Skip to content

Commit 6f8fa63

Browse files
authored
Merge pull request #32322 from EricPonvelle/BZ1822903-NSGPortFixes
BZ1822903: Updated the Network Security Groups requirements table
2 parents 0ec924e + 1424d00 commit 6f8fa63

File tree

1 file changed

+8
-5
lines changed

1 file changed

+8
-5
lines changed

modules/installation-about-custom-azure-vnet.adoc

Lines changed: 8 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -79,26 +79,29 @@ The network security group rules must be in place before you install the cluster
7979

8080
|`80`
8181
|Allows HTTP traffic
82-
|x
8382
|
83+
|x
8484

8585
|`443`
8686
|Allows HTTPS traffic
87-
|x
8887
|
88+
|x
8989

9090
|`6443`
9191
|Allows communication to the control plane machines
9292
|x
93-
|x
93+
|
9494

9595
|`22623`
9696
|Allows communication to the machine config server
9797
|x
98-
|x
99-
98+
|
10099
|===
101100

101+
[NOTE]
102+
====
103+
Since cluster components do not modify the user-provided network security groups, which the Kubernetes controllers update, a pseudo-network security group is created for the Kubernetes controller to modify without impacting the rest of the environment.
104+
====
102105

103106
[id="installation-about-custom-azure-permissions_{context}"]
104107
== Division of permissions

0 commit comments

Comments
 (0)