You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/aks/http-proxy.md
+3-38Lines changed: 3 additions & 38 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -4,20 +4,18 @@ description: Use the HTTP proxy configuration feature for Azure Kubernetes Servi
4
4
services: container-service
5
5
author: nickomang
6
6
ms.topic: article
7
-
ms.date: 09/09/2021
7
+
ms.date: 05/23/2022
8
8
ms.author: nickoman
9
9
---
10
10
11
-
# HTTP proxy support in Azure Kubernetes Service (preview)
11
+
# HTTP proxy support in Azure Kubernetes Service
12
12
13
13
Azure Kubernetes Service (AKS) clusters, whether deployed into a managed or custom virtual network, have certain outbound dependencies necessary to function properly. Previously, in environments requiring internet access to be routed through HTTP proxies, this was a problem. Nodes had no way of bootstrapping the configuration, environment variables, and certificates necessary to access internet services.
14
14
15
15
This feature adds HTTP proxy support to AKS clusters, exposing a straightforward interface that cluster operators can use to secure AKS-required network traffic in proxy-dependent environments.
16
16
17
17
Some more complex solutions may require creating a chain of trust to establish secure communications across the network. The feature also enables installation of a trusted certificate authority onto the nodes as part of bootstrapping a cluster.
18
18
19
-
[!INCLUDE [preview features callout](./includes/preview/preview-callout.md)]
20
-
21
19
## Limitations and other details
22
20
23
21
The following scenarios are **not** supported:
@@ -33,40 +31,7 @@ By default, *httpProxy*, *httpsProxy*, and *trustedCa* have no value.
33
31
## Prerequisites
34
32
35
33
* An Azure subscription. If you don't have an Azure subscription, you can create a [free account](https://azure.microsoft.com/free).
You also need the *aks-preview* Azure CLI extension version 0.5.25 or later. Install the *aks-preview* Azure CLI extension by using the [az extension add][az-extension-add] command. Or install any available updates by using the [az extension update][az-extension-update] command.
41
-
42
-
```azurecli-interactive
43
-
# Install the aks-preview extension
44
-
az extension add --name aks-preview
45
-
# Update the extension to make sure you have the latest version installed
46
-
az extension update --name aks-preview
47
-
```
48
-
49
-
### Register the `HTTPProxyConfigPreview` preview feature
50
-
51
-
To use the feature, you must also enable the `HTTPProxyConfigPreview` feature flag on your subscription.
52
-
53
-
Register the `HTTPProxyConfigPreview` feature flag by using the [az feature register][az-feature-register] command, as shown in the following example:
54
-
55
-
```azurecli-interactive
56
-
az feature register --namespace "Microsoft.ContainerService" --name "HTTPProxyConfigPreview"
57
-
```
58
-
59
-
It takes a few minutes for the status to show *Registered*. Verify the registration status by using the [az feature list][az-feature-list] command:
60
-
61
-
```azurecli-interactive
62
-
az feature list -o table --query "[?contains(name, 'Microsoft.ContainerService/HTTPProxyConfigPreview')].{Name:name,State:properties.state}"
63
-
```
64
-
65
-
When ready, refresh the registration of the *Microsoft.ContainerService* resource provider by using the [az provider register][az-provider-register] command:
66
-
67
-
```azurecli-interactive
68
-
az provider register --namespace Microsoft.ContainerService
69
-
```
34
+
* Latest version of [Azure CLI installed](/cli/azure/install-azure-cli).
0 commit comments