the Azure portal
86
86
87
-
1. From your Automation account, click the **Assets** tile and then on the **Assets** blade, select **Variables**.
87
+
1. From your Automation account, click the **Assets** tile, then the **Assets** blade, and select **Variables**.
88
88
2. On the **Variables** tile, select **Add a variable**.
89
89
3. Complete the options on the **New Variable** blade and then click **Create** to save the new variable.
90
90
@@ -93,7 +93,7 @@ The functions in the following table are used to access and retrieve variables i
93
93
94
94
### Create a new variable with Windows PowerShell
95
95
96
-
The script uses the **New-AzAutomationVariable** cmdlet to create a new variable and set its initial value. It can then retrieve the value using **Get-AzAutomationVariable**. If the value is a simple type, then that same type is retrieved. If it's a complex type, then a **PSCustomObject** type is retrieved.
96
+
The script uses the `New-AzAutomationVariable` cmdlet to create a new variable and set its initial value. It can then retrieve the value using `Get-AzAutomationVariable`. If the value is a simple type, then that same type is retrieved. If it's a complex type, then a `PSCustomObject` type is retrieved.
97
97
98
98
The following example shows how to create a variable of type String and then return its value.
## Using a variable in a runbook or DSC configuration
121
121
122
-
Use the **Set-AutomationVariable** activity to set the value of an Automation variable in a PowerShell runbook or DSC configuration, and the **Get-AutomationVariable** to retrieve it. You shouldn't use the **Set-AzAutomationVariable** and **Get-AzAutomationVariable** cmdlets or their AzureRM module equivalents in a runbook or DSC configuration, since they are less efficient than the workflow activities.
122
+
Use the `Set-AutomationVariable` activity to set the value of an Automation variable in a PowerShell runbook or DSC configuration, and the `Get-AutomationVariable` to retrieve it. You shouldn't use the `Set-AzAutomationVariable` and `Get-AzAutomationVariable` cmdlets or their AzureRM module equivalents in a runbook or DSC configuration, since they are less efficient than the workflow activities.
123
123
124
-
Note that you can't retrieve the value of a secure variable with **Get-AzAutomationVariable** or its AzureRM module equivalent.
124
+
Note that you can't retrieve the value of a secure variable with `Get-AzAutomationVariable` or its AzureRM module equivalent.
125
125
126
-
The only way to create a new variable from within a runbook or DSC configuration is to use the **New-AzAutomationVariable** cmdlet.
126
+
The only way to create a new variable from within a runbook or DSC configuration is to use the `New-AzAutomationVariable` cmdlet.
127
127
128
128
### Textual runbook samples
129
129
130
130
#### Set and retrieve a simple value from a variable
131
131
132
-
The following sample commands show how to set and retrieve a variable in a textual runbook. This sample assumes the creation of integer variables named *NumberOfIterations* and *NumberOfRunnings* and a string variable named *SampleMessage*.
132
+
The following sample commands show how to set and retrieve a variable in a textual runbook. This sample assumes the creation of integer variables named `NumberOfIterations` and `NumberOfRunnings` and a string variable named `SampleMessage`.
In a graphical runbook, you can add the **Get-AutomationVariable** or **Set-AutomationVariable** activity. Simply right-click the variable in the Library pane of the graphical editor and select the activity that you want.
173
+
In a graphical runbook, you can add the `Get-AutomationVariable` or `Set-AutomationVariable` activity. Simply right-click the variable in the Library pane of the graphical editor and select the activity that you want.
174
174
175
175

176
176
177
177
#### Set values in a variable
178
178
179
-
The following image shows sample activities to update a variable with a simple value in a graphical runbook. In this sample, **Get-AzVM** retrieves a single Azure virtual machine and saves the computer name to an existing Automation variable with a type of String. It doesn't matter whether the [link is a pipeline or sequence](../automation-graphical-authoring-intro.md#links-and-workflow) since the code only expects a single object in the output.
179
+
The following image shows sample activities to update a variable with a simple value in a graphical runbook. In this sample, `Get-AzVM` retrieves a single Azure virtual machine and saves the computer name to an existing Automation string variable. It doesn't matter whether the [link is a pipeline or sequence](../automation-graphical-authoring-intro.md#links-and-workflow) since the code only expects a single object in the output.
0 commit comments