Azure AKS option "Set authorized IP ranges" is disabled

Marcin O 1 Reputation point
2022-05-23T00:57:08.197+00:00

Hello,

I would like to further secure kubernetes cluster running on azure AKS service and would like to set option "Set authorized IP ranges" in Azure Portal. However this option is disabled. Trying to set authorized ip range via az-cli I get error. I am running version 2.36.0 of az-cli

Can you suggest how to resolve this?

Best Regards,
Marcin

204462-image.png

204449-image.png

Azure Kubernetes Service (AKS)
Azure Kubernetes Service (AKS)
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
1,855 questions

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Naninga Karunaratne 0 Reputation points
    2023-02-11T19:44:15.76+00:00

    The "Set authorized IP ranges" option in the Azure portal is used to configure the IP address range for access to the API server in Azure Kubernetes Service (AKS). If this option is disabled, it could be due to a few reasons:

    1. The AKS cluster is not using the Standard SKU load balancer.
    2. The AKS cluster is not using the VirtualMachineScaleSets VM set type.
    3. The AKS cluster is not using the --api-server-authorized-ip-ranges parameter.

    To fix this issue, you can try the following steps:

    1. Verify that the AKS cluster is using the Standard SKU load balancer.
    2. Verify that the AKS cluster is using the VirtualMachineScaleSets VM set type.
    3. Verify that the AKS cluster is using the --api-server-authorized-ip-ranges parameter.

    You can use the command "az aks show --resource-group <resource-group-name> --name <aks-cluster-name>" to check the configuration of the AKS cluster.

    You can also use the command "az aks update --resource-group <resource-group-name> --name <aks-cluster-name> --api-server-authorized-ip-ranges <ip-range>" to set the authorized IP ranges for the AKS cluster.

    You can also use the command "az aks update --resource-group <resource-group-name> --name <aks-cluster-name> --load-balancer-sku standard" to set the load balancer sku to standard.

    You can also use the command "az aks update --resource-group <resource-group-name> --name <aks-cluster-name> --vm-set-type VirtualMachineScaleSets" to set the vm set type to VirtualMachineScaleSets.

    Please note that you need to have the correct permissions to perform these actions.

    Hope it helps to achieve your goal

    Please "Accept as Answer" and Upvote if it helped, so that it can help others in the community looking for help on similar topics. Thank you!

    0 comments