Can I upgrade AKS from 1.24.9 to 1.28.13 without rebuilding cluster
I've inherited an AKS 1.24.9 cluster and need to update. Can this be done without rebuilding.
Adoption of Podman inside an AKS cluster.
We are evaluating the adoption of Podman instead of Docker for the creation of containers. We are using AKS as our container orchestrator in Azure. I am wondering if AKS is compatible with Podman? It is my understanding that AKS comes with Docker…
Microsoft CAF - Shared AKS Cluster
Hello, We currently have a Platform Landing Zone with follows Microsoft's Cloud Adoption Framework with Identity, Management & Connectivity Subscriptions. We are looking to implement a Shared Azure Kubernetes Service (AKS) module for all of our…
Azure Kubernetes Service - Why Are System Pods Being Scheduled On User Node Pools?
I have a cluster which is made up of 3 node pools: system - System Node Pool project 1 - User Node Pool project 2 - User Node Pool On the System node pool, I have the taint set CriticalAddonsOnly:true:NoSchedule. My issue is that for some reason, system…
image not available anymore in microsoft container registry
Hello All, the image mcr.microsoft.com/azuredocs/azure-vote-front:v1 is not available anymore, and on a lot of pages from microsoft to this image is refered. could you put it back or tell me where i can find it now? Normal BackOff 21s …
AKS pod in CrashLoop error due to managed identity integration
We have an AKS cluster on which one of our Deployments which now uses DefaultAzureCredential class to fetch connection strings stored in Azure Key Vault. We have provide the "System Assigned Managed Identity" contributor access to Key Vault to…
When will the Azure Storage FUSE driver (Blobfuse2) support MS Entra Workload Id for mounting to AKS?
This GitHub issue details the issue many customers are experiencing attempting to mount Azure Blob Storage to AKS Pods, using Managed Identity (MS Entra Workload Id) and the Azure Storage FUSE driver (Blobfuse2):…
Enabling Managed Identity from SPN on VMSS based AKS clusters
We are currently enabling Managed Identity on the AKS clusters which are SPN based for configuring Prometheus monitoring rules. Regarding the MI enablement activity we have the below query, please help us with the solution: For the AKS cluster which…
Insufficient regional vcpu quota left for location uksouth. left regional vcpu quota 0, requested quota 2.
Preflight validation check for resource(s) for container service aksdemo1 in resource group aks-rg1 failed. Message: Insufficient regional vcpu quota left for location uksouth. left regional vcpu quota 0, requested quota 2. Details:
HTTPS on a custom port using ingress (AGIC)
I am trying to create a listener on a custom port. The minute I start using custom port my listener in application gateway is created on http protocol and if i am not specifying the custom port it is coming on https on port 443. Below are the annotations…
AKS unable to pull image from ACR
Created an AKS cluster, attached the ACR to the AKS. The AKS can pull other images from the same repository. But when ever I am running the below deployment it is failing with error: Failed to pull image…
Security - manual NFS mount in a pod
Hello I successfully configured my AKS cluster to mount nfs share from a netapp resource. I use PV and PVC. If I check the mount points in the pod, I get : nfs.xxx.com:/share/prd on /var/www/shared type nfs4…
AKS upgrade to 1.29.7 triggers daily NSG update activity logs
I recently upgraded from AKS 1.28 to 1.29.7 and after that, everyday I can see AKS is initiating updates to the NSG, but not displaying any change history, its like doing a poll check to the NSG. Is this expected? If yes, what is it doing…
How to create Native Prometheus Alert on Managed AKS/Prometheus
Hey folks, I have Managed Grafana and Prometheus on AKS. Native Opensource Prometheus has been in use for few years, hence has many custom (application/service) related alerting and recording rule setup. Is there anyway in Azure, where we can deploy…
When we try to create AKS in azure, we get the following error
AKS Error: Preflight validation check for resource(s) for container service smartsearch in resource group smartsearch failed. Message: Insufficient regional vcpu quota left for location eastus. left regional vcpu quota 0, requested quota 16. Details: …
Why do we get this error "Reading the request body timed out due to data arriving too slowly. See MinRequestBodyDataRate." if we have not configured MinRequestBodyDataRate??
Our system utilizes ASP.NET Core 6.0.10 and HTTP/2. There is no specific configuration for the MinRequestBodyDataRate in our program, indicating that it likely uses the default value of 240 bytes per second. During our investigation, we have confirmed…
Experiencing "Critical Fileless execution via memfd_create" security events from the "csi-node-driver-registrar" container
Hello community, We've been running several AKS clusters for some time. Suddenly, the Falco (threat detection tool) pods started reporting suspicious activity every few seconds started from Oct, 30 2 AM UTC approx. The events look similar to the…
How to create cluster aks on azure stack hci with arm template
I always create a local AKS (Azure Kubernetes Service) cluster on Azure Stack HCI using the command New-AksHciCluster -name mycluster -nodePoolName nodepool1 -nodeCount 1 -nodeVmSize Standard_K8S3_v1 -osType linux. However, when attempting to automate…
I have a pod status of Pending with a reason of FailedScheduling when upgrading AKS from 1.28 to 1.29.
I upgraded our AKS cluster from 1.28 to 1.29. All 123 pods are Running except 1. It's in a Pending state. It is a StatefulSet so I have deleted it a few times and it will not come up successfully. The reason in the pod description gives: Warning …
Send logs of application running on AKS to Azure
Hello, My backend code in python has some logs that by using "opencensus-ext-azure" package I send them over to Azure. I have an Application Insight resource linked to a Log Analytics Workspace resource. When using Azure Kubernetes Services…