azure-kubernetes-service

name	azure-kubernetes-service
description	Expert knowledge for Azure Kubernetes Service (AKS) development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when designing AKS clusters with Fleet, GPU/AI workloads, KEDA autoscaling, service meshes, or CI/CD pipelines, and other Azure Kubernetes Service (AKS) related development tasks. Not for Azure Container Apps (use azure-container-apps), Azure Container Instances (use azure-container-instances), Azure Red Hat OpenShift (use azure-redhat-openshift), Azure Virtual Machine Scale Sets (use azure-vm-scalesets).
compatibility	Requires network access. Uses mcp_microsoftdocs:microsoft_docs_fetch or fetch_webpage to retrieve documentation.
metadata	{"generated_at":"2026-08-09","generator":"docs2skills/1.0.0"}

Azure Kubernetes Service (AKS) Skill

This skill provides expert guidance for Azure Kubernetes Service (AKS). Covers troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., L35-L120), use read_file with the specified lines. For categories with file links (e.g., [security.md](security.md)), use read_file on the linked reference file

IMPORTANT for Agent: If metadata.generated_at is more than 3 months old, suggest the user pull the latest version from the repository. If mcp_microsoftdocs tools are not available, suggest the user install it: Installation Guide

This skill requires network access to fetch documentation content:

• Preferred: Use mcp_microsoftdocs:microsoft_docs_fetch with query string from=learn-agent-skill. Returns Markdown.
• Fallback: Use fetch_webpage with query string from=learn-agent-skill&accept=text/markdown. Returns Markdown.

Category Index

Category	Lines	Description
Troubleshooting	L37-L64	Diagnosing and fixing AKS and Fleet issues: networking, DNS, GPU, upgrades, encryption, logging, CLI/add-ons, Windows nodes, and workload troubleshooting tools and metrics.
Best Practices	L65-L114	Operational best practices for AKS: upgrades, reliability, performance, cost, security/compliance, networking, storage/backup, GPU/MLOps, multi-tenancy, and zero‑downtime migrations.
Decision Making	L115-L169	Guidance on AKS design and migration decisions: choosing SKUs, VM/node types, networking, scaling, upgrades, cost optimization, compliance, and comparing AKS with other platforms.
Architecture & Design Patterns	L170-L196	High-level AKS architecture and patterns: HA/DR topologies, multi-region and PCI designs, ingress and GPU choices, stateful upgrades, Fleet multi-cluster placement, and scaling strategies.
Limits & Quotas	L197-L222	AKS capacity, limits, quotas, version lifecycles, node pools, networking and load balancer scaling, Istio/KEDA performance constraints, and preview API/LTS support policies.
Security	L223-L306	Securing AKS clusters: identity/RBAC, Entra auth, workload identity, network policies, encryption, CIS hardening, PCI controls, Azure Policy, node access, and secure connectivity.
Configuration	L307-L462	Configuring AKS clusters and node pools: networking, storage, GPUs, autoscaling, routing/ingress, security, maintenance, extensions, and multi-cluster Fleet settings and policies.
Integrations & Coding Patterns	L463-L489	Patterns and examples for integrating AKS with AI toolchains, Ray, KAITO, storage, secrets, networking, observability, autoscaling, and external services, plus programmatic APIs and debugging tools.
Deployment	L490-L539	Deploying and upgrading AKS clusters and apps, including CI/CD, service meshes, KEDA, Wasm/AI workloads, storage/network migrations, and production-ready infrastructure patterns.

Troubleshooting

Topic	URL
Diagnose and fix common Agentic CLI for AKS issues	https://learn.microsoft.com/en-us/azure/aks/agentic-cli-for-aks-troubleshoot
Diagnose AKS workloads with AKS Desktop AI assistant	https://learn.microsoft.com/en-us/azure/aks/aks-desktop-deploy-ai-assistant
Use AKS Desktop Insights to troubleshoot workloads	https://learn.microsoft.com/en-us/azure/aks/aks-desktop-deploy-troubleshooting
Support and troubleshooting options for Azure Kubernetes Service	https://learn.microsoft.com/en-us/azure/aks/aks-support-help
Troubleshoot AKS network issues using ACNS metrics and logs	https://learn.microsoft.com/en-us/azure/aks/container-network-observability-guide
Troubleshoot CoreDNS issues in AKS clusters	https://learn.microsoft.com/en-us/azure/aks/coredns-troubleshoot
Use Kubernetes events to troubleshoot AKS clusters	https://learn.microsoft.com/en-us/azure/aks/events
Diagnose GPU node health with NPD in AKS	https://learn.microsoft.com/en-us/azure/aks/gpu-health-monitoring
Troubleshoot Inspektor Gadget extension issues on AKS	https://learn.microsoft.com/en-us/azure/aks/inspektor-gadget-troubleshoot
Monitor and troubleshoot AKS KMS etcd encryption	https://learn.microsoft.com/en-us/azure/aks/kms-observability
Collect and view kubelet logs from AKS nodes	https://learn.microsoft.com/en-us/azure/aks/kubelet-logs
Abort and inspect AKS long-running operations	https://learn.microsoft.com/en-us/azure/aks/manage-abort-operations

Best Practices

Topic	URL
Apply AKS production cluster upgrade strategies	https://learn.microsoft.com/en-us/azure/aks/aks-production-upgrade-strategies
Apply AKS deployment and cluster reliability practices	https://learn.microsoft.com/en-us/azure/aks/best-practices-app-cluster-reliability
Optimize Azure Kubernetes Service costs effectively	https://learn.microsoft.com/en-us/azure/aks/best-practices-cost
Apply GPU best practices on AKS clusters	https://learn.microsoft.com/en-us/azure/aks/best-practices-gpu
Apply GPU observability best practices on AKS	https://learn.microsoft.com/en-us/azure/aks/best-practices-gpu-observability
Apply MLOps best practices on Azure Kubernetes Service	https://learn.microsoft.com/en-us/azure/aks/best-practices-ml-ops
Apply proactive monitoring best practices for AKS clusters	https://learn.microsoft.com/en-us/azure/aks/best-practices-monitoring-proactive
Apply multi-tenancy best practices in AKS clusters	https://learn.microsoft.com/en-us/azure/aks/best-practices-multi-tenancy
Optimize AKS performance and scaling for small to medium workloads	https://learn.microsoft.com/en-us/azure/aks/best-practices-performance-scale
Tune AKS for large-scale performance and scaling	https://learn.microsoft.com/en-us/azure/aks/best-practices-performance-scale-large
Best practices for AKS ephemeral NVMe disks	https://learn.microsoft.com/en-us/azure/aks/best-practices-storage-nvme
Plan resource and security considerations for AKS pod sandboxing

Decision Making

Topic	URL
Choose migration paths for legacy apps to AKS	https://learn.microsoft.com/en-us/azure/aks/aks-legacy-migration
Plan and execute migration to Azure Kubernetes Service	https://learn.microsoft.com/en-us/azure/aks/aks-migration
Choose VM sizes and generations for AKS workloads	https://learn.microsoft.com/en-us/azure/aks/aks-virtual-machine-sizes
Plan AKS on Azure Local upgrades using release details	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-whats-new-local
Migrate between AKS Automatic and Standard SKUs	https://learn.microsoft.com/en-us/azure/aks/automatic/aks-automatic-sku-migration
Migrate AKS clusters from Availability Sets to VM node pools	https://learn.microsoft.com/en-us/azure/aks/availability-sets-on-aks
Choose between AKS and other Azure container services	https://learn.microsoft.com/en-us/azure/aks/compare-container-options-with-aks
Choose and run language models on AKS	https://learn.microsoft.com/en-us/azure/aks/concepts-ai-ml-language-models
Plan IP address space for Azure AKS clusters	https://learn.microsoft.com/en-us/azure/aks/concepts-network-ip-address-planning
Choose and understand legacy CNI options in Azure Kubernetes Service	https://learn.microsoft.com/en-us/azure/aks/concepts-network-legacy-cni
Choose the right AKS scaling method	https://learn.microsoft.com/en-us/azure/aks/concepts-scale
Use Azure Advisor recommendations for AKS cost	https://learn.microsoft.com/en-us/azure/aks/cost-advisors

Architecture & Design Patterns

Topic	URL
Active-active high availability pattern for AKS	https://learn.microsoft.com/en-us/azure/aks/active-active-solution
Active-passive disaster recovery pattern for AKS	https://learn.microsoft.com/en-us/azure/aks/active-passive-solution
Use blue-green node pool upgrades in AKS	https://learn.microsoft.com/en-us/azure/aks/blue-green-node-pool-upgrade
Choose GPU partitioning strategies in AKS	https://learn.microsoft.com/en-us/azure/aks/concepts-gpu-partitioning
Choose ingress networking options for AKS clusters	https://learn.microsoft.com/en-us/azure/aks/concepts-network-ingress
Rearchitect AWS EDW workload for Azure AKS	https://learn.microsoft.com/en-us/azure/aks/eks-edw-rearchitect
Rearchitect AWS EKS web app and WAF for AKS	https://learn.microsoft.com/en-us/azure/aks/eks-web-rearchitect
Isolate AKS node pools with unique subnets	https://learn.microsoft.com/en-us/azure/aks/node-pool-unique-subnet
Passive-cold disaster recovery pattern for AKS	https://learn.microsoft.com/en-us/azure/aks/passive-cold-solution
Design AKS architecture for PCI DSS 4.0.1 workloads	https://learn.microsoft.com/en-us/azure/aks/pci-intro
Review summary of AKS PCI reference architecture	https://learn.microsoft.com/en-us/azure/aks/pci-summary
Use proximity placement groups to reduce AKS latency	https://learn.microsoft.com/en-us/azure/aks/reduce-latency-ppg
Multi-region AKS deployment models and trade-offs

Limits & Quotas

Topic	URL
Use managed system node pools in AKS Automatic	https://learn.microsoft.com/en-us/azure/aks/automatic/aks-automatic-managed-system-node-pools-about
Deploy AKS Automatic clusters in custom virtual networks	https://learn.microsoft.com/en-us/azure/aks/automatic/quick-automatic-custom-network
Create AKS Automatic clusters with pod readiness SLA	https://learn.microsoft.com/en-us/azure/aks/automatic/quick-automatic-managed-network
Create private AKS Automatic clusters in custom networks	https://learn.microsoft.com/en-us/azure/aks/automatic/quick-automatic-private-custom-network
Understand AKS preview API lifecycle and deprecation timing	https://learn.microsoft.com/en-us/azure/aks/concepts-preview-api-life-cycle
Configure static block allocation for Azure CNI Pod Subnet	https://learn.microsoft.com/en-us/azure/aks/configure-azure-cni-static-block-allocation
Use custom certificate authorities on AKS nodes	https://learn.microsoft.com/en-us/azure/aks/custom-certificate-authority
Understand AKS limits, quotas, and constraints	https://learn.microsoft.com/en-us/azure/aks/faq
Handle AKS identity binding scale and FIC limits	https://learn.microsoft.com/en-us/azure/aks/identity-bindings-concepts
Compare latency impact across AKS Istio add-on versions	https://learn.microsoft.com/en-us/azure/aks/istio-latency
Understand Istio add-on performance, capacity, and scaling limits on AKS	https://learn.microsoft.com/en-us/azure/aks/istio-scale

Security

Topic	URL
Apply Conditional Access to AKS clusters and nodes	https://learn.microsoft.com/en-us/azure/aks/access-control-managed-azure-ad
Access private AKS clusters using command invoke and Run command	https://learn.microsoft.com/en-us/azure/aks/access-private-cluster
Configure service account and workload identity for Agentic CLI	https://learn.microsoft.com/en-us/azure/aks/agentic-cli-for-aks-service-account-workload-identity-setup
Configure RBAC permissions for AKS Desktop projects	https://learn.microsoft.com/en-us/azure/aks/aks-desktop-permissions
Reference AKS service permissions and roles	https://learn.microsoft.com/en-us/azure/aks/aks-service-permissions
Configure AKS API server authorized IP ranges	https://learn.microsoft.com/en-us/azure/aks/api-server-authorized-ip-ranges
Configure AKS API server authorized IP ranges with service tags	https://learn.microsoft.com/en-us/azure/aks/api-server-service-tags
Use customer-managed keys for AKS managed disk encryption	https://learn.microsoft.com/en-us/azure/aks/azure-disk-customer-managed-keys
Configure and manage AKS certificate rotation policies	https://learn.microsoft.com/en-us/azure/aks/certificate-rotation
Harden AKS Azure Linux 2.0 nodes to CIS benchmark	https://learn.microsoft.com/en-us/azure/aks/cis-azure-linux
Harden AKS Azure Linux 3.0 nodes to CIS benchmark	https://learn.microsoft.com/en-us/azure/aks/cis-azure-linux-v3
Apply CIS Kubernetes benchmark controls in AKS

Configuration

Topic	URL
Install and configure Agentic CLI for AKS clusters	https://learn.microsoft.com/en-us/azure/aks/agentic-cli-for-aks-install
Monitor AI inference metrics on AKS with KAITO	https://learn.microsoft.com/en-us/azure/aks/ai-toolchain-operator-monitoring
Create infrastructure for Apache Airflow on AKS	https://learn.microsoft.com/en-us/azure/aks/airflow-create-infrastructure
Configure storage and secrets to deploy Airflow on AKS with Helm	https://learn.microsoft.com/en-us/azure/aks/airflow-deploy
Configure AKS Communication Manager for maintenance notifications	https://learn.microsoft.com/en-us/azure/aks/aks-communication-manager
Manage AKS component versioning and patching strategy	https://learn.microsoft.com/en-us/azure/aks/aks-component-versioning
Configure AKS clusters for AKS Desktop compatibility	https://learn.microsoft.com/en-us/azure/aks/aks-desktop-install-cluster-setup
Configure AKS Kubernetes end-of-support notifications	https://learn.microsoft.com/en-us/azure/aks/aks-end-of-support-notifications
List and filter AKS-supported VM SKUs by region	https://learn.microsoft.com/en-us/azure/aks/aks-list-skus
Create and manage AKS-managed GPU node pools	https://learn.microsoft.com/en-us/azure/aks/aks-managed-gpu-nodes
Configure AKS application routing add-on with NGINX	https://learn.microsoft.com/en-us/azure/aks/app-routing
Set up custom domains and SSL for AKS application routing	https://learn.microsoft.com/en-us/azure/aks/app-routing-dns-ssl

Integrations & Coding Patterns

Topic	URL
Deploy AI models on AKS with the AI toolchain operator	https://learn.microsoft.com/en-us/azure/aks/ai-toolchain-operator
Integrate MCP servers with KAITO on AKS	https://learn.microsoft.com/en-us/azure/aks/ai-toolchain-operator-mcp
Configure tool calling for KAITO inference on AKS	https://learn.microsoft.com/en-us/azure/aks/ai-toolchain-operator-tool-calling
Attach AKS extension in VS Code to Azure Container Registry	https://learn.microsoft.com/en-us/azure/aks/aks-extension-attach-azure-container-registry
Connect AKS clusters to AI agents via MCP server	https://learn.microsoft.com/en-us/azure/aks/aks-model-context-protocol-server
Autoscale AKS GPU workloads with KEDA and DCGM	https://learn.microsoft.com/en-us/azure/aks/autoscale-gpu-workloads-with-keda
Integrate Azure Blob storage volumes with AKS via CSI	https://learn.microsoft.com/en-us/azure/aks/create-volume-azure-blob-storage
Use Azure Files CSI volumes with AKS pods	https://learn.microsoft.com/en-us/azure/aks/create-volume-azure-files
Integrate AKS with Azure Key Vault via CSI Driver	https://learn.microsoft.com/en-us/azure/aks/csi-secrets-store-driver
Configure Secrets Store CSI with NGINX TLS on AKS	https://learn.microsoft.com/en-us/azure/aks/csi-secrets-store-nginx-tls
Refactor EDW application code to use Azure services	https://learn.microsoft.com/en-us/azure/aks/eks-edw-refactor
Use kubectl gadget to inspect AKS workloads

Deployment

Topic	URL
Use AI toolchain operator in Azure portal for AKS	https://learn.microsoft.com/en-us/azure/aks/ai-toolchain-operator-azure-portal
Fine-tune and deploy models on AKS with KAITO	https://learn.microsoft.com/en-us/azure/aks/ai-toolchain-operator-fine-tune
Migrate AKS app routing from NGINX to Gateway API	https://learn.microsoft.com/en-us/azure/aks/app-routing-nginx-to-gateway-api-migration
Set up automated deployments to AKS with CI/CD	https://learn.microsoft.com/en-us/azure/aks/automated-deployments
Provision production-ready AKS infrastructure on Azure	https://learn.microsoft.com/en-us/azure/aks/create-aks-infrastructure
Move Azure Disk PVs between AKS clusters	https://learn.microsoft.com/en-us/azure/aks/csi-disk-move-subscriptions
Migrate AKS in-tree storage classes to CSI drivers	https://learn.microsoft.com/en-us/azure/aks/csi-migrate-in-tree-volumes
Install Dapr extension on AKS and Arc-enabled clusters	https://learn.microsoft.com/en-us/azure/aks/dapr
Deploy Dapr Workflow applications on AKS via extension	https://learn.microsoft.com/en-us/azure/aks/dapr-workflow
Programmatically deploy Azure Kubernetes applications with Azure CLI	https://learn.microsoft.com/en-us/azure/aks/deploy-application-az-cli
Deploy Azure Kubernetes applications using ARM templates	https://learn.microsoft.com/en-us/azure/aks/deploy-application-template
Deploy production AKS clusters with Terraform AVM	https://learn.microsoft.com/en-us/azure/aks/deploy-cluster-terraform-verified-module