"use strict"; const {Fragment: _Fragment, jsxDEV: _jsxDEV} = arguments[0]; const {useMDXComponents: _provideComponents} = arguments[0]; function _createMdxContent(props) { const _components = { code: "code", em: "em", h1: "h1", h2: "h2", h3: "h3", li: "li", p: "p", strong: "strong", ul: "ul", ..._provideComponents(), ...props.components }, {CH} = _components; if (!CH) _missingMdxReference("CH", false, "60:1-62:4"); if (!CH.Code) _missingMdxReference("CH.Code", true, "60:1-62:4"); return _jsxDEV(_Fragment, { children: [_jsxDEV("style", { dangerouslySetInnerHTML: { __html: "[data-ch-theme=\"assistance\"] { --ch-t-colorScheme: var(--ch-0);--ch-t-foreground: var(--ch-4);--ch-t-background: var(--ch-16);--ch-t-editor-background: var(--ch-16);--ch-t-editor-foreground: var(--ch-4);--ch-t-editor-rangeHighlightBackground: var(--ch-19);--ch-t-editor-infoForeground: var(--ch-18);--ch-t-editor-selectionBackground: var(--ch-17);--ch-t-tab-activeBackground: var(--ch-16);--ch-t-tab-activeForeground: var(--ch-4);--ch-t-tab-inactiveBackground: var(--ch-21);--ch-t-tab-inactiveForeground: var(--ch-15);--ch-t-tab-border: var(--ch-22);--ch-t-tab-activeBorder: var(--ch-16);--ch-t-editorGroupHeader-tabsBackground: var(--ch-21);--ch-t-editorLineNumber-foreground: var(--ch-20);--ch-t-input-foreground: var(--ch-4);--ch-t-sideBar-foreground: var(--ch-4);--ch-t-list-hoverBackground: var(--ch-25);--ch-t-list-hoverForeground: var(--ch-4); }" } }, undefined, false, { fileName: "" }, this), "\n", _jsxDEV(_components.h1, { id: "azure-aks-networking-and-ingress-in-production-practical-guide", children: "Azure AKS Networking and Ingress in Production: Practical Guide" }, undefined, false, { fileName: "", lineNumber: 2, columnNumber: 1 }, this), "\n", _jsxDEV(_components.p, { children: ["AKS is easy to create and deceptively hard to get ", _jsxDEV(_components.em, { children: "networking" }, undefined, false, { fileName: "", lineNumber: 4, columnNumber: 51 }, this), " right—especially at scale. Most AKS operational incidents I see are rooted in one of these:"] }, undefined, true, { fileName: "", lineNumber: 4, columnNumber: 1 }, this), "\n", _jsxDEV(_components.ul, { children: ["\n", _jsxDEV(_components.li, { children: "IP planning mistakes" }, undefined, false, { fileName: "", lineNumber: 6, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "Outbound connectivity misunderstandings" }, undefined, false, { fileName: "", lineNumber: 7, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "DNS and private cluster misconfiguration" }, undefined, false, { fileName: "", lineNumber: 8, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "Ingress controller and TLS operational drift" }, undefined, false, { fileName: "", lineNumber: 9, columnNumber: 1 }, this), "\n"] }, undefined, true, { fileName: "", lineNumber: 6, columnNumber: 1 }, this), "\n", _jsxDEV(_components.p, { children: "This guide focuses on production-grade AKS networking and ingress patterns you can standardize across clusters." }, undefined, false, { fileName: "", lineNumber: 11, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h2, { id: "mental-model-aks-networking-layers", children: "Mental model: AKS networking layers" }, undefined, false, { fileName: "", lineNumber: 13, columnNumber: 1 }, this), "\n", _jsxDEV(_components.ul, { children: ["\n", _jsxDEV(_components.li, { children: [_jsxDEV(_components.strong, { children: "Node network" }, undefined, false, { fileName: "", lineNumber: 15, columnNumber: 3 }, this), ": VM NICs in an Azure VNet subnet"] }, undefined, true, { fileName: "", lineNumber: 15, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: [_jsxDEV(_components.strong, { children: "Pod network" }, undefined, false, { fileName: "", lineNumber: 16, columnNumber: 3 }, this), ": depends on CNI (kubenet vs Azure CNI)"] }, undefined, true, { fileName: "", lineNumber: 16, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: [_jsxDEV(_components.strong, { children: "Service networking" }, undefined, false, { fileName: "", lineNumber: 17, columnNumber: 3 }, this), ": ClusterIP/NodePort/LoadBalancer + kube-proxy"] }, undefined, true, { fileName: "", lineNumber: 17, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: [_jsxDEV(_components.strong, { children: "Ingress" }, undefined, false, { fileName: "", lineNumber: 18, columnNumber: 3 }, this), ": L7 entrypoint routing to services"] }, undefined, true, { fileName: "", lineNumber: 18, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: [_jsxDEV(_components.strong, { children: "Outbound" }, undefined, false, { fileName: "", lineNumber: 19, columnNumber: 3 }, this), ": NAT for egress (load balancer SNAT, NAT Gateway, or user-defined routing)"] }, undefined, true, { fileName: "", lineNumber: 19, columnNumber: 1 }, this), "\n"] }, undefined, true, { fileName: "", lineNumber: 15, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h2, { id: "choose-the-right-cni-kubenet-vs-azure-cni", children: "Choose the right CNI: kubenet vs Azure CNI" }, undefined, false, { fileName: "", lineNumber: 21, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h3, { id: "kubenet-legacysimple", children: "kubenet (legacy/simple)" }, undefined, false, { fileName: "", lineNumber: 23, columnNumber: 1 }, this), "\n", _jsxDEV(_components.ul, { children: ["\n", _jsxDEV(_components.li, { children: "Pods get IPs from a separate range and are NATed behind node IPs" }, undefined, false, { fileName: "", lineNumber: 25, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "Smaller VNet IP consumption" }, undefined, false, { fileName: "", lineNumber: 26, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "Historically simpler for small clusters" }, undefined, false, { fileName: "", lineNumber: 27, columnNumber: 1 }, this), "\n"] }, undefined, true, { fileName: "", lineNumber: 25, columnNumber: 1 }, this), "\n", _jsxDEV(_components.p, { children: "Trade-offs:" }, undefined, false, { fileName: "", lineNumber: 29, columnNumber: 1 }, this), "\n", _jsxDEV(_components.ul, { children: ["\n", _jsxDEV(_components.li, { children: "More moving parts" }, undefined, false, { fileName: "", lineNumber: 31, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "NAT can become a bottleneck" }, undefined, false, { fileName: "", lineNumber: 32, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "Some advanced scenarios are harder" }, undefined, false, { fileName: "", lineNumber: 33, columnNumber: 1 }, this), "\n"] }, undefined, true, { fileName: "", lineNumber: 31, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h3, { id: "azure-cni-recommended-for-most-production", children: "Azure CNI (recommended for most production)" }, undefined, false, { fileName: "", lineNumber: 35, columnNumber: 1 }, this), "\n", _jsxDEV(_components.ul, { children: ["\n", _jsxDEV(_components.li, { children: "Pods get IPs from your VNet subnet (routable in the VNet)" }, undefined, false, { fileName: "", lineNumber: 37, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "Easier integration with Azure networking features" }, undefined, false, { fileName: "", lineNumber: 38, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "Often better for enterprise networking requirements" }, undefined, false, { fileName: "", lineNumber: 39, columnNumber: 1 }, this), "\n"] }, undefined, true, { fileName: "", lineNumber: 37, columnNumber: 1 }, this), "\n", _jsxDEV(_components.p, { children: "Trade-offs:" }, undefined, false, { fileName: "", lineNumber: 41, columnNumber: 1 }, this), "\n", _jsxDEV(_components.ul, { children: ["\n", _jsxDEV(_components.li, { children: [_jsxDEV(_components.strong, { children: "Consumes VNet IPs heavily" }, undefined, false, { fileName: "", lineNumber: 43, columnNumber: 3 }, this), " (planning matters)"] }, undefined, true, { fileName: "", lineNumber: 43, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "Subnet exhaustion is a very real production failure mode" }, undefined, false, { fileName: "", lineNumber: 44, columnNumber: 1 }, this), "\n"] }, undefined, true, { fileName: "", lineNumber: 43, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h2, { id: "ip-planning-the-most-important-design-step", children: "IP planning: the most important design step" }, undefined, false, { fileName: "", lineNumber: 46, columnNumber: 1 }, this), "\n", _jsxDEV(_components.p, { children: "You must plan:" }, undefined, false, { fileName: "", lineNumber: 48, columnNumber: 1 }, this), "\n", _jsxDEV(_components.ul, { children: ["\n", _jsxDEV(_components.li, { children: [_jsxDEV(_components.strong, { children: "Node subnet size" }, undefined, false, { fileName: "", lineNumber: 50, columnNumber: 3 }, this), " (VM NICs)"] }, undefined, true, { fileName: "", lineNumber: 50, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: [_jsxDEV(_components.strong, { children: "Pod IP consumption" }, undefined, false, { fileName: "", lineNumber: 51, columnNumber: 3 }, this), " (Azure CNI)"] }, undefined, true, { fileName: "", lineNumber: 51, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: [_jsxDEV(_components.strong, { children: "Service CIDR" }, undefined, false, { fileName: "", lineNumber: 52, columnNumber: 3 }, this), " (cluster internal services)"] }, undefined, true, { fileName: "", lineNumber: 52, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: [_jsxDEV(_components.strong, { children: "DNS service IP" }, undefined, false, { fileName: "", lineNumber: 53, columnNumber: 3 }, this), " (must be inside service CIDR)"] }, undefined, true, { fileName: "", lineNumber: 53, columnNumber: 1 }, this), "\n"] }, undefined, true, { fileName: "", lineNumber: 50, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h3, { id: "quick-rules-of-thumb", children: "Quick rules of thumb" }, undefined, false, { fileName: "", lineNumber: 55, columnNumber: 1 }, this), "\n", _jsxDEV(_components.ul, { children: ["\n", _jsxDEV(_components.li, { children: ["Plan subnets for ", _jsxDEV(_components.strong, { children: "growth" }, undefined, false, { fileName: "", lineNumber: 57, columnNumber: 20 }, this), ", not current size"] }, undefined, true, { fileName: "", lineNumber: 57, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "For Azure CNI, allocate enough IPs for:" }, undefined, false, { fileName: "", lineNumber: 58, columnNumber: 1 }, this), "\n"] }, undefined, true, { fileName: "", lineNumber: 57, columnNumber: 1 }, this), "\n", _jsxDEV(CH.Code, { codeConfig: chCodeConfig, northPanel: { "tabs": [""], "active": "", "heightRatio": 1 }, files: [{ "name": "", "focus": "", "code": { "lines": [{ "tokens": [{ "content": "(max nodes) * (max pods per node) + operational buffer", "props": {} }] }], "lang": "text" }, "annotations": [] }] }, undefined, false, { fileName: "", lineNumber: 60, columnNumber: 1 }, this), "\n", _jsxDEV(_components.p, { children: "In practice, allocate a subnet much larger than your immediate need." }, undefined, false, { fileName: "", lineNumber: 64, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h2, { id: "outbound-traffic-understand-your-egress-path", children: "Outbound traffic: understand your egress path" }, undefined, false, { fileName: "", lineNumber: 66, columnNumber: 1 }, this), "\n", _jsxDEV(_components.p, { children: "In AKS, outbound behavior depends on how the cluster is set up." }, undefined, false, { fileName: "", lineNumber: 68, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h3, { id: "common-outbound-types", children: "Common outbound types" }, undefined, false, { fileName: "", lineNumber: 70, columnNumber: 1 }, this), "\n", _jsxDEV(_components.ul, { children: ["\n", _jsxDEV(_components.li, { children: [_jsxDEV(_components.strong, { children: "Load balancer SNAT" }, undefined, false, { fileName: "", lineNumber: 72, columnNumber: 3 }, this), " (default in many setups)"] }, undefined, true, { fileName: "", lineNumber: 72, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: [_jsxDEV(_components.strong, { children: "NAT Gateway" }, undefined, false, { fileName: "", lineNumber: 73, columnNumber: 3 }, this), " (highly recommended for production)"] }, undefined, true, { fileName: "", lineNumber: 73, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: [_jsxDEV(_components.strong, { children: "User-defined routing (UDR)" }, undefined, false, { fileName: "", lineNumber: 74, columnNumber: 3 }, this), " via firewall/NVA"] }, undefined, true, { fileName: "", lineNumber: 74, columnNumber: 1 }, this), "\n"] }, undefined, true, { fileName: "", lineNumber: 72, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h3, { id: "why-nat-gateway-is-often-best", children: "Why NAT Gateway is often best" }, undefined, false, { fileName: "", lineNumber: 76, columnNumber: 1 }, this), "\n", _jsxDEV(_components.ul, { children: ["\n", _jsxDEV(_components.li, { children: "Predictable SNAT behavior" }, undefined, false, { fileName: "", lineNumber: 78, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "Scales better than default LB SNAT" }, undefined, false, { fileName: "", lineNumber: 79, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "Stable outbound IPs for allowlists" }, undefined, false, { fileName: "", lineNumber: 80, columnNumber: 1 }, this), "\n"] }, undefined, true, { fileName: "", lineNumber: 78, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h2, { id: "private-aks-clusters", children: "Private AKS clusters" }, undefined, false, { fileName: "", lineNumber: 82, columnNumber: 1 }, this), "\n", _jsxDEV(_components.p, { children: "Private clusters reduce exposure by keeping the API server private." }, undefined, false, { fileName: "", lineNumber: 84, columnNumber: 1 }, this), "\n", _jsxDEV(_components.p, { children: "Operational considerations:" }, undefined, false, { fileName: "", lineNumber: 86, columnNumber: 1 }, this), "\n", _jsxDEV(_components.ul, { children: ["\n", _jsxDEV(_components.li, { children: ["You need ", _jsxDEV(_components.strong, { children: "private DNS" }, undefined, false, { fileName: "", lineNumber: 88, columnNumber: 12 }, this), " to resolve the API server"] }, undefined, true, { fileName: "", lineNumber: 88, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "Your CI/CD and SRE access paths need private connectivity (VPN/ExpressRoute/bastion)" }, undefined, false, { fileName: "", lineNumber: 89, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "Plan for troubleshooting when the API endpoint isn’t reachable from the public internet" }, undefined, false, { fileName: "", lineNumber: 90, columnNumber: 1 }, this), "\n"] }, undefined, true, { fileName: "", lineNumber: 88, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h2, { id: "dns-in-aks-common-pitfalls", children: "DNS in AKS: common pitfalls" }, undefined, false, { fileName: "", lineNumber: 92, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h3, { id: "coredns-basics", children: "CoreDNS basics" }, undefined, false, { fileName: "", lineNumber: 94, columnNumber: 1 }, this), "\n", _jsxDEV(_components.ul, { children: ["\n", _jsxDEV(_components.li, { children: "Pods use the cluster DNS service" }, undefined, false, { fileName: "", lineNumber: 96, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: [_jsxDEV(_components.code, { children: "kube-dns" }, undefined, false, { fileName: "", lineNumber: 97, columnNumber: 3 }, this), " service IP is in the ", _jsxDEV(_components.strong, { children: "service CIDR" }, undefined, false, { fileName: "", lineNumber: 97, columnNumber: 35 }, this)] }, undefined, true, { fileName: "", lineNumber: 97, columnNumber: 1 }, this), "\n"] }, undefined, true, { fileName: "", lineNumber: 96, columnNumber: 1 }, this), "\n", _jsxDEV(_components.p, { children: "Common issues:" }, undefined, false, { fileName: "", lineNumber: 99, columnNumber: 1 }, this), "\n", _jsxDEV(_components.ul, { children: ["\n", _jsxDEV(_components.li, { children: "Upstream DNS timeouts" }, undefined, false, { fileName: "", lineNumber: 101, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "Split-horizon DNS surprises in private clusters" }, undefined, false, { fileName: "", lineNumber: 102, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "Excessive DNS query volume from misbehaving apps" }, undefined, false, { fileName: "", lineNumber: 103, columnNumber: 1 }, this), "\n"] }, undefined, true, { fileName: "", lineNumber: 101, columnNumber: 1 }, this), "\n", _jsxDEV(_components.p, { children: "Signals:" }, undefined, false, { fileName: "", lineNumber: 105, columnNumber: 1 }, this), "\n", _jsxDEV(_components.ul, { children: ["\n", _jsxDEV(_components.li, { children: "Intermittent service discovery failures" }, undefined, false, { fileName: "", lineNumber: 107, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: [_jsxDEV(_components.code, { children: "SERVFAIL" }, undefined, false, { fileName: "", lineNumber: 108, columnNumber: 3 }, this), "/timeout in app logs"] }, undefined, true, { fileName: "", lineNumber: 108, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "CoreDNS pods CPU spikes" }, undefined, false, { fileName: "", lineNumber: 109, columnNumber: 1 }, this), "\n"] }, undefined, true, { fileName: "", lineNumber: 107, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h2, { id: "ingress-options-in-aks", children: "Ingress options in AKS" }, undefined, false, { fileName: "", lineNumber: 111, columnNumber: 1 }, this), "\n", _jsxDEV(_components.p, { children: "You usually pick one of:" }, undefined, false, { fileName: "", lineNumber: 113, columnNumber: 1 }, this), "\n", _jsxDEV(_components.ul, { children: ["\n", _jsxDEV(_components.li, { children: [_jsxDEV(_components.strong, { children: "NGINX Ingress Controller" }, undefined, false, { fileName: "", lineNumber: 115, columnNumber: 3 }, this), " (most common)"] }, undefined, true, { fileName: "", lineNumber: 115, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: _jsxDEV(_components.strong, { children: "Azure Application Gateway Ingress Controller (AGIC)" }, undefined, false, { fileName: "", lineNumber: 116, columnNumber: 3 }, this) }, undefined, false, { fileName: "", lineNumber: 116, columnNumber: 1 }, this), "\n"] }, undefined, true, { fileName: "", lineNumber: 115, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h3, { id: "nginx-ingress-controller", children: "NGINX Ingress Controller" }, undefined, false, { fileName: "", lineNumber: 118, columnNumber: 1 }, this), "\n", _jsxDEV(_components.p, { children: "Pros:" }, undefined, false, { fileName: "", lineNumber: 120, columnNumber: 1 }, this), "\n", _jsxDEV(_components.ul, { children: ["\n", _jsxDEV(_components.li, { children: "Kubernetes-native and portable" }, undefined, false, { fileName: "", lineNumber: 122, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "Mature ecosystem, lots of examples" }, undefined, false, { fileName: "", lineNumber: 123, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "Great for multi-tenant routing patterns" }, undefined, false, { fileName: "", lineNumber: 124, columnNumber: 1 }, this), "\n"] }, undefined, true, { fileName: "", lineNumber: 122, columnNumber: 1 }, this), "\n", _jsxDEV(_components.p, { children: "Cons:" }, undefined, false, { fileName: "", lineNumber: 126, columnNumber: 1 }, this), "\n", _jsxDEV(_components.ul, { children: ["\n", _jsxDEV(_components.li, { children: "You operate it like any controller (upgrades, tuning)" }, undefined, false, { fileName: "", lineNumber: 128, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "Need to handle WAF separately if required" }, undefined, false, { fileName: "", lineNumber: 129, columnNumber: 1 }, this), "\n"] }, undefined, true, { fileName: "", lineNumber: 128, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h3, { id: "agic-application-gateway", children: "AGIC (Application Gateway)" }, undefined, false, { fileName: "", lineNumber: 131, columnNumber: 1 }, this), "\n", _jsxDEV(_components.p, { children: "Pros:" }, undefined, false, { fileName: "", lineNumber: 133, columnNumber: 1 }, this), "\n", _jsxDEV(_components.ul, { children: ["\n", _jsxDEV(_components.li, { children: "Integrates with Application Gateway features" }, undefined, false, { fileName: "", lineNumber: 135, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "Works well with orgs standardizing on App Gateway + WAF" }, undefined, false, { fileName: "", lineNumber: 136, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "Centralized L7 policies" }, undefined, false, { fileName: "", lineNumber: 137, columnNumber: 1 }, this), "\n"] }, undefined, true, { fileName: "", lineNumber: 135, columnNumber: 1 }, this), "\n", _jsxDEV(_components.p, { children: "Cons:" }, undefined, false, { fileName: "", lineNumber: 139, columnNumber: 1 }, this), "\n", _jsxDEV(_components.ul, { children: ["\n", _jsxDEV(_components.li, { children: "More Azure-specific" }, undefined, false, { fileName: "", lineNumber: 141, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "Reconciliation issues can be more opaque" }, undefined, false, { fileName: "", lineNumber: 142, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "Requires careful role and subnet configuration" }, undefined, false, { fileName: "", lineNumber: 143, columnNumber: 1 }, this), "\n"] }, undefined, true, { fileName: "", lineNumber: 141, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h2, { id: "production-pattern-nginx-ingress--cert-manager", children: "Production pattern: NGINX Ingress + cert-manager" }, undefined, false, { fileName: "", lineNumber: 145, columnNumber: 1 }, this), "\n", _jsxDEV(_components.p, { children: "This is a widely used approach for flexible ingress + automated TLS." }, undefined, false, { fileName: "", lineNumber: 147, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h3, { id: "example-nginx-ingress-install-helm", children: "Example: NGINX Ingress install (Helm)" }, undefined, false, { fileName: "", lineNumber: 149, columnNumber: 1 }, this), "\n", _jsxDEV(CH.Code, { codeConfig: chCodeConfig, northPanel: { "tabs": [""], "active": "", "heightRatio": 1 }, files: [{ "name": "", "focus": "", "code": { "lines": [{ "tokens": [{ "content": "helm ", "props": { "style": { "color": "var(--ch-3)" } } }, { "content": "repo add ingress-nginx https://kubernetes.github.io/ingress-nginx", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": "helm ", "props": { "style": { "color": "var(--ch-3)" } } }, { "content": "repo update", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "helm ", "props": { "style": { "color": "var(--ch-3)" } } }, { "content": "upgrade ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "--install ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "ingress-nginx ingress-nginx/ingress-nginx ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "\\", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " --namespace ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "ingress-nginx ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "\\", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " --create-namespace \\", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " --set ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "controller.replicaCount=", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "2 \\", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " --set ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "controller.service.type=LoadBalancer", "props": { "style": { "color": "var(--ch-8)" } } }] }], "lang": "bash" }, "annotations": [] }] }, undefined, false, { fileName: "", lineNumber: 151, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h3, { id: "example-ingress-resource", children: "Example: Ingress resource" }, undefined, false, { fileName: "", lineNumber: 162, columnNumber: 1 }, this), "\n", _jsxDEV(CH.Code, { codeConfig: chCodeConfig, northPanel: { "tabs": [""], "active": "", "heightRatio": 1 }, files: [{ "name": "", "focus": "", "code": { "lines": [{ "tokens": [{ "content": "apiVersion", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "networking.k8s.io/v1", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": "kind", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "Ingress", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": "metadata", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " name", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "app", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " namespace", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "app", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " annotations", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " nginx.ingress.kubernetes.io/proxy-body-size", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\"50m\"", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " nginx.ingress.kubernetes.io/proxy-read-timeout", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "\"60\"", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": "spec", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " ingressClassName", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "nginx", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " tls", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " - ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "hosts", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " - ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "app.example.com", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " secretName", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "app-tls", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " rules", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " - ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "host", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "app.example.com", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " http", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " paths", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " - ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "path", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "/", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " pathType", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "Prefix", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " backend", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " service", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " name", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "app", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " port", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " number", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "80", "props": { "style": { "color": "var(--ch-2)" } } }] }], "lang": "yaml" }, "annotations": [] }] }, undefined, false, { fileName: "", lineNumber: 164, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h2, { id: "production-pattern-agic-high-level-checklist", children: "Production pattern: AGIC (high-level checklist)" }, undefined, false, { fileName: "", lineNumber: 192, columnNumber: 1 }, this), "\n", _jsxDEV(_components.p, { children: "Key items that usually cause incidents:" }, undefined, false, { fileName: "", lineNumber: 194, columnNumber: 1 }, this), "\n", _jsxDEV(_components.ul, { children: ["\n", _jsxDEV(_components.li, { children: "App Gateway subnet is dedicated (don’t mix with nodes)" }, undefined, false, { fileName: "", lineNumber: 196, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "Correct permissions for AGIC identity" }, undefined, false, { fileName: "", lineNumber: 197, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "Correct listeners, backend pools, and health probes" }, undefined, false, { fileName: "", lineNumber: 198, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "Ensure NSGs allow health probe traffic" }, undefined, false, { fileName: "", lineNumber: 199, columnNumber: 1 }, this), "\n"] }, undefined, true, { fileName: "", lineNumber: 196, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h2, { id: "tls-strategy", children: "TLS strategy" }, undefined, false, { fileName: "", lineNumber: 201, columnNumber: 1 }, this), "\n", _jsxDEV(_components.p, { children: "Recommended standard:" }, undefined, false, { fileName: "", lineNumber: 203, columnNumber: 1 }, this), "\n", _jsxDEV(_components.ul, { children: ["\n", _jsxDEV(_components.li, { children: ["Use ", _jsxDEV(_components.code, { children: "cert-manager" }, undefined, false, { fileName: "", lineNumber: 205, columnNumber: 7 }, this), " to automate certificates (ACME/Let’s Encrypt or internal PKI)"] }, undefined, true, { fileName: "", lineNumber: 205, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "Store certs in Kubernetes secrets" }, undefined, false, { fileName: "", lineNumber: 206, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "Enforce TLS 1.2+ and strong ciphers at the ingress layer" }, undefined, false, { fileName: "", lineNumber: 207, columnNumber: 1 }, this), "\n"] }, undefined, true, { fileName: "", lineNumber: 205, columnNumber: 1 }, this), "\n", _jsxDEV(_components.p, { children: "Operational best practices:" }, undefined, false, { fileName: "", lineNumber: 209, columnNumber: 1 }, this), "\n", _jsxDEV(_components.ul, { children: ["\n", _jsxDEV(_components.li, { children: "Alert on certificate expiry" }, undefined, false, { fileName: "", lineNumber: 211, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "Standardize domains and wildcard usage" }, undefined, false, { fileName: "", lineNumber: 212, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "Prefer external-dns to manage DNS records consistently" }, undefined, false, { fileName: "", lineNumber: 213, columnNumber: 1 }, this), "\n"] }, undefined, true, { fileName: "", lineNumber: 211, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h2, { id: "troubleshooting-runbook", children: "Troubleshooting runbook" }, undefined, false, { fileName: "", lineNumber: 215, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h3, { id: "1-debug-ingress-routing", children: "1) Debug ingress routing" }, undefined, false, { fileName: "", lineNumber: 217, columnNumber: 1 }, this), "\n", _jsxDEV(CH.Code, { codeConfig: chCodeConfig, northPanel: { "tabs": [""], "active": "", "heightRatio": 1 }, files: [{ "name": "", "focus": "", "code": { "lines": [{ "tokens": [{ "content": "kubectl ", "props": { "style": { "color": "var(--ch-3)" } } }, { "content": "-n ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "ingress-nginx get pods", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": "kubectl ", "props": { "style": { "color": "var(--ch-3)" } } }, { "content": "-n ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "ingress-nginx logs deploy/ingress-nginx-controller ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "--tail=200", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": "kubectl ", "props": { "style": { "color": "var(--ch-3)" } } }, { "content": "-n ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "app describe ingress app", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": "kubectl ", "props": { "style": { "color": "var(--ch-3)" } } }, { "content": "-n ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "app get endpoints app", "props": { "style": { "color": "var(--ch-8)" } } }] }], "lang": "bash" }, "annotations": [] }] }, undefined, false, { fileName: "", lineNumber: 219, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h3, { id: "2-debug-loadbalancer-provisioning", children: "2) Debug LoadBalancer provisioning" }, undefined, false, { fileName: "", lineNumber: 226, columnNumber: 1 }, this), "\n", _jsxDEV(CH.Code, { codeConfig: chCodeConfig, northPanel: { "tabs": [""], "active": "", "heightRatio": 1 }, files: [{ "name": "", "focus": "", "code": { "lines": [{ "tokens": [{ "content": "kubectl ", "props": { "style": { "color": "var(--ch-3)" } } }, { "content": "-n ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "ingress-nginx get svc", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": "kubectl ", "props": { "style": { "color": "var(--ch-3)" } } }, { "content": "-n ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "ingress-nginx describe svc ingress-nginx-controller", "props": { "style": { "color": "var(--ch-8)" } } }] }], "lang": "bash" }, "annotations": [] }] }, undefined, false, { fileName: "", lineNumber: 228, columnNumber: 1 }, this), "\n", _jsxDEV(_components.p, { children: "Common causes:" }, undefined, false, { fileName: "", lineNumber: 233, columnNumber: 1 }, this), "\n", _jsxDEV(_components.ul, { children: ["\n", _jsxDEV(_components.li, { children: "Subnet/NSG restrictions" }, undefined, false, { fileName: "", lineNumber: 235, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "Quota limits" }, undefined, false, { fileName: "", lineNumber: 236, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "Misconfigured cloud-provider integration" }, undefined, false, { fileName: "", lineNumber: 237, columnNumber: 1 }, this), "\n"] }, undefined, true, { fileName: "", lineNumber: 235, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h3, { id: "3-debug-dns-inside-the-cluster", children: "3) Debug DNS inside the cluster" }, undefined, false, { fileName: "", lineNumber: 239, columnNumber: 1 }, this), "\n", _jsxDEV(CH.Code, { codeConfig: chCodeConfig, northPanel: { "tabs": [""], "active": "", "heightRatio": 1 }, files: [{ "name": "", "focus": "", "code": { "lines": [{ "tokens": [{ "content": "kubectl ", "props": { "style": { "color": "var(--ch-3)" } } }, { "content": "run ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "-it --rm ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "dnsutils ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "\\", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " --image=registry.k8s.io/e2e-test-images/jessie-dnsutils:1.3 \\", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " --restart=Never -- ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "sh", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "nslookup ", "props": { "style": { "color": "var(--ch-3)" } } }, { "content": "kubernetes.default.svc.cluster.local", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": "nslookup ", "props": { "style": { "color": "var(--ch-3)" } } }, { "content": "app.example.com", "props": { "style": { "color": "var(--ch-8)" } } }] }], "lang": "bash" }, "annotations": [] }] }, undefined, false, { fileName: "", lineNumber: 241, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h3, { id: "4-debug-outbound-connectivity", children: "4) Debug outbound connectivity" }, undefined, false, { fileName: "", lineNumber: 250, columnNumber: 1 }, this), "\n", _jsxDEV(CH.Code, { codeConfig: chCodeConfig, northPanel: { "tabs": [""], "active": "", "heightRatio": 1 }, files: [{ "name": "", "focus": "", "code": { "lines": [{ "tokens": [{ "content": "kubectl ", "props": { "style": { "color": "var(--ch-3)" } } }, { "content": "run ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "-it --rm ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "curl ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "\\", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " --image=curlimages/curl:8.5.0 \\", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " --restart=Never -- ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "sh", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": "", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": "curl ", "props": { "style": { "color": "var(--ch-3)" } } }, { "content": "-I ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "https://example.com", "props": { "style": { "color": "var(--ch-8)" } } }] }], "lang": "bash" }, "annotations": [] }] }, undefined, false, { fileName: "", lineNumber: 252, columnNumber: 1 }, this), "\n", _jsxDEV(_components.p, { children: "If egress fails, check:" }, undefined, false, { fileName: "", lineNumber: 260, columnNumber: 1 }, this), "\n", _jsxDEV(_components.ul, { children: ["\n", _jsxDEV(_components.li, { children: "Route tables (UDR)" }, undefined, false, { fileName: "", lineNumber: 262, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "NAT Gateway association" }, undefined, false, { fileName: "", lineNumber: 263, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "Firewall rules" }, undefined, false, { fileName: "", lineNumber: 264, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "Azure policy restrictions" }, undefined, false, { fileName: "", lineNumber: 265, columnNumber: 1 }, this), "\n"] }, undefined, true, { fileName: "", lineNumber: 262, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h2, { id: "guardrails-to-standardize-across-clusters", children: "Guardrails to standardize across clusters" }, undefined, false, { fileName: "", lineNumber: 267, columnNumber: 1 }, this), "\n", _jsxDEV(_components.ul, { children: ["\n", _jsxDEV(_components.li, { children: ["\n", _jsxDEV(_components.p, { children: "Use a platform module to create:" }, undefined, false, { fileName: "", lineNumber: 269, columnNumber: 3 }, this), "\n", _jsxDEV(_components.ul, { children: ["\n", _jsxDEV(_components.li, { children: "VNet + subnets" }, undefined, false, { fileName: "", lineNumber: 271, columnNumber: 3 }, this), "\n", _jsxDEV(_components.li, { children: "NAT Gateway (or firewall) for egress" }, undefined, false, { fileName: "", lineNumber: 272, columnNumber: 3 }, this), "\n", _jsxDEV(_components.li, { children: "Standard node pools" }, undefined, false, { fileName: "", lineNumber: 273, columnNumber: 3 }, this), "\n", _jsxDEV(_components.li, { children: "Standard ingress and TLS automation" }, undefined, false, { fileName: "", lineNumber: 274, columnNumber: 3 }, this), "\n"] }, undefined, true, { fileName: "", lineNumber: 271, columnNumber: 3 }, this), "\n"] }, undefined, true, { fileName: "", lineNumber: 269, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: ["\n", _jsxDEV(_components.p, { children: "Enforce:" }, undefined, false, { fileName: "", lineNumber: 276, columnNumber: 3 }, this), "\n", _jsxDEV(_components.ul, { children: ["\n", _jsxDEV(_components.li, { children: "naming conventions" }, undefined, false, { fileName: "", lineNumber: 278, columnNumber: 3 }, this), "\n", _jsxDEV(_components.li, { children: "tags" }, undefined, false, { fileName: "", lineNumber: 279, columnNumber: 3 }, this), "\n", _jsxDEV(_components.li, { children: "RBAC and workload identity baseline" }, undefined, false, { fileName: "", lineNumber: 280, columnNumber: 3 }, this), "\n", _jsxDEV(_components.li, { children: "network policies where required" }, undefined, false, { fileName: "", lineNumber: 281, columnNumber: 3 }, this), "\n"] }, undefined, true, { fileName: "", lineNumber: 278, columnNumber: 3 }, this), "\n"] }, undefined, true, { fileName: "", lineNumber: 276, columnNumber: 1 }, this), "\n"] }, undefined, true, { fileName: "", lineNumber: 269, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h2, { id: "conclusion", children: "Conclusion" }, undefined, false, { fileName: "", lineNumber: 283, columnNumber: 1 }, this), "\n", _jsxDEV(_components.p, { children: "AKS production networking is mostly about preventing avoidable problems: IP exhaustion, unpredictable outbound SNAT, private DNS drift, and ingress/TLS operational inconsistency. Standardize your CNI choice, size your subnets conservatively, make outbound explicit (NAT Gateway/UDR), and adopt a repeatable ingress + cert automation pattern." }, undefined, false, { fileName: "", lineNumber: 285, columnNumber: 1 }, this)] }, undefined, true, { fileName: "", lineNumber: 1, columnNumber: 1 }, this); } function MDXContent(props = {}) { const {wrapper: MDXLayout} = { ..._provideComponents(), ...props.components }; return MDXLayout ? _jsxDEV(MDXLayout, { ...props, children: _jsxDEV(_createMdxContent, { ...props }, undefined, false, { fileName: "" }, this) }, undefined, false, { fileName: "" }, this) : _createMdxContent(props); } return { default: MDXContent }; function _missingMdxReference(id, component, place) { throw new Error("Expected " + (component ? "component" : "object") + " `" + id + "` to be defined: you likely forgot to import, pass, or provide it." + (place ? "\nIt’s referenced in your code at `" + place + "`" : "")); }