Merging changes synced from https://github.com/MicrosoftDocs/azure-stack-docs-pr (branch live)

Author: Learn Build Service GitHub App

azure-local/TOC.yml

@@ -13,12 +13,10 @@ items:
     items:
     - name: Release information
       href: release-information-23h2.md
-    - name: Known issues 
+    - name: Known issues
       href: known-issues.md
     - name: Security updates
       href: security-update/security-update.md
-  - name: Disconnected operations
-    href: manage/disconnected-operations-overview.md
   - name: OEM License
     items: 
     - name: OEM license information
@@ -581,6 +579,49 @@ items:
     - name: Troubleshoot
       href: migrate/migrate-troubleshoot.md
 
+- name: Disconnected operations
+  items:
+  - name: Overview
+    href: manage/disconnected-operations-overview.md
+  - name: Known issues
+    href: manage/disconnected-operations-known-issues.md
+  - name: Plan
+    items:
+    - name: Network
+      href: manage/disconnected-operations-network.md
+    - name: Identity
+      href: manage/disconnected-operations-identity.md
+    - name: Security
+      href: manage/disconnected-operations-security.md
+    - name: Public key infrastructure
+      href: manage/disconnected-operations-pki.md
+  - name: Deploy
+    items:
+    - name: Set-up
+      href: manage/disconnected-operations-set-up.md
+    - name: Deployment
+      href: manage/disconnected-operations-deploy.md
+  - name: Manage
+    items:
+    - name: Azure CLI
+      href: manage/disconnected-operations-cli.md
+    - name: Azure Local VMs
+      href: manage/disconnected-operations-arc-vm.md
+    - name: Azure Kubernetes Service (AKS)
+      href: manage/disconnected-operations-aks.md
+    - name: Azure Container Registry
+      href: manage/disconnected-operations-azure-container-registry.md
+    - name: Azure Policy
+      href: manage/disconnected-operations-policy.md
+    - name: Azure monitor
+      href: manage/disconnected-operations-monitoring.md
+  - name: Troubleshoot
+    items:
+    - name: On-demand log collection
+      href: manage/disconnected-operations-on-demand-logs.md
+    - name: Fallback log collection
+      href: manage/disconnected-operations-fallback.md
+
 - name: Concepts
   items: 
   - name: Azure Local observability
@@ -589,9 +630,6 @@ items:
     items:
     - name: Network ATC overview
       href: concepts/network-atc-overview.md?pivots=azure-local
-
-
-
 - name: Reference
   items:
   - name: For Azure Local VM management

azure-local/includes/release-2411-1-later.md

@@ -0,0 +1,11 @@
+---
+author: ronmiab
+ms.author: robess
+ms.service: azure-stack-hci
+ms.topic: include
+ms.date: 01/10/2025
+ms.reviewer: alkohli
+ms.lastreviewed: 01/17/2025
+---
+
+> Applies to: Azure Local 2411.1 and later

azure-local/index.yml

@@ -26,8 +26,6 @@ landingContent:
         links:
           - text: What's new in Azure Local?
             url: whats-new.md
-          - text: Small Form Factor (preview)
-            url: concepts/system-requirements-small-23h2.md
           - text: Azure Local disconnected operations (preview)
             url: manage/disconnected-operations-overview.md  
 
@@ -114,6 +112,10 @@ landingContent:
     linkLists:
       - linkListType: overview
         links:
+          - text: Plan your network for disconnected operations (preview)
+            url: manage/disconnected-operations-network.md
+          - text: Deploy disconnected operations (preview)
+            url: manage/disconnected-operations-deploy.md  
           - text: Deploy Arc gateway (preview)
             url: deploy/deployment-azure-arc-gateway-overview.md
           - text: Deploy using local identity with Key Vault (preview)

azure-local/manage/disconnected-operations-aks.md

@@ -0,0 +1,202 @@
+---
+title: Manage AKS Arc for Azure Local with disconnected operations (preview)
+description: Manage Azure Kubernetes Service (AKS) Arc for Azure Local with disconnected operations (preview).
+ms.topic: how-to
+author: ronmiab
+ms.author: robess
+ms.date: 08/06/2025
+ai-usage: ai-assisted
+---
+
+# Manage AKS Arc for Azure Local with disconnected operations (preview)
+
+::: moniker range=">=azloc-2506"
+
+This article gives you an overview of Azure Kubernetes Service (AKS) Arc for disconnected operations on Azure Local (preview). It closely mirrors AKS capabilities on Azure Local and includes many references to Azure Local AKS articles. You'll learn how to deploy and manage AKS clusters in disconnected environments, understand key differences, and review limitations to ensure successful implementation.
+
+[!INCLUDE [IMPORTANT](../includes/disconnected-operations-preview.md)]
+
+## Overview
+
+AKS Arc for disconnected operations allows you to manage Kubernetes clusters and deploy applications across various environments using disconnected operations. This capability ensures you can maintain consistent management and operational experience of AKS on Azure Local using a local control plane.
+
+## Prerequisites
+
+- [Azure Command-Line Interface (CLI)](disconnected-operations-cli.md) installed on your local machine.
+- An Azure subscription associated with disconnected operations.
+- Understanding of AKS and Azure Arc concepts.
+- Complete [Identity for Azure Local with disconnected operations (preview)](disconnected-operations-identity.md).
+- Complete [Networking for Azure Local with disconnected operations (preview)](disconnected-operations-network.md).
+- Complete [Public key infrastructure (PKI) for Azure Local with disconnected operations (preview)](disconnected-operations-pki.md).
+- Complete [Hardware for Azure Local with disconnected operations (preview)](disconnected-operations-overview.md#preview-participation-criteria).
+- Complete [Set up for Azure Local with disconnected operations (preview)](disconnected-operations-set-up.md).
+
+## Limitations
+
+Limitations for disconnected operations with AKS Arc include:
+
+- Support for disconnected operations begins with the 2408 release.
+- Supported Kubernetes versions: 1.27.7, 1.27.9, 1.28.5, 1.28.9, 1.29.2, and 1.29.4.
+- Microsoft Entra ID (formerly Azure Active Directory) isn't supported for disconnected operations.
+- GPUs aren't supported.
+- Arc Gateway isn't supported for configuring outbound URLs.
+- Create logical networks using the CLI only. The portal isn't supported.
+- Create SSH keys using the CLI only. The portal isn't supported.
+
+## Create an AKS cluster
+
+To create an AKS cluster that supports disconnected operations, see [Create an AKS cluster through CLI](/azure/aks/aksarc/aks-create-clusters-cli#create-a-kubernetes-cluster) and [Create a Kubernetes cluster using the Azure portal](/azure/aks/aksarc/aks-create-clusters-portal#create-a-kubernetes-cluster).
+
+Use the following specifications for disconnected operations:
+
+### Install the Azure CLI extension
+
+Before you install the Azure CLI extension, make sure you have the following:
+
+- Azure CLI version 2.60.0
+- Extension version:
+  - customlocation: 0.1.3
+  - aksarc: 1.2.23
+  - stack-hci-vm: 1.3.0
+
+Install the CLI extension using the following commands:
+
+```azurecli
+az extension add -n aksarc --version 1.2.23 
+az extension add -n stack-hci-vm --version 1.3.0 
+az config set core.instance_discovery=false --only-show-errors
+ ```
+
+For more information, see [Install the Azure CLI extension](/azure/aks/aksarc/aks-create-clusters-cli).
+
+### Sign in with Azure CLI
+
+You can use the `az login` command to sign in to your Azure account. For more information, see [Sign in with credentials on the command line](/cli/azure/authenticate-azure-cli-interactively#sign-in-with-credentials-on-the-command-line).
+
+### Create logical networks
+
+Use the `az stack-hci-vm network lnet create` cmdlet to create a logical network on the VM switch in Static IP configuration. For information on limitations, see [Limitations](#limitations).
+
+```azurecli
+az stack-hci-vm network lnet create --subscription $subscription --resource-group $resource_group --custom-location $customLocationID --name $lnetName --vm-switch-name $vmSwitchName --ip-allocation-method "Static" --address-prefixes $addressPrefixes --gateway $gateway --dns-servers $dnsServers --ip-pool-start $ipPoolStart --ip-pool-end $ipPoolEnd
+```
+
+For more information, see [Create logical networks](/azure/aks/aksarc/aks-networks?tabs=azurecli).
+
+> [!NOTE]
+> Creating logical networks can be created through CLI only ; the operations through the portal isn't supported. For more information, see [Azure Local VM limitations](../manage/disconnected-operations-arc-vm.md#limitations).
+
+### Create the cluster
+
+To create the AKS cluster, we recommend you use CLI. For more information, see [Create an AKS cluster through CLI](/azure/aks/aksarc/aks-create-clusters-cli#create-a-kubernetes-cluster).
+
+To use the Azure portal, see [Create a Kubernetes cluster using the Azure portal](/azure/aks/aksarc/aks-create-clusters-portal#create-a-kubernetes-cluster). To create the SSH keys, see [Generate and store SSH keys with the Azure CLI](/azure/virtual-machines/ssh-keys-azure-cli).
+
+Use the `az aksarc create` cmdlet to create a Kubernetes cluster.
+
+```azurecli
+az aksarc create -n $aksclustername -g $resource_group --custom-location $customlocationID --vnet-ids $logicnetId --generate-ssh-keys
+```
+
+> [!NOTE]
+> You should get JSON-formatted information about the cluster once the creation is complete.
+
+Here's an example script to create logical networks and an AKS Arc cluster.
+
+```azurecli
+# Check and update variables according to your environment.
+
+$subscriptionId = “ ”  # Update the Starter Subscription Id of your environment
+$location = "autonomous"
+$resourceGroupName = " " # Update the resource group name
+$customLocationResourceName = " "   # This name would be referenced in resource group
+$customLocationResourceId = "/subscriptions/$SubscriptionId/resourceGroups/$resourceGroupName/providers/Microsoft.ExtendedLocation/customLocations/$customLocationResourceName"
+  
+# IP config detail.
+ 
+$aszhost = <Host Machine> # update with host machine name
+# YAML file would be information on the following:  
+$vmSwitchName= # The value of vswitchname
+$addressPrefixes= # The value of ipaddressprefix
+$gateway= # The value of gateway
+$dnsservers= # The value of dnsservers
+$ipPoolStart= # Set this according to $addressPrefixes, don’t overlap k8snodeippoolstart and k8snodeippoolend
+$ipPoolEnd= # Set this according to $addressPrefixes, don't overlap k8snodeippoolstart and k8snodeippoolend
+  
+# Create Logical Network for AKS cluster.
+
+$lNetName = "aksarc-lnet-static"
+az stack-hci-vm network lnet create `
+--resource-group $resourceGroupName `
+--custom-location $customLocationResourceId `
+--location $location `
+--name $lNetName `
+--ip-allocation-method "Static" `
+--address-prefixes $addressPrefixes `
+--ip-pool-start $ipPoolStart `
+--ip-pool-end $ipPoolEnd `
+--gateway $gateway `
+--dns-servers $dnsservers `
+--vm-switch-name $vmSwitchName
+  
+# Create AKS cluster using az cli.
+ 
+$logicNetId = (az stack-hci-vm network lnet show --resource-group $resourceGroupName --name $lNetName --query id -o tsv)
+$aksClusterName = " " # please enter the clustername
+$controlPlaneIp = # Set this according to $addressPrefixes, please don't overlap $ipPoolStart and $ipPoolEnd
+az aksarc create -n $aksClusterName `
+--resource-group $resourceGroupName `
+--custom-location $customLocationResourceId `
+--node-count 2 `
+--vnet-ids $logicNetId `
+--generate-ssh-keys `
+--control-plane-ip $controlPlaneIp `
+--only-show-errors
+# --node-vm-size 'Standard_D8s_v3' `
+```
+
+### Retrieve `kubeconfig`
+
+To retrieve the `kubeconfig` file for the AKS cluster, use the `az aksarc get-credentials` cmdlet. Make sure you use your admin credentials.
+
+Here's an example:
+
+```azurecli
+az aksarc get-credentials --resource-group myResourceGroup --name myAKSCluster --admin
+```
+
+To retrieve the certificate-based admin kubeconfig for an AKS cluster enabled by Azure Arc.
+
+Here's an example:
+
+```azurecli
+az aksarc get-credentials --name "sample-aksarccluster" --resource-group "sample-rg" --file C:\AksArc\config-admin --adminkubectl --kubeconfig C:\AksArc\config-admin get ns  
+```
+
+For more information, see [Retrieve kubeconfig](/azure/aks/aksarc/retrieve-admin-kubeconfig#retrieve-the-certificate-based-admin-kubeconfig-using-az-cli).
+
+### Delete an AKS cluster
+
+You can use the `az aksarc delete` cmdlet to delete the AKS cluster you created.
+
+```azurecli
+az aksarc delete --name $aksclustername --resource-group $resource_group
+```
+
+## Related content
+
+- [AKS on Azure Local architecture](/azure/aks/aksarc/cluster-architecture).
+
+- [AKS enabled by Azure Arc network requirements](/azure/aks/aksarc/aks-hci-network-system-requirements).
+
+- [Manage node pools for an AKS cluster](/azure/aks/aksarc/manage-node-pools).
+
+- [Use cluster autoscaler on an AKS arc cluster](/azure/aks/aksarc/auto-scale-aks-arc).
+
+::: moniker-end
+
+::: moniker range="<=azloc-2505"
+
+This feature is available only in Azure Local 2506.
+
+::: moniker-end