1,993 questions with Azure Kubernetes Service (AKS) tags

Sort by: Updated
Updated Created Answers
0 answers

How to enable users stopping/deleting and aks cluster

Hi, I have multiple aks clusters running in a subscription. with multiple users having contributor access on the subscription i want only 1 particular user to have access to start stop and delete teh aks cluster while all other user have contributor…

Azure Kubernetes Service (AKS)
Azure Kubernetes Service (AKS)
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
1,993 questions
asked 2024-07-24T09:39:06.0566667+00:00
Zahid Makandar - TSS Consultancy 65 Reputation points
commented 2024-07-24T11:24:13.97+00:00
vipullag-MSFT 26,016 Reputation points
1 answer

AKS cluster External IP of loadbalancer not loading

I have created cluster using sample.yaml file on windows. It shows me external IP of loadbalancer but when i tried to open that IP in browser its shows his site can’t be reached 48.216.163.240 took too long to respond. Try: Checking the connection …

Azure Kubernetes Service (AKS)
Azure Kubernetes Service (AKS)
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
1,993 questions
asked 2024-07-18T12:53:21.5566667+00:00
Tarun Mehta 71 Reputation points
commented 2024-07-24T09:04:42.33+00:00
Srinud 2,040 Reputation points Microsoft Vendor
2 answers

Authorization error accessing Blob from AKS

I have created a storage class with with storage account credentials as described here: https://learn.microsoft.com/en-us/azure/aks/azure-csi-blob-storage-provision?tabs=mount-nfs%2Csecret allowVolumeExpansion: true apiVersion: storage.k8s.io/v1 kind:…

Azure Storage Accounts
Azure Storage Accounts
Globally unique resources that provide access to data management services and serve as the parent namespace for the services.
2,933 questions
Azure Blob Storage
Azure Blob Storage
An Azure service that stores unstructured data in the cloud as blobs.
2,634 questions
Azure Kubernetes Service (AKS)
Azure Kubernetes Service (AKS)
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
1,993 questions
asked 2024-07-09T12:39:35.7833333+00:00
Yannam C Chiranjeevi 0 Reputation points
commented 2024-07-24T08:32:24.3433333+00:00
Nehruji R 4,691 Reputation points Microsoft Vendor
0 answers

Import Snapshot from Azure Resource Group to create VolumeSnapshot in kubernetes cluster

Hi All, I am looking for a way by which we can import a snapshot in azure portal and create VolumeSnapshot inside kubernetes cluster. we went through below…

Azure Kubernetes Service (AKS)
Azure Kubernetes Service (AKS)
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
1,993 questions
asked 2024-07-04T05:57:08.3533333+00:00
Poojari, Vinaya (Cognizant) 0 Reputation points
commented 2024-07-24T05:24:17.6966667+00:00
Poojari, Vinaya (Cognizant) 0 Reputation points
1 answer

Azure Kubernetes Service 지원 버전

https://learn.microsoft.com/en-us/azure/aks/supported-kubernetes-versions?tabs=azure-cli#kubernetes-version-support-policy 위 페이지에서 새로운 마이너 버전이 도입되면 가장 오래된 마이너 버전은 더 이상 사용되지 않고 제거된다고 작성되어있는데요. 혹시 1.27 버전의 지원이 종료되었을 때 사용중인 1.27버전의 AKS 클러스터가 있다면 업그레이드를 하지…

Azure Kubernetes Service (AKS)
Azure Kubernetes Service (AKS)
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
1,993 questions
asked 2024-07-23T05:22:31.4+00:00
Giseong Shin 0 Reputation points
answered 2024-07-23T16:40:52.5366667+00:00
deherman-MSFT 35,556 Reputation points Microsoft Employee
1 answer

How to allow aks default storage class to create azure disk as the issue started after cleaning managed identity

failed to provision volume with StorageClass "default": rpc error: code = Internal desc = Retriable: true, RetryAfter: 0s, HTTPStatusCode: -1, RawError: azure.BearerAuthorizer#WithAuthorization: Failed to refresh the Token for request to…

Microsoft Identity Manager
Microsoft Identity Manager
A family of Microsoft products that manage a user's digital identity using identity synchronization, certificate management, and user provisioning.
660 questions
Azure Kubernetes Service (AKS)
Azure Kubernetes Service (AKS)
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
1,993 questions
Azure Disk Storage
Azure Disk Storage
A high-performance, durable block storage designed to be used with Azure Virtual Machines and Azure VMware Solution.
603 questions
asked 2024-07-19T17:13:34.0733333+00:00
Srinivas Indra 0 Reputation points
answered 2024-07-23T16:16:54.59+00:00
deherman-MSFT 35,556 Reputation points Microsoft Employee
0 answers

How to identify an aks cluster's name and resource group through metadata?

I'm trying to figure out my cluster's name using the metadata from Kubernetes api at http://169.254.169.254/metadata/instance?api-version=2021-02-01. The returned resourceGroupName is built in the format of mc_[resource group name]_[cluster…

Azure Kubernetes Service (AKS)
Azure Kubernetes Service (AKS)
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
1,993 questions
asked 2024-07-09T08:52:34.8233333+00:00
Boris Rodman 0 Reputation points
edited a comment 2024-07-23T15:29:02.6166667+00:00
Nikhil Duserla 1,220 Reputation points Microsoft Vendor
1 answer

How to grant permission for list nodes in AKS using Azure RBAC

Using Azure RBAC for Kubernetes Authorization, we have been able to grant users read access to most of our Kubernetes resources e.g. pods, deployments, configmaps, etc. However, read access to nodes is still unauthorized. According to…

Azure Kubernetes Service (AKS)
Azure Kubernetes Service (AKS)
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
1,993 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,596 questions
asked 2024-07-16T00:34:12.4233333+00:00
Kevin Rabinowitz 1 Reputation point Microsoft Employee
edited a comment 2024-07-23T15:09:56.64+00:00
Nikhil Duserla 1,220 Reputation points Microsoft Vendor
1 answer

Azure Log Analytics InsightMetrics getting data from Prometheus Namespace in AKS but it is not enabled

AKS does not have Prometheus enabled, however Log Analytics is showing that it is ingesting large amounts of data in InsightMetrics and the namespace comes out to be Prometheus. Already tried: az aks update --disable-azure-monitor-metrics -n…

Azure Kubernetes Service (AKS)
Azure Kubernetes Service (AKS)
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
1,993 questions
asked 2024-07-18T18:22:59.36+00:00
Eshwar Natarajan 0 Reputation points
commented 2024-07-23T14:53:29.9933333+00:00
Nikhil Duserla 1,220 Reputation points Microsoft Vendor
0 answers

Accessing Kubernetes API Deprecations for AKS Cluster programmatically

Hi, I wanted to know if there's a way through which we can programmatically fetch the Kubernetes API Deprecations for an AKS cluster like GCP Recommender or Upgrade Insights on AWS. This information is provided on the Azure Dashboard by going to…

Azure Kubernetes Service (AKS)
Azure Kubernetes Service (AKS)
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
1,993 questions
asked 2024-07-23T12:24:21.6033333+00:00
Asadullah Kashif 0 Reputation points
commented 2024-07-23T12:53:33.3966667+00:00
akinbade abiola 9,010 Reputation points
1 answer

one of my customers would like to know the tentative timeline as to when AKS Fleet Manager will reach general availability and any interesting capabilities on the roadmap. They are planning to explore it for their production use cases.

one of my customers would like to know the tentative timeline as to when AKS Fleet Manager will reach general availability and any interesting capabilities on the roadmap. They are planning to explore it for their production use cases.

Azure Kubernetes Service (AKS)
Azure Kubernetes Service (AKS)
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
1,993 questions
asked 2024-07-23T08:53:37.72+00:00
Susai Raj Alphonse 0 Reputation points
answered 2024-07-23T12:28:48.0033333+00:00
vipullag-MSFT 26,016 Reputation points
1 answer

How to fix the allow-snippet-annotations in AKS

Is there any alternate for get/enable "allow-snippet-annotations" = true for view the incoming headers. To view incoming headers that are being sent to the AKS cluster. Right now, Ingress controller disable snippets state.

Azure Kubernetes Service (AKS)
Azure Kubernetes Service (AKS)
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
1,993 questions
asked 2024-07-19T11:46:21.2533333+00:00
vi 0 Reputation points
commented 2024-07-23T11:49:19.78+00:00
vipullag-MSFT 26,016 Reputation points
1 answer

How to ensure that the kubelet read-only port is set to false

During a recent penetration test of our Azure Kubernetes Service (AKS) cluster, it was identified that Kubelet's read-only API is exposed. This poses a security risk as unauthenticated access to the read-only API can reveal potentially sensitive…

Azure Kubernetes Service (AKS)
Azure Kubernetes Service (AKS)
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
1,993 questions
asked 2024-07-22T10:22:49.82+00:00
Danish Ahmed 0 Reputation points
commented 2024-07-23T08:24:00.2366667+00:00
Danish Ahmed 0 Reputation points
1 answer

How to change kube system pod images to pull from private registry

Issue: High nat gateway data transfer We are running ephemeral workloads that creates 2000-3000 pods and corresponding to that autoscaler spins up around 500 odd nodes. Now even though we are pulling our application images from ACR via service endpoints…

Azure Container Registry
Azure Container Registry
An Azure service that provides a registry of Docker and Open Container Initiative images.
428 questions
Azure Kubernetes Service (AKS)
Azure Kubernetes Service (AKS)
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
1,993 questions
Azure NAT Gateway
Azure NAT Gateway
NAT Gateway is a fully managed service that securely routes internet traffic from a private virtual network with enterprise-grade performance and low latency.
30 questions
asked 2024-07-20T04:27:18.4833333+00:00
Azman Samad 5 Reputation points
commented 2024-07-22T17:12:41.8866667+00:00
deherman-MSFT 35,556 Reputation points Microsoft Employee
1 answer

Connectivity Check failing when using the codespaces cluster that is part of the quickstart

I get the following error when trying to execute the following step: Error: The outbound network connectivity check has failed for the endpoint - https://eastus.obo.arc.azure.com:8084/ This will affect the "cluster-connect" feature. If you…

Azure Kubernetes Service (AKS)
Azure Kubernetes Service (AKS)
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
1,993 questions
Azure IoT Operations
Azure IoT Operations
Azure IoT Operations is a set of modular services enabled by Azure Arc.
19 questions
asked 2024-07-21T20:23:48.5133333+00:00
Scott Sandler 0 Reputation points
commented 2024-07-21T21:43:58.26+00:00
Scott Sandler 0 Reputation points
2 answers One of the answers was accepted by the question author.

What is the cause of the following error - "getting assigned identities for pod <namespace>/<pod_name> in CREATED state failed after 20 attempts, retry duration [5]s" , while connecting to IMDS endpoint from a pod in AKS.

I am trying to connect to Azure Key vault via user assigned managed identity from a pod of AKS. I have provided the necessary RBAC role to the identity. I have created Azure Identity and Azure Identity Binding. I have updated my deployment with…

Azure Key Vault
Azure Key Vault
An Azure service that is used to manage and protect cryptographic keys and other secrets used by cloud apps and services.
1,190 questions
Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
724 questions
Azure Kubernetes Service (AKS)
Azure Kubernetes Service (AKS)
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
1,993 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,596 questions
asked 2024-07-08T17:50:19.59+00:00
Mahalingam Vignesh 20 Reputation points
accepted 2024-07-19T09:14:53.7433333+00:00
Mahalingam Vignesh 20 Reputation points
0 answers

Application Gateway for Containers - RegularExpression for header matcher not working in HTTPRoute

Contrary to what is described in the docs (see green box "Tip") using the type "RegularExpression" to match a header value does not work. It seems that ANY value is accepted no matter what kind of regular expression I use (even if it…

Azure Kubernetes Service (AKS)
Azure Kubernetes Service (AKS)
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
1,993 questions
asked 2024-07-18T18:47:39.6566667+00:00
Alexander K 0 Reputation points
edited the question 2024-07-19T03:58:18.8066667+00:00
KapilAnanth-MSFT 41,156 Reputation points Microsoft Employee
2 answers

The ClusterRoleBinding aks-cluster-admin-binding includes the User clusterUser as a subject

Hello On an RBAC & AzureRBAC enabled AKS cluster I have noticed that the cluster-admin ClusterRole is bound to two subjects through the aks-cluster-admin-binding ClusterRoleBinding: User/clusterAdmin User/clusterUser This is unexpected. As far as…

Azure Kubernetes Service (AKS)
Azure Kubernetes Service (AKS)
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
1,993 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,596 questions
asked 2024-07-08T14:36:04.85+00:00
Konstantin Bachem 0 Reputation points
commented 2024-07-19T03:14:04.69+00:00
vipullag-MSFT 26,016 Reputation points
1 answer

DNS label annotation doesn't work for service Ingress

The following annotation service.beta.kubernetes.io/azure-dns-label-name"="

Azure Kubernetes Service (AKS)
Azure Kubernetes Service (AKS)
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
1,993 questions
asked 2024-07-18T03:52:44.8633333+00:00
Anand 0 Reputation points
answered 2024-07-18T16:45:32.8666667+00:00
deherman-MSFT 35,556 Reputation points Microsoft Employee
1 answer

How can I expose a TCP service using AKS Gateway Controller

Hello, I have an AKS cluster where I have successfully deployed the Azure Application Gateway controller. I have a GatewayClass for the "alb.networking.azure.io/alb-controller" However, when I want to create a Gateway resource to use this with…

Azure Kubernetes Service (AKS)
Azure Kubernetes Service (AKS)
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
1,993 questions
asked 2024-06-12T12:08:21.19+00:00
Andrei Dascalu 0 Reputation points
edited the question 2024-07-18T13:52:23.56+00:00
KapilAnanth-MSFT 41,156 Reputation points Microsoft Employee