Skip to content

Conversation

@epomatti
Copy link

Release 2022-02-24 changed the default VNET configuration:

The default VNET address for managed VNETs will change from 10.0.0.0/8 to 10.224.0.0/12 and the default node subnet address will change from 10.240.0.0/16 to 10.224.0.0/16. New clusters will be required to have service and pod CIDR ranges that do not overlap with these new VNET ranges.

Running the the suggested command will output the following error:

$ az aks create -n myCluster -g myResourceGroup --network-plugin azure --enable-managed-identity -a ingress-appgw --appgw-name myApplicationGateway --appgw-subnet-cidr "10.2.0.0/16" --generate-ssh-keys

(IngressAppGwAddonConfigInvalidSubnetCIDRNotContainedWithinVirtualNetwork) Subnet Prefix '10.2.0.0/16' specified for IngressApplicationGateway addon is not contained within the AKS Agent Pool's Virtual Network address prefixes '[10.224.0.0/12]'.
Code: IngressAppGwAddonConfigInvalidSubnetCIDRNotContainedWithinVirtualNetwork
Message: Subnet Prefix '10.2.0.0/16' specified for IngressApplicationGateway addon is not contained within the AKS Agent Pool's Virtual Network address prefixes '[10.224.0.0/12]'.
Target: AddonProfiles.IngressApplicationGateway

I'm suggesting the following changes in this article:

  • Ingress AGW IP example range: 10.225.0.0/16
  • Add info and reference to the the newly introduced requirements.

Release [2022-02-24](https://github.com/Azure/AKS/releases/tag/2022-02-24) changed the default VNET configuration:

> The default VNET address for managed VNETs will change from 10.0.0.0/8 to 10.224.0.0/12 and the default node subnet address will change from 10.240.0.0/16 to 10.224.0.0/16. New clusters will be required to have service and pod CIDR ranges that do not overlap with these new VNET ranges.

Running the the suggested command will output the following error:

```
$ az aks create -n myCluster -g myResourceGroup --network-plugin azure --enable-managed-identity -a ingress-appgw --appgw-name myApplicationGateway --appgw-subnet-cidr "10.2.0.0/16" --generate-ssh-keys

(IngressAppGwAddonConfigInvalidSubnetCIDRNotContainedWithinVirtualNetwork) Subnet Prefix '10.2.0.0/16' specified for IngressApplicationGateway addon is not contained within the AKS Agent Pool's Virtual Network address prefixes '[10.224.0.0/12]'.
Code: IngressAppGwAddonConfigInvalidSubnetCIDRNotContainedWithinVirtualNetwork
Message: Subnet Prefix '10.2.0.0/16' specified for IngressApplicationGateway addon is not contained within the AKS Agent Pool's Virtual Network address prefixes '[10.224.0.0/12]'.
Target: AddonProfiles.IngressApplicationGateway
```

I'm suggesting the following changes in this article:
- Ingress AGW IP example range: `10.225.0.0/16`
- Add info and reference to the the newly introduced requirements.
@PRMerger10
Copy link
Contributor

@epomatti : Thanks for your contribution! The author(s) have been notified to review your proposed change. @Caya

@Court72
Copy link
Contributor

Court72 commented May 2, 2022

@mscatyao

Can you review the proposed changes? IMPORTANT: When the changes are ready for publication, add a #sign-off comment to signal that the PR is ready for the review team to merge.

#label:"aq-pr-triaged"

@PRMerger-2 PRMerger-2 added the aq-pr-triaged tracking label for the PR review team label May 2, 2022
@ShannonLeavitt
Copy link
Contributor

The live article has been substantially updated since this PR was submitted. The changes are no longer applicable. I'll close the PR now. Thanks.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

7 participants