You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
#Customer intent: As an Azure Kubernetes user, I want to troubleshoot problems that involve the network isolated cluster so that I can successfully use this feature on Azure Kubernetes Service (AKS).
8
8
ms.custom: sap:Extensions, Policies and Add-Ons
9
9
---
10
-
# Troubleshoot network isolated Azure Kubernetes Service (AKS) clusters issues
10
+
# Troubleshoot network isolated Azure Kubernetes Service (AKS) cluster issues
11
11
12
12
This article discusses how to troubleshoot issues in [network isolated Azure Kubernetes Service (AKS) clusters](/azure/aks/concepts-network-isolated).
13
13
@@ -22,28 +22,28 @@ The network isolated cluster follows a similar support model to other [AKS add-o
22
22
- Bring Your Own (BYO) ACR
23
23
- AKS-managed ACR
24
24
25
-
If you choose BYO ACR, you will be responsible for configuring your ACR and its associated resources properly.
25
+
If you choose BYO ACR, you're responsible for configuring your ACR and its associated resources properly.
26
26
27
27
## Issue 1: Cluster image pull fails due to network isolation
28
28
29
-
Network isolated clusters use ACR cache rules for image pull. If an image pull fails due to network isolation, follow these steps:
29
+
Network isolated clusters use ACR cache rules for image pulls. If an image pull fails due to network isolation, follow these steps:
30
30
31
-
- For Bring your own (BYO) ACR:
31
+
- For BYO ACR:
32
32
33
-
Verify the private ACR resources are configured, including the cache rule and private endpoints. For more information about how to configure them, see Step 3 and Step 4 under the [Deploy a network isolated cluster with bring your own ACR](/azure/aks/network-isolated?pivots=byo-acr#deploy-a-network-isolated-cluster-with-bring-your-own-acr) section.
33
+
Verify that the private ACR resources are configured, including the cache rule and private endpoints. For more information about how to configure them, see steps 3 and 4 under the [Deploy a network isolated cluster with bring your own ACR](/azure/aks/network-isolated?pivots=byo-acr#deploy-a-network-isolated-cluster-with-bring-your-own-acr) section.
34
34
- For AKS-managed ACR:
35
35
36
-
- By default, only Microsoft Container Registry (MCR) images are supported. If the image pull failure occurs with MCR images, check if the associated ACR and private endpoint resource named with keyword `bootstrap` exist. If they don't exist, reconcile the cluster.
36
+
- By default, only Microsoft Container Registry (MCR) images are supported. If the image pull failure occurs with MCR images, check if the associated ACR and private endpoint resource named with the keyword `bootstrap` exist. If they don't exist, reconcile the cluster.
37
37
- If the image pull failure occurs with images from other registries, create extra cache rules in the private ACR for those images.
38
38
39
-
## Issue 2: Cluster image pull fails after updating the existed cluster to network isolated cluster or updating the private ACR resource ID
39
+
## Issue 2: Cluster image pull fails after updating an existing cluster to a network isolated cluster or updating the private ACR resource ID
40
40
41
41
The failure is an intended behavior. To resolve this issue, reimage the node to update the kubelet configuration in Container Service Extension (CSE) following the update actions in [Update your ACR ID](/azure/aks/network-isolated?pivots=byo-acr#update-your-acr-id).
42
42
43
-
## Issue 3: ACR or associated cache rule, private endpoint or private DNS zone are deleted
43
+
## Issue 3: ACR or associated cache rules, private endpoints, or private DNS zones are deleted
44
44
45
-
If the cache rule is deleted from the managed ACR accidentally, the mitigation is to delete the ACR and then reconcile the cluster. If the ACR itself, associated private endpoint, or associated private DNS zone is deleted by accident, the mitigation is just to reconcile the cluster.
45
+
If the cache rule is deleted from the managed ACR accidentally, the mitigation is to delete the ACR and then reconcile the cluster. If the ACR itself, the associated private endpoints, or the associated private DNS zones are deleted accidentally, the mitigation is just to reconcile the cluster.
0 commit comments