vscode-aks-tools

ACR integration for AKS Automatic. Teaches attaching an ACR, image reference conventions (digest pinning, no :latest), and pull-secret-free authentication via the managed identity.

Writing idiomatic, safe, and reviewable Bicep templates for Azure resources.

Non-blocking cluster status peek — run at the end of Phases 3, 4, 5 to check AKS provisioning progress without hanging.

Voice, tone, and interaction patterns for Kickstart agents.

Configure Infrastructure phase playbook — launch the dedicated Kickstart cluster-setup view, which collects and creates the Azure resources (subscription, resource group, AKS Automatic cluster, ACR) and hands the results back to the chat.

Deploy phase playbook — build, push, apply with Azure CLI and kubectl.

Design phase playbook — propose target architecture on AKS Automatic.

Discovery phase playbook — collect application details.

Rules for batching write_file calls efficiently. Prevents chatty incremental file writes and ensures the artifact store is updated atomically per logical unit of work.

Generation phase playbook — create all deployment artifacts.

Pull request conventions for trunk-based development and AKS deployment repos.

Pre-deploy check playbook — verify cluster, ACR, permissions, and tooling before deployment.

Rules for when agents may skip confirmations, condense phases, or proceed autonomously. Prevents unnecessary friction when context is sufficient to proceed confidently.

PIM (Privileged Identity Management) eligible role activation. Checks for activatable roles via az rest and guides the user through portal-based activation when they hit 403 errors on role assignments.

Review phase playbook — validate all generated deployment artifacts.

AKS deployment safeguard rules checklist for validating Kubernetes manifests.

Sample repository profiles for quick-start onboarding.

Azure security baseline — RBAC, Key Vault, managed identity, network isolation, and Microsoft Defender.

Workload Identity is mandatory for AKS Automatic. Covers managed identity setup, federated credentials, service account annotation, and Entra ID RBAC integration.

Prepare a release PR for the Azure/vscode-aks-tools VS Code extension. Bumps version in package.json and package-lock.json, creates a new What's New doc, updates SUMMARY.md / release.md / README.md / releasing.md, and removes stale prior-release files. WHEN: 'make a release PR', 'release vscode-aks-tools', 'bump extension version', 'create publish-x.y.z branch', 'prepare release notes for aks tools', 'what's new file for next release'. DO NOT USE FOR: actually publishing to the marketplace (that runs via the internal 1ES pipeline), changelog backfill (CHANGELOG.md is deprecated since 1.6.14), or unrelated repos.