You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
@@ -22,7 +22,7 @@ Some more complex solutions may require creating a chain of trust to establish s
22
22
The following scenarios are **not** supported:
23
23
24
24
- Different proxy configurations per node pool
25
-
- Updating proxy settings post cluster creation
25
+
- Updating HTTP/HTTPS proxy settings post cluster creation
26
26
- User/Password authentication
27
27
- Custom CAs for API server communication
28
28
- Windows-based clusters
@@ -105,11 +105,11 @@ Deploying an AKS cluster with an HTTP proxy configured using an ARM template is
105
105
106
106
In your template, provide values for *httpProxy*, *httpsProxy*, and *noProxy*. If necessary, provide a value for *trustedCa*. Deploy the template, and your cluster should initialize with your HTTP proxy configured on the nodes.
107
107
108
-
## Handling CA rollover
108
+
## Updating Proxy configurations
109
109
110
-
Values for *httpProxy*, *httpsProxy*, and *noProxy* can't be changed after cluster creation. However, to support rolling CA certs, the value for *trustedCa* can be changed and applied to the cluster with the [az aks update][az-aks-update] command.
110
+
Values for *httpProxy*, and *httpsProxy* can't be changed after cluster creation. However, to support rolling CA certs and No Proxy settings, the values for *trustedCa* and *NoProxy* can be changed and applied to the cluster with the [az aks update][az-aks-update] command.
111
111
112
-
For example, assuming a new file has been created with the base64 encoded string of the new CA cert called *aks-proxy-config-2.json*, the following action updates the cluster:
112
+
For example, assuming a new file has been created with the base64 encoded string of the new CA cert called *aks-proxy-config-2.json*, the following action updates the cluster. Or, you need to add new endpoint urls for your applications to No Proxy:
113
113
114
114
```azurecli
115
115
az aks update -n $clusterName -g $resourceGroup --http-proxy-config aks-proxy-config-2.json
@@ -141,4 +141,4 @@ For more information regarding the network requirements of AKS clusters, see [co
0 commit comments