You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: support/azure/azure-kubernetes/extensions/troubleshoot-network-isolated-cluster.md
+8-8Lines changed: 8 additions & 8 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -19,20 +19,20 @@ This article discusses how to troubleshoot the [network isolated cluster][networ
19
19
20
20
## Network isolated cluster support
21
21
22
-
The network isolated cluster follows a similar support model to other [AKS add-ons](/azure/aks/integrations). There are two options available for the private ACR with network isolated clusters. If you're bringing your own ACR, then you're responsible for properly configuring your ACR and associated resources.
22
+
The network isolated cluster follows a similar support model to other [AKS add-ons](/azure/aks/integrations). There are two options available for the private Azure Container Registry (ACR) with network isolated clusters. If you're bringing your own ACR, then you're responsible for properly configuring your ACR and associated resources.
23
23
24
24
## Known issues
25
25
26
-
### Cluster image pull failed
27
-
Network isolated clusters leverage ACR cache rules for image pulls, when there is an image pull fail error due to network isolation:
28
-
- If you're using BYO ACR, check your private ACR resources, including the cache rule and private endpoints to verify they're configured using recommendations outlined in the documentation.
29
-
- If you're using AKS Managed ACR, only MCR images are supported by default. If the image pull failure is on images from other registries, then you need go to the private ACR to create additional cache rule for those images. If the image pull failure is on MCR images, please proceed to check if the associated ACR and private endpoint resource named with keyword `bootstrap` exists. If doesn't exist, please reconcile the cluster.
26
+
### Cluster image pulls failed
27
+
Network isolated clusters use ACR cache rules for image pull, when there is an image pull fail error due to network isolation:
28
+
- If you're using Bring your own (BYO) ACR, check your private ACR resources, including the cache rule and private endpoints to verify they're configured using recommendations outlined in the documentation.
29
+
- If you're using AKS Managed ACR, only MCR images are supported by default. If the image pull failure is on images from other registries, then you need go to the private ACR to create extra cache rules for those images. If the image pull failure is on MCR images, proceed to check if the associated ACR and private endpoint resource named with keyword `bootstrap` exists. If it doesn't exist, reconcile the cluster.
30
30
31
31
### Cluster image pull fails after updating the existed cluster to network isolated cluster or updating the private ACR resource ID
32
-
This is an intended behavior, you need to reimage the node to update the kubelet configuration in CSE (Container Service Extension) following the update actions mentioned.
32
+
The error is an intended behavior. You need to reimage the node to update the kubelet configuration in CSE (Container Service Extension) following the update actions mentioned.
33
33
34
-
### ACR or associated cache rule, private endpoint and private DNS zone are deleted by accident
35
-
If the cache rule is deleted from the managed ACR by accident, the mitigation is to delete the ACR and then reconcile the cluster. If the ACR itself or private endpoint or private DNS zone is deleted by accident, the mitigation is just to reconcile the cluster.
34
+
### ACR or associated cache rule, private endpoint and private DNS zone are deleted accidentally
35
+
If the cache rule is deleted from the managed ACR accidentally, the mitigation is to delete the ACR and then reconcile the cluster. If the ACR itself or private endpoint or private DNS zone is deleted by accident, the mitigation is just to reconcile the cluster.
0 commit comments