Static private Ip address for api server in node's vnet for a private aks cluster

Question

Static private Ip address for api server in node's vnet for a private aks cluster

Anonymous

Hi there,

we are provisioning a private AKS cluster, but even with a BYO private DNS zone, the private endpoint "kube-apiserver" for the api server in the node's vnet is automatically created and the associated private IP address can not be chosen. Is there a way to self-create the private endpoint with the possibility to set a static private IP addess in the node's vnet?

Kind regards

Karsten

deherman-MSFT 38,021 Reputation points Microsoft Employee Moderator

2023-03-16T17:51:31.1333333+00:00

@Anonymous

Following the documentation provided by @Ammar-Abdlqader I can see that the option is provided to set a static IP. Did this resolve your issue? If so, please Accept Answer as this is helpful to other community members.
Anonymous

2023-03-17T14:13:22.32+00:00

This is not what I want, I wanted to have a static IP for the private endpoint of the Kubernetes api server into the node's vnet, directly when I provision the AKS cluster. So far, AKS creates itself a private endpoint with the name kube-apiserver, but for this I can not make the IP address static, because this endpoint is automatically created during provisioning. Also the self-creation of another private endpoint for this would not work, since from the answer to my other question there can not be a static IP address for the Kubernetes api server private endpoint currently.
deherman-MSFT 38,021 Reputation points Microsoft Employee Moderator

2023-03-17T17:40:48.7766667+00:00

@Anonymous

Thanks for providing those additional details. It seems there is a temporary limitation for static IPs on AKS private endpoints. Let me reach out to our internal AKS team to see if they have a possible solution that might work for you.
deherman-MSFT 38,021 Reputation points Microsoft Employee Moderator

2023-03-22T17:42:48.39+00:00

@Anonymous

If you are still facing issues, we're going to enable a free, one time technical support ticket. Please email the following to AzCommunity@microsoft.com and we'll get back to you promptly:

• Subject: "Attn: deherman - "

• Email body: Your Subscription ID

• Email body: A link to this thread so we can validate and expedite the request

If you don't receive a response within 24 hours, please reply to the thread so we can investigate.
deherman-MSFT 38,021 Reputation points Microsoft Employee Moderator

2023-03-27T17:49:55.78+00:00

@Anonymous
Please check the above message and let us know if you still need help.

2 answers

Your answer

deherman-MSFT 38,021 Reputation points Microsoft Employee Moderator

2023-03-16T17:51:31.1333333+00:00

@Anonymous

Following the documentation provided by @Ammar-Abdlqader I can see that the option is provided to set a static IP. Did this resolve your issue? If so, please Accept Answer as this is helpful to other community members.
Anonymous

2023-03-17T14:13:22.32+00:00

This is not what I want, I wanted to have a static IP for the private endpoint of the Kubernetes api server into the node's vnet, directly when I provision the AKS cluster. So far, AKS creates itself a private endpoint with the name kube-apiserver, but for this I can not make the IP address static, because this endpoint is automatically created during provisioning. Also the self-creation of another private endpoint for this would not work, since from the answer to my other question there can not be a static IP address for the Kubernetes api server private endpoint currently.
deherman-MSFT 38,021 Reputation points Microsoft Employee Moderator

2023-03-17T17:40:48.7766667+00:00

@Anonymous

Thanks for providing those additional details. It seems there is a temporary limitation for static IPs on AKS private endpoints. Let me reach out to our internal AKS team to see if they have a possible solution that might work for you.
deherman-MSFT 38,021 Reputation points Microsoft Employee Moderator

2023-03-22T17:42:48.39+00:00

@Anonymous

If you are still facing issues, we're going to enable a free, one time technical support ticket. Please email the following to AzCommunity@microsoft.com and we'll get back to you promptly:

• Subject: "Attn: deherman - "

• Email body: Your Subscription ID

• Email body: A link to this thread so we can validate and expedite the request

If you don't receive a response within 24 hours, please reply to the thread so we can investigate.
deherman-MSFT 38,021 Reputation points Microsoft Employee Moderator

2023-03-27T17:49:55.78+00:00

@Anonymous
Please check the above message and let us know if you still need help.

Answer 1

Ammar-Abdlqader 1,176 Microsoft Employee

hello @Karsten Leonhardt

Thanks for reaching out and I hope you are doing well.

apparently **private endpoints cannot be configured with a static IP, its un-supported for private AKS Cluster. please check this limitation from this link
**
User's image

Please "Accept the answer" if the information helped you. This will help us and others in the community as well. Feel free to reply with any other questions or concerns.

Ammar-Abdlqader 1,176 Reputation points Microsoft Employee

2023-03-16T08:29:31.2+00:00

here is the correct link: https://learn.microsoft.com/en-us/azure/aks/private-clusters#limitations

for Private AKS cluster limitations.
Anonymous

2023-03-16T09:03:09.77+00:00

Well, the red box is definitely not the answer to my question, because I do not want to delete or modify the private endpoint, instead, I would like to create a private endpoint with static Ip address in the first place.

Answer 2

Ammar-Abdlqader 1,176 Microsoft Employee

Hello @Karsten Leonhardt, to keep the original private endpoint and to create another one yes that is doable :

This should be supported per https://learn.microsoft.com/en-us/azure/aks/private-clusters#use-a-private-endpoint-connection

useful 2nd link: https://github.com/MicrosoftDocs/azure-docs/blob/main/articles/private-link/manage-private-endpoint.md#azure-cli

Share via

Static private Ip address for api server in node's vnet for a private aks cluster

2 answers

Your answer