You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/aks/azure-cni-overlay.md
+1-16Lines changed: 1 addition & 16 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -6,7 +6,7 @@ ms.author: allensu
6
6
ms.subservice: aks-networking
7
7
ms.topic: how-to
8
8
ms.custom: references_regions
9
-
ms.date: 03/06/2023
9
+
ms.date: 03/09/2023
10
10
---
11
11
12
12
# Configure Azure CNI Overlay networking in Azure Kubernetes Service (AKS)
@@ -145,21 +145,6 @@ location="westcentralus"
145
145
az aks create -n $clusterName -g $resourceGroup --location $location --network-plugin azure --network-plugin-mode overlay --pod-cidr 192.168.0.0/16
146
146
```
147
147
148
-
## Upgrade existing clusters
149
-
150
-
To update an existing cluster to use Azure CNI overlay, there are a couple prerequisites:
151
-
152
-
* The cluster must use Azure CNI without the pod subnet feature.
153
-
* The cluster is _not_ using network policies.
154
-
* The Overlay Pod CIDR needs to be an address range that _does not_ overlap with the existing cluster's VNet.
155
-
* If you have subnet Network Security Group rules, they must allow traffic to and from the Pod CIDR (refer to the [network security groups](#network-security-groups) section in this document for more information).
156
-
157
-
To update a cluster, run the following Azure CLI command.
158
-
159
-
```azurecli
160
-
az aks update --name $clusterName --resource-group $resourceGroup --network-plugin azure --network-plugin-mode overlay --pod-cidr $overlayPodCidr
161
-
```
162
-
163
148
This will perform a rolling upgrade of nodes in **all** nodepools simultaneously to Azure CNI overlay and should be treated like a node image upgrade. During the upgrade, traffic from an Overlay pod to a CNI v1 pod will be SNATed(Source Network Address Translation)
0 commit comments