Skip to content

Commit e6c139c

Browse files
committed
Minor updates to ready for publishing.
1 parent b2eda25 commit e6c139c

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

articles/openshift/howto-bring-nsg.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ author: johnmarco
55
ms.service: azure-redhat-openshift
66
ms.topic: how-to
77
ms.author: johnmarc
8-
ms.date: 02/15/2024
8+
ms.date: 05/06/2024
99
topic: how-to
1010
recommendations: true
1111
keywords: azure, openshift, aro, NSG
@@ -16,7 +16,7 @@ keywords: azure, openshift, aro, NSG
1616

1717
Typically, when setting up an ARO cluster, you must designate a resource group for deploying the ARO cluster object (referred to as the Base Resource Group in the following diagram). In such scenarios, you can use either the same resource group for both the virtual network (VNET) and the cluster, or you can opt for a separate resource group solely for the VNET. Neither of these resource groups directly corresponds to a single ARO cluster, granting you complete control over them. This means you can freely create, modify, or delete resources within these resource groups.
1818

19-
During the cluster creation process, the ARO Resource Provider (RP) establishes a dedicated resource group specific to the cluster's needs. This group houses various cluster-specific resources like node VMs, load balancers, and Network Security Groups (NSGs), as depicted by the Managed Resource Group in the diagram below. The Managed Resource Group is tightly secured, prohibiting any modifications to its contents, including the NSG linked to the VNET subnets specified during cluster creation. In some situations, the NSG generated by the ARO RP might not adhere to the security policies of certain organizations.
19+
During the cluster creation process, the ARO Resource Provider (RP) establishes a dedicated resource group specific to the cluster's needs. This group houses various cluster-specific resources like node VMs, load balancers, and Network Security Groups (NSGs), as depicted by the Managed Resource Group in the following diagram. The Managed Resource Group is tightly secured, prohibiting any modifications to its contents, including the NSG linked to the VNET subnets specified during cluster creation. In some situations, the NSG generated by the ARO RP might not adhere to the security policies of certain organizations.
2020

2121
:::image type="content" source="media/howto-bring-nsg/network-security-group-old.png" alt-text="Diagram showing an overview of how network security groups work in a typical ARO cluster.":::
2222

0 commit comments

Comments
 (0)