Tags: azure, security, network


Azure master nodes network security rules for master API and master SSH (if enabled) access can be customized in the cluster spec by adding and/or overriding corresponding security rule ARM object properties.


The following cluster spec excerpt example shows overriding allowed source IP ranges:


spec:
  locations:
    - azure:
        armTemplateExtras:
          securityRuleMastersAllowSSH:
            properties:
              sourceAddressPrefix: ''
              sourceAddressPrefixes: ['96.255.50.36/32']
          securityRuleMastersAllowAPI:
            properties:
              sourceAddressPrefix: ''
              sourceAddressPrefixes: ['96.255.50.36/32']