Soru

Zorluk: OrtaConfigure Azure Kubernetes Service (AKS)

An administrator is preparing to deploy an Azure Kubernetes Service (AKS) cluster. The cluster will be deployed into an existing virtual network (`VNet1`) that has an address space of 10.150.0.0/1610.150.0.0/16 and a subnet named `subnet1` with an address space of 10.150.1.0/2410.150.1.0/24.

Which IP address configuration for the Service CIDR and DNS service IP represents a valid deployment setup?

  1. A
    Service CIDR: 172.16.0.0/16172.16.0.0/16; DNS service IP: 172.16.0.1172.16.0.1
  2. B
    Service CIDR: 10.150.2.0/2410.150.2.0/24; DNS service IP: 10.150.2.1010.150.2.10
  3. Service CIDR: 172.16.0.0/16172.16.0.0/16; DNS service IP: 172.16.0.10172.16.0.10Cevap
  4. D
    Service CIDR: 172.16.0.0/16172.16.0.0/16; DNS service IP: 10.150.1.1010.150.1.10

Cevap

Service CIDR: 172.16.0.0/16172.16.0.0/16; DNS service IP: 172.16.0.10172.16.0.10
The configuration specifying a Service CIDR of 172.16.0.0/16172.16.0.0/16 and a DNS service IP of 172.16.0.10172.16.0.10 is correct. The Service CIDR is outside the virtual network's range (10.150.0.0/1610.150.0.0/16), avoiding routing conflicts. Additionally, the DNS service IP is located within the Service CIDR range and is not the first host IP address (172.16.0.1172.16.0.1), which is reserved for the internal Kubernetes API server.

Adım Adım Çözüm

1
Check for Service CIDR overlap with the existing virtual network.
The Service CIDR range must not fall within the 10.150.0.0/1610.150.0.0/16 VNet address space.
To avoid routing conflicts, the Service CIDR must be completely separate from the virtual network address space.
2
Verify that the DNS service IP address falls within the defined Service CIDR block.
For a Service CIDR of 172.16.0.0/16172.16.0.0/16, the DNS service IP must be an address starting with 172.16172.16.
The DNS service IP must be a part of the Kubernetes service network space.
3
Ensure the DNS service IP is not the first IP address of the Service CIDR range.
Avoid using 172.16.0.1172.16.0.1 as the DNS service IP address.
The first address in the Service CIDR is reserved for the internal Kubernetes API server (the kubernetes service).

Anahtar Kavram

Azure Kubernetes Service IP Address Planning and Configuration
Bu soruyu puanla