MicrosoftDocs/azure-aks-docs/articles/kubernetes-fleet

Update Fleet redaction marker Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Merge branch 'main' into weiweng/document-crps-security-restrictions

Merge pull request #3949 from weng271190436/weiweng/promote-namespace-accessible-to-v1 fleet: Promote NamespaceAccessible to v1

Add member cluster labels. (#3951) * Add member cluster labels. * Add samples on how to set / manage. * Tweak * Tweak title. * Add k8s reference. * Tweak * Update articles/kubernetes-fleet/concepts-member-cluster-labels.md Co-authored-by: learn-build-service-prod-08[bot] <274430765+learn-build-service-prod-08[bot]@users.noreply.github.com> --------- Co-authored-by: learn-build-service-prod-08[bot] <274430765+learn-build-service-prod-08[bot]@users.noreply.github.com>

Document namespace-accessible placement status restrictions

Revert "Document namespace-accessible placement status restrictions" This reverts commit e63ea853f2d73f39b6d94b15a9aab0777739e2d0.

Document namespace-accessible placement status restrictions

Promote NamespaceAccessible to v1 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Send email approval gate (#3880) * working doc * Final tweaks on sending emails * Update articles/kubernetes-fleet/howto-send-email-pending-gate.md Co-authored-by: learn-build-service-prod-06[bot] <274430002+learn-build-service-prod-06[bot]@users.noreply.github.com> * reorder toc * Apply batched suggestions from code review Co-authored-by: David Vadas <dvadas@gmail.com> * Content tweaks from LAA and team. * Final tweaks. * Apply batched suggestions from code review Co-authored-by: learn-build-service-prod-01[bot] <274427437+learn-build-service-prod-01[bot]@users.noreply.github.com> * Add missing qualifier * fix note * Test to describe image. * Apply batched suggestions from code review Co-authored-by: learn-build-service-prod-01[bot] <274427437+learn-build-service-prod-01[bot]@users.noreply.github.com> --------- Co-authored-by: learn-build-service-prod-06[bot] <274430002+learn-build-service-prod-06[bot]@users.noreply.github.com> Co-authored-by: David Vadas <dvadas@gmail.com> Co-authored-by: learn-build-service-prod-01[bot] <274427437+learn-build-service-prod-01[bot]@users.noreply.github.com>

Content fixes and LAA review. (#3926)

fleet/appnet fixes from content audit (#3910)

Add Terraform workflow for Fleet update strategies (#3792) * chore: add azure-portal-azure-cli-terraform zone pivot group Add a new article-specific zone pivot group with Azure portal, Azure CLI, and Terraform options, for use by articles/kubernetes-fleet/update-create-update-strategy.md. This keeps the existing azure-portal-azure-cli group (shared by other articles) unchanged, avoiding an empty Terraform tab on unrelated articles. Note: PR 3785 (work item 567031) proposes this same group for a sibling article. This branch adds it independently, per task instructions, and must be rebased after PR 3785 merges to avoid a duplicate group definition. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * docs: add Terraform pivot to Fleet update strategy article Adds a Terraform option to the existing Azure Kubernetes Fleet Manager update strategy article. The new tab sources the tested 201-aks-fleet-update-strategy sample from Azure/terraform and preserves the existing Azure portal and Azure CLI workflows. - Adds Terraform, Azure CLI, and Fleet extension prerequisites. - Links the canonical Terraform sample and its test record. - Sources providers.tf, variables.tf, main.tf, and outputs.tf through Open Publishing code includes, in dependency order. - Documents creating terraform.tfvars from the sample's terraform.tfvars.example without duplicating its content. - Adds init, fmt, validate, plan, and apply steps. - Explains the sample's two-stage / three-group update strategy and notes it doesn't set maxConcurrency or maxAllowedFailures. - Verifies the created strategy using Terraform outputs and az fleet updatestrategy show. - Adds guarded terraform destroy cleanup guidance. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Apply Learn Authoring Assistant style suggestions Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Show Fleet member commands in Terraform pivot Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --------- Co-authored-by: asudbring <26909696+asudbring@users.noreply.github.com> Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Add Terraform workflow for Managed Fleet Namespaces (#3791) * chore: add azure-portal-azure-cli-terraform zone pivot group Adds a three-way portal/CLI/Terraform pivot group for ADO 568341 (Managed Fleet Namespaces Terraform rollout). This group may also be added independently by sibling PR asudbring/fleet-update-automation-terraform-567031; whichever merges first should be reconciled with the other at merge time to avoid a duplicate block. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * docs: add Terraform pivot for creating and configuring Managed Fleet Namespaces ADO 568341. Adds a terraform pivot alongside the existing azure-cli and azure-portal pivots for creating, configuring, and deleting a Managed Fleet Namespace, sourced from Azure/terraform quickstart/101-aks-fleet-with-hub (prerequisite Fleet Manager + hub cluster) and quickstart/201-aks-fleet-managed-namespaces (scenario), per Azure/terraform PR #500. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * docs: clarify Terraform prerequisite has no member clusters and fix tags wording ADO 568341 spec review follow-up. The Azure/terraform quickstart/101-aks-fleet-with-hub prerequisite sample creates only a Fleet Manager and hub cluster, with no member clusters. Adds explicit guidance in the Terraform prerequisites and after prerequisite deployment pointing readers to the existing quickstart-create-fleet-and-members.md guidance and an az fleet member list check, and scopes Managed Fleet Namespace propagation verification (Resource placements) as requiring at least one joined member cluster while configuration viewing does not. Also corrects wording that implied the tags variable must be set in terraform.tfvars: it's optional, defaults in variables.tf, and isn't present in terraform.tfvars.example. No changes to the existing azure-cli or azure-portal pivots. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * docs: source terraform.tfvars.example and fix Terraform heading anchor collision Quality-review follow-up for ADO 568341. Fixes two blockers: (1) the manual file-creation workflow never created terraform.tfvars.example before the cp command copied it to terraform.tfvars, causing that step to fail; added a sourced whole-file [!code-terraform] step that creates terraform.tfvars.example from the canonical sample before the existing copy step. (2) the Terraform pivot's `### Create the Managed Fleet Namespace` H3 heading collided with an identically named heading in the hidden Portal pivot, producing an ambiguous #create-the-managed-fleet-namespace anchor used by two Terraform-pivot skip-links; renamed the Terraform heading to `### Create the Managed Fleet Namespace with Terraform` and updated both skip-links to the new #create-the-managed-fleet-namespace-with-terraform anchor. No Portal/CLI content changed. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Apply Learn Authoring Assistant style suggestions Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Apply suggestions from PR review Delete disallowed acronym "ARM", which is allowed only in the full context "ARM template". --------- Co-authored-by: asudbring <26909696+asudbring@users.noreply.github.com> Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Co-authored-by: Anna Huff <v-annahuff@microsoft.com>

Add Terraform workflow for Fleet update automation (#3785) * docs: add Terraform pivot to Fleet update automation article Add a Terraform choice alongside the existing Azure portal and Azure CLI paths for creating, viewing, and deleting Fleet auto-upgrade profiles. The Terraform content sources whole-file includes from the Azure/terraform quickstart/201-aks-fleet-update-automation sample (providers.tf, variables.tf, main.tf, outputs.tf) and covers terraform init/fmt/validate/plan/apply, verification via terraform output and az fleet CLI commands, and terraform destroy cleanup with a warning about the sample's resource group and Fleet Manager scope. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * chore: add azure-portal-azure-cli-terraform zone pivot group Add a new article-specific zone pivot group with Azure portal, Azure CLI, and Terraform options, for use by articles/kubernetes-fleet/update-automation.md. This keeps the existing azure-portal-azure-cli group (shared by 11 other articles) unchanged, avoiding an empty Terraform tab on unrelated articles. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * docs: add Azure CLI prerequisites to Terraform pivot for Fleet verification The Terraform pivot's verification steps run az fleet autoupgradeprofile show and az fleet member list, but the Terraform prerequisites zone didn't install the Azure CLI or the fleet extension needed to run them, since those steps are otherwise only shown in the Azure CLI pivot. Mirror the existing Azure CLI install and fleet extension add/update instructions in the Terraform prerequisites so the verification commands work as documented. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Apply Learn Authoring Assistant style suggestions Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --------- Co-authored-by: asudbring <26909696+asudbring@users.noreply.github.com> Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

docs: clarify Fleet auto-upgrade profile scope

docs: fix Fleet Manager auto-upgrade profile links

docs: clarify Fleet Manager auto-upgrade profile heading

Add Fleet Manager Security patch auto-upgrade channel (#3738) * Add security patch auto-upgrade channel * LAA updates. * Update missed ms.date update. * Remove link to deleted FAQ entry. * Apply suggestions from code review Co-authored-by: learn-build-service-prod-02[bot] <274428175+learn-build-service-prod-02[bot]@users.noreply.github.com> * Tweaks after preview review. --------- Co-authored-by: learn-build-service-prod-02[bot] <274428175+learn-build-service-prod-02[bot]@users.noreply.github.com>

Confirm merge from repo_sync_working_branch to main to sync with https://github.com/MicrosoftDocs/azure-aks-docs (branch main) (#3691) * Apply suggestions from code review Co-authored-by: learn-build-service-prod-07[bot] <274430390+learn-build-service-prod-07[bot]@users.noreply.github.com> * Fix link for AKS Automatic node management (#467) * Fix typo in Application Network limitations section (#468) Correct Application Netowork supported versions to Application Network supported versions * Fix error. * Apply suggestions from code review Co-authored-by: learn-build-service-prod-06[bot] <274430002+learn-build-service-prod-06[bot]@users.noreply.github.com> --------- Co-authored-by: Tim Sherer <28902327+TimShererWithAquent@users.noreply.github.com> Co-authored-by: learn-build-service-prod-07[bot] <274430390+learn-build-service-prod-07[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod[bot] <113403604+learn-build-service-prod[bot]@users.noreply.github.com> Co-authored-by: Suzi Zuber <suzi@zube.com> Co-authored-by: Bourne-ID <Bourne-ID@users.noreply.github.com> Co-authored-by: learn-build-service-prod-06[bot] <274430002+learn-build-service-prod-06[bot]@users.noreply.github.com>

Restore memberSelector-based update strategy docs (#3551) * Revert "Revert memberSelector-based update strategy docs from PR #3036 (#3346)" This reverts commit 55176997930dd04e4c9df2a50666526befe7b7cb. * Apply suggestion from @learn-build-service-prod-06[bot] Co-authored-by: learn-build-service-prod-06[bot] <274430002+learn-build-service-prod-06[bot]@users.noreply.github.com> --------- Co-authored-by: yoobinshin <yoobinshin@microsoft.com> Co-authored-by: learn-build-service-prod-06[bot] <274430002+learn-build-service-prod-06[bot]@users.noreply.github.com>