search

Azure / Azure-Proactive-Resiliency-Library-v2

Azure Proactive Resiliency Library v2 (APRL) - Source for Azure WAF reliability guidance and associated ARG queries
https://azure.github.io/Azure-Proactive-Resiliency-Library-v2/
MIT License
69 stars 82 forks source link

💡 Feature Request - NSG is whitelisting by IP address for outbound access for AKS #476

Open lloydlimmsft opened 1 month ago

lloydlimmsft commented 1 month ago

Describe the solution you'd like

Customer created NSG is whitelisting by IP address for outbound access for AKS

Describe alternatives you've considered

AKS requires various wildcard domains to ensure the management and control plane is functional https://learn.microsoft.com/en-us/azure/aks/outbound-rules-control-egress

Additional context

Customer using NSG to permit only these by IP (instead of name) is not recommended as IP addresses can change anytime.

oZakari commented 2 weeks ago

@mosabami is this something your team can create a recommendation for?