I want my On Prem CI/CD Devops agent to reach AKS Private Cluster

Question

I want my On Prem CI/CD Devops agent to reach AKS Private Cluster

Sourav Bhattacharya 60

We need our On Prem CI/CD Devops agent to reach AKS Private Cluster's Control plane.

and we are trying to explore the best possible options here.

Now there are different option mentioned here https://learn.microsoft.com/en-us/azure/architecture/guide/security/access-azure-kubernetes-service-cluster-api-server

Most of the data flow suggests "A user initiates RDP or SSH traffic to the jump box from an on-premises workstation."

Now can someone tell me if we can directly reach from our On Prem network to AKS Private Cluster Control plane without having a Jump box server in the middle ?

Can we use Express route or VPN Gateway with IPsec tunnel to reach the Control plane ?

Note: aks command invoke is not a options for us.

KapilAnanth-MSFT 49,616 Reputation points Microsoft Employee Moderator

2023-10-25T07:26:07.1033333+00:00

@Sourav Bhattacharya

Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.

Per mutaz-msft 's answer, yes, you should be able to connect to your private cluster via VPN or ExpressRoute.

To directly access AKS Cluster, just make sure you configure OnPrem DNS to resolve to the private IP of the AKS cluster in Azure.

Thanks,

Kapil

Please Accept an answer if correct.

Original posters help the community find answers faster by identifying the correct answer.
KapilAnanth-MSFT 49,616 Reputation points Microsoft Employee Moderator

2023-10-26T07:29:49.03+00:00

@Sourav Bhattacharya

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept the answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

Thanks,

Kapil
Sourav Bhattacharya 60 Reputation points

2023-10-30T16:31:50.4466667+00:00

Thanks for the help. we are trying to consider cloud hosted DevOps agent to avoid express route.

https://urldefense.com/v3/https://techcommunity.microsoft.com/t5/fasttrack-for-azure/using-azure-devops-to-deploy-an-application-on-aks-private/ba-p/2029630;!!PkykpUBa!VflBonyKZDR9Wayta0P6NRfsxUza-URX54AnmlUOMhak6FzGYQuklyfIsrW23PgnONj9gVx1wNB3CFxCtWy7HPKtsCP7$
KapilAnanth-MSFT 49,616 Reputation points Microsoft Employee Moderator

2023-10-31T04:27:44.3833333+00:00

@Sourav Bhattacharya

Thanks for the info.

Yes, that should work as well.

Cheers,

Kapil

Accepted answer

0 additional answers

Your answer

KapilAnanth-MSFT 49,616 Reputation points Microsoft Employee Moderator

2023-10-25T07:26:07.1033333+00:00

@Sourav Bhattacharya

Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.

Per mutaz-msft 's answer, yes, you should be able to connect to your private cluster via VPN or ExpressRoute.

To directly access AKS Cluster, just make sure you configure OnPrem DNS to resolve to the private IP of the AKS cluster in Azure.

Thanks,

Kapil

Please Accept an answer if correct.

Original posters help the community find answers faster by identifying the correct answer.
KapilAnanth-MSFT 49,616 Reputation points Microsoft Employee Moderator

2023-10-26T07:29:49.03+00:00

@Sourav Bhattacharya

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept the answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

Thanks,

Kapil
Sourav Bhattacharya 60 Reputation points

2023-10-30T16:31:50.4466667+00:00

Thanks for the help. we are trying to consider cloud hosted DevOps agent to avoid express route.

https://urldefense.com/v3/https://techcommunity.microsoft.com/t5/fasttrack-for-azure/using-azure-devops-to-deploy-an-application-on-aks-private/ba-p/2029630;!!PkykpUBa!VflBonyKZDR9Wayta0P6NRfsxUza-URX54AnmlUOMhak6FzGYQuklyfIsrW23PgnONj9gVx1wNB3CFxCtWy7HPKtsCP7$
KapilAnanth-MSFT 49,616 Reputation points Microsoft Employee Moderator

2023-10-31T04:27:44.3833333+00:00

@Sourav Bhattacharya

Thanks for the info.

Yes, that should work as well.

Cheers,

Kapil

Answer 1

Mutaz Nassar 2,361 Microsoft Employee

Hi @Sourav Bhattacharya,

Yes, you can use Express route or VPN to connect to the private AKS cluster as mentioned here:
https://learn.microsoft.com/en-us/azure/aks/private-clusters?tabs=azure-portal#options-for-connecting-to-the-private-cluster

Share via

I want my On Prem CI/CD Devops agent to reach AKS Private Cluster

0 additional answers

Your answer