<p>I have a trouble with enabling <code>--api-server-authorized-ip-ranges</code> feature, let me describe my case:</p>

<ol>
<li>I have AKS without enabled feature, but want to add it using this command:</li>
</ol>

<pre><code>az aks update --resource-group test-aks-service-rg -n test-aksCluster --api-server-authorized-ip-ranges 1.2.3.4/32
</code></pre>

<p>I got a result that ip address has been successfully added as allowed for API.</p>

<ol start="2">
<li>Then, I'm trying to get logs of the pods, but I'm getting timeout issue:</li>
</ol>

<pre><code>Error from server ... dail tcp ... i/o timeout.
</code></pre>

<p>What is wrong with my configuration? How to properly add auth ip ranges?</p>

<p><strong>Note:</strong> I verified that my ip outbound address is 1.2.3.4</p>

Darii Nurgaleev
<p>It was my fault, I have missed important thing in Microsoft documentation. An answer is here:</p>

<p><a href="https://learn.microsoft.com/bs-cyrl-ba/azure/aks/api-server-authorized-ip-ranges" rel="nofollow noreferrer">https://learn.microsoft.com/bs-cyrl-ba/azure/aks/api-server-authorized-ip-ranges</a></p>

<p>I forgot to add firewall public ip addresses into auth ip ranges list.</p>

<p>The following addresses must be in the list, to get it work:</p>

<ul>
<li>The firewall public IP address</li>
<li>Any range that represents networks that you'll administer the cluster from</li>
<li>If you are using Azure Dev Spaces on your AKS cluster, you have to allow additional ranges based on your region.</li>
</ul>
