HTTPS on a custom port using ingress (AGIC)
I am trying to create a listener on a custom port. The minute I start using custom port my listener in application gateway is created on http protocol and if i am not specifying the custom port it is coming on https on port 443. Below are the annotations…
Azure Kubernetes Service SLA
Dear all Is the Uptime SLA documented in https://learn.microsoft.com/en-gb/azure/aks/free-standard-pricing-tiers?WT.mc_id=Portal-Microsoft_Azure_Expert#uptime-sla-terms-and-conditions only about the Control Plane (API Server)? And if true, does it mean…
kubernetes
Hi, how to learn concept related to AKS in easiest way with devops... i can see 1000 plus pages in pdf ... any easiest way to learn
Experiencing "Critical Fileless execution via memfd_create" security events from the "csi-node-driver-registrar" container
Hello community, We've been running several AKS clusters for some time. Suddenly, the Falco (threat detection tool) pods started reporting suspicious activity every few seconds started from Oct, 30 2 AM UTC approx. The events look similar to the…
Can I work around "NetworkPluginMode overlay cannot be used with PodSubnetID" error when upgrading AKS cluster from CNI to CNI overlay?
One of our clusters is giving the following error when trying to update the network plugin mode to overlay... "NetworkPluginMode overlay cannot be used with PodSubnetID" Is this what the "Doesn't use the dynamic pod IP allocation…
Error occurred when using ODBC driver with Workload Identity to connect to Azure Databricks Workspace from an AKS Pod deployment
Hello everybody. As per the title, I am trying to achieve the followings: Connect to an Azure Databricks Workspace, in order to execute an SQL Query, from an Azure Function running on an AKS Pod. Pod deployment is made using CI/CD pipelines with…
managed TLS certificates for private AKS using private DNS zones
I have a private AKS cluster that I can access via private link. To expose services I use NGINX ingress controller. I would like to enable HTTPS to my services, I have tried using cert-manager and the self-signed CA issuer. But I would like to know if…
DNS resolution inside AKS pods
Hi, I have multiple AKS running and recently one of my cluster is having issue DNS resolution issue. First I encountered the issue when cert-manager inside my cluster wasn't able to auto renew the certificate. I added dnsconfig to the certmanager with…
mail when pod is down which is crated by AKS
We have created PODs (Agents) if any POD created by AKS is down, we want to send email , is it possible if yes how?
Connect to CloudShell
Hi, I have granted one of my users access to Azure Kubernetes Service. The user wants to connect to Azure Cloud Shell from the Azure portal but is unable to do so, as connecting to Azure Cloud Shell requires a storage account, and the user does not have…
Azure VNET peering, one peer is getting deleted and the other one is going to disconnected status causing pipeline errors
I have two virtual networks, one for AKS cluster and one for Azure Firewall. These two are connected via VNET peering(aks-fw peering & fw-aks peering). If I am doing any changes or modifications int the cluster(for example changing the VM size) one…
how to fix pod to pod communication issue
Hello, we have a AKS cluster and we are using this cluster in our kvm vm now we have deployed our application in kubernetes however we are not able to communicate between pods when we are trying to do curl we got “no reply from server” please let me…
Need some design guidance around using NAT Gateway with AKS
Hi, We have an AKS cluster with multiple nodepools. All nodepools share the same subnet (/20). Nodepools are VMSS with Zone-redundancy. We want to attach NAT Gateway to that subnet for outbound connectivity. Since the NAT gateway is a zonal…
Azure AKS Cost Analysis - No cost data to show
I have enabled AKS Cost Analysis via CLI. When i list ze AKS cluster with az aks show... The JSON block returned shows that costAnalysis is enabled. "metricsProfile": { "costAnalysis": { "enabled": true }…
Issues with Azure Kubernetes CNI Overlay Connectivity to On-Premise Devices
An AKS cluster is configured with CNI Overlay and a custom network in the range 10.10.48.0/20. The cluster service address range is set to 172.16.0.0/16, and the Kube DNS service IP is 172.16.0.10. A functional VPN allows communication between a VM in…
image not available anymore in microsoft container registry
Hello All, the image mcr.microsoft.com/azuredocs/azure-vote-front:v1 is not available anymore, and on a lot of pages from microsoft to this image is refered. could you put it back or tell me where i can find it now? Normal BackOff 21s …
(ErrCode_InsufficientVCPUQuota) Insufficient regional vcpu
I just created and azure free trail account, upgraded it to pay as you go, I m trying to create a basic, aks cluster but i m always getting this error : i havent used anything, there is a classic computer limit of 20 vms , i have used 0 of them in…
Are there plans to support annotations for redirection to an external site in the Application Gateway Ingress Controller?
I want to redirect requests from domain A to domain B. While I see this option in the Azure Portal, I couldn't find the corresponding annotation or setting in the official AGIC documentation. Are there any plans for future support for this feature?
HOW TO FIX AUTHORIZATION ERROR FOR AKS
The client '' with object id '________' does not have authorization to perform action 'Microsoft.Resources/deployments/validate/action' over scope…
Unintentionally deletion of a WAF HTTP Listener Association with an AGW + AGIC + AKS. Meanwhile, the associcated AGW HTTP Listener still existing.
Here are existing components: WAF Policy: Custome rule Associated application gateways: HTTP Listener, fl-2991a50d204b26a829717bbebe722d00 AGW + AGIC + AKS: AGW has fl-2991a50d204b26a829717bbebe722d00 ->…