System requirements and support matrix (preview)

Applies to: AKS enabled by Azure Arc on VMware (preview)

This article describes the system requirements for setting up AKS enabled by Azure Arc on VMware, and the support matrix. For an overview of AKS Arc on VMware, see the overview article.

Arc-enabled VMware vSphere requirements

To use the AKS Arc on VMware preview, you must first onboard Arc-enabled VMware vSphere by connecting vCenter to Azure through the Arc Resource Bridge, with the Kubernetes Extension for AKS Arc operators installed. If you already completed this step, you can proceed with the AKS Arc on VMware requirements.

Support matrix

The support matrix for Arc-enabled VMware vSphere is documented in the Support matrix for Azure Arc-enabled VMware vSphere requirements article.

Plan deployment

For the prerequisites to onboard Arc-enabled VMware vSphere, see Quickstart: Connect VMware vCenter Server to Azure Arc by using the helper script.

Required input

A typical onboarding process that uses the script takes 30 minutes. During this process, you are prompted for the details specified in Inputs for the script to deploy Arc-enabled VMware vSphere.

AKS enabled by Azure Arc on VMware requirements

This section describes the requirements for deploying AKS enabled by Azure Arc on VMware.

VMware vCenter requirements

Before you deploy AKS on VMware, you must set up a few things in VMware vCenter. After that, you deploy the AKS clusters in the same resource pool, VM folder, and datastore in which you deployed the Arc Resource Bridge.

Entitlement

You need a designated VMware administration user for the AKS clusters. This user should have the following permissions:

• This role can read all inventory, deploy, and update virtual machines (VMs) to all the resource pools (or clusters), networks, and virtual machine templates that you plan to use with AKS Arc on VMware.

Resource pool

In this preview release, the Arc Resource Bridge and the target clusters share a resource pool. To set this up, create a resource pool for the Arc Resource Bridge and the target cluster(s) with the following minimum specifications:

For information about supported VM size options, see the AKS Arc on VMware scale requirements.

VM folder and VM templates

You should create a folder for VM templates, to store the Arc Resource Bridge and CBL Mariner Linux VM templates that are used to create AKS on VMware clusters.

Supported Kubernetes version

In this preview release, you can only deploy the same Kubernetes version that the Arc Resource Bridge supports. See the Arc Resource Bridge release notes for information about which Kubernetes version is supported for each specific version number.

Custom location

If you choose to Enable Kubernetes Service on VMware [preview] when you Connect vCenter to Azure from the Azure portal, a custom location with the prefix AKS-, and a default namespace, are created for you to deploy AKS on VMware. If you Enable Kubernetes Service on VMware [preview] using the Azure CLI process, you can specify the name of the custom location of your choice with the default namespace.

Azure requirements

You must connect to your Azure account:

az login --use-device-code

For more information, see Connect to Azure using the Azure CLI.

AKS deployment checklist

Microsoft Entra permissions, role and access level

You must have sufficient permissions to register an application with your Microsoft Entra tenant. To check that you have sufficient permissions, follow these steps:

• Go to the Azure portal and select Roles and administrators under Microsoft Entra ID to check your role.
• If your role is User, you must make sure that non-administrators can register applications.
• To check if you can register applications, go to User settings under the Microsoft Entra service to check if you have permission to register an application.

If the app registrations setting is set to No, only users with an administrator role can register these types of applications. To learn about the available administrator roles and the specific permissions in Microsoft Entra ID that are given to each role, see Microsoft Entra built-in roles. If your account is assigned the User role, but the app registration setting is limited to admin users, ask your administrator either to assign you one of the administrator roles that can create and manage all aspects of app registrations, or to enable users to register apps.

If you don't have permissions to register an application and your admin can't give you these permissions, the easiest way to deploy AKS is to ask your Azure admin to create a service principal with the right permissions. Admins can check the following section to learn how to create a service principal.

Azure resource group

You must have an Azure resource group in the supported regions before registration.

Supported regions

You can use the AKS Arc on VMware preview in the following supported regions:

• East US
• Australia East
• India Central
• Southeast Asia
• West Europe
• Japan East
• Canada Central

Data residency

AKS Arc on VMware doesn't store or process customer data outside the region in which the customer deploys the service instance.

Next steps

• If you already connected vCenter to Azure Arc and want to add the AKS extension, see the Quickstart: Deploy an AKS cluster using Azure CLI.
• If your vCenter is not connected to Azure Arc and you want to add the AKS extension, see the Quickstart: Connect VMware vCenter Server to Azure Arc using the helper script.