Merge pull request #289756 from rajats22/release-aksvault-plr

AKS Backup Vault Tier and CRR - PLR

Author: v-dirichards

articles/backup/azure-kubernetes-service-backup-overview.md

@@ -16,9 +16,6 @@ ms.author: v-abhmallick
 
 AKS backup integrates with Backup center in Azure, providing a single view that can help you govern, monitor, operate, and analyze backups at scale. Your backups are also available in the Azure portal under **Settings** in the service menu for an AKS instance.
 
->[!Note]
->Vaulted backup and Cross Region Restore for AKS using Azure Backup are currently in preview.
-
 ## How does AKS backup work?
 
 Use AKS backup to back up your AKS workloads and persistent volumes that are deployed in AKS clusters. The solution requires the [Backup extension](/azure/azure-arc/kubernetes/conceptual-extensions) to be installed inside the AKS cluster. The Backup vault communicates to the extension to complete operations that are related to backup and restore. Using the Backup extension is mandatory, and the extension must be installed inside the AKS cluster to enable backup and restore for the cluster. When you configure AKS backup, you add values for a storage account and a blob container where backups are stored.
@@ -425,7 +422,7 @@ Azure Backup for AKS supports two storage tiers as backup datastores:
 
 - **Operational Tier**: The Backup Extension installed in the AKS cluster first takes the backup by taking Volume snapshots via CSI Driver and stores cluster state in a blob container in your own tenant. This tier supports lower RPO with the minimum duration between two backups of four hours. Additionally, for Azure Disk-based volumes, Operational Tier supports quicker restores.
 
-- **Vault standard Tier (preview)**: To store backup data for longer duration at lower cost than snapshots, AKS backup supports Vault-standard datastore. As per the retention rules set in the backup policy, the first successful backup (of a day, week, month, or year) is moved to a blob container outside your tenant. This datastore not only allows longer retention, but also provides ransomware protection. You can also move backups stored in the vault to another region (Azure Paired Region) for recovery by enabling *Geo redundancy* and *Cross Region Restore* in the Backup vault.
+- **Vault standard Tier**: To store backup data for longer duration at lower cost than snapshots, AKS backup supports Vault-standard datastore. As per the retention rules set in the backup policy, the first successful backup (of a day, week, month, or year) is moved to a blob container outside your tenant. This datastore not only allows longer retention, but also provides ransomware protection. You can also move backups stored in the vault to another region (Azure Paired Region) for recovery by enabling *Geo redundancy* and *Cross Region Restore* in the Backup vault.
 
 > [!Note]
 > You can store the backup data in a vault-standard datastore via Backup Policy by defining retention rules. Only one scheduled recovery point per day is moved to Vault Tier. However,  you can move any number of on-demand backups to the Vault as per the rule selected.  

articles/backup/azure-kubernetes-service-cluster-backup-concept.md

@@ -16,9 +16,6 @@ This article describes the prerequisites for Azure Kubernetes Service (AKS) back
 
 Azure Backup now allows you to back up AKS clusters (cluster resources and persistent volumes attached to the cluster) using a backup extension, which must be installed in the cluster. Backup vault communicates with the cluster via this Backup Extension to perform backup and restore operations. Based on the least privileged security model, a Backup vault must have *Trusted Access* enabled to communicate with the AKS cluster.
 
->[!Note]
->Vaulted backup and Cross Region Restore for AKS using Azure Backup are currently in preview.
-
 ## Backup Extension
 
 - The extension enables backup and restore capabilities for the containerized workloads and persistent volumes used by the workloads running in AKS clusters. 

articles/backup/azure-kubernetes-service-cluster-backup-support-matrix.md

@@ -19,12 +19,10 @@ You can use [Azure Backup](./backup-overview.md) to help protect Azure Kubernete
 
 - Operational Tier support for AKS backup is supported in all the following Azure public cloud regions: East US, North Europe, West Europe, South East Asia, West US 2, East US 2, West US, North Central US, Central US, France Central, Korea Central, Australia East, UK South, East Asia, West Central US, Japan East, South Central US, West US 3, Canada Central, Canada East, Australia South East, Central India, Norway East, Germany West Central, Switzerland North, Sweden Central, Japan West, UK West, Korea South, South Africa North, South India, France South, Brazil South, UAE North, China East 2, China East 3, China North 2, China North 3, USGov Virginia, USGov Arizona and USGov Texas.
 
-- Vault Tier and Cross Region Restore support (preview) for AKS backup are available in the following regions: East US, West US, West US 3, North Europe, West Europe, North Central US, South Central US, West Central US, East US 2, Central US, UK South, UK West, East Asia, South-East Asia, Japan East South India, Central India, Canada Central and Norway East.
+- Vault Tier and Cross Region Restore support for AKS backup are available in the following regions: East US, West US, West US 3, North Europe, West Europe, North Central US, South Central US, West Central US, East US 2, Central US, UK South, UK West, East Asia, South-East Asia, Japan East South India, Central India, Canada Central and Norway East.
 
 
   >[!Note]
-  >Vaulted backup and Cross Region Restore for AKS using Azure Backup are currently in preview.
-  >
   >To access backups stored in Vault Tier in the Azure paired region, enable Cross Region Restore capability for your Backup Vault. See the [list of Azure Paired Region](../reliability/cross-region-replication-azure.md#azure-paired-regions).
 
 ## Limitations
@@ -79,7 +77,7 @@ You can use [Azure Backup](./backup-overview.md) to help protect Azure Kubernete
 
 - Configuration of a storage account with private endpoint is supported.
 
-### Additional limitations for Vaulted backup and Cross Region Restore (preview)
+### Additional limitations for Vaulted backup and Cross Region Restore
 
 - Only Azure Disk with Persistent Volumes of size <= 1 TB are eligible to be moved to the Vault Tier; otherwise, they are skipped in the backup data. 
 

articles/backup/azure-kubernetes-service-cluster-backup.md

@@ -3,9 +3,7 @@ title: Back up Azure Kubernetes Service by using Azure Backup
 description: Learn how to back up Azure Kubernetes Service (AKS) by using Azure Backup.
 ms.topic: how-to
 ms.service: azure-backup
-ms.custom:
-  - ignite-2023
-ms.date: 01/03/2024
+ms.date: 11/04/2024
 author: AbhishekMallick-MS
 ms.author: v-abhmallick
 ---
@@ -16,10 +14,9 @@ This article describes how to configure and back up Azure Kubernetes Service (AK
 
 You can use Azure Backup to back up AKS clusters (cluster resources and persistent volumes attached to the cluster) by using the Backup extension, which must be installed in the cluster. The Backup vault communicates with the cluster via the Backup extension to perform backup and restore operations.
 
-> [!NOTE]
-> Vaulted backup and Cross Region Restore for AKS using Azure Backup are currently in preview.
+## Prerequisites
 
-## Before you begin
+Things to ensure before you configure backup for AKS cluster:
 
 - Currently, AKS Backup supports only Azure Disk Storage-based persistent volumes enabled by CSI driver. The backups are stored in an operational datastore only (backup data is stored in your tenant and isn't moved to a vault). The Backup vault and AKS cluster must be in the same region.
 - AKS Backup uses a blob container and a resource group to store the backups. The blob container holds the AKS cluster resources. Persistent volume snapshots are stored in the resource group. The AKS cluster and the storage locations must be in the same region. Learn [how to create a blob container](../storage/blobs/storage-quickstart-blobs-portal.md#create-a-container).

articles/backup/azure-kubernetes-service-cluster-restore.md

@@ -16,9 +16,6 @@ This article describes how to restore backed-up Azure Kubernetes Service (AKS).
 
 Azure Backup now allows you to back up AKS clusters (cluster resources and persistent volumes attached to the cluster) using a backup extension, which must be installed in the cluster. Backup vault communicates with the cluster via this Backup Extension to perform backup and restore operations. 
 
-> [!NOTE]
-> Vaulted backup and Cross Region Restore for AKS using Azure Backup are currently in preview.
-
 ## Before you start
 
 - AKS backup allows you to restore to original AKS cluster (that was backed up) and to an alternate AKS cluster. AKS backup allows you to perform a full restore and item-level restore. You can utilize [restore configurations](#restore-configurations) to define parameters based on the cluster resources that are to be restored.
@@ -65,9 +62,9 @@ Azure Backup for AKS currently supports the following two options when doing a r
 > [!NOTE]
 > AKS backup currently doesn't delete and recreate resources in the target cluster if they already exist. If you attempt to restore Persistent Volumes in the original location, delete the existing Persistent Volumes, and then do the restore operation.
 
-## Restore in secondary region (preview)
+## Restore in secondary region
 
-To restore the AKS cluster in the secondary region, [configure Geo redundancy and Cross Region Restore in the Backup vault](azure-kubernetes-service-cluster-backup.md#create-a-backup-vault), and then [trigger restore](tutorial-restore-aks-backups-across-regions.md#restore-in-secondary-region-preview).
+To restore the AKS cluster in the secondary region, [configure Geo redundancy and Cross Region Restore in the Backup vault](azure-kubernetes-service-cluster-backup.md#create-a-backup-vault), and then [trigger restore](tutorial-restore-aks-backups-across-regions.md#restore-in-secondary-region).
 
 ## Next steps
 

articles/backup/index.yml

@@ -12,7 +12,7 @@ metadata:
   ms.topic: landing-page
   author: AbhishekMallick-MS
   ms.author: v-abhmallick 
-  ms.date: 05/31/2024
+  ms.date: 07/11/2024
 
 # linkListType: architecture | concept | deploy | download | get-started | how-to-guide | learn | overview | quickstart | reference | tutorial | video | whats-new
 
@@ -73,7 +73,7 @@ landingContent:
             url: backup-azure-mysql-flexible-server-about.md
           - text: Cross Region Restore for Azure PostgreSQL Database
             url: backup-vault-overview.md#cross-region-restore-support-for-postgresql-using-azure-backup
-          - text: Vaulted backup and Cross Region Restore for support for AKS (preview)
+          - text: Vaulted backup and Cross Region Restore for support for AKS
             url: azure-kubernetes-service-backup-overview.md          
 
   # Card

articles/backup/quick-backup-aks.md

@@ -2,30 +2,30 @@
 title: "Quickstart: Configure an Azure Kubernetes Services cluster backup"
 description: Learn how to configure backup for an Azure Kubernetes Service (AKS) cluster, and then use Azure Backup to back up specific items in the cluster.
 ms.topic: quickstart
-ms.date: 10/01/2024
+ms.date: 11/04/2024
 ms.service: azure-backup
-ms.custom:
-  - ignite-2023
 author: AbhishekMallick-MS
 ms.author: v-abhmallick
 ---
 
 # Quickstart: Configure backup for an AKS cluster
 
-In this quickstart, you configure backup for an Azure Kubernetes Service (AKS) cluster, and then use the Azure Backup configuration to back up specific items in the cluster.
+In this quickstart, you configure vaulted backup for an Azure Kubernetes Service (AKS) cluster, and then use the Azure Backup configuration to back up specific items in the cluster.
 
 You can use Azure Backup to back up AKS clusters by installing the Backup extension. The extension must be installed in the cluster. An AKS cluster backup includes cluster resources and persistent volumes that are attached to the cluster.
 
 The Backup vault communicates with the cluster via the Backup extension to complete backup and restore operations.
 
 ## Prerequisites
 
+Before you configure vaulted backup for AKS cluster, ensure the following prerequisites are met:
+
 - Identify or [create a Backup vault](create-manage-backup-vault.md) in the same region where you want to back up an AKS cluster.
 - [Install the Backup extension](quick-install-backup-extension.md) in the AKS cluster that you want to back up.
 
-## Configure backup for an AKS cluster
+## Configure vaulted backup for an AKS cluster
 
-1. In the Azure portal, go to the AKS cluster that you want to back up.
+1. In the [Azure portal](https://portal.azure.com), go to the AKS cluster that you want to back up.
 
 1. In the resource menu, select **Backup**, and then select **Configure Backup**.
 
@@ -37,10 +37,7 @@ The Backup vault communicates with the cluster via the Backup extension to compl
 
     :::image type="content" source="./media/quick-backup-aks/backup-vault-review.png" alt-text="Screenshot that shows the review page for Configure Backup." lightbox="./media/quick-backup-aks/backup-vault-review.png":::
 
-   > [!NOTE]
-   > Before you enable Trusted Access, enable the `TrustedAccessPreview` feature flag for the `Microsoft.ContainerServices` resource provider on the subscription.
-
-1. Select a backup policy, which defines the schedule for backups and their retention period. Then select **Next**.
+1. Select a backup policy, which defines the schedule for backups and their retention period in both Operation and Vault-standard. Then select **Next**.
 
     :::image type="content" source="./media/azure-kubernetes-service-cluster-backup/select-backup-policy.png" alt-text="Screenshot that shows the Backup policy tab." lightbox="./media/azure-kubernetes-service-cluster-backup/select-backup-policy.png":::
 
@@ -56,9 +53,8 @@ The Backup vault communicates with the cluster via the Backup extension to compl
 
     :::image type="content" source="./media/azure-kubernetes-service-cluster-backup/validate-snapshot-resource-group-selection.png" alt-text="Screenshot that shows the Snapshot resource group dropdown." lightbox="./media/azure-kubernetes-service-cluster-backup/validate-snapshot-resource-group-selection.png":::
 
-1. When validation is finished, if required roles aren't assigned to the vault in the snapshot resource group, an error appears.
-
-    :::image type="content" source="./media/azure-kubernetes-service-cluster-backup/validation-error-permissions-not-assigned.png" alt-text="Screenshot that shows a validation error." lightbox="./media/azure-kubernetes-service-cluster-backup/validation-error-permissions-not-assigned.png":::  
+When validation is finished, if required roles aren't assigned to the vault in the snapshot resource group, an error appears.
+     :::image type="content" source="./media/azure-kubernetes-service-cluster-backup/validation-error-permissions-not-assigned.png" alt-text="Screenshot that shows a validation error." lightbox="./media/azure-kubernetes-service-cluster-backup/validation-error-permissions-not-assigned.png":::  
 
 1. To resolve the error, under **Datasource name**, select the datasource, and then select **Assign missing roles**.