Merge pull request #70268 from bscott-rh/OSDOCS-9207

OSDOCS#9207 Mixed public/private API and Ingress during azure installation

Author: bscott-rh

modules/installation-configuration-parameters.adoc

@@ -677,9 +677,12 @@ endif::openshift-origin[]
 |publish:
 |How to publish or expose the user-facing endpoints of your cluster, such as the Kubernetes API, OpenShift routes.
 |
-ifdef::aws,azure,gcp,ibm-cloud[]
+ifdef::aws,gcp,ibm-cloud[]
 `Internal` or `External`. To deploy a private cluster, which cannot be accessed from the internet, set `publish` to `Internal`. The default value is `External`.
 endif::[]
+ifdef::azure[]
+`Internal`, `External`, or `Mixed`. To deploy a private cluster, which cannot be accessed from the internet, set `publish` to `Internal`. The default value is `External`. To deploy a cluster where the API and the ingress server have different publishing strategies, set `publish` to `Mixed` and use the `operatorPublishingStrategy` parameter.
+endif::[]
 ifndef::aws,azure,gcp,ibm-cloud[]
 `Internal` or `External`. The default value is `External`.
 
@@ -1870,6 +1873,16 @@ at least two zones.
 |Enables accelerated networking. Accelerated networking enables single root I/O virtualization (SR-IOV) to a VM, improving its networking performance.
 |`Accelerated` or `Basic`. If instance type of control plane and compute machines support `Accelerated` networking, by default, the installer enables `Accelerated` networking, otherwise the default networking type is `Basic`.
 
+|operatorPublishingStrategy:
+  apiserver:
+|Determines whether the load balancers that service the API are public or private. Set this parameter to `Internal` to prevent the API server from being accessible outside of your VNet. Set this parameter to `External` to make the API server accessible outside of your VNet. If you set this parameter, you must set the `publish` parameter to `Mixed`.
+|`External` or `Internal`. The default value is `External`.
+
+|operatorPublishingStrategy:
+  ingress:
+|Determines whether the DNS resources that the cluster creates for ingress traffic are publicly visible. Set this parameter to `Internal` to prevent the ingress VIP from being publicly accessible. Set this parameter to `External` to make the ingress VIP publicly accessible. If you set this parameter, you must set the `publish` parameter to `Mixed`.
+|`External` or `Internal`. The default value is `External`.
+
 |====
 
 [NOTE]