Skip to content

Add AKS network traffic quickstart - #492

Merged
Rebecca Calixte (Rebecca-Calixte) merged 3 commits into
masterfrom
copilot/add-aks-network-traffic
Aug 27, 2026
Merged

Rebecca Calixte (Rebecca-Calixte) merged 3 commits into
masterfrom
copilot/add-aks-network-traffic

Conversation

@Rebecca-Calixte

Copy link
Copy Markdown
Collaborator

Adds the Terraform quickstart sample for limiting AKS outbound traffic using Azure Firewall and user-defined routing.

Includes:
Terraform configuration
README with deployment and validation guidance

Validated with terraform fmt and terraform validate.

Co-authored-by: Rebecca-Calixte <262454636+Rebecca-Calixte@users.noreply.github.com>
Co-authored-by: vranade-microsoft <269690592+vranade-microsoft@users.noreply.github.com>
@Rebecca-Calixte
Rebecca Calixte (Rebecca-Calixte) merged commit a58bc7e into master Aug 27, 2026
3 checks passed
learn-build-service-prod Bot pushed a commit to MicrosoftDocs/azure-aks-docs that referenced this pull request Sep 14, 2026
* docs(aks): add terraform pivot to limit-egress-traffic zone group

Extend the limit-egress-traffic zone-pivot group with a third
	erraform pivot alongside the existing system/user Azure CLI
pivots, and clarify the group title/prompt and pivot titles to
reflect that it now selects an interaction method rather than
only a managed identity type. Pivot IDs system/user are unchanged
so all existing rendering paths are preserved.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* docs(aks): add Terraform pivot for limit-egress-traffic (ADO 568331)

Add a Terraform interaction path to Limit network traffic with Azure
Firewall in AKS, sourced from the whole-file sample maintained in the
Azure/terraform quickstart/101-aks-network-traffic sample (PR
Azure/terraform#492, merged), following the current sourced
whole-file Terraform pivot pattern used elsewhere in this repo:

- Add Terraform-specific Prerequisites (Terraform, Azure CLI for
  verification, kubectl).
- Wrap the existing Azure CLI walkthrough sections in a
  system,user zone so Terraform readers no longer see irrelevant
  CLI steps, while keeping every existing system/user block
  byte-for-byte unchanged.
- Add a new terraform zone with an accurate description of the
  sample architecture (VNet/subnets, Azure Firewall and policy,
  network/application rules, route table and UDR, AKS cluster,
  role assignment), a single sourced
  [!code-terraform[master](~/terraform_samples/...)] include (no
  hardcoded Terraform, no snippet markers, no sample edits),
  init/fmt/validate/plan/apply steps, and verification of egress,
  firewall rules, and routes using Terraform outputs plus Azure CLI.
- Add a guarded terraform destroy cleanup path that calls out
  Azure Firewall's hourly billing and reviews the destroy plan
  before removing all sample resources.
- Add the new link reference definitions the Terraform content
  requires; all reference-style links resolve and none are
  orphaned.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Apply Learn Authoring Assistant style suggestions

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

---------

Co-authored-by: asudbring <26909696+asudbring@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

This branch was previously deployed

1 inactive deployment
test — 496b440f Deployed Aug 27, 2026 by Copilot via e2e-check #947
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants