Azure / Azure/AKS

[BUG] Azure AKS Automatic SKU provisions a Public IP with Private Clusters

Open
#5,792 1 comment 0 reactions 1 assignee Claimed by @wangyira View on GitHub
action-required automatic
Dominant language
TypeScript
Stars
2.1k
Forks
395
Avg merge
4d 15h
Merged PRs (30d)
14

Description

**Describe the bug**
Creating an AKS Automatic SKU provisions a Standard Load Balancer with a Public IP Address, even with a Private Cluster and an Outbound Type of userDefinedRouting

When usuing a Base SKU, only private IPs are provisioned

**To Reproduce**
Steps to reproduce the behavior:

1. Run command

```
az aks create --resource-group "aks-auto" --name "aks-auto" --location "westeurope" `
--apiserver-subnet-id "/subscriptions/xxxx/resourceGroups/infra/providers/Microsoft.Network/virtualNetworks/infra-vnet/subnets/aks-auto-api" `
--vnet-subnet-id "/subscriptions/xxxx/resourceGroups/infra/providers/Microsoft.Network/virtualNetworks/infra-vnet/subnets/aks-auto-sub" `
--assign-identity "/subscriptions/xxxx/resourcegroups/aks-auto/providers/Microsoft.ManagedIdentity/userAssignedIdentities/aks-auto-sam" --enable-apiserver-vnet-integration --sku automatic --enable-private-cluster --no-ssh-key --outbound-type userDefinedRouting
```
2. See Issue
A Standard Load Balancer with a Public IP is created in the MC Managed Resource Group

**Expected behavior**
No Public IP addresses created (like --sku base)

**Screenshots**

Image

**Environment**

- CLI Version [2.85.0]
- Kubernetes version [1.34.7]

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.