azure-kubernetes-service

name	azure-kubernetes-service
description	Expert knowledge for Azure Kubernetes Service (AKS) development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when designing AKS clusters with Fleet, Istio, Dapr, GPUs, GitOps/CI-CD, or AI/ML and Wasm workloads, and other Azure Kubernetes Service (AKS) related development tasks. Not for Azure Container Apps (use azure-container-apps), Azure Container Instances (use azure-container-instances), Azure Red Hat OpenShift (use azure-redhat-openshift), Azure Virtual Machine Scale Sets (use azure-vm-scalesets).
compatibility	Requires network access. Uses mcp_microsoftdocs:microsoft_docs_fetch or fetch_webpage to retrieve documentation.
metadata	{"generated_at":"2026-04-19","generator":"docs2skills/1.0.0"}

Azure Kubernetes Service (AKS) Skill

This skill provides expert guidance for Azure Kubernetes Service (AKS). Covers troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., L35-L120), use read_file with the specified lines. For categories with file links (e.g., [security.md](security.md)), use read_file on the linked reference file

IMPORTANT for Agent: If metadata.generated_at is more than 3 months old, suggest the user pull the latest version from the repository. If mcp_microsoftdocs tools are not available, suggest the user install it: Installation Guide

This skill requires network access to fetch documentation content:

• Preferred: Use mcp_microsoftdocs:microsoft_docs_fetch with query string from=learn-agent-skill. Returns Markdown.
• Fallback: Use fetch_webpage with query string from=learn-agent-skill&accept=text/markdown. Returns Markdown.

Category Index

Category	Lines	Description
Troubleshooting	L37-L57	Diagnosing and fixing AKS cluster issues: networking, DNS, kubelet, GPUs, security/vulns, upgrades, Windows nodes, Fleet CRDs, and agent/log-based troubleshooting.
Best Practices	L58-L102	AKS reliability, performance, security, and cost best practices: cluster design, upgrades, networking, storage, scheduling, GPU/ML, PCI, and workload resiliency patterns.
Decision Making	L103-L149	Guidance for planning, choosing, and migrating AKS architectures: VM/node pools, networking, upgrades, pricing, cost optimization, PCI, multi‑cloud comparisons, and Fleet Manager workflows.
Architecture & Design Patterns	L150-L174	Designing AKS architectures: HA/DR patterns, multi-region and PCI designs, upgrade/rollout strategies, node pool/network isolation, virtual nodes, and Fleet-based multi-cluster management.
Limits & Quotas	L175-L197	AKS limits, quotas, SLAs, and lifecycle: node/pod/identity caps, CNI/NAT/load balancer scaling, Istio performance, version support/LTS, Fleet limits, and platform support constraints.
Security	L198-L281	Securing AKS clusters: identity and access (Entra, RBAC, workload identity), network and node hardening, encryption, policies, PCI compliance, and secure integrations with other Azure services.
Configuration	L282-L434	Configuring AKS clusters and fleets: networking, ingress/egress, storage, GPUs, autoscaling, cost/monitoring, security, add-ons (Istio, Dapr, ACNS), and infrastructure for common data/AI workloads.
Integrations & Coding Patterns	L435-L459	Patterns and how-tos for integrating AKS with AI agents, KAITO, storage, security (Key Vault/CSI), GPUs, monitoring, GitOps/Fleet, and external Azure/OSS services and tools.
Deployment	L460-L514	Deploying and upgrading AKS clusters and apps, including CI/CD, service meshes, autoscaling, storage/migration, AI/ML and Wasm workloads, and production-ready infrastructure setup.

Troubleshooting

Topic	URL
Diagnose and fix common Agentic CLI for AKS issues	https://learn.microsoft.com/en-us/azure/aks/agentic-cli-for-aks-troubleshoot
Support and troubleshooting options for Azure Kubernetes Service	https://learn.microsoft.com/en-us/azure/aks/aks-support-help
Diagnose AKS network issues using Advanced Container Networking Services	https://learn.microsoft.com/en-us/azure/aks/container-network-observability-guide
Troubleshoot CoreDNS issues in AKS clusters	https://learn.microsoft.com/en-us/azure/aks/coredns-troubleshoot
Use Kubernetes events to troubleshoot AKS clusters	https://learn.microsoft.com/en-us/azure/aks/events
Diagnose GPU node health with NPD in AKS	https://learn.microsoft.com/en-us/azure/aks/gpu-health-monitoring
Collect and view kubelet logs from AKS nodes	https://learn.microsoft.com/en-us/azure/aks/kubelet-logs
Diagnose and fix common Open Service Mesh add-on issues on AKS	https://learn.microsoft.com/en-us/azure/aks/open-service-mesh-troubleshoot
AKS security bulletins and vulnerability troubleshooting	https://learn.microsoft.com/en-us/azure/aks/security-bulletins/overview
Troubleshoot Container Network Insights Agent issues on AKS	https://learn.microsoft.com/en-us/azure/aks/troubleshoot-container-network-insights-agent
Troubleshoot SNAT port exhaustion for AKS load balancers	https://learn.microsoft.com/en-us/azure/aks/troubleshoot-source-network-address-translation
Troubleshoot UDP packet drops in AKS clusters

Best Practices

Topic	URL
Enable Artifact Streaming in AKS to reduce image pull time	https://learn.microsoft.com/en-us/azure/aks/artifact-streaming
Apply AKS deployment and cluster reliability best practices	https://learn.microsoft.com/en-us/azure/aks/best-practices-app-cluster-reliability
Implement AKS cost optimization best practices	https://learn.microsoft.com/en-us/azure/aks/best-practices-cost
Apply GPU best practices on AKS clusters	https://learn.microsoft.com/en-us/azure/aks/best-practices-gpu
MLOps best practices for AKS machine learning	https://learn.microsoft.com/en-us/azure/aks/best-practices-ml-ops
Apply proactive monitoring best practices for AKS clusters	https://learn.microsoft.com/en-us/azure/aks/best-practices-monitoring-proactive
Optimize AKS performance and scaling for small to medium workloads	https://learn.microsoft.com/en-us/azure/aks/best-practices-performance-scale
Optimize performance and scaling for large AKS workloads	https://learn.microsoft.com/en-us/azure/aks/best-practices-performance-scale-large
Best practices for AKS ephemeral NVMe disks	https://learn.microsoft.com/en-us/azure/aks/best-practices-storage-nvme
Plan resource and security considerations for AKS pod sandboxing	https://learn.microsoft.com/en-us/azure/aks/considerations-pod-sandboxing
Enforce AKS deployment safeguards and checks	https://learn.microsoft.com/en-us/azure/aks/deployment-safeguards
Implement pod security best practices on AKS

Decision Making

Topic	URL
Plan and execute migration to Azure Kubernetes Service	https://learn.microsoft.com/en-us/azure/aks/aks-migration
Choose VM sizes and generations for AKS workloads	https://learn.microsoft.com/en-us/azure/aks/aks-virtual-machine-sizes
Migrate AKS clusters from Availability Sets to VM node pools	https://learn.microsoft.com/en-us/azure/aks/availability-sets-on-aks
Choose between AKS and other Azure container services	https://learn.microsoft.com/en-us/azure/aks/compare-container-options-with-aks
Choose small vs large language models on AKS	https://learn.microsoft.com/en-us/azure/aks/concepts-ai-ml-language-models
Plan IP address space for Azure AKS clusters	https://learn.microsoft.com/en-us/azure/aks/concepts-network-ip-address-planning
Choose and understand legacy CNI options in Azure Kubernetes Service	https://learn.microsoft.com/en-us/azure/aks/concepts-network-legacy-cni
Use Azure Advisor recommendations for AKS cost	https://learn.microsoft.com/en-us/azure/aks/cost-advisors
Migrate from Dapr OSS to Dapr extension on AKS	https://learn.microsoft.com/en-us/azure/aks/dapr-migration
Compare AWS and Azure platforms for EDW workloads	https://learn.microsoft.com/en-us/azure/aks/eks-edw-understand
Understand AWS vs Azure differences for web apps	https://learn.microsoft.com/en-us/azure/aks/eks-web-understand
Plan migration off Flatcar Container Linux on AKS	https://learn.microsoft.com/en-us/azure/aks/flatcar-container-linux-for-aks

Architecture & Design Patterns

Topic	URL
Active-active high availability pattern for AKS	https://learn.microsoft.com/en-us/azure/aks/active-active-solution
Active-passive disaster recovery pattern for AKS	https://learn.microsoft.com/en-us/azure/aks/active-passive-solution
Apply production upgrade patterns for AKS clusters	https://learn.microsoft.com/en-us/azure/aks/aks-production-upgrade-strategies
Use blue-green node pool upgrade strategy in AKS	https://learn.microsoft.com/en-us/azure/aks/blue-green-node-pool-upgrade
Replicate AWS EKS event-driven workflow on AKS	https://learn.microsoft.com/en-us/azure/aks/eks-edw-overview
Rearchitect AWS EDW workload for Azure AKS	https://learn.microsoft.com/en-us/azure/aks/eks-edw-rearchitect
Replicate AWS WAF-protected web app on AKS	https://learn.microsoft.com/en-us/azure/aks/eks-web-overview
Rearchitect AWS EKS web app and WAF for AKS	https://learn.microsoft.com/en-us/azure/aks/eks-web-rearchitect
Isolate AKS node pools with unique subnets	https://learn.microsoft.com/en-us/azure/aks/node-pool-unique-subnet
Passive-cold disaster recovery pattern for AKS	https://learn.microsoft.com/en-us/azure/aks/passive-cold-solution
Design AKS architecture for PCI DSS 4.0.1 workloads	https://learn.microsoft.com/en-us/azure/aks/pci-intro
Review summary of AKS PCI reference architecture	https://learn.microsoft.com/en-us/azure/aks/pci-summary
Use proximity placement groups to reduce AKS latency

Limits & Quotas

Topic	URL
Create AKS Automatic cluster in custom VNet with SLA	https://learn.microsoft.com/en-us/azure/aks/automatic/quick-automatic-custom-network
Use AKS Automatic pod readiness SLA guarantees	https://learn.microsoft.com/en-us/azure/aks/automatic/quick-automatic-managed-network
Create private AKS Automatic cluster with readiness SLA	https://learn.microsoft.com/en-us/azure/aks/automatic/quick-automatic-private-custom-network
Understand AKS preview API lifecycle and deprecation timing	https://learn.microsoft.com/en-us/azure/aks/concepts-preview-api-life-cycle
Configure static block allocation for Azure CNI Pod Subnet	https://learn.microsoft.com/en-us/azure/aks/configure-azure-cni-static-block-allocation
AKS FAQ with node, pod, and quota limits	https://learn.microsoft.com/en-us/azure/aks/faq
Understand AKS identity binding limits and scale	https://learn.microsoft.com/en-us/azure/aks/identity-bindings-concepts
Compare latency impact across AKS Istio add-on versions	https://learn.microsoft.com/en-us/azure/aks/istio-latency
Understand Istio add-on performance, capacity, and scaling limits on AKS	https://learn.microsoft.com/en-us/azure/aks/istio-scale
Use long-term support channels for AKS Kubernetes versions	https://learn.microsoft.com/en-us/azure/aks/long-term-support
Understand AKS NAT gateway outbound flow limits	https://learn.microsoft.com/en-us/azure/aks/nat-gateway
Understand AKS node resource reservations and capacity

Security

Topic	URL
Use Conditional Access for AKS control plane and nodes	https://learn.microsoft.com/en-us/azure/aks/access-control-managed-azure-ad
Access private AKS clusters using command invoke and Run command	https://learn.microsoft.com/en-us/azure/aks/access-private-cluster
Configure service account and workload identity for Agentic CLI	https://learn.microsoft.com/en-us/azure/aks/agentic-cli-for-aks-service-account-workload-identity-setup
Set up RBAC permissions for AKS desktop users	https://learn.microsoft.com/en-us/azure/aks/aks-desktop-permissions
Secure AKS API server with authorized IP ranges	https://learn.microsoft.com/en-us/azure/aks/api-server-authorized-ip-ranges
Use service tags for AKS API authorized IP ranges	https://learn.microsoft.com/en-us/azure/aks/api-server-service-tags
Configure TLS for AKS Gateway API with Key Vault	https://learn.microsoft.com/en-us/azure/aks/app-routing-gateway-api-tls
Use Entra groups with Kubernetes RBAC in AKS	https://learn.microsoft.com/en-us/azure/aks/azure-ad-rbac
Configure customer-managed disk encryption keys for AKS	https://learn.microsoft.com/en-us/azure/aks/azure-disk-customer-managed-keys
Manage AKS certificate rotation and autorotation	https://learn.microsoft.com/en-us/azure/aks/certificate-rotation
Harden AKS Azure Linux 2.0 nodes to CIS benchmark	https://learn.microsoft.com/en-us/azure/aks/cis-azure-linux
Harden AKS Azure Linux 3.0 nodes to CIS benchmark

Configuration

Topic	URL
Install and configure Agentic CLI for AKS clusters	https://learn.microsoft.com/en-us/azure/aks/agentic-cli-for-aks-install
Monitor AI inference metrics on AKS with KAITO	https://learn.microsoft.com/en-us/azure/aks/ai-toolchain-operator-monitoring
Create infrastructure for Apache Airflow on AKS	https://learn.microsoft.com/en-us/azure/aks/airflow-create-infrastructure
Configure storage and secrets to deploy Airflow on AKS with Helm	https://learn.microsoft.com/en-us/azure/aks/airflow-deploy
Configure AKS Communication Manager for maintenance notifications	https://learn.microsoft.com/en-us/azure/aks/aks-communication-manager
Manage AKS component versioning and patching strategy	https://learn.microsoft.com/en-us/azure/aks/aks-component-versioning
Configure AKS-managed GPU node pools	https://learn.microsoft.com/en-us/azure/aks/aks-managed-gpu-nodes
Set up custom domains and SSL for AKS application routing	https://learn.microsoft.com/en-us/azure/aks/app-routing-dns-ssl
Configure multiple NGINX ingress controllers and annotations in AKS	https://learn.microsoft.com/en-us/azure/aks/app-routing-nginx-configuration
Monitor AKS NGINX ingress metrics with Prometheus	https://learn.microsoft.com/en-us/azure/aks/app-routing-nginx-prometheus
Install and manage Azure App Configuration extension on AKS	https://learn.microsoft.com/en-us/azure/aks/azure-app-configuration
Configure AKS workloads with App Configuration provider

Integrations & Coding Patterns

Topic	URL
Integrate MCP servers with KAITO on AKS	https://learn.microsoft.com/en-us/azure/aks/ai-toolchain-operator-mcp
Configure tool calling for KAITO inference on AKS	https://learn.microsoft.com/en-us/azure/aks/ai-toolchain-operator-tool-calling
Attach AKS extension in VS Code to Azure Container Registry	https://learn.microsoft.com/en-us/azure/aks/aks-extension-attach-azure-container-registry
Connect AKS clusters to AI agents via MCP server	https://learn.microsoft.com/en-us/azure/aks/aks-model-context-protocol-server
Autoscale AKS GPU workloads with KEDA and DCGM	https://learn.microsoft.com/en-us/azure/aks/autoscale-gpu-workloads-with-keda
Integrate Azure HPC Cache with AKS workloads	https://learn.microsoft.com/en-us/azure/aks/azure-hpc-cache
Mount Azure Blob storage in AKS using CSI	https://learn.microsoft.com/en-us/azure/aks/create-volume-azure-blob-storage
Use Azure Files CSI volumes with AKS pods	https://learn.microsoft.com/en-us/azure/aks/create-volume-azure-files
Integrate AKS with Azure Key Vault via CSI driver	https://learn.microsoft.com/en-us/azure/aks/csi-secrets-store-driver
Configure Secrets Store CSI with NGINX TLS on AKS	https://learn.microsoft.com/en-us/azure/aks/csi-secrets-store-nginx-tls
Refactor EDW application code to use Azure services	https://learn.microsoft.com/en-us/azure/aks/eks-edw-refactor
Integrate AKS Istio add-on metrics with Azure Managed Prometheus

Deployment

Topic	URL
Deploy AI models on AKS using AI toolchain operator	https://learn.microsoft.com/en-us/azure/aks/ai-toolchain-operator
Use AI toolchain operator in Azure portal for AKS	https://learn.microsoft.com/en-us/azure/aks/ai-toolchain-operator-azure-portal
Fine-tune and deploy models on AKS with KAITO	https://learn.microsoft.com/en-us/azure/aks/ai-toolchain-operator-fine-tune
Configure AKS node OS image autoupgrade channels	https://learn.microsoft.com/en-us/azure/aks/auto-upgrade-node-os-image
Set up automated deployments to AKS with CI/CD	https://learn.microsoft.com/en-us/azure/aks/automated-deployments
Provision production-ready AKS infrastructure on Azure	https://learn.microsoft.com/en-us/azure/aks/create-aks-infrastructure
Move Azure Disk PVs between AKS clusters	https://learn.microsoft.com/en-us/azure/aks/csi-disk-move-subscriptions
Migrate AKS in-tree volumes to CSI drivers	https://learn.microsoft.com/en-us/azure/aks/csi-migrate-in-tree-volumes
Install Dapr extension on AKS and Arc-enabled clusters	https://learn.microsoft.com/en-us/azure/aks/dapr
Deploy Dapr Workflow applications on AKS via extension	https://learn.microsoft.com/en-us/azure/aks/dapr-workflow
Programmatically deploy Azure Kubernetes applications with Azure CLI	https://learn.microsoft.com/en-us/azure/aks/deploy-application-az-cli
Deploy Azure Kubernetes applications using ARM templates	https://learn.microsoft.com/en-us/azure/aks/deploy-application-template