Merge pull request #174887 from bowen5/patch-1

Add more FAQs

Author: PRMerger17

articles/spring-cloud/faq.md

@@ -30,6 +30,12 @@ Security and privacy are among the top priorities for Azure and Azure Spring Clo
 * Azure Spring Cloud provides complete TLS/SSL and certificate management.
 * Critical security patches for OpenJDK and Spring Cloud runtimes are applied to Azure Spring Cloud as soon as possible.
 
+### How does Azure Spring Cloud host my applications?
+
+Each service instance in Azure Spring Cloud is backed by a fully dedicated Kubernetes cluster with multiple worker nodes. Azure Spring Cloud manages the underlying Kubernetes cluster for you, including high availability, scalability, Kubernetes version upgrade, and so on.
+
+Azure Spring Cloud intelligently schedules your applications on the underlying Kubernetes worker nodes. To provide high availability, Azure Spring Cloud distributes applications with 2 or more instances on different nodes.
+
 ### In which regions is Azure Spring Cloud available?
 
 East US, East US 2, Central US, South Central US, North Central US, West US, West US 2, West Europe, North Europe, UK South, Southeast Asia, Australia East, Canada Central, UAE North, Central India, Korea Central, East Asia, Japan East, South Africa North and China East 2(Mooncake). [Learn More](https://azure.microsoft.com/global-infrastructure/services/?products=spring-cloud)
@@ -199,7 +205,18 @@ Yes. For more information, see [Launch your Spring Cloud application from source
 
 ### Does Azure Spring Cloud support autoscaling in app instances?
 
-Yes.  For more information, see [Setup autoscale](./how-to-setup-autoscale.md).
+Yes. For more information, see [Set up autoscale for microservice applications](./how-to-setup-autoscale.md).
+
+### How does Azure Spring Cloud monitor the health status of my application?
+
+Azure Spring Cloud continuously probes port 1025 for customer's applications. These probes determine whether the application container is ready to start accepting traffic and whether Azure Spring Cloud needs to restart the application container. Internally, Azure Spring Cloud uses Kubernetes liveness and readiness probes to achieve the status monitoring.
+
+>[!NOTE]
+> Because of these probes, you currently can't launch applications in Azure Spring Cloud without exposing port 1025.
+
+### Whether and when will my application be restarted?
+
+Yes. For more information, see [Monitor app lifecycle events using Azure Activity log and Azure Service Health](./monitor-app-lifecycle-events.md).
 
 ::: zone pivot="programming-language-java"
 ### What are the best practices for migrating existing Spring Cloud microservices to Azure Spring Cloud?

articles/spring-cloud/how-to-access-data-plane-azure-ad-rbac.md

@@ -14,6 +14,9 @@ ms.custom: devx-track-java, subject-rbac-steps
 
 This article explains how to access the Spring Cloud Config Server and Spring Cloud Service Registry managed by Azure Spring Cloud using Azure Active Directory (Azure AD) role-based access control (RBAC).
 
+> [!NOTE]
+> Applications deployed and running inside the Azure Spring Cloud service are automatically wired up with certificate-based authentication and authorization when accessing the managed Spring Cloud Config Server and Service Registry. You don't need to follow this guidance for these applications. The related certificates are fully managed by the Azure Spring Cloud platform, and are automatically injected in your application when connected to Config Server and Service Registry.
+
 ## Assign role to Azure AD user/group, MSI, or service principal
 
 Assign the role to the [user | group | service-principal | managed-identity] at [management-group | subscription | resource-group | resource] scope.

articles/spring-cloud/monitor-app-lifecycle-events.md

@@ -59,6 +59,9 @@ When platform maintenance happens, your Azure Spring Cloud instance will also sh
 
 :::image type="content" source="media/monitor-app-lifecycle-events/planned-maintenance-in-progress.png" lightbox="media/monitor-app-lifecycle-events/planned-maintenance-in-progress.png" alt-text="Screenshot of an example log for planned maintenance in progress":::
 
+>[!NOTE]
+> Currently, Azure Spring Cloud performs one regular planned maintenance to upgrade the underlying Kubernetes version every 2-4 months. For a detailed maintenance timeline, check the notifications on the Azure Service Health page.
+
 ## Set up alerts
 
 You can set up alerts for app lifecycle events. Service health notifications are also stored in the Azure activity log. The activity log stores a large volume of information, so there's a separate user interface to make it easier to view and set up alerts on service health notifications.