Document config for AKS whith api-server-authorized-ip-ranges

[ezYakaEagle442]

as described per https://docs.microsoft.com/en-us/azure/aks/api-server-authorized-ip-ranges
could you please explain on this page how to setup an Azure DevOps agent / Jenkins Slave / Ansible ToolBox

see also :

• https://github.com/microsoft/azure-pipelines-agent/blob/master/docs/design/byos.md
• https://docs.microsoft.com/en-us/azure/devops/pipelines/agents/agents?view=azure-devops&tabs=browser#install
• https://docs.microsoft.com/en-us/azure/devops/pipelines/agents/hosted?view=azure-devops#agent-ip-ranges
• AKS authorized ip ranges does not mention devops environments #49578
• AKS "API server authorized IP ranges" makes deployment by Pipeline impossible #45678
• Document config for AKS Private Clusters #54750

---

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

• ID: 5573bc6e-0482-2240-2d07-2d0f54ccf5eb
• Version Independent ID: dc3d8867-9cf2-80b0-9b96-f8f71de0fb60
• Content: Deploy ASP.NET Core apps to Azure Kubernetes Service with Azure DevOps Starter
• Content Source: articles/devops-project/azure-devops-project-aks.md
• Product: devops
• Technology: devops-cicd
• GitHub Login: @mlearned
• Microsoft Alias: mlearned

[MonikaReddy-MSFT]

@ezYakaEagle442 , Thanks for brining this to our attention. We will investigate it further and update you shortly.

[MonikaReddy-MSFT]

@ezYakaEagle442 , I'm going to assign this to the document author so they can update the document accordingly.

[mlearned]

@pulkitaggarwl can you comment on this one please?

[abarqawi]

i faced similar issue today with AKS+Azure DevOps pipeline that AzureDevOps cannot connect to AKS with Authorized Ips even with correct IP regions ,, and we were able to solve by adding following Azure CLI task
i added the outbound IPs also the regions Ips for india central and south india incase
but most important is the agent Ip

in the Azure Dev Ops :

Task 1: add the MS hosted Ips
IP=($(curl -s http://ipinfo.io/json | jq '.ip' | sed -e 's/^"//' -e 's/"$//'))
echo "This Microsoft hosted agent public IP is: $IP"
echo "##vso[task.setvariable variable=AGENT_IP;]$IP "
az aks update --resource-group myResourceGroup --name myAKSCluster --api-server-authorized-ip-ranges "13.107.6.0/24,13.107.9.0/24,13.107.42.0/24,13.107.43.0/24, 20.41.194.0/24, $IP"

Task 2: remove only the Agent Ip

az aks update
--resource-group myResourceGroup
--name myAKSCluster
--api-server-authorized-ip-ranges "13.107.6.0/24,13.107.9.0/24,13.107.42.0/24,13.107.43.0/24,20.41.194.0/24"

hope this helps