Tags: azure, security, network
Azure master nodes network security rules for master API and master SSH (if enabled) access can be customized in the cluster spec by adding and/or overriding corresponding security rule ARM object properties.
The following cluster spec excerpt example shows overriding allowed source IP ranges:
spec: locations: - azure: armTemplateExtras: securityRuleMastersAllowSSH: properties: sourceAddressPrefix: '' sourceAddressPrefixes: ['96.255.50.36/32'] securityRuleMastersAllowAPI: properties: sourceAddressPrefix: '' sourceAddressPrefixes: ['96.255.50.36/32']