Open bkuliqi opened 2 years ago
A much needed feature!
Action required from @Azure/aks-pm
Issue needing attention of @Azure/aks-leads
Issue needing attention of @Azure/aks-leads
Issue needing attention of @Azure/aks-leads
Issue needing attention of @Azure/aks-leads
YES PLEASE
Issue needing attention of @Azure/aks-leads
Issue needing attention of @Azure/aks-leads
Issue needing attention of @Azure/aks-leads
Issue needing attention of @Azure/aks-leads
Issue needing attention of @Azure/aks-leads
Issue needing attention of @Azure/aks-leads
Issue needing attention of @Azure/aks-leads
Issue needing attention of @Azure/aks-leads
Issue needing attention of @Azure/aks-leads
Issue needing attention of @Azure/aks-leads
Issue needing attention of @Azure/aks-leads
Issue needing attention of @Azure/aks-leads
Issue needing attention of @Azure/aks-leads
Issue needing attention of @Azure/aks-leads
Issue needing attention of @Azure/aks-leads
Issue needing attention of @Azure/aks-leads
Issue needing attention of @Azure/aks-leads
Issue needing attention of @Azure/aks-leads
Issue needing attention of @Azure/aks-leads
Is your feature request related to a problem? Please describe. We are using multiple AKS clusters with the Proxy feature enabled. However, not being able to update the no-proxy values without having to redeploy the cluster is very problematic. If we need to add a new URL to no-proxy list, we are required to destroy and deploy new cluster. This is not manageable, given that the no-proxy list needs to be updated with new URL, or remove existing URLs.
There is a CLI that supports updating the certs, but doesn't support updating no-proxy URL, see documentation:
"Values for httpProxy, httpsProxy, and noProxy cannot be changed after cluster creation. However, to support rolling CA certs, the value for trustedCa can be changed and applied to the cluster with the az aks update command." az aks update -n $clusterName -g $resourceGroup --http-proxy-config aks-proxy-config-2.json
https://docs.microsoft.com/en-us/azure/aks/http-proxy
Describe the solution you'd like Ability to update no-proxy list without having to redeploy AKS cluster. It appears this is already supported for AKS on Azure Stack. Why no support for regular AKS?
https://docs.microsoft.com/en-us/azure-stack/aks-hci/proxy-change
Describe alternatives you've considered Only alternative is redeploy cluster, which is major disruption.