azure-aks-edge-essentials

name	azure-aks-edge-essentials
description	Expert knowledge for Azure Kubernetes Service Edge Essentials development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when managing AKS Edge/Arc clusters, Arc connectivity, IoT/OPC/ONVIF edge workloads, TPM/Key Vault, or AI model deploys, and other Azure Kubernetes Service Edge Essentials related development tasks. Not for Azure Kubernetes Service (AKS) (use azure-kubernetes-service), Azure IoT Edge (use azure-iot-edge), Azure Stack Edge (use azure-stack-edge), Azure Container Apps (use azure-container-apps).
compatibility	Requires network access. Uses mcp_microsoftdocs:microsoft_docs_fetch or fetch_webpage to retrieve documentation.
metadata	{"generated_at":"2026-04-19","generator":"docs2skills/1.0.0"}

Azure Kubernetes Service Edge Essentials Skill

This skill provides expert guidance for Azure Kubernetes Service Edge Essentials. Covers troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., L35-L120), use read_file with the specified lines. For categories with file links (e.g., [security.md](security.md)), use read_file on the linked reference file

IMPORTANT for Agent: If metadata.generated_at is more than 3 months old, suggest the user pull the latest version from the repository. If mcp_microsoftdocs tools are not available, suggest the user install it: Installation Guide

This skill requires network access to fetch documentation content:

• Preferred: Use mcp_microsoftdocs:microsoft_docs_fetch with query string from=learn-agent-skill. Returns Markdown.
• Fallback: Use fetch_webpage with query string from=learn-agent-skill&accept=text/markdown. Returns Markdown.

Category Index

Category	Lines	Description
Troubleshooting	L37-L86	Diagnosing and fixing AKS Edge/Arc cluster issues: installs, upgrades, networking, storage, security, logs, certificates, known issues, and using tools/PowerShell for deep troubleshooting.
Best Practices	L87-L94	Best practices for AKS Edge/Arc: applying Azure Policy, recovering clusters after management VM loss, and safely upgrading Kubernetes/workload clusters via PowerShell or Admin Center
Decision Making	L95-L107	Guidance on choosing AKS Edge/Arc vs cloud/on-prem, supported versions/add-ons, monitoring, pricing/licensing, support, and planning migrations or retirement of older AKS/Windows Server setups
Architecture & Design Patterns	L108-L114	Designing AKS on Windows Server for Azure Local: high availability on two-node setups, SDN VNet architectures, and deployment patterns for AKS Arc target clusters.
Limits & Quotas	L115-L126	Hardware, storage, IP, and VM requirements plus scale limits, quotas, and support policies for AKS Edge/Arc and AKS on Azure Local across Windows, VMware, and release versions
Security	L127-L160	Securing AKS Edge/Arc/hybrid clusters: auth (Entra ID, AD, gMSA, workload identity), RBAC, SSH hardening, cert and key management, and encrypting/securing secrets and container workloads.
Configuration	L161-L240	Configuring AKS Edge/Arc/hybrid clusters: networking, storage, load balancers, autoscaling, Arc connectivity, Windows/Linux node settings, monitoring, upgrades, and offline/host setup.
Integrations & Coding Patterns	L241-L299	Integrating AKS Edge/Arc/hybrid with Azure and on-prem services: REST/CLI/PowerShell management, storage/backup, CSI, networking, IoT/OPC/ONVIF, TPM, AI model deploy, and Key Vault secrets.
Deployment	L300-L335	Deploying, upgrading, and managing AKS Edge/AKS hybrid/AKS Arc clusters and node pools (Linux/Windows/GPU), including installs, updates, removals, offline/disconnected ops, and system requirements

Troubleshooting

Topic	URL
Run AKS Arc diagnostic checker for cluster failures	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-arc-diagnostic-checker
Resolve known issues in AKS enabled by Azure Arc	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-arc-known-issues
Collect and use AKS Edge Essentials logs for troubleshooting	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-resources-logs
Troubleshoot common AKS Edge Essentials issues	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-troubleshoot-overview
Retrieve kubelet logs from AKS Arc nodes	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-get-kubelet-logs
Troubleshoot common Kubernetes issues in AKS Arc	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-troubleshoot
Review known issues and workarounds for AKS Arc on VMware	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-vmware-known-issues
Request support and troubleshoot AKS Arc on VMware	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-vmware-support-troubleshoot
Use troubleshooting guide for AKS Arc on VMware errors	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-vmware-troubleshooting-guide
Resolve AKS Arc cluster creation failures after Azure Local upgrade	https://learn.microsoft.com/en-us/azure/aks/aksarc/cluster-create-fails-after-azure-local-upgrade
Fix K8sVersionValidation errors in AKS Arc	https://learn.microsoft.com/en-us/azure/aks/aksarc/cluster-k8s-version

Best Practices

Topic	URL
Apply Azure policy best practices to AKS on Windows Server	https://learn.microsoft.com/en-us/azure/aks/aksarc/policy-guidance
Restore AKS Arc clusters after management VM failure	https://learn.microsoft.com/en-us/azure/aks/aksarc/restore-aks-cluster
Upgrade AKS Arc workload clusters with PowerShell	https://learn.microsoft.com/en-us/azure/aks/aksarc/upgrade
Upgrade AKS Arc Kubernetes version via Admin Center	https://learn.microsoft.com/en-us/azure/aks/aksarc/upgrade-kubernetes

Decision Making

Topic	URL
Choose supported add-ons and extensions for AKS Arc	https://learn.microsoft.com/en-us/azure/aks/aksarc/add-ons
Understand AKS Edge Essentials pricing and licensing options	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-pricing
Choose monitoring and logging options for AKS Arc	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-monitor-logging
Choose between AKS cloud, edge, and on-premises	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-platforms-compare
Plan for AKS on Windows Server architecture retirement	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-windows-server-retirement
Evaluate AKS on Windows Server pricing and trials	https://learn.microsoft.com/en-us/azure/aks/aksarc/pricing
Understand AKS on Windows Server support and responsibility	https://learn.microsoft.com/en-us/azure/aks/aksarc/support-policies
Select supported Kubernetes versions for AKS Arc	https://learn.microsoft.com/en-us/azure/aks/aksarc/supported-kubernetes-versions
Plan migration from AKS Arc 2019 to 2022	https://learn.microsoft.com/en-us/azure/aks/aksarc/windows-server-migration-guide

Architecture & Design Patterns

Topic	URL
Understand AKS on Windows Server availability on two-node Azure Local	https://learn.microsoft.com/en-us/azure/aks/aksarc/deploy-cluster-on-two-node-hci
Deploy AKS Arc target clusters across SDN VNets	https://learn.microsoft.com/en-us/azure/aks/aksarc/deploy-target-clusters-virtual-networks
Architect AKS on Windows Server with SDN virtual networking	https://learn.microsoft.com/en-us/azure/aks/aksarc/software-defined-networking

Limits & Quotas

Topic	URL
System and storage requirements for AKS on Azure Local	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-arc-local-requirements
Check AKS Edge Essentials host system requirements	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-system-requirements
Plan IP address capacity for AKS Arc production	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-hci-ip-address-planning
Support policies and limitations for AKS on Azure Local	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-on-azure-local-support-policy
Review AKS Arc on VMware cluster scale limits	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-vmware-scale-requirements
Track AKS Arc on Azure Local release changes	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-whats-new-local
Review tested resource limits and VM sizes for AKS on Windows Server	https://learn.microsoft.com/en-us/azure/aks/aksarc/concepts-support
AKS on Azure Local cluster and node pool scale limits	https://learn.microsoft.com/en-us/azure/aks/aksarc/scale-requirements

Security

Topic	URL
Configure AD single sign-on to AKS Arc API server	https://learn.microsoft.com/en-us/azure/aks/aksarc/ad-sso
Use Key Manager to rotate AKS Edge service account keys	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-howto-key-manager
Configure KMS-based secret encryption for AKS Edge Essentials	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-howto-secret-encryption
Configure workload identity on AKS Edge Essentials	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-workload-identity
Set up Azure RBAC authorization for AKS Arc clusters	https://learn.microsoft.com/en-us/azure/aks/aksarc/azure-rbac-aks-hybrid
Use Azure RBAC to control kubeconfig access in AKS Arc	https://learn.microsoft.com/en-us/azure/aks/aksarc/azure-rbac-local
Manage certificates for secure communication in AKS on Windows Server	https://learn.microsoft.com/en-us/azure/aks/aksarc/certificates-overview
Apply security concepts for AKS on Windows Server clusters	https://learn.microsoft.com/en-us/azure/aks/aksarc/concepts-security
Configure SSH keys for AKS Arc cluster nodes	https://learn.microsoft.com/en-us/azure/aks/aksarc/configure-ssh-keys
Implement container security in AKS on Windows Server	https://learn.microsoft.com/en-us/azure/aks/aksarc/container-security
Enable Microsoft Entra authentication for AKS Arc clusters	https://learn.microsoft.com/en-us/azure/aks/aksarc/enable-authentication-microsoft-entra-id

Configuration

Topic	URL
Configure scheduling for mixed Linux/Windows AKS Arc clusters	https://learn.microsoft.com/en-us/azure/aks/aksarc/adapt-apps-mixed-os-clusters
Configure node taints for AKS Arc clusters	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-arc-use-node-taints
Configure networking for AKS Edge Essentials clusters	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-concept-networking
Configure AKS Edge Essentials via aksedge-config.json	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-deployment-config-json
Enable GPU acceleration in AKS Edge Essentials	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-gpu
Connect AKS Edge Essentials clusters to Azure Arc	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-howto-connect-to-arc
Expose Kubernetes services on AKS Edge Essentials	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-howto-expose-service
Advanced AKS Edge Essentials configuration and scripts	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-howto-more-configs
Configure multiple NICs for AKS Edge Essentials Linux nodes	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-howto-multi-nic
Configure AKS Edge Essentials for offline installation	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-howto-offline-install
Prepare Windows host machines for AKS Edge Essentials	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-howto-setup-machine

Integrations & Coding Patterns

Topic	URL
Create AKS Arc clusters using Hybrid Container Service REST API	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-create-clusters-api
Discover and stream ONVIF cameras with Akri on AKS Edge	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-how-to-akri-onvif
Discover OPC UA servers with Akri on AKS Edge	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-how-to-akri-opc-ua
Access TPM from AKS Edge Essentials Linux VM	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-howto-access-tpm
Deploy Azure IoT Operations on AKS Edge Essentials	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-howto-deploy-azure-iot
Deploy Kubernetes metrics server on AKS Edge Essentials	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-howto-metric-server
Use az aksarc CLI commands for AKS Arc management	https://learn.microsoft.com/en-us/azure/aks/aksarc/aksarc
Back up AKS Arc clusters to Blob or MinIO with Velero	https://learn.microsoft.com/en-us/azure/aks/aksarc/backup-workload-cluster
Connect AKS on Windows Server clusters to Azure Arc	https://learn.microsoft.com/en-us/azure/aks/aksarc/connect-to-arc
Deploy AI models on AKS Arc with KAITO operator	https://learn.microsoft.com/en-us/azure/aks/aksarc/deploy-ai-model
Deploy from Azure Container Registry to AKS on Windows Server	https://learn.microsoft.com/en-us/azure/aks/aksarc/deploy-azure-container-registry

Deployment

Topic	URL
Uninstall AKS cluster provisioning preview before AKS Arc upgrade	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-hybrid-preview-uninstall
Check AKS Arc on VMware system requirements and support	https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-vmware-system-requirements
Upgrade Kubernetes and OS for AKS Arc clusters	https://learn.microsoft.com/en-us/azure/aks/aksarc/cluster-upgrade
Operate AKS Arc clusters in disconnected Azure Local	https://learn.microsoft.com/en-us/azure/aks/aksarc/disconnected-operations-aks
Deploy Windows node pools and apps on AKS Arc	https://learn.microsoft.com/en-us/azure/aks/aksarc/howto-create-windows-node-pools
Upgrade Windows Server versions on AKS Arc node pools	https://learn.microsoft.com/en-us/azure/aks/aksarc/howto-upgrade-windows-os
Create new AKS Edge deployment with PowerShell	https://learn.microsoft.com/en-us/azure/aks/aksarc/reference/aks-edge-ps/new-aksedgedeployment
Remove AKS Edge deployment from machine	https://learn.microsoft.com/en-us/azure/aks/aksarc/reference/aks-edge-ps/remove-aksedgedeployment
Remove a local AKS Edge node from cluster	https://learn.microsoft.com/en-us/azure/aks/aksarc/reference/aks-edge-ps/remove-aksedgenode
Drain AKS Edge node before removal	https://learn.microsoft.com/en-us/azure/aks/aksarc/reference/aks-edge-ps/set-aksedgenodetodrain
Update AKS Edge control plane nodes	https://learn.microsoft.com/en-us/azure/aks/aksarc/reference/aks-edge-ps/start-aksedgecontrolplaneupdate