azure-aks-edge-essentials

name	azure-aks-edge-essentials
description	Expert knowledge for Azure Kubernetes Service Edge Essentials development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when managing AKS Edge/Hybrid clusters, Arc connectivity, IoT/OPC/ONVIF workloads, TPM/Key Vault, or SDN VNets, and other Azure Kubernetes Service Edge Essentials related development tasks. Not for Azure Kubernetes Service (AKS) (use azure-kubernetes-service), Azure IoT Edge (use azure-iot-edge), Azure Stack Edge (use azure-stack-edge).
compatibility	Requires network access. Uses mcp_microsoftdocs:microsoft_docs_fetch or fetch_webpage to retrieve documentation.
metadata	{"generated_at":"2026-08-09","generator":"docs2skills/1.0.0"}

Azure Kubernetes Service Edge Essentials Skill

This skill provides expert guidance for Azure Kubernetes Service Edge Essentials. Covers troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., L35-L120), use read_file with the specified lines. For categories with file links (e.g., [security.md](security.md)), use read_file on the linked reference file

IMPORTANT for Agent: If metadata.generated_at is more than 3 months old, suggest the user pull the latest version from the repository. If mcp_microsoftdocs tools are not available, suggest the user install it: Installation Guide

This skill requires network access to fetch documentation content:

• Preferred: Use mcp_microsoftdocs:microsoft_docs_fetch with query string from=learn-agent-skill. Returns Markdown.
• Fallback: Use fetch_webpage with query string from=learn-agent-skill&accept=text/markdown. Returns Markdown.

Category Index

Category	Lines	Description
Troubleshooting	L37-L82	Diagnosing and fixing AKS Edge/Hybrid/Arc cluster issues: creation/upgrade failures, networking, storage, encryption, certificates, logs, VMware/Azure Local errors, and support tools.
Best Practices	L83-L91	Guidance on resilient AKS Edge Essentials setups: availability sets, Azure Policy on Windows Server, restoring AKS Arc after VM failure, and upgrading AKS Arc clusters/Kubernetes versions.
Decision Making	L92-L102	Guidance on AKS Edge/Hybrid pricing, licensing, trials, migration paths (Windows Server, AKS Arc), monitoring/logging choices, and planning cloud vs edge vs on-prem and disconnected deployments.
Architecture & Design Patterns	L103-L109	Designing AKS on Windows Server for Azure Local: high availability on two-node setups, SDN VNet architectures, and deployment patterns for AKS Arc target clusters.
Limits & Quotas	L110-L127	Limits, quotas, and system requirements for AKS Edge/Hybrid variants: scale limits, IP capacity planning, supported versions, resource/VM sizes, and support policies across bare metal, VMware, Azure Local, and Windows Server.
Security	L128-L164	Identity, auth, RBAC, certificates, SSH, key rotation, gMSA, image validation, and other security hardening for AKS Edge/Hybrid/Arc/Azure Local clusters.
Configuration	L165-L257	Configuring AKS Edge/Hybrid/Arc clusters: networking, storage, load balancers, autoscaling, GPU, proxies, Arc connectivity, monitoring/logging, offline/upgrade flows, and PowerShell/CLI settings.
Integrations & Coding Patterns	L258-L311	Integrations, APIs, and PowerShell for connecting AKS Edge/Hybrid to Arc, IoT/OPC/ONVIF, TPM, storage/backup, metrics, AI models, CSI plugins, and Key Vault secrets.
Deployment	L312-L349	Deploying, upgrading, starting/stopping, and removing AKS Edge/AKS hybrid/AKS Arc clusters and nodes, including Windows node pools, offline images, and PowerShell-based lifecycle operations.

Troubleshooting

Topic	URL
Run AKS Arc diagnostic checker for cluster failures	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-arc-diagnostic-checker
Resolve AKS Arc Kubernetes image not ready issues	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-arc-image-not-ready
Work around known AKS Hybrid and Edge issues	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-arc-known-issues
Validate and troubleshoot AKS Edge secret encryption	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-howto-secret-encryption
Collect and use AKS Edge Essentials logs for troubleshooting	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-resources-logs
Troubleshoot common AKS Edge Essentials issues	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-troubleshoot-overview
Collect and analyze kubelet logs on AKS Hybrid nodes	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-get-kubelet-logs
Troubleshoot common issues in AKS Hybrid and Edge	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-troubleshoot
Known issues and workarounds for AKS Hybrid and Edge on VMware	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-vmware-known-issues
Troubleshoot and request support for AKS Hybrid and Edge on VMware	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-vmware-support-troubleshoot
Use troubleshooting guide for AKS Arc on VMware errors	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-vmware-troubleshooting-guide

Best Practices

Topic	URL
Use availability sets to improve AKS workload resilience	https://learn.microsoft.com/en-us/azure/aks/aksarc/availability-sets
Apply Azure policy best practices to AKS on Windows Server	https://learn.microsoft.com/en-us/azure/aks/aksarc/policy-guidance
Restore AKS Arc clusters after management VM failure	https://learn.microsoft.com/en-us/azure/aks/aksarc/restore-aks-cluster
Upgrade AKS Arc workload clusters with PowerShell	https://learn.microsoft.com/en-us/azure/aks/aksarc/upgrade
Upgrade AKS Arc Kubernetes version via Admin Center	https://learn.microsoft.com/en-us/azure/aks/aksarc/upgrade-kubernetes

Decision Making

Topic	URL
Understand AKS Edge Essentials pricing and licensing options	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-pricing
Choose monitoring and logging options for AKS Hybrid	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-monitor-logging
Compare AKS cloud, edge, and on-premises options	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-platforms-compare
Plan migration for AKS Windows Server retirement	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-windows-server-retirement
Plan and manage disconnected AKS on Azure Local	https://learn.microsoft.com/en-us/azure/aks/aksarc/disconnected-operations-aks
Evaluate AKS on Windows Server pricing and trials	https://learn.microsoft.com/en-us/azure/aks/aksarc/pricing
Plan AKS Arc migration from Windows Server 2019 to 2022	https://learn.microsoft.com/en-us/azure/aks/aksarc/windows-server-migration-guide

Architecture & Design Patterns

Topic	URL
Understand AKS on Windows Server availability on two-node Azure Local	https://learn.microsoft.com/en-us/azure/aks/aksarc/deploy-cluster-on-two-node-hci
Deploy AKS Arc target clusters across SDN VNets	https://learn.microsoft.com/en-us/azure/aks/aksarc/deploy-target-clusters-virtual-networks
Architect AKS on Windows Server with SDN virtual networking	https://learn.microsoft.com/en-us/azure/aks/aksarc/software-defined-networking

Limits & Quotas

Topic	URL
Understand preview limitations for AKS on bare metal	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-bare-metal-preview-limitations
Check system requirements for AKS on bare metal	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-bare-metal-system-requirements
Check system requirements for AKS Edge Essentials hosts	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-system-requirements
Plan IP address capacity for AKS Hybrid and Edge	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-hci-ip-address-planning
Understand support policies and limitations for AKS on Azure Local	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-on-azure-local-support-policy
Cluster and node pool scale limits for AKS VMware	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-vmware-scale-requirements
System requirements and support matrix for AKS VMware	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-vmware-system-requirements
Track AKS Hybrid and Edge release changes	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-whats-new-local
Review tested resource limits and VM sizes for AKS on Windows Server	https://learn.microsoft.com/en-us/azure/aks/aksarc/concepts-support
Plan AKS Arc multi-rack IP address capacity	https://learn.microsoft.com/en-us/azure/aks/aksarc/multi-rack/plan-aks-ip-address
Check AKS on Azure Local multi-rack scale limits	https://learn.microsoft.com/en-us/azure/aks/aksarc/multi-rack/scale-requirements

Security

Topic	URL
Configure AD single sign-on to AKS Arc API server	https://learn.microsoft.com/en-us/azure/aks/aksarc/ad-sso
Use Key Manager to rotate AKS Edge service account keys	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-howto-key-manager
Configure workload identity on AKS Edge Essentials	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-workload-identity
Retrieve certificate-based admin kubeconfig for AKS VMware	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-vmware-retrieve-kubeconfig
Set up Azure RBAC authorization for AKS Arc clusters	https://learn.microsoft.com/en-us/azure/aks/aksarc/azure-rbac-aks-hybrid
Use Azure RBAC to control kubeconfig access in AKS Arc	https://learn.microsoft.com/en-us/azure/aks/aksarc/azure-rbac-local
Manage certificates for secure communication in AKS on Windows Server	https://learn.microsoft.com/en-us/azure/aks/aksarc/certificates-overview
Apply security concepts for AKS on Windows Server clusters	https://learn.microsoft.com/en-us/azure/aks/aksarc/concepts-security
Configure SSH key access for AKS Hybrid clusters	https://learn.microsoft.com/en-us/azure/aks/aksarc/configure-ssh-keys
Implement container security in AKS on Windows Server	https://learn.microsoft.com/en-us/azure/aks/aksarc/container-security
Enable Microsoft Entra authentication for AKS Hybrid and Edge	https://learn.microsoft.com/en-us/azure/aks/aksarc/enable-authentication-microsoft-entra-id

Configuration

Topic	URL
Meet system and storage requirements for AKS on Azure Local	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-arc-local-requirements
Configure node taints for AKS Arc clusters	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-arc-use-node-taints
Configure AKS on bare metal cluster via ARM template	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-bare-metal-create-cluster-arm-template
Define AKS on bare metal clusters using Bicep	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-bare-metal-create-cluster-bicep
Configure networking for AKS Edge Essentials clusters	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-concept-networking
Configure AKS Edge Essentials via aksedge-config.json	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-deployment-config-json
Enable GPU acceleration in AKS Edge Essentials	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-gpu
Connect AKS Edge Essentials clusters to Azure Arc	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-howto-connect-to-arc
Expose Kubernetes services on AKS Edge Essentials	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-howto-expose-service
Advanced AKS Edge Essentials configuration and scripts	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-howto-more-configs
Configure multiple NICs for AKS Edge Essentials Linux nodes	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-howto-multi-nic

Integrations & Coding Patterns

Topic	URL
Connect to AKS on bare metal via Arc proxy	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-bare-metal-connect-to-cluster
Create AKS Arc clusters using Hybrid Container Service REST API	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-create-clusters-api
Discover and stream ONVIF cameras with Akri on AKS Edge	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-how-to-akri-onvif
Discover OPC UA servers with Akri on AKS Edge	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-how-to-akri-opc-ua
Access TPM from AKS Edge Essentials Linux VM	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-howto-access-tpm
Deploy Azure IoT Operations on AKS Edge Essentials	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-howto-deploy-azure-iot
Deploy Kubernetes metrics server on AKS Edge Essentials	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-howto-metric-server
Back up AKS Arc clusters to Blob or MinIO with Velero	https://learn.microsoft.com/en-us/azure/aks/aksarc/backup-workload-cluster
Connect AKS on Windows Server clusters to Azure Arc	https://learn.microsoft.com/en-us/azure/aks/aksarc/connect-to-arc
Deploy AI models on AKS Hybrid and Edge with KAITO	https://learn.microsoft.com/en-us/azure/aks/aksarc/deploy-ai-model
Deploy from Azure Container Registry to AKS on Windows Server	https://learn.microsoft.com/en-us/azure/aks/aksarc/deploy-azure-container-registry

Deployment

Topic	URL
Uninstall AKS cluster provisioning preview before AKS Arc upgrade	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-hybrid-preview-uninstall
Install Kubernetes Extension for AKS Operators on VMware	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-vmware-install-kubernetes-extension
Upgrade Kubernetes and OS for AKS Arc clusters	https://learn.microsoft.com/en-us/azure/aks/aksarc/cluster-upgrade
Deploy Windows node pools and apps on AKS Arc	https://learn.microsoft.com/en-us/azure/aks/aksarc/howto-create-windows-node-pools
Upgrade Windows Server versions on AKS Hybrid node pools	https://learn.microsoft.com/en-us/azure/aks/aksarc/howto-upgrade-windows-os
Upgrade AKS on Azure Local multi-rack Kubernetes clusters	https://learn.microsoft.com/en-us/azure/aks/aksarc/multi-rack/cluster-upgrade
Create new AKS Edge deployment with PowerShell	https://learn.microsoft.com/en-us/azure/aks/aksarc/reference/aks-edge-ps/new-aksedgedeployment
Remove AKS Edge deployment from machine	https://learn.microsoft.com/en-us/azure/aks/aksarc/reference/aks-edge-ps/remove-aksedgedeployment
Remove a local AKS Edge node from cluster	https://learn.microsoft.com/en-us/azure/aks/aksarc/reference/aks-edge-ps/remove-aksedgenode
Drain AKS Edge node before removal	https://learn.microsoft.com/en-us/azure/aks/aksarc/reference/aks-edge-ps/set-aksedgenodetodrain
Update AKS Edge control plane nodes	https://learn.microsoft.com/en-us/azure/aks/aksarc/reference/aks-edge-ps/start-aksedgecontrolplaneupdate