Skip to content

Commit fe40e7c

Browse files
committed
edit pass: network-policy-engine-article
1 parent b7fa419 commit fe40e7c

File tree

1 file changed

+6
-7
lines changed

1 file changed

+6
-7
lines changed

articles/aks/use-network-policies.md

Lines changed: 6 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -34,7 +34,7 @@ Azure provides two ways to implement network policy. You choose a network policy
3434

3535
To enforce the specified policies, Azure Network Policy Manager for Linux uses Linux *IPTables*. Azure Network Policy Manager for Windows uses *Host Network Service (HNS) ACLPolicies*. Policies are translated into sets of allowed and disallowed IP pairs. These pairs are then programmed as `IPTable` or `HNS ACLPolicy` filter rules.
3636

37-
## Compare Azure Network Policy Manager and Calico network policy
37+
## Differences between Azure Network Policy Manager and Calico network policy and their capabilities
3838

3939
| Capability | Azure Network Policy Manager | Calico network policy |
4040
|------------------------------------------|----------------------------|-----------------------------|
@@ -74,10 +74,9 @@ To see network policies in action, you create an AKS cluster that supports netwo
7474
7575
To use Azure Network Policy Manager, you must use the [Azure CNI plug-in][azure-cni]. Calico network policy could be used with either this same Azure CNI plug-in or with the Kubernetes CNI plug-in.
7676

77-
The following example script:
77+
The following example script creates an AKS cluster with system-assigned identity and enables network policy by using Azure Network Policy Manager.
7878

79-
- Creates an AKS cluster with system-assigned identity and enables network policy by using Azure Network Policy Manager.
80-
- To use Calico as the network policy option instead, use the `--network-policy calico` parameter. Calico could be used with either `--network-plugin azure` or `--network-plugin kubenet`.
79+
To use Calico as the network policy option instead, use the `--network-policy calico` parameter. Calico could be used with either `--network-plugin azure` or `--network-plugin kubenet`.
8180

8281
Instead of using a system-assigned identity, you can also use a user-assigned identity. For more information, see [Use managed identities](use-managed-identity.md).
8382

@@ -95,7 +94,7 @@ $LOCATION=canadaeast
9594

9695
Create the AKS cluster and specify `azure` for the `network-plugin` and `network-policy`.
9796

98-
Use the following command to create a cluster:
97+
To create a cluster, use the following command:
9998

10099
```azurecli
101100
az aks create \
@@ -161,7 +160,7 @@ $WINDOWS_USERNAME=myWindowsUserName
161160
$LOCATION=canadaeast
162161
```
163162

164-
Create a username to use as administrator credentials for your Windows Server containers on your cluster. The following command prompts you for a username. Set it to `$WINDOWS_USERNAME`. Remember that the commands in this article are entered into a BASH shell.
163+
Create a username to use as administrator credentials for your Windows Server containers on your cluster. The following command prompts you for a username. Set it to `$WINDOWS_USERNAME`. Remember that the commands in this article are entered into a Bash shell.
165164

166165
```azurecli-interactive
167166
echo "Please enter the username to use as administrator credentials for Windows Server containers on your cluster: " && read WINDOWS_USERNAME
@@ -201,7 +200,7 @@ If you plan on adding Windows node pools to your cluster, include the `windows-a
201200
>
202201
> For clusters with only Linux node pools running Kubernetes 1.20 with earlier versions of Calico, the Calico version automatically upgrades to 3.17.2.
203202
204-
Create a username to use as administrator credentials for your Windows Server containers on your cluster. The following command prompts you for a username. Set it to `$WINDOWS_USERNAME`. Remember that the commands in this article are entered into a BASH shell.
203+
Create a username to use as administrator credentials for your Windows Server containers on your cluster. The following command prompts you for a username. Set it to `$WINDOWS_USERNAME`. Remember that the commands in this article are entered into a Bash shell.
205204

206205
```azurecli-interactive
207206
echo "Please enter the username to use as administrator credentials for Windows Server containers on your cluster: " && read WINDOWS_USERNAME

0 commit comments

Comments
 (0)