Azure AKS Cluster Network Initialization Configuration

TOC

Support Overview

FeatureSupport StatusRequirements
LoadBalancer ServiceDefault SupportNo additional deployment required.
IngressSupportedOptionally deploy Ingress Controller. Optionally enable Ingress Class functionality (once enabled, you can manually select ingress classes when creating ingress through the form interface).

Prerequisites

If you have created an AKS cluster, import the Azure AKS cluster.

Configuration Steps

Deploy Ingress Controller

AKS uses container network mode and leverages Nginx Ingress Controller to manage load balancers, while providing external access addresses for virtual IP addresses (VIPs) in the container internal network through LoadBalancer type Services.

  1. Log in to Microsoft Azure and access your created AKS cluster.

  2. In the left navigation, click Kubernetes Resources > Services and Ingresses.

  3. Click Create, select Ingress (Preview) from the dropdown, and it will prompt and automatically create an Ingress Controller.

  4. Click Enable and wait for completion.

Create Ingress and LoadBalancer Services

You can create ingress and LoadBalancer services simultaneously or choose one based on your needs.

Create Ingress

  1. In Container Platform, click Network > Ingress in the left navigation.

  2. Click Create Ingress and select webapprouting.kubernetes.azure.com for Ingress Class.

  3. Select Protocol. Default is HTTP. For HTTPS, first create a certificate and select it.

  4. Click Create.

Create LoadBalancer Service

  1. In Container Platform, click Network > Services in the left navigation.

  2. Click Create Service and select LoadBalancer for External Access.

  3. Expand annotations and fill in LoadBalancer service annotations as needed.

  4. Click Create.

Create Certificate

When using HTTPS protocol, save HTTPS certificate credentials as a Secret (TLS type) in advance.

  1. In Container Platform, click Configuration > Secrets in the left navigation.

  2. Click Create Secret.

  3. Select TLS type and import or fill in Certificate and Private Key as needed.

  4. Click Create.