Question

Difficulty: EasyConfigure Azure Kubernetes Service (AKS)

You plan to configure a new Azure Kubernetes Service (AKS) cluster that will use the Azure CNI network plugin. Which of the following are characteristics of this network model? (Select two.)

  1. Every pod in the cluster is assigned a private IP address from the subnet of the virtual network.Answer
  2. The cluster requires a larger virtual network IP address space than a Kubenet-based cluster of the same size.Answer
  3. C
    Pods are assigned IP addresses from a separate address space and must use Network Address Translation (NAT) to access other virtual network resources.
  4. D
    User-defined routes (UDRs) must be manually created on the subnet to enable pod-to-pod communication across different nodes.
  5. E
    Each pod is automatically assigned a public IP address to allow direct inbound traffic from the internet.

Answer

Every pod in the cluster is assigned a private IP address from the subnet of the virtual network, and the cluster requires a larger virtual network IP address space than a Kubenet-based cluster of the same size.
Under the Azure CNI model, pods receive IP addresses directly from the pre-configured subnet of the virtual network, which allows direct IP-level communication with other resources but requires a larger block of IPs from the subnet.

Step-by-Step Solution

1
Analyze the features of the Azure CNI network plugin.
Identify that Azure CNI assigns IP addresses to pods directly from the subnet, which facilitates direct communication with other VNet resources without NAT.
This is a key architectural feature of Azure CNI that distinguishes it from Kubenet.
2
Evaluate the IP address planning requirements for Azure CNI.
Determine that since pods consume subnet IPs, a larger block of IP addresses must be allocated and planned in advance compared to Kubenet, where pods use a separate logical space.
IP exhaustion is a major configuration consideration when deploying AKS with Azure CNI.

Key Concept

Azure CNI vs Kubenet networking configuration in Azure Kubernetes Service (AKS)
Estimated Time:45s
Rate this question