Allow communication with API server via udp/1194.

References: mspnp/aks-baseline#223 https://docs.microsoft.com/en-us/azure/firewall/protect-azure-kubernetes-service
ulkeba · Apr 25, 2022 · c2de7e4 · c2de7e4
1 parent dd18b02
commit c2de7e4
Showing 1 changed file with 19 additions and 0 deletions.
diff --git a/networking/hub-region.v1.1.json b/networking/hub-region.v1.1.json
@@ -745,6 +745,25 @@
                                         "destinationPorts": [
                                             "443"
                                         ]
+                                    },
+                                    {
+                                        "ruleType": "NetworkRule",
+                                        "name": "pod-to-api-server_udp-1194",
+                                        "ipProtocols": [
+                                            "UDP"
+                                        ],
+                                        "sourceAddresses": [],
+                                        "sourceIpGroups": [
+                                            "[resourceId('Microsoft.Network/ipGroups', variables('aksIpGroupName'))]"
+                                        ],
+                                        "destinationAddresses": [
+                                            "[concat('AzureCloud.', parameters('location'))]"
+                                        ],
+                                        "destinationIpGroups": [],
+                                        "destinationFqdns": [],
+                                        "destinationPorts": [
+                                            "1194"
+                                        ]
                                     }
                                 ],
                                 "name": "AKS-Global-Requirements",