AKS networking (kubenet, Azure CNI) - Interactive Code Practice

Practice - 5 Tasks

1fill in blank

easy

Complete the code to specify the network plugin for an AKS cluster.

Azure

az aks create --resource-group myResourceGroup --name myAKSCluster --network-plugin [1]

Drag options to blanks, or click blank then click option'

Akubenet

Bflannel

Cbridge

Dazure

Attempts:

3 left

💡 Hint

Common Mistakes

Using 'kubenet' when Azure CNI is required.

Using unsupported network plugins like 'bridge' or 'flannel' in AKS.

The azure option sets the Azure CNI network plugin, which integrates pods directly with the Azure virtual network.

2fill in blank

medium

Complete the code to enable IP masquerading in kubenet networking.

Azure

az aks create --resource-group myResourceGroup --name myAKSCluster --network-plugin kubenet --enable-ip-masquerade [1]

Drag options to blanks, or click blank then click option'

Atrue

Bfalse

Cenable

Dyes

Attempts:

3 left

💡 Hint

Common Mistakes

Using 'false' disables IP masquerading, which may block external access.

Using non-boolean values like 'enable' or 'yes' causes errors.

Setting --enable-ip-masquerade true enables IP masquerading, which is important for kubenet networking to allow pods to access external networks.

3fill in blank

hard

Fix the error in the command to create an AKS cluster with Azure CNI and a custom subnet.

Azure

az aks create --resource-group myResourceGroup --name myAKSCluster --network-plugin [1] --vnet-subnet-id /subscriptions/xxx/resourceGroups/myRG/providers/Microsoft.Network/virtualNetworks/myVnet/subnets/mySubnet

Drag options to blanks, or click blank then click option'

Akubenet

Bazure

Cbridge

Dflannel

Attempts:

3 left

💡 Hint

Common Mistakes

Using 'kubenet' with a custom subnet causes deployment errors.

Using unsupported plugins like 'bridge' or 'flannel' in AKS.

The azure network plugin is required when specifying a custom subnet with --vnet-subnet-id. Kubenet does not support this.

4fill in blank

hard

Fill both blanks to configure the AKS cluster with kubenet and specify the DNS service IP.

Azure

az aks create --resource-group myResourceGroup --name myAKSCluster --network-plugin [1] --service-cidr 10.0.0.0/16 --dns-service-ip [2]

Drag options to blanks, or click blank then click option'

Akubenet

B10.0.0.10

Cazure

D10.0.1.10

Attempts:

3 left

💡 Hint

Common Mistakes

Using 'azure' network plugin with kubenet-specific flags.

Setting DNS service IP outside the service CIDR range.

Using kubenet as the network plugin and setting the DNS service IP to 10.0.0.10 within the service CIDR is a valid configuration.

5fill in blank

hard

Fill all three blanks to create an AKS cluster with Azure CNI, specify the subnet, and enable network policy.

Azure

az aks create --resource-group myResourceGroup --name myAKSCluster --network-plugin [1] --vnet-subnet-id [2] --network-policy [3]

Drag options to blanks, or click blank then click option'

Akubenet

B/subscriptions/xxx/resourceGroups/myRG/providers/Microsoft.Network/virtualNetworks/myVnet/subnets/mySubnet

Cazure

Dcalico

Attempts:

3 left

💡 Hint

Common Mistakes

Using 'kubenet' with subnet ID and network policy flags.

Using unsupported network policies or missing subnet ID.

The Azure CNI plugin (azure) requires specifying the subnet ID and can use calico as the network policy for advanced network security.