Add restriction note

Author: maud-lv

articles/managed-grafana/how-to-connect-to-data-source-privately.md

@@ -21,6 +21,9 @@ While managed private endpoints are free, there may be charges associated with p
 > [!NOTE]
 > Managed private endpoints are currently only available in Azure Global.
 
+> [!NOTE]
+> Due to a Kubernetes limitation, if you're running a private data source in an AKS cluster, when the service’s `externalTrafficPolicy` is set to Local, Azure Private Link Service needs to use a different subnet from Pod’s subnet. If the same subnet is required, the service should use Cluster `externalTrafficPolicy`. See [Cloud Provider Azure](https://cloud-provider-azure.sigs.k8s.io/topics/pls-integration/#restrictions).
+
 ## Supported data sources
 
 Managed private endpoints work with Azure services that support private link. Using them, you can connect your Azure Managed Grafana workspace to the following Azure data stores over private connectivity: