You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/container-apps/vnet-custom.md
+25-12Lines changed: 25 additions & 12 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -25,15 +25,30 @@ As you create an Azure Container Apps [environment](environment.md), a virtual n
25
25
26
26
:::image type="content" source="media/networking/azure-container-apps-virtual-network.png" alt-text="Azure Container Apps environments use an existing VNET, or you can provide your own.":::
27
27
28
+
## Restrictions
29
+
30
+
Subnet address ranges can't overlap with the following reserved ranges:
31
+
32
+
- 169.254.0.0/16
33
+
- 172.30.0.0/16
34
+
- 172.31.0.0/16
35
+
- 192.0.2.0/24
36
+
37
+
Additionally, subnets must have a size between /21 and /12.
38
+
28
39
## Subnet types
29
40
30
41
As a Container Apps environment is created, you provide resource IDs for two different subnets. Both subnets must be defined in the same container apps.
31
42
32
43
-**App subnet**: Subnet for user app containers. Subnet that contains IP ranges mapped to applications deployed as containers.
33
44
-**Control plane subnet**: Subnet for [control plane infrastructure](/azure/azure-resource-manager/management/control-plane-and-data-plane) components and user app containers.
34
45
46
+
::: zone pivot="azure-cli"
47
+
35
48
If the [platformReservedCidr](#networking-parameters) range is defined, both subnets must not overlap with the IP range defined in `platformReservedCidr`.
36
49
50
+
::: zone-end
51
+
37
52
## Accessibility level
38
53
39
54
You can deploy your Container Apps environment with an internet-accessible endpoint or with an IP address in your VNET. The accessibility level determines the type of load balancer used with your Container Apps instance.
@@ -46,8 +61,12 @@ Container Apps environments deployed as external resources are available for pub
46
61
47
62
When set to internal, the environment has no public endpoint. Internal environments are deployed with a virtual IP (VIP) mapped to an internal IP address. The internal endpoint is an Azure internal load balancer (ILB) and IP addresses are issued from the custom VNET's list of private IP addresses.
48
63
64
+
::: zone pivot="azure-cli"
65
+
49
66
To create an internal only environment, provide the `--internal-only` parameter to the `az containerapp env create` command.
50
67
68
+
::: zone-end
69
+
51
70
## Example
52
71
53
72
The following example shows you how to create a Container Apps environment in an existing virtual network.
@@ -234,6 +253,9 @@ az containerapp env create `
234
253
235
254
---
236
255
256
+
> [!NOTE]
257
+
> As you call `az conatinerapp create` to create the container app inside your environment, make sure the value for the `--image` parameter is in lower case.
258
+
237
259
The following table describes the parameters used in for `containerapp env create`.
238
260
239
261
| Parameter | Description |
@@ -343,7 +365,9 @@ az network private-dns record-set a add-record `
343
365
344
366
#### Networking parameters
345
367
346
-
There are three optional networking parameters you can choose to define when calling `containerapp env create`. You must either provide values for all three of these properties, or none of them. If they aren’t provided, the CLI generates the values for you.
368
+
There are three optional networking parameters you can choose to define when calling `containerapp env create`. Use these options when you have a peered VNET with separate address ranges. Explicitly configuring these ranges ensures the addresses used by the Container Apps environment doesn't conflict with other ranges in the network infrastructure.
369
+
370
+
You must either provide values for all three of these properties, or none of them. If they aren’t provided, the CLI generates the values for you.
347
371
348
372
| Parameter | Description |
349
373
|---|---|
@@ -381,17 +405,6 @@ az group delete `
381
405
382
406
::: zone-end
383
407
384
-
## Restrictions
385
-
386
-
Subnet address ranges can't overlap with the following reserved ranges:
387
-
388
-
- 169.254.0.0/16
389
-
- 172.30.0.0/16
390
-
- 172.31.0.0/16
391
-
- 192.0.2.0/24
392
-
393
-
Additionally, subnets must have a size between /21 and /12.
394
-
395
408
## Additional resources
396
409
397
410
- Refer to [What is Azure Private Endpoint](/azure/private-link/private-endpoint-overview) for more details on configuring your private endpoint.
0 commit comments