Azure / Azure/Azure-Proactive-Resiliency-Library-v2

🪲 Bug Report - AKS APRL query generating false positives

Open
#698 1 comment 1 reaction 0 assignees View on GitHub
Bug :lady_beetle:
Dominant language
No language data
Stars
105
Forks
125
Avg merge
20m
Merged PRs (30d)
7

Description

## Describe the bug

Recommendation 4f63619f-5001-439c-bacb-8de891287727 - Deploy AKS cluster across availability zones is only checking for one of two PG approved methods for setting up AZs in AKS. The current ARG query is only checking to see if the customer is using the Zone Spanning option which has the cluster automatically generate node pools across each zone in a region. The PG also has published documentation for a [Zone Aligned configuration](https://learn.microsoft.com/en-us/azure/aks/availability-zones-overview#zone-aligned), where the node pools are pinned to a specific zone. The current query does not detect this configuration and says the clusters are not zonal, when according to the PG, these are fully protected configurations.

## To Reproduce

Steps to reproduce the behaviour:

1. Create a cluster with Zone Aligned node pools (3 user and 3 system each pinned to a zone)
2. Run query tied to recommendation 4f63619f-5001-439c-bacb-8de891287727
3. The query will show a non-compliant cluster - six times - once for each user and system pool.
4. This is incorrect as this configuration is fully supported by the PG as a zone resilient configuration.

## Expected behaviour

A Zone-Aligned cluster should not show up as non-compliant 🙂

## Screenshots 📷

If applicable, add screenshots to help explain your problem. Please feel free to blur/cover any sensitive information.

## Additional context

Changing Line 10 in the query from being
| where numOfAvailabilityZones < 2
to
| where numOfAvailabilityZones < 1
generates the correct output.

I tested this in my lab.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.