From e43290825954602f353f59829490dfbef4146674 Mon Sep 17 00:00:00 2001 From: Daniel Bosscher Date: Thu, 7 Aug 2025 13:56:50 +0100 Subject: [PATCH] Service Tags Offers service tags as an alternative. The amount of IP ranges added by the script exceed what's allowed in AKS (200). --- docs/pipelines/agents/hosted.md | 15 +++++++++++++-- 1 file changed, 13 insertions(+), 2 deletions(-) diff --git a/docs/pipelines/agents/hosted.md b/docs/pipelines/agents/hosted.md index 67d0819ca5d..d8dc1ff89a7 100644 --- a/docs/pipelines/agents/hosted.md +++ b/docs/pipelines/agents/hosted.md @@ -259,8 +259,19 @@ namespace WeeklyFileIPRanges ``` ### Service tags - -Microsoft-hosted agents can't be listed by service tags. If you're trying to grant hosted agents access to your resources, you'll need to follow the IP range allow listing method. +Where supported, customers can use the AzureCloud [service tag](https://learn.microsoft.com/en-us/azure/virtual-network/service-tags-overview) instead. To limit this to the United States Geography, you would use the following tags: +``` +AzureCloud.centralus +AzureCloud.eastus +AzureCloud.eastus2 +AzureCloud.eastus3 +AzureCloud.northcentralus +AzureCloud.southcentralus +AzureCloud.westcentralus +AzureCloud.westus +AzureCloud.westus2 +AzureCloud.westus3 +``` ## Security