Skip to content

Commit 244e223

Browse files
authored
Merge pull request #8952 from axelgMS/patch-14
AB#5908: Update error-code-customprivatednszonemissingpermissionerror.md
2 parents 461376a + 86f8c7f commit 244e223

1 file changed

Lines changed: 6 additions & 2 deletions

File tree

support/azure/azure-kubernetes/create-upgrade-delete/error-code-customprivatednszonemissingpermissionerror.md

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
---
22
title: CustomPrivateDNSZoneMissingPermissionError error code
33
description: Learn how to fix the CustomPrivateDNSZoneMissingPermissionError error that occurs when you try to create or update an Azure Kubernetes Service (AKS) cluster.
4-
ms.date: 11/28/2023
4+
ms.date: 05/27/2025
55
author: jotavar
66
ms.author: jotavar
77
editor: v-jsitser
@@ -28,7 +28,11 @@ An AKS cluster create or update operation fails and returns the following error
2828
2929
## Cause
3030

31-
Before AKS runs a cluster create or update operation for a private cluster that uses a [custom private DNS zone](/azure/aks/private-clusters#configure-a-private-dns-zone), it checks whether the cluster's managed identity or service principal has the required permissions to control the private DNS zone. If AKS doesn't find the necessary permissions, it blocks the operation so that the cluster doesn't enter a failed state.
31+
Before AKS runs a cluster create or update operation for a private cluster that uses a [custom private DNS zone](/azure/aks/private-clusters#configure-a-private-dns-zone), it checks whether the cluster's managed identity or service principal has the required permissions to control the private DNS zone. If AKS can't find the necessary permissions in cases like the following ones, it blocks the operation so that the cluster doesn't enter a failed state:
32+
33+
- The managed identity or service principal has been deleted.
34+
- The managed identity or service principal has been re-created with the same name.
35+
- An incorrect managed identity is passed.
3236

3337
## Solution
3438

0 commit comments

Comments
 (0)