Skip to content

Ability to update no-proxy values in existing AKS cluster #3118

Open
@bkuliqi

Description

@bkuliqi

Is your feature request related to a problem? Please describe.
We are using multiple AKS clusters with the Proxy feature enabled. However, not being able to update the no-proxy values without having to redeploy the cluster is very problematic. If we need to add a new URL to no-proxy list, we are required to destroy and deploy new cluster. This is not manageable, given that the no-proxy list needs to be updated with new URL, or remove existing URLs.

There is a CLI that supports updating the certs, but doesn't support updating no-proxy URL, see documentation:

"Values for httpProxy, httpsProxy, and noProxy cannot be changed after cluster creation. However, to support rolling CA certs, the value for trustedCa can be changed and applied to the cluster with the az aks update command."
az aks update -n $clusterName -g $resourceGroup --http-proxy-config aks-proxy-config-2.json

https://docs.microsoft.com/en-us/azure/aks/http-proxy

Describe the solution you'd like
Ability to update no-proxy list without having to redeploy AKS cluster.
It appears this is already supported for AKS on Azure Stack. Why no support for regular AKS?

https://docs.microsoft.com/en-us/azure-stack/aks-hci/proxy-change

Describe alternatives you've considered
Only alternative is redeploy cluster, which is major disruption.

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions