You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/operator-service-manager/best-practices-onboard-deploy.md
+10-3Lines changed: 10 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -203,11 +203,12 @@ As the first step toward cleaning up an onboarded environment, delete publisher
203
203
204
204
Azure Operator Service Manager doesn't delete namespaces as part of any deletion operation. As such, after all resources are deleted, some artifacts might remain on the cluster. To remove any remaining artifacts, you should delete any workload namespaces created on the cluster. Including the namespace deletion operation as part of the workflow pipeline is a recommendation to automate the action.
205
205
206
-
## Azure global service limits and constraints
207
-
208
-
Azure enforces certain global service limits across all Azure services. The following is a curated list of those limits which should be considereed when onboarding, designing or operating workloads using Azure Operator Service Manager.
206
+
## Azure global limits considerations
207
+
Azure enforces certain global service limits and constraints across all Azure services. The following is a curated list of those limits which should be considereed when onboarding, designing or operating workloads using Azure Operator Service Manager.
209
208
210
209
### ARM template limits
210
+
These limits would apply to rendered ARM templates used with Azure Operator Service Manager.
211
+
211
212
| Value | Limit |
212
213
|-----------|-------|
213
214
|Parameters |256 |
@@ -221,6 +222,8 @@ Azure enforces certain global service limits across all Azure services. The foll
221
222
|Parameter file size| 4 MB |
222
223
223
224
### Azure RBAC limits
225
+
These limits would apply to the target subscription used for Azure Operator Service Manager deployment.
226
+
224
227
|Resource |Limit|
225
228
|---------|-----|
226
229
|Number of Azure role assignments per Azure subscription| 4,000|
@@ -235,7 +238,11 @@ Azure enforces certain global service limits across all Azure services. The foll
235
238
|Number of assignable scopes for Azure custom roles| 2,000|
236
239
|Number of system-managed deny assignments per Azure subscription| 2,000|
237
240
241
+
Generally, AOSM requires 8x the number of concurrent SNS operations against a target subscription.
242
+
238
243
### Other limits
244
+
These limits have been observed in certain real-world use-cases.
245
+
239
246
|Resource |Limit|
240
247
|---------|-----|
241
248
|Maximum duration of system-assigned scope token (OBO) | 4h 30m no refresh|
0 commit comments