Application Gateway for Containers - RegularExpression for header matcher not working in HTTPRoute
Contrary to what is described in the docs (see green box "Tip") using the type "RegularExpression" to match a header value does not work. It seems that ANY value is accepted no matter what kind of regular expression I use (even if it…
![](https://techprofile.blob.core.windows.net/images/lvNaBJBqh0eurOu4q2bQSQ.png?8DA4E8)
The ClusterRoleBinding aks-cluster-admin-binding includes the User clusterUser as a subject
Hello On an RBAC & AzureRBAC enabled AKS cluster I have noticed that the cluster-admin ClusterRole is bound to two subjects through the aks-cluster-admin-binding ClusterRoleBinding: User/clusterAdmin User/clusterUser This is unexpected. As far as…
![](https://techprofile.blob.core.windows.net/images/lERuGqIsfE-3j2IJgoDLSw.png?8D844E)
Azure Log Analytics InsightMetrics getting data from Prometheus Namespace in AKS but it is not enabled
AKS does not have Prometheus enabled, however Log Analytics is showing that it is ingesting large amounts of data in InsightMetrics and the namespace comes out to be Prometheus. Already tried: az aks update --disable-azure-monitor-metrics -n…
AKS cluster External IP of loadbalancer not loading
I have created cluster using sample.yaml file on windows. It shows me external IP of loadbalancer but when i tried to open that IP in browser its shows his site can’t be reached 48.216.163.240 took too long to respond. Try: Checking the connection …
DNS label annotation doesn't work for service Ingress
The following annotation service.beta.kubernetes.io/azure-dns-label-name"="
![](https://techprofile.blob.core.windows.net/images/Nw9OZIzCZUiYqD_eTMTQaA.png?8D812F)
How can I expose a TCP service using AKS Gateway Controller
Hello, I have an AKS cluster where I have successfully deployed the Azure Application Gateway controller. I have a GatewayClass for the "alb.networking.azure.io/alb-controller" However, when I want to create a Gateway resource to use this with…
![](https://techprofile.blob.core.windows.net/images/lvNaBJBqh0eurOu4q2bQSQ.png?8DA4E8)
Authorization error accessing Blob from AKS
I have created a storage class with with storage account credentials as described here: https://learn.microsoft.com/en-us/azure/aks/azure-csi-blob-storage-provision?tabs=mount-nfs%2Csecret allowVolumeExpansion: true apiVersion: storage.k8s.io/v1 kind:…
Insufficient privileges to complete the operation when trying to create Service Principle
Hi, I'm trying to create a Service Principle to use Terraform to create and manage my AKS. I'm successfully logged in to Azure CLI and can list all the subscriptions and resources. My issue starts when I'm trying to use the next cli…
How to identify an aks cluster's name and resource group through metadata?
I'm trying to figure out my cluster's name using the metadata from Kubernetes api at http://169.254.169.254/metadata/instance?api-version=2021-02-01. The returned resourceGroupName is built in the format of mc_[resource group name]_[cluster…
Azure Application Gateway websocket connections dropping after unrelated settings change
We have a AKS cluster behind a Application Gateway. In this cluster we have pods with a large number of websocket connections. The issue is that, when we changed a completely other setting in the Application Gateway (a new backend setting and updated a…
Unable to Create aks cluster on Azure stack HCI
Hello Team, We've encountered difficulties creating an AKS cluster on Azure Stack HCI. We've attempted deployment on multiple HCI clusters, but the same error persists: "The resource provision operation did not complete within the allowed timeout…
![](https://techprofile.blob.core.windows.net/images/6zoZhv5_BgAAAAAAAAAAAA.png?8DABC3)
This cluster is in a failed state. If you didn't do an operation, AKS may resolve the provisioning status automatically if your cluster applications continue to run.
HI for the second time, when the subcription is reactivated because the credit has run out, I try to restart the AKS and the following error appears: This cluster is in a failed state. If you didn't do an operation, AKS may resolve the provisioning…
![](https://techprofile.blob.core.windows.net/images/hAFzqf2_AwAAAAAAAAAAAA.png?8DB62B)
How to grant permission for list nodes in AKS using Azure RBAC
Using Azure RBAC for Kubernetes Authorization, we have been able to grant users read access to most of our Kubernetes resources e.g. pods, deployments, configmaps, etc. However, read access to nodes is still unauthorized. According to…
2024 years In AZ-104, about is Azure Kubernetes Service (AKS) still within the exam scope?
2024 years In AZ-104, about is Azure Kubernetes Service (AKS) still within the exam scope?
![](https://techprofile.blob.core.windows.net/images/ZuCGjNGWaEiWnbswF6AtpA.png?8DA64C)
How to setup JNLP file containerized application?
How to set up a JNLP file containerized application? I said containerized app because I will be setting up many of these same apps for different users with different login credentials. Help me please.
![](https://techprofile.blob.core.windows.net/images/lERuGqIsfE-3j2IJgoDLSw.png?8D844E)
AKS on VMware - aksarc unable to find vnet when creating cluster
When trying to create k8s cluster, aksarc is unable to find the vnet. +++++++++++++++++++++++++++++++++ az aksarc create -n 'k8svmware_rb03_cluster01' -g $resource_group --kubernetes-version "1.26.6" --custom-location $custom_location…
error fetching from postgres, err: x509: certificate signed by unknown authority
i have i virtual network where in 1 subnet my aks cluster is present and another subnet my private postgress flexible server is present. i am connecting my application from aks cluster to private postgress server through private network using…
What is equivalent command of "kubeadm certs check-expiration" for a Kubernetes cluster running in Azure?
What is equivalent command of "kubeadm certs check-expiration" for a Kubernetes cluster running in Azure
Unintentionally deletion of a WAF HTTP Listener Association with an AGW + AGIC + AKS. Meanwhile, the associcated AGW HTTP Listener still existing.
Here are existing components: WAF Policy: Custome rule Associated application gateways: HTTP Listener, fl-2991a50d204b26a829717bbebe722d00 AGW + AGIC + AKS: AGW has fl-2991a50d204b26a829717bbebe722d00 ->…
![](https://techprofile.blob.core.windows.net/images/lERuGqIsfE-3j2IJgoDLSw.png?8D844E)
Not able to establish connectivity from App Gateway to Cluster Services
We have now running service on AKS Cluster with its own Internal POD IPs (2 pod) and external IP mapped to these PODs. The service is also having a path associated with it in the URL. We have now created an application gateway and created all backend…
![](https://techprofile.blob.core.windows.net/images/lvNaBJBqh0eurOu4q2bQSQ.png?8DA4E8)