AGIC cluster IP prohibited location

Jan Michalski 1 Reputation point
2022-11-21T13:16:18.62+00:00

Hi,
I'm running Kubernetes cluster with Application Gateway and AGIC on Azure. Now, I want to redirect traffic that comes to public IP of cluster to external website. AGIC obviously overwrites my changes, as those are defined manually on in Application Gateway settings. Is there some way to achieve this? I've tried my best using AzureIngressProhibitedTarget but so far without any success.

Thanks in advance,
Jan

Azure Application Gateway
Azure Application Gateway
An Azure service that provides a platform-managed, scalable, and highly available application delivery controller as a service.
1,007 questions
Azure Kubernetes Service (AKS)
Azure Kubernetes Service (AKS)
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
1,987 questions
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. srbhatta-MSFT 8,551 Reputation points Microsoft Employee
    2022-11-24T06:44:34.733+00:00

    Hello @Jan Michalski ,
    Welcome to Microsoft QnA.
    May I know how have you deployed the AGIC in your cluster? Have you used Helm charts?
    Is your Application gateway being shared by AGICs?
    If so, then you need to state shared : true in the helm-config.yaml which will configure the AGIC for AzureIngressProhibitedTarget to work correctly.

    Let me know if this resolves your issue! For any queries, please feel free to reach back by dropping your comment. Thanks :)

    References:
    https://learn.microsoft.com/en-us/azure/application-gateway/ingress-controller-install-existing#install-ingress-controller-as-a-helm-chart
    https://github.com/Azure/application-gateway-kubernetes-ingress/issues/940

    1 person found this answer helpful.
    0 comments No comments

  2. Jan Michalski 1 Reputation point
    2022-11-28T12:56:50.68+00:00

    Unfortunately AGIC was deployed by coworker, without helm. I've confirmed that AzureIngressProhibitedTarget is not working at all. Guess I'll redeploy using helm and see whats what.
    Anyway, many thanks for you helpful input!