Skip to content

Commit f7e4d26

Browse files
Merge pull request #235398 from chasewilson/chase/cniUpgradeRemove
Remove CNI upgrade instructions
2 parents 251fe3b + b14a69d commit f7e4d26

File tree

1 file changed

+1
-25
lines changed

1 file changed

+1
-25
lines changed

articles/aks/azure-cni-overlay.md

Lines changed: 1 addition & 25 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ ms.author: allensu
66
ms.subservice: aks-networking
77
ms.topic: how-to
88
ms.custom: references_regions
9-
ms.date: 04/17/2023
9+
ms.date: 04/21/2023
1010
---
1111

1212
# Configure Azure CNI Overlay networking in Azure Kubernetes Service (AKS)
@@ -153,30 +153,6 @@ When the status reflects *Registered*, refresh the registration of the *Microsof
153153
az provider register --namespace Microsoft.ContainerService
154154
```
155155

156-
## Upgrade an existing cluster to CNI Overlay - Preview
157-
158-
> [!NOTE]
159-
> The upgrade capability is still in preview and requires the preview AKS Azure CLI extension.
160-
161-
You can update an existing Azure CNI cluster to Overlay if the cluster meets certain criteria. A cluster must:
162-
163-
- be on Kubernetes version 1.22+
164-
- **not** be using the dynamic pod IP allocation feature
165-
- **not** have network policies enabled
166-
- **not** be using any Windows node pools with docker as the container runtime
167-
168-
The upgrade process will trigger each node pool to be re-imaged simultaneously (i.e. upgrading each node pool separately to Overlay is not supported). Any disruptions to cluster networking will be similar to a node image upgrade or Kubernetes version upgrade where each node in a node pool is re-imaged.
169-
170-
> [!WARNING]
171-
> Due to the limitation around Windows Overlay pods incorrectly SNATing packets from host network pods, this has a more detrimental effect for clusters upgrading to Overlay.
172-
173-
While nodes are being upgraded to use the CNI Overlay feature, pods that are on nodes which haven't been upgraded yet will not be able to communicate with pods on Windows nodes that have been upgraded to Overlay. In other words, Overlay Windows pods will not be able to reply to any traffic from pods still running with an IP from the node subnet.
174-
175-
This network disruption will only occur during the upgrade. Once the migration to Overlay has completed for all node pools, all Overlay pods will be able to communicate successfully with the Windows pods.
176-
177-
> [!NOTE]
178-
> The upgrade completion doesn't change the existing limitation that host network pods **cannot** communicate with Windows Overlay pods.
179-
180156
## Next steps
181157

182158
To learn how to utilize AKS with your own Container Network Interface (CNI) plugin, see [Bring your own Container Network Interface (CNI) plugin](use-byo-cni.md).

0 commit comments

Comments
 (0)