PCC self-hosted on Azure Kubernetes Service, sits behind an App Gateway that serves as a proxy/ingress/firewall
Attempting to deploy defenders to VMs that sit outside the App Gateway - connectivity fails through the ingress to the Console regardless of configuration of Defender, Ingress, or Console. Even traffic that we allow through the ingress fails to reach the console on 8084
Attempting to deploy supervisor consoles- connectivity fails because the master console requires a URL with a port appended to it (why?) - this fails to connect through an ingress that listens on 80/443 as well because of the 8083 port requirement on the URL
As it sits, the only resources that can connect to the master console are other resources behind the app gateway on the same AKS Cluster
... View more