{AKS} add support for updating kube-proxy configuration

src/aks-preview/HISTORY.rst

@@ -13,6 +13,7 @@ Pending
 +++++++
 
 * Add custom transform for custom CA
+* Support updating kube-proxy configuration with `az aks update --kube-proxy-config file.json`.
 
 0.5.116
 +++++++

src/aks-preview/azext_aks_preview/_help.py

@@ -816,6 +816,9 @@
         - name: --http-proxy-config
           type: string
           short-summary: HTTP Proxy configuration for this cluster.
+        - name: --kube-proxy-config
+          type: string
+          short-summary: kube-proxy configuration for this cluster.
         - name: --enable-azure-keyvault-kms
           type: bool
           short-summary: Enable Azure KeyVault Key Management Service.

src/aks-preview/azext_aks_preview/_params.py

@@ -365,6 +365,7 @@ def load_arguments(self, _):
         c.argument('load_balancer_backend_pool_type', validator=validate_load_balancer_backend_pool_type)
         c.argument('nat_gateway_managed_outbound_ip_count', type=int, validator=validate_nat_gateway_managed_outbound_ip_count)
         c.argument('nat_gateway_idle_timeout', type=int, validator=validate_nat_gateway_idle_timeout)
+        c.argument('kube_proxy_config')
         c.argument('auto_upgrade_channel', arg_type=get_enum_type(auto_upgrade_channels))
         c.argument('cluster_autoscaler_profile', nargs='+', options_list=["--cluster-autoscaler-profile", "--ca-profile"],
                    help="Space-separated list of key=value pairs for configuring cluster autoscaler. Pass an empty string to clear the profile.")

src/aks-preview/azext_aks_preview/custom.py

@@ -729,6 +729,7 @@ def aks_update(
     load_balancer_backend_pool_type=None,
     nat_gateway_managed_outbound_ip_count=None,
     nat_gateway_idle_timeout=None,
+    kube_proxy_config=None,
     auto_upgrade_channel=None,
     cluster_autoscaler_profile=None,
     uptime_sla=False,

src/aks-preview/azext_aks_preview/managed_cluster_decorator.py

@@ -2852,6 +2852,22 @@ def update_http_proxy_config(self, mc: ManagedCluster) -> ManagedCluster:
         mc.http_proxy_config = self.context.get_http_proxy_config()
         return mc
 
+    def update_kube_proxy_config(self, mc: ManagedCluster) -> ManagedCluster:
+        """Update kube proxy config for the ManagedCluster object.
+
+        :return: the ManagedCluster object
+        """
+        self._ensure_mc(mc)
+
+        if not mc.network_profile:
+            raise UnknownError(
+                "Unexpectedly get an empty network profile in the process of updating kube-proxy config."
+            )
+
+        mc.network_profile.kube_proxy_config = self.context.get_kube_proxy_config()
+
+        return mc
+
     def update_pod_security_policy(self, mc: ManagedCluster) -> ManagedCluster:
         """Update pod security policy for the ManagedCluster object.
 
@@ -3228,5 +3244,7 @@ def update_mc_profile_preview(self) -> ManagedCluster:
         mc = self.update_linux_profile(mc)
         # update outbound type
         mc = self.update_outbound_type_in_network_profile(mc)
+        # update kube proxy config
+        mc = self.update_kube_proxy_config(mc)
 
         return mc

src/aks-preview/azext_aks_preview/tests/latest/data/kubeproxyconfig.json

@@ -1,7 +1,4 @@
 {
     "enabled": true,
-    "mode": "IPVS",
-    "ipvsConfig": {
-        "scheduler": "LeastConnection"
-    }
+    "mode": "IPTABLES"
 }

src/aks-preview/azext_aks_preview/tests/latest/data/kubeproxyconfig_update.json

@@ -0,0 +1,7 @@
+{
+    "enabled": true,
+    "mode": "IPVS",
+    "ipvsConfig": {
+        "scheduler": "LeastConnection"
+    }
+}