Skip to content

Commit 02a35df

Browse files
authored
Merge pull request #98893 from mlearned/mlearned-aks-private-clusters-cross-linkage-PLS
cross link and describe PLS
2 parents 73a7a19 + 7ba351d commit 02a35df

File tree

1 file changed

+4
-1
lines changed

1 file changed

+4
-1
lines changed

articles/aks/private-clusters.md

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ ms.author: mlearned
1414

1515
In a private cluster, the Control Plane/API server will have internal IP addresses defined in [RFC1918](https://tools.ietf.org/html/rfc1918). By using a private cluster, you can ensure network traffic between your API server and your node pools remains on the private network only.
1616

17-
The communication between the control plane/API server, which is in an AKS-managed Azure subscription, and the customers cluster/node pool, which is in a customer subscription, can communicate with each other through the private link service in the API server VNET and a private endpoint exposed in the subnet of the customer AKS cluster.
17+
The communication between the control plane/API server, which is in an AKS-managed Azure subscription, and the customers cluster/node pool, which is in a customer subscription, can communicate with each other through the [private link service][private-link-service] in the API server VNET and a private endpoint exposed in the subnet of the customer AKS cluster.
1818

1919
> [!IMPORTANT]
2020
> AKS preview features are self-service opt-in. Previews are provided "as-is" and "as available" and are excluded from the service level agreements and limited warranty. AKS Previews are partially covered by customer support on best effort basis. As such, these features are not meant for production use. For additional infromation, please see the following support articles:
@@ -111,6 +111,7 @@ The API server end point has no public IP address. Consequently, users will need
111111
* Standard LB Only - no support for basic load balancer
112112

113113
## Limitations
114+
* The same [Azure Private Link service limitations][private-link-service] apply to private clusters, Azure Private Endpoints and Virtual Network service endpoints are not currently supported in the same VNET
114115
* No support for virtual nodes in a private cluster to spin private ACI instances in a private Azure VNET
115116
* No support for Azure DevOps integration out of the box with private clusters
116117
* If customers need to enable ACR to work with private AKS, then the ACR's VNET will need to be peered with the agent cluster VNET
@@ -120,8 +121,10 @@ The API server end point has no public IP address. Consequently, users will need
120121
* Azure Monitor for containers Live Data isn't currently supported
121122
* Bring your own DNS isn't currently supported
122123

124+
123125
<!-- LINKS - internal -->
124126
[az-provider-register]: /cli/azure/provider?view=azure-cli-latest#az-provider-register
125127
[az-feature-list]: /cli/azure/feature?view=azure-cli-latest#az-feature-list
126128
[az-extension-add]: /cli/azure/extension#az-extension-add
127129
[az-extension-update]: /cli/azure/extension#az-extension-update
130+
[private-link-service]: https://docs.microsoft.com/azure/private-link/private-link-service-overview

0 commit comments

Comments
 (0)