Azure AKS Cost Analysis - No cost data to show
I have enabled AKS Cost Analysis via CLI. When i list ze AKS cluster with az aks show... The JSON block returned shows that costAnalysis is enabled. "metricsProfile": { "costAnalysis": { "enabled": true }…
Not able to get cluster and namespace cost using Microsoft.CostManagement [api-version:2023-04-01-preview]
Hi, We are creating a service which uses azure cost managment api and process cost calucation per team. We also want to get the namespace cost. I used the api https://management.azure.com/subscriptions/
Connect to CloudShell
Hi, I have granted one of my users access to Azure Kubernetes Service. The user wants to connect to Azure Cloud Shell from the Azure portal but is unable to do so, as connecting to Azure Cloud Shell requires a storage account, and the user does not have…
managed TLS certificates for private AKS using private DNS zones
I have a private AKS cluster that I can access via private link. To expose services I use NGINX ingress controller. I would like to enable HTTPS to my services, I have tried using cert-manager and the self-signed CA issuer. But I would like to know if…
Experiencing "Critical Fileless execution via memfd_create" security events from the "csi-node-driver-registrar" container
Hello community, We've been running several AKS clusters for some time. Suddenly, the Falco (threat detection tool) pods started reporting suspicious activity every few seconds started from Oct, 30 2 AM UTC approx. The events look similar to the…
kubernetes
Hi, how to learn concept related to AKS in easiest way with devops... i can see 1000 plus pages in pdf ... any easiest way to learn
Issues with Azure Kubernetes CNI Overlay Connectivity to On-Premise Devices
An AKS cluster is configured with CNI Overlay and a custom network in the range 10.10.48.0/20. The cluster service address range is set to 172.16.0.0/16, and the Kube DNS service IP is 172.16.0.10. A functional VPN allows communication between a VM in…
image not available anymore in microsoft container registry
Hello All, the image mcr.microsoft.com/azuredocs/azure-vote-front:v1 is not available anymore, and on a lot of pages from microsoft to this image is refered. could you put it back or tell me where i can find it now? Normal BackOff 21s …
(ErrCode_InsufficientVCPUQuota) Insufficient regional vcpu
I just created and azure free trail account, upgraded it to pay as you go, I m trying to create a basic, aks cluster but i m always getting this error : i havent used anything, there is a classic computer limit of 20 vms , i have used 0 of them in…
Are there plans to support annotations for redirection to an external site in the Application Gateway Ingress Controller?
I want to redirect requests from domain A to domain B. While I see this option in the Azure Portal, I couldn't find the corresponding annotation or setting in the official AGIC documentation. Are there any plans for future support for this feature?
DNS resolution inside AKS pods
Hi, I have multiple AKS running and recently one of my cluster is having issue DNS resolution issue. First I encountered the issue when cert-manager inside my cluster wasn't able to auto renew the certificate. I added dnsconfig to the certmanager with…
Azure VNET peering, one peer is getting deleted and the other one is going to disconnected status causing pipeline errors
I have two virtual networks, one for AKS cluster and one for Azure Firewall. These two are connected via VNET peering(aks-fw peering & fw-aks peering). If I am doing any changes or modifications int the cluster(for example changing the VM size) one…
mail when pod is down which is crated by AKS
We have created PODs (Agents) if any POD created by AKS is down, we want to send email , is it possible if yes how?
HOW TO FIX AUTHORIZATION ERROR FOR AKS
The client '' with object id '________' does not have authorization to perform action 'Microsoft.Resources/deployments/validate/action' over scope…
Unintentionally deletion of a WAF HTTP Listener Association with an AGW + AGIC + AKS. Meanwhile, the associcated AGW HTTP Listener still existing.
Here are existing components: WAF Policy: Custome rule Associated application gateways: HTTP Listener, fl-2991a50d204b26a829717bbebe722d00 AGW + AGIC + AKS: AGW has fl-2991a50d204b26a829717bbebe722d00 ->…
Pinging is not working inside the pod/container AKS
Hi, I have one cluster aks and inside cluster i deploy 2 pods both are running when i go inside the pod and do ping google.com its not pinging even i can do telnet and nslookup both work but ping is not working for any domain weather my domain or google…
az role assignment create hangs
I'm following the steps at https://learn.microsoft.com/en-us/azure/application-gateway/tutorial-ingress-controller-add-on-new to set up AKS with an ingress controller. The process hangs / takes too long on the command: az role assignment create…
failed to initialize new pipeline [failed to authenticate credentials for azstorage]
I have created a storage account (StorageV2 (general purpose v2)) and a container inside it. This storage account have both .blob.core.windows.net/ and .dfs.core.windows.net/ private end points. Public Network access is disabled. Access Key…
Can I work around "NetworkPluginMode overlay cannot be used with PodSubnetID" error when upgrading AKS cluster from CNI to CNI overlay?
One of our clusters is giving the following error when trying to update the network plugin mode to overlay... "NetworkPluginMode overlay cannot be used with PodSubnetID" Is this what the "Doesn't use the dynamic pod IP allocation…
Problem with BlobTrigger in a self hosted k8s runtime using Managed Identities
I am trying to setup managed identities so that a BlobTrigger function can access a storage container. The blob trigger function is hosted in a k8s runtime and not directly by Azure Functions. I have followed the docs as far as I can go but the pod is…