Skip to content

Commit dc0eb3b

Browse files
committed
Document that 192.0.2.0/24 is not available for custom vnet AKS.
1 parent 6a383df commit dc0eb3b

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

articles/aks/configure-azure-cni.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ This article shows you how to use *Azure CNI* networking to create and use a vir
2222

2323
* The virtual network for the AKS cluster must allow outbound internet connectivity.
2424
* Don't create more than one AKS cluster in the same subnet.
25-
* AKS clusters may not use `169.254.0.0/16`, `172.30.0.0/16`, or `172.31.0.0/16` for the Kubernetes service address range.
25+
* AKS clusters may not use `169.254.0.0/16`, `172.30.0.0/16`, `172.31.0.0/16`, or `192.0.2.0/24` for the Kubernetes service address range.
2626
* The service principal used by the AKS cluster must have at least [Network Contributor](../role-based-access-control/built-in-roles.md#network-contributor) permissions on the subnet within your virtual network. If you wish to define a [custom role](../role-based-access-control/custom-roles.md) instead of using the built-in Network Contributor role, the following permissions are required:
2727
* `Microsoft.Network/virtualNetworks/subnets/join/action`
2828
* `Microsoft.Network/virtualNetworks/subnets/read`
@@ -96,7 +96,7 @@ When you create an AKS cluster, the following parameters are configurable for Az
9696
* Must not be within the virtual network IP address range of your cluster
9797
* Must not overlap with any other virtual networks with which the cluster virtual network peers
9898
* Must not overlap with any on-premises IPs
99-
* Must not be within the ranges `169.254.0.0/16`, `172.30.0.0/16`, or `172.31.0.0/16`
99+
* Must not be within the ranges `169.254.0.0/16`, `172.30.0.0/16`, `172.31.0.0/16`, or `192.0.2.0/24`
100100

101101
Although it's technically possible to specify a service address range within the same virtual network as your cluster, doing so is not recommended. Unpredictable behavior can result if overlapping IP ranges are used. For more information, see the [FAQ](#frequently-asked-questions) section of this article. For more information on Kubernetes services, see [Services][services] in the Kubernetes documentation.
102102

0 commit comments

Comments
 (0)