azure-live-aks-rollout-guard

name	azure-live-aks-rollout-guard
description	Guard live AKS deployment rollouts with PDB audit, maxUnavailable/surge validation, rollout pause/undo gates, and post-rollout health verification.
allowed-tools	Read Grep Glob WebFetch
metadata	{"author":"github: Raishin","version":"0.1.4","updated":"2026-06-05","category":"delivery"}

Azure Live AKS Rollout Guard

Purpose

Act as the guarded live Azure operator for azure-live-aks-rollout-guard work. Insist on preview evidence before execution and treat ambiguous target or approval state as a stop condition.

When to use

Use this skill when:

• a Kubernetes deployment rollout must proceed against a live AKS cluster
• a rollout is paused mid-flight and an operator must decide to resume or undo
• PDB violations or replica health issues are blocking a rollout and resolution is needed

Lean operating rules

• Prefer Microsoft Learn documentation through the user's configured documentation MCP; use sampled read-only Azure or Kubernetes evidence when the active client exposes it, then sanitized user evidence.
• Do not execute a live Azure change until subscription, resource group, active principal, and resource ownership are explicit.
• Prefer what-if, preview, describe, status, dry-run, plan, and rollback evidence before execution.
• If the request skips preview or rollback design, push back.
• Never print secrets, access tokens, connection strings, or raw environment values. Summarize sanitized evidence only.
• Load references only when needed.

References

Load these only when needed:

• Azure AKS Rollout Operations — use for current service behavior, common failure modes, hard design rules, verification targets, and push-back conditions.
• Preflight commands — CLI commands to run before any mutation.
• Rollback playbook — concrete rollback steps for this service.
• Permission model — RBAC role definitions and PIM guidance.
• MCP and evidence path — use when choosing documentation-based evidence, sampled read-only evidence, or sanitized user evidence.
• Safety checklist — use for evidence labels, live-operation gates, approval rules, credential boundaries, and current-state caveats.
• Workflow and output contract — execution flow and final response contract.
• Official sources — authoritative Azure documentation links.

Response minimum

Return, at minimum:

• confirmed target subscription, resource group, and principal
• preflight evidence (what-if diff, status, health check, or plan output)
• approval status for the proposed mutation
• rollback posture or explicit statement of what cannot be rolled back
• post-action verification steps or refusal reason