Status: IN
Custom VNet NSGs for AKS must allow TCP 443/4443 from cluster subnet to API server subnet, and TCP 9988 from Azure Load Balancer to API server subnet.
Source: entries/2026/03/11/aks-networking.md
JSON