Missing information on AKS with no network policy engine

[tnn-simon]

Missing information on AKS with no network policy engine

[TPavanBalaji]

@tnn-simon
Thanks for your feedback! We will investigate and update as appropriate.

[ManoharLakkoju-MSFT]

HI @tnn-simon
The AKS documentation states that if you set the networkProfile.networkPolicy field to none, then no network policy engine is installed in the AKS cluster. This means that you can bring your own network policy engine to the cluster if you choose to do so. However, it is important to note that if you bring your own network policy engine, you will be responsible for managing and maintaining it yourself.

In your case, if you want to replace Calico with Antrea as the network policy engine, you can do so by setting networkProfile.networkPolicy to none and then installing and configuring Antrea in your AKS cluster. You can run Antrea alongside a managed network plugin like Azure CNI, as you mentioned.

It's worth noting that while AKS supports bringing your own network policy engine, Microsoft recommends using the built-in network policy engine for most use cases. This is because the built-in network policy engine is fully supported by Microsoft and is designed to work seamlessly with AKS. If you have any specific questions or concerns about bringing your own network policy engine to AKS, please let me know and I'll do my best to help you out.

[tnn-simon]

Thanks for the quick response, @ManoharLakkoju-MSFT.

... This means that you can bring your own network policy engine to the cluster if you choose to do so. However, it is important to note that if you bring your own network policy engine, you will be responsible for managing and maintaining it yourself.

This was exactly the information I needed from the documentation. I am conducting a proactive risk analysis before switching the network policy engine, and it would be beneficial to have a statement confirming whether AKS will maintain support for this path and its underlying assumptions.

[ManoharLakkoju-MSFT]

@tnn-simon
I'm going to assign this to the document author so they can take a look at it accordingly

@schaffererin
Can you please check and add your comments on this doc update request as applicable.