Skip to content

Commit 47040b1

Browse files
committed
Merge branch 'main' of https://github.com/MicrosoftDocs/azure-docs-pr into rolyon-mto-configure-portal-feedback
2 parents 1cd1d8a + 75a9a4d commit 47040b1

File tree

1 file changed

+6
-6
lines changed

1 file changed

+6
-6
lines changed

articles/aks/http-proxy.md

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ ms.service: azure-kubernetes-service
55
ms.subservice: aks-networking
66
author: asudbring
77
ms.topic: how-to
8-
ms.date: 05/23/2022
8+
ms.date: 02/01/2023
99
ms.author: allensu
1010
---
1111

@@ -22,7 +22,7 @@ Some more complex solutions may require creating a chain of trust to establish s
2222
The following scenarios are **not** supported:
2323

2424
- Different proxy configurations per node pool
25-
- Updating proxy settings post cluster creation
25+
- Updating HTTP/HTTPS proxy settings post cluster creation
2626
- User/Password authentication
2727
- Custom CAs for API server communication
2828
- Windows-based clusters
@@ -105,11 +105,11 @@ Deploying an AKS cluster with an HTTP proxy configured using an ARM template is
105105

106106
In your template, provide values for *httpProxy*, *httpsProxy*, and *noProxy*. If necessary, provide a value for *trustedCa*. Deploy the template, and your cluster should initialize with your HTTP proxy configured on the nodes.
107107

108-
## Handling CA rollover
108+
## Updating Proxy configurations
109109

110-
Values for *httpProxy*, *httpsProxy*, and *noProxy* can't be changed after cluster creation. However, to support rolling CA certs, the value for *trustedCa* can be changed and applied to the cluster with the [az aks update][az-aks-update] command.
110+
Values for *httpProxy*, and *httpsProxy* can't be changed after cluster creation. However, to support rolling CA certs and No Proxy settings, the values for *trustedCa* and *NoProxy* can be changed and applied to the cluster with the [az aks update][az-aks-update] command.
111111

112-
For example, assuming a new file has been created with the base64 encoded string of the new CA cert called *aks-proxy-config-2.json*, the following action updates the cluster:
112+
For example, assuming a new file has been created with the base64 encoded string of the new CA cert called *aks-proxy-config-2.json*, the following action updates the cluster. Or, you need to add new endpoint urls for your applications to No Proxy:
113113

114114
```azurecli
115115
az aks update -n $clusterName -g $resourceGroup --http-proxy-config aks-proxy-config-2.json
@@ -141,4 +141,4 @@ For more information regarding the network requirements of AKS clusters, see [co
141141
[az-provider-register]: /cli/azure/provider#az_provider_register
142142
[az-extension-add]: /cli/azure/extension#az_extension_add
143143
[az-extension-update]: /cli/azure/extension#az-extension-update
144-
[install-azure-cli]: /cli/azure/install-azure-cli
144+
[install-azure-cli]: /cli/azure/install-azure-cli

0 commit comments

Comments
 (0)