Send logs of application running on AKS to Azure
Hello, My backend code in python has some logs that by using "opencensus-ext-azure" package I send them over to Azure. I have an Application Insight resource linked to a Log Analytics Workspace resource. When using Azure Kubernetes Services…
kubernetes
Hi, how to learn concept related to AKS in easiest way with devops... i can see 1000 plus pages in pdf ... any easiest way to learn
How can I automate authentication to my function app written in python with Microsoft Azure AD authentication when accessing from Azure Kubernetes Service on the same tenant?.
I have a AKS cluster in my tenant on which I run some ETL jobs. Some of these jobs access the http trigger of an Azure function. Now to secure my function I added Azure AD authentication. To access the Azure function: I added the user identity of the…
Experiencing "Critical Fileless execution via memfd_create" security events from the "csi-node-driver-registrar" container
Hello community, We've been running several AKS clusters for some time. Suddenly, the Falco (threat detection tool) pods started reporting suspicious activity every few seconds started from Oct, 30 2 AM UTC approx. The events look similar to the…
AKS pod in CrashLoop error due to managed identity integration
We have an AKS cluster on which one of our Deployments which now uses DefaultAzureCredential class to fetch connection strings stored in Azure Key Vault. We have provide the "System Assigned Managed Identity" contributor access to Key Vault to…
When will the Azure Storage FUSE driver (Blobfuse2) support MS Entra Workload Id for mounting to AKS?
This GitHub issue details the issue many customers are experiencing attempting to mount Azure Blob Storage to AKS Pods, using Managed Identity (MS Entra Workload Id) and the Azure Storage FUSE driver (Blobfuse2):…
I am unable to use a subnet with route table associated while creating a cluster in Azure portal.
Hi, we have a subnet associated with a route table, while creating a (aks) cluster using that subnet it is showing an error saying we cannot use a subnet with a route table attached, for this I am removing the route table and using that subnet for…
managed TLS certificates for private AKS using private DNS zones
I have a private AKS cluster that I can access via private link. To expose services I use NGINX ingress controller. I would like to enable HTTPS to my services, I have tried using cert-manager and the self-signed CA issuer. But I would like to know if…
DNS resolution inside AKS pods
Hi, I have multiple AKS running and recently one of my cluster is having issue DNS resolution issue. First I encountered the issue when cert-manager inside my cluster wasn't able to auto renew the certificate. I added dnsconfig to the certmanager with…
mail when pod is down which is crated by AKS
We have created PODs (Agents) if any POD created by AKS is down, we want to send email , is it possible if yes how?
Azure Kubernetes Service SLA
Dear all Is the Uptime SLA documented in https://learn.microsoft.com/en-gb/azure/aks/free-standard-pricing-tiers?WT.mc_id=Portal-Microsoft_Azure_Expert#uptime-sla-terms-and-conditions only about the Control Plane (API Server)? And if true, does it mean…
Can I work around "NetworkPluginMode overlay cannot be used with PodSubnetID" error when upgrading AKS cluster from CNI to CNI overlay?
One of our clusters is giving the following error when trying to update the network plugin mode to overlay... "NetworkPluginMode overlay cannot be used with PodSubnetID" Is this what the "Doesn't use the dynamic pod IP allocation…
Error occurred when using ODBC driver with Workload Identity to connect to Azure Databricks Workspace from an AKS Pod deployment
Hello everybody. As per the title, I am trying to achieve the followings: Connect to an Azure Databricks Workspace, in order to execute an SQL Query, from an Azure Function running on an AKS Pod. Pod deployment is made using CI/CD pipelines with…
HTTPS on a custom port using ingress (AGIC)
I am trying to create a listener on a custom port. The minute I start using custom port my listener in application gateway is created on http protocol and if i am not specifying the custom port it is coming on https on port 443. Below are the annotations…
Connect to CloudShell
Hi, I have granted one of my users access to Azure Kubernetes Service. The user wants to connect to Azure Cloud Shell from the Azure portal but is unable to do so, as connecting to Azure Cloud Shell requires a storage account, and the user does not have…
Azure VNET peering, one peer is getting deleted and the other one is going to disconnected status causing pipeline errors
I have two virtual networks, one for AKS cluster and one for Azure Firewall. These two are connected via VNET peering(aks-fw peering & fw-aks peering). If I am doing any changes or modifications int the cluster(for example changing the VM size) one…
how to fix pod to pod communication issue
Hello, we have a AKS cluster and we are using this cluster in our kvm vm now we have deployed our application in kubernetes however we are not able to communicate between pods when we are trying to do curl we got “no reply from server” please let me…
Need some design guidance around using NAT Gateway with AKS
Hi, We have an AKS cluster with multiple nodepools. All nodepools share the same subnet (/20). Nodepools are VMSS with Zone-redundancy. We want to attach NAT Gateway to that subnet for outbound connectivity. Since the NAT gateway is a zonal…
Azure AKS Cost Analysis - No cost data to show
I have enabled AKS Cost Analysis via CLI. When i list ze AKS cluster with az aks show... The JSON block returned shows that costAnalysis is enabled. "metricsProfile": { "costAnalysis": { "enabled": true }…
Issues with Azure Kubernetes CNI Overlay Connectivity to On-Premise Devices
An AKS cluster is configured with CNI Overlay and a custom network in the range 10.10.48.0/20. The cluster service address range is set to 172.16.0.0/16, and the Kube DNS service IP is 172.16.0.10. A functional VPN allows communication between a VM in…