Azure / container-service-for-azure-china

Container Service for Azure China
MIT License
422 stars 73 forks source link

DNS Zone integration not available on AKS #48

Open blrchen opened 5 years ago

blrchen commented 5 years ago

Many service in Azure provides a default DNS name for developers to quickly get started, for example, azure web app provides foo.azurewebsites.net and Azure storage provides bar. blob.core.windows.net DNS names when service is provisioned. This is very useful in Azure China as in China all public facing services require requires ICP. Non-ICP sites will be blocked 21v.

AKS in Azure China does not integrate provide the built-in public DNS name and integrate it with public DNS zone, this make evaluating AKS really hard. Before developer has a real domain with ICP certification, there is nothing he/she can do to start trying AKS service for dev/test work.

blrchen commented 5 years ago

Looks like in global Azure AKS, this is done via HTTP application routing

andyzhangx commented 5 years ago

HTTP application routing is not for production, instead user could use ingress controller, while user still needs to do ICP, it's out of AKS scope. @blrchen Your listed domain names are all for global azure, do you have any good best practice for azure china?

windoze commented 5 years ago

HTTP application routing is more than an ingress controller, it has a DNS zone as well. Is there any chance we add DNS zone functions to AKS or Azure China?