Skip to content

Commit f7b57fd

Browse files
Addressed fixes needed in PR #303223
1 parent ea3762f commit f7b57fd

File tree

1 file changed

+11
-2
lines changed

1 file changed

+11
-2
lines changed

articles/backup/azure-kubernetes-service-cluster-backup-concept.md

Lines changed: 11 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -36,7 +36,16 @@ Azure Backup now allows you to back up AKS clusters (cluster resources and persi
3636
>[!Note]
3737
>Both of these core components are deployed with aggressive hard limits on CPU and memory, with CPU *less than 0.5% of a core* and memory limit ranging from *50-200 MB*. So, the *COGS impact* of these components is very low. Because they are core platform components, there is no workaround available to remove them once installed in the cluster.
3838
39-
- If Storage Account, to be provided as input for Extension installation, is under Virtual Network/Firewall, then BackupVault needs to be added as trusted access in Storage Account Network Settings. [Learn how to grant access to trusted Azure service](../storage/common/storage-network-security.md?tabs=azure-portal#grant-access-to-trusted-azure-services), which helps to store backups in the Vault datastore
39+
- If the storage account you provide as an input for the extension installation uses any network restrictions (private endpoints or the Azure Storage firewall), then grant the backup vault specific access to the storage account by following these steps:
40+
41+
1. [Grant access to a resource instance](../storage/common/storage-network-security-resource-instances.md). Use these settings:
42+
43+
- **Resource type**: `Microsoft.DataProtection/BackupVaults`
44+
- **Instance name**: Instance name of managed identity.
45+
46+
1. Enable *Allow Azure services on the trusted service list to access this storage account.*
47+
48+
For more information about Azure Storage network security, see [Azure Storage firewall rules](../storage/common/storage-network-security.md).
4049

4150
- The blob container provided in input during extension installation should not contain any files unrelated to backup.
4251

@@ -77,7 +86,7 @@ To enable backup for an AKS cluster, see the following prerequisites: .
7786

7887
- If you have any previous installation of *Velero* in the AKS cluster, you need to delete it before installing Backup Extension.
7988

80-
[!NOTE]
89+
>[!NOTE]
8190
>
8291
>The Velero CRDs installed in the cluster are shared between AKS Backup and the customer’s own Velero installation. However, the versions used by each installation may differ, potentially leading to failures due to contractmismatches.
8392
>

0 commit comments

Comments
 (0)