Azure private link to AKS with private endpoint to another AKS cluster

Question

I have a situation where my AKS cluster is already in place, two AKS clusters are there & they are internally available within their security zones only. I don't want to go via internet to access the internal resources within the cluster from another cluster.

I was exploring private link service & endpoint, any suggestions?

Both clusters are in different VNets.

Answer 1

I have achieved this by creating private link service on load balancer where my internal ingress (private subnet) is connected in destination cluster. This will require resource ID & load balancer details.

Then created a private endpoint to the private link service in my source cluster that will require subnetId, Resource Group.

The IP created via private link endpoint can be used to communicate to internal LB & also created a DNS entry for it to be used as host in ingress object.