Skip to content

Commit 095823f

Browse files
authored
Merge pull request #77416 from cchildress/update_aks_reserved_cidrs
Document that 192.0.2.0/24 is not available for custom vnet AKS.
2 parents b0f8080 + dc0eb3b commit 095823f

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

articles/aks/configure-azure-cni.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ This article shows you how to use *Azure CNI* networking to create and use a vir
2222

2323
* The virtual network for the AKS cluster must allow outbound internet connectivity.
2424
* Don't create more than one AKS cluster in the same subnet.
25-
* AKS clusters may not use `169.254.0.0/16`, `172.30.0.0/16`, or `172.31.0.0/16` for the Kubernetes service address range.
25+
* AKS clusters may not use `169.254.0.0/16`, `172.30.0.0/16`, `172.31.0.0/16`, or `192.0.2.0/24` for the Kubernetes service address range.
2626
* The service principal used by the AKS cluster must have at least [Network Contributor](../role-based-access-control/built-in-roles.md#network-contributor) permissions on the subnet within your virtual network. If you wish to define a [custom role](../role-based-access-control/custom-roles.md) instead of using the built-in Network Contributor role, the following permissions are required:
2727
* `Microsoft.Network/virtualNetworks/subnets/join/action`
2828
* `Microsoft.Network/virtualNetworks/subnets/read`
@@ -96,7 +96,7 @@ When you create an AKS cluster, the following parameters are configurable for Az
9696
* Must not be within the virtual network IP address range of your cluster
9797
* Must not overlap with any other virtual networks with which the cluster virtual network peers
9898
* Must not overlap with any on-premises IPs
99-
* Must not be within the ranges `169.254.0.0/16`, `172.30.0.0/16`, or `172.31.0.0/16`
99+
* Must not be within the ranges `169.254.0.0/16`, `172.30.0.0/16`, `172.31.0.0/16`, or `192.0.2.0/24`
100100

101101
Although it's technically possible to specify a service address range within the same virtual network as your cluster, doing so is not recommended. Unpredictable behavior can result if overlapping IP ranges are used. For more information, see the [FAQ](#frequently-asked-questions) section of this article. For more information on Kubernetes services, see [Services][services] in the Kubernetes documentation.
102102

0 commit comments

Comments
 (0)