You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/aks/dapr.md
+10-4Lines changed: 10 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -294,21 +294,27 @@ az k8s-extension create --cluster-type managedClusters \
294
294
295
295
## Set the outbound proxy for Dapr extension for Azure Arc on-prem
296
296
297
-
Most on-prem Azure Arc for Kubernetes only allow egress traffic from on-prem to public internet via an outbound proxy server. Dapr brings existing outbound proxy functionality to the table with the Dapr extension. The Dapr extension already has the certificate and environment variables configured and exposed to the sidecar.
297
+
If you want to use an outbound proxy with the Dapr extension for AKS, you can do so by:
298
+
299
+
1. Setting the proxy environment variables using the `dapr.io/env` annotations:
300
+
- `HTTP_PROXY`
301
+
- `HTTPS_PROXY`
302
+
- `NO_PROXY`
303
+
1. [Installing the proxy certificate in the sidecar](https://docs.dapr.io/operations/configuration/install-certificates/).
298
304
299
305
| Configuration | Annotation |
300
306
| ------------- | ---------- |
301
307
| Environment Variables | Already set in the Dapr extension via [the `dapr.io/env` annotation](https://docs.dapr.io/reference/arguments-annotations-overview/). |
302
308
| Certificate | Already configured in Dapr extension, similar to examples found in [Install certificates in the Dapr sidecar](https://docs.dapr.io/operations/configuration/install-certificates/). |
303
309
304
310
305
-
## Firewall allowlist
311
+
## Meet network requirements
306
312
307
-
Make sure you've added the following URLs to the firewall allowlist.
313
+
The Dapr extension for AKS and Arc for Kubernetes requires the following URLs on `https://:443` to function.
308
314
309
315
| URL | Description |
310
316
| --- | ----------- |
311
-
| `https://mcr.microsoft.com/daprio` | `mcr` URL for Dapr Docker images |
| `https://eastus.dp.kubernetesconfiguration.azure.com/` | Configuration URL for AKS extension. Includes a region prefix. [Change this prefix based on region](#cloudsregions). |
0 commit comments