MCPInstall

azure-kubernetes-service

by microsoftdocsDevOps & Cloud

Expert knowledge for Azure Kubernetes Service (AKS) development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when securing AKS with Entra/RBAC, configuring Fleet, GPUs or KEDA, or running AI/ML, Wasm, or PCI workloads, and other Azure Kubernetes Service (AKS) related development tasks. Not for Azure Container Apps (use azure-container-apps), Azure Container Instances (use azure-container-instances), Azure Container Registry (use azure-container-registry), Azure Red Hat OpenShift (use azure-redhat-openshift).

Installs
242
Last 24h
—
Trending rank
—
Security
Not audited

Install

Works with every agent the skills CLI supports.

npx skills add https://github.com/microsoftdocs/agent-skills --skill azure-kubernetes-service
  1. 01

    Install

    Run the command in your project. The CLI asks which agents to install for.

  2. 02

    Describe the task

    Ask your agent for something this skill covers. It loads azure-kubernetes-service automatically when relevant.

  3. 03

    Review the result

    The agent follows the SKILL.md steps, scripts and references bundled with the skill.

SKILL.md

The instructions your agent reads when the skill is triggered.

Azure Kubernetes Service (AKS) Skill

This skill provides expert guidance for Azure Kubernetes Service (AKS). Covers troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., L35-L120), use read_file with the specified lines. For categories with file links (e.g., [security.md](security.md)), use read_file on the linked reference file

IMPORTANT for Agent: If metadata.generated_at is more than 3 months old, suggest the user pull the latest version from the repository. If mcp_microsoftdocs tools are not available, suggest the user install it: Installation Guide

This skill requires network access to fetch documentation content:

  • Preferred: Use mcp_microsoftdocs:microsoft_docs_fetch with query string from=learn-agent-skill. Returns Markdown.
  • Fallback: Use fetch_webpage with query string from=learn-agent-skill&accept=text/markdown. Returns Markdown.

Category Index

CategoryLinesDescription
TroubleshootingL37-L62Troubleshooting AKS clusters and workloads: diagnosing networking, DNS, GPU, encryption, logging, Fleet, add-ons, Windows nodes, and using tools/agents (ACNS, NPD, CanIPull, Desktop AI, Inspektor Gadget).
Best PracticesL63-L116End-to-end AKS best practices for upgrades, reliability, security, networking, storage, GPUs, cost optimization, scaling, multi-tenancy, and validating app resiliency on clusters.
Decision MakingL117-L179Guidance for AKS design and migration decisions: cluster tiers, networking, scaling, upgrades, OS/VM choices, cost optimization, PCI, Fleet, and migrations from legacy apps, CNIs, meshes, and platforms.
Architecture & Design PatternsL180-L207High-level AKS reference architectures and patterns for HA/DR, networking, PCI workloads, stateful apps, GPU and Valkey design, plus multi-cluster/Fleet rollout, placement, and upgrade strategies.
Limits & QuotasL208-L232AKS limits, quotas, SLAs, and constraints: preview API lifecycles, autoscaling and Istio/KEDA limits, networking and outbound requirements, node resources, images, and system node pool scaling.
SecurityL233-L317Securing AKS clusters: identity and access (Entra, RBAC, managed identities), network and API protection, encryption and keys, CIS hardening, PCI compliance, and policy-based governance.
ConfigurationL318-L484Configuring AKS clusters, networking, storage, GPUs, autoscaling, security, extensions, and Fleet—covering detailed setup for routing, observability, databases, node pools, and advanced add-ons.
Integrations & Coding PatternsL485-L511Patterns and code for integrating AKS with AI/LLM toolchains, Ray, KAITO, storage, Key Vault, Istio/OSM, KEDA autoscaling, dev tools (VS Code, Telepresence), and security/monitoring APIs.
DeploymentL512-L562Deploying and upgrading AKS clusters and apps, including CI/CD, service meshes, KEDA, AI/ML and Wasm workloads, storage/network migrations, and zero-downtime or multi-cluster rollout strategies.

Troubleshooting

TopicURL
Diagnose and fix common Agentic CLI for AKS issueshttps://learn.microsoft.com/en-us/azure/aks/agentic-cli-for-aks-troubleshoot
Diagnose AKS workloads with AKS Desktop AI assistanthttps://learn.microsoft.com/en-us/azure/aks/aks-desktop-deploy-ai-assistant
Use AKS Desktop Insights to troubleshoot workloadshttps://learn.microsoft.com/en-us/azure/aks/aks-desktop-deploy-troubleshooting
Support and troubleshooting options for Azure Kubernetes Servicehttps://learn.microsoft.com/en-us/azure/aks/aks-support-help
Troubleshoot AKS network issues using ACNS metrics and logshttps://learn.microsoft.com/en-us/azure/aks/container-network-observability-guide
Troubleshoot CoreDNS issues in AKS clustershttps://learn.microsoft.com/en-us/azure/aks/coredns-troubleshoot
Use CanIPull to diagnose AKS–ACR connectivityhttps://learn.microsoft.com/en-us/azure/aks/deploy-canipull-application-aks
Use Kubernetes events to troubleshoot AKS clustershttps://learn.microsoft.com/en-us/azure/aks/events
Diagnose GPU node health with NPD in AKShttps://learn.microsoft.com/en-us/azure/aks/gpu-health-monitoring
Troubleshoot Inspektor Gadget extension issues on AKShttps://learn.microsoft.com/en-us/azure/aks/inspektor-gadget-troubleshoot
Monitor and troubleshoot AKS KMS etcd encryptionhttps://learn.microsoft.com/en-us/azure/aks/kms-observability
Collect and view kubelet logs from AKS nodeshttps://learn.microsoft.com/en-us/azure/aks/kubelet-logs
Abort and inspect AKS long-running operationshttps://learn.microsoft.com/en-us/azure/aks/manage-abort-operations
Diagnose and fix common Open Service Mesh add-on issues on AKShttps://learn.microsoft.com/en-us/azure/aks/open-service-mesh-troubleshoot
Use AKS security bulletins to diagnose vulnerabilitieshttps://learn.microsoft.com/en-us/azure/aks/security-bulletins/overview
Troubleshoot Container Network Insights Agent issues on AKShttps://learn.microsoft.com/en-us/azure/aks/troubleshoot-container-network-insights-agent
Troubleshoot SNAT port exhaustion for AKS load balancershttps://learn.microsoft.com/en-us/azure/aks/troubleshoot-source-network-address-translation
Troubleshoot UDP packet drops in AKS clustershttps://learn.microsoft.com/en-us/azure/aks/troubleshoot-udp-packet-drops
Resolve common Windows Server on AKS issueshttps://learn.microsoft.com/en-us/azure/aks/windows-faq
Identify and migrate preview Azure Kubernetes Fleet CRDs to supported versionshttps://learn.microsoft.com/en-us/azure/kubernetes-fleet/howto-migrate-preview-to-ga-fleets
Interpret Fleet resource placement status for debugginghttps://learn.microsoft.com/en-us/azure/kubernetes-fleet/howto-understand-placement
Access and use Azure Fleet agent logshttps://learn.microsoft.com/en-us/azure/kubernetes-fleet/view-fleet-agent-logs

Best Practices

TopicURL
Apply AKS production cluster upgrade strategieshttps://learn.microsoft.com/en-us/azure/aks/aks-production-upgrade-strategies
Apply AKS deployment and cluster reliability practiceshttps://learn.microsoft.com/en-us/azure/aks/best-practices-app-cluster-reliability
Optimize AKS cluster costs with practical guidelineshttps://learn.microsoft.com/en-us/azure/aks/best-practices-cost
Apply GPU best practices on AKS clustershttps://learn.microsoft.com/en-us/azure/aks/best-practices-gpu
Apply GPU observability best practices on AKShttps://learn.microsoft.com/en-us/azure/aks/best-practices-gpu-observability
Apply MLOps best practices on AKS clustershttps://learn.microsoft.com/en-us/azure/aks/best-practices-ml-ops
Apply proactive monitoring best practices for AKS clustershttps://learn.microsoft.com/en-us/azure/aks/best-practices-monitoring-proactive
Apply multi-tenancy best practices in AKS clustershttps://learn.microsoft.com/en-us/azure/aks/best-practices-multi-tenancy
Optimize AKS performance and scaling for small to medium workloadshttps://learn.microsoft.com/en-us/azure/aks/best-practices-performance-scale
Tune AKS for large-scale performance and scalinghttps://learn.microsoft.com/en-us/azure/aks/best-practices-performance-scale-large
Best practices for AKS ephemeral NVMe diskshttps://learn.microsoft.com/en-us/azure/aks/best-practices-storage-nvme
Configure and tune AKS cluster autoscalerhttps://learn.microsoft.com/en-us/azure/aks/cluster-autoscaler-overview
Apply pod sandboxing resource and security practices in AKShttps://learn.microsoft.com/en-us/azure/aks/considerations-pod-sandboxing
Enforce AKS deployment safeguards and best practiceshttps://learn.microsoft.com/en-us/azure/aks/deployment-safeguards
Implement pod security best practices on AKShttps://learn.microsoft.com/en-us/azure/aks/developer-best-practices-pod-security
Optimize AKS workload resource management practiceshttps://learn.microsoft.com/en-us/azure/aks/developer-best-practices-resource-management
Apply GPU profiling best practices on AKShttps://learn.microsoft.com/en-us/azure/aks/gpu-profiling-faq
Use Image Cleaner to remove vulnerable AKS imageshttps://learn.microsoft.com/en-us/azure/aks/image-cleaner
Use TCP keepalive to improve AKS network resiliencehttps://learn.microsoft.com/en-us/azure/aks/improve-network-fault-tolerance-in-aks-using-tcp-keepalive
Select appropriate Inspektor Gadget tools on AKShttps://learn.microsoft.com/en-us/azure/aks/inspektor-gadget-catalog
Plan AKS rollback strategies for failed migrationshttps://learn.microsoft.com/en-us/azure/aks/kubernetes-migration-rollback-strategies
Apply network security best practices to AKS clustershttps://learn.microsoft.com/en-us/azure/aks/network-policy-best-practices
Plan node image updates for NAP in AKShttps://learn.microsoft.com/en-us/azure/aks/node-auto-provisioning-upgrade-image
Configure and monitor AKS node auto-repairhttps://learn.microsoft.com/en-us/azure/aks/node-auto-repair
Control AKS node reimage and disruption behaviorhttps://learn.microsoft.com/en-us/azure/aks/node-disruption-policy
Operate cost-optimized AKS clusters at scalehttps://learn.microsoft.com/en-us/azure/aks/operate-cost-optimized-scale
Apply AKS scheduler features for workload isolationhttps://learn.microsoft.com/en-us/azure/aks/operator-best-practices-advanced-scheduler
Implement cluster isolation strategies in Azure Kubernetes Servicehttps://learn.microsoft.com/en-us/azure/aks/operator-best-practices-cluster-isolation
Apply AKS cluster security operator best practiceshttps://learn.microsoft.com/en-us/azure/aks/operator-best-practices-cluster-security
Implement container image security best practices in AKShttps://learn.microsoft.com/en-us/azure/aks/operator-best-practices-container-image-management
Apply AKS network resource best practiceshttps://learn.microsoft.com/en-us/azure/aks/operator-best-practices-network
Apply AKS scheduler best practices for quotashttps://learn.microsoft.com/en-us/azure/aks/operator-best-practices-scheduler
Apply AKS storage and backup operator best practiceshttps://learn.microsoft.com/en-us/azure/aks/operator-best-practices-storage
Protect data on AKS for PCI DSS compliancehttps://learn.microsoft.com/en-us/azure/aks/pci-data
Apply PCI risk assessment and code practices on AKShttps://learn.microsoft.com/en-us/azure/aks/pci-ra-code-assets
Control AKS upgrades with planned maintenance windowshttps://learn.microsoft.com/en-us/azure/aks/planned-maintenance
Design zone-resilient Azure Kubernetes Service clustershttps://learn.microsoft.com/en-us/azure/aks/reliability-zone-resiliency-recommendations
Load test and validate MongoDB resiliency on AKShttps://learn.microsoft.com/en-us/azure/aks/resiliency-mongodb-cluster
Use AKS node pool version rollback safelyhttps://learn.microsoft.com/en-us/azure/aks/roll-back-node-pool-version
Apply security best practices to Azure Kubernetes Service clustershttps://learn.microsoft.com/en-us/azure/aks/secure-aks
Handle AKS upgrade blocks from deprecated APIshttps://learn.microsoft.com/en-us/azure/aks/stop-cluster-upgrade-api-breaking-changes
Validate MongoDB resiliency during AKS node pool upgradeshttps://learn.microsoft.com/en-us/azure/aks/upgrade-mongodb-cluster
Handle AKS Linux node reboots using kuredhttps://learn.microsoft.com/en-us/azure/aks/upgrade-node-image-kured
Upgrade AKS node pools and control plane safelyhttps://learn.microsoft.com/en-us/azure/aks/upgrade-node-pools
Apply OS upgrade best practices for AKS clustershttps://learn.microsoft.com/en-us/azure/aks/upgrade-os-version
Validate Valkey resiliency during AKS node pool upgradeshttps://learn.microsoft.com/en-us/azure/aks/upgrade-valkey-aks-nodepool
Configure AKS node disruption policy for reimage operationshttps://learn.microsoft.com/en-us/azure/aks/use-node-disruption-policy
Validate and operate PostgreSQL HA deployments on AKShttps://learn.microsoft.com/en-us/azure/aks/validate-postgresql-ha
Load test and validate Valkey cluster resiliency on AKShttps://learn.microsoft.com/en-us/azure/aks/validate-valkey-cluster
Apply AKS Windows container best practiceshttps://learn.microsoft.com/en-us/azure/aks/windows-best-practices

Decision Making

TopicURL
Choose migration paths for legacy apps to AKShttps://learn.microsoft.com/en-us/azure/aks/aks-legacy-migration
Plan and execute migration to Azure Kubernetes Servicehttps://learn.microsoft.com/en-us/azure/aks/aks-migration
Choose VM sizes and generations for AKS workloadshttps://learn.microsoft.com/en-us/azure/aks/aks-virtual-machine-sizes
Use AKS application routing with Kubernetes Gateway APIhttps://learn.microsoft.com/en-us/azure/aks/app-routing-gateway-api
Migrate AKS Automatic clusters between SKUshttps://learn.microsoft.com/en-us/azure/aks/automatic/aks-automatic-sku-migration
Migrate AKS clusters from Availability Sets to VM node poolshttps://learn.microsoft.com/en-us/azure/aks/availability-sets-on-aks
Choose between AKS and other Azure container serviceshttps://learn.microsoft.com/en-us/azure/aks/compare-container-options-with-aks
Choose small vs large language models on AKShttps://learn.microsoft.com/en-us/azure/aks/concepts-ai-ml-language-models
Choose ingress networking options for Azure AKShttps://learn.microsoft.com/en-us/azure/aks/concepts-network-ingress
Plan IP address space for Azure AKS clustershttps://learn.microsoft.com/en-us/azure/aks/concepts-network-ip-address-planning
Choose and understand legacy CNI options in Azure Kubernetes Servicehttps://learn.microsoft.com/en-us/azure/aks/concepts-network-legacy-cni
Choose the right AKS scaling option for workloadshttps://learn.microsoft.com/en-us/azure/aks/concepts-scale
Use Azure Advisor recommendations for AKS costhttps://learn.microsoft.com/en-us/azure/aks/cost-advisors
Migrate from Dapr OSS to Dapr extension on AKShttps://learn.microsoft.com/en-us/azure/aks/dapr-migration
Compare AWS and Azure platforms for EDW workloadshttps://learn.microsoft.com/en-us/azure/aks/eks-edw-understand
Understand AWS vs Azure differences for web appshttps://learn.microsoft.com/en-us/azure/aks/eks-web-understand
Plan migration off Flatcar Container Linux on AKShttps://learn.microsoft.com/en-us/azure/aks/flatcar-container-linux-for-aks
Choose and configure AKS Free, Standard, Premium tiershttps://learn.microsoft.com/en-us/azure/aks/free-standard-pricing-tiers
Adopt and migrate to Gen2 VMs for AKS node poolshttps://learn.microsoft.com/en-us/azure/aks/generation-2-vms
Select AKS Automatic or Standard for workloadshttps://learn.microsoft.com/en-us/azure/aks/get-started-aks
Choose and configure HPA for AKS workloadshttps://learn.microsoft.com/en-us/azure/aks/horizontal-pod-autoscaler
Choose and configure AKS hyperscale control planehttps://learn.microsoft.com/en-us/azure/aks/hyperscale-configuration-aks
Plan AKS Kubernetes long-term support strategyhttps://learn.microsoft.com/en-us/azure/aks/long-term-support
Plan and execute migration from NPM to Cilium in AKShttps://learn.microsoft.com/en-us/azure/aks/migrate-from-npm-to-cilium-network-policy
Plan and execute legacy .NET migration to AKShttps://learn.microsoft.com/en-us/azure/aks/migrate-legacy-dotnet-to-aks
Migrate AKS node pools to Azure Container Linuxhttps://learn.microsoft.com/en-us/azure/aks/migrate-nodes-azure-container-linux
Migrate from open source Istio to AKS Istio add-on using canary strategyhttps://learn.microsoft.com/en-us/azure/aks/migration-from-open-source-istio-to-addon
Choose appropriate AKS node images and lifecycleshttps://learn.microsoft.com/en-us/azure/aks/node-images
Map AKS Open Service Mesh policies to Istio add-onhttps://learn.microsoft.com/en-us/azure/aks/open-service-mesh-istio-migration-guidance
Choose and tune AKS options to reduce costshttps://learn.microsoft.com/en-us/azure/aks/optimize-aks-costs
Apply PCI customized approach controls in AKShttps://learn.microsoft.com/en-us/azure/aks/pci-customized-approach-guidance
Map AKS controls to PCI DSS 4.0.1 requirementshttps://learn.microsoft.com/en-us/azure/aks/pci-requirement-mapping-matrix
Perform targeted PCI risk analysis for AKS workloadshttps://learn.microsoft.com/en-us/azure/aks/pci-targeted-risk-analysis
Design application networking for Azure Kubernetes Service workloadshttps://learn.microsoft.com/en-us/azure/aks/plan-application-networking
Select AKS control plane networking configurationhttps://learn.microsoft.com/en-us/azure/aks/plan-control-plane-networking
Plan deployment and configuration of AKS flex nodeshttps://learn.microsoft.com/en-us/azure/aks/plan-flex-nodes-deployment
Plan AKS workload networking options and trade-offshttps://learn.microsoft.com/en-us/azure/aks/plan-networking
Plan AKS node networking models and choiceshttps://learn.microsoft.com/en-us/azure/aks/plan-node-networking
Choose AKS pod networking configuration optionshttps://learn.microsoft.com/en-us/azure/aks/plan-pod-networking
Manage AKS platform-initiated Kubernetes upgradeshttps://learn.microsoft.com/en-us/azure/aks/platform-initiated-upgrades
Choose and configure AKS scale-down modehttps://learn.microsoft.com/en-us/azure/aks/scale-down-mode
Add and use Azure Spot node pools in AKShttps://learn.microsoft.com/en-us/azure/aks/spot-node-pool
Select and manage supported AKS Kubernetes versionshttps://learn.microsoft.com/en-us/azure/aks/supported-kubernetes-versions
Update AKS clusters to new Azure CNI IPAM and data planeshttps://learn.microsoft.com/en-us/azure/aks/update-azure-cni
Migrate AKS from Basic to Standard Load Balancerhttps://learn.microsoft.com/en-us/azure/aks/upgrade-basic-load-balancer-on-aks
Plan AKS upgrade capacity and cost constraintshttps://learn.microsoft.com/en-us/azure/aks/upgrade-capacity-cost-planning
Choose AKS cluster upgrade options and policieshttps://learn.microsoft.com/en-us/azure/aks/upgrade-options
Select the right AKS upgrade scenario pathhttps://learn.microsoft.com/en-us/azure/aks/upgrade-scenarios-hub
Choose and execute AKS Windows OS upgrade pathshttps://learn.microsoft.com/en-us/azure/aks/upgrade-windows-os
Use Arm64 node pools in AKS for cost efficiencyhttps://learn.microsoft.com/en-us/azure/aks/use-arm64-vms
Decide on using Azure Linux OS Guard for AKShttps://learn.microsoft.com/en-us/azure/aks/use-azure-linux-os-guard
Choose between AKS Automatic and Standard clustershttps://learn.microsoft.com/en-us/azure/aks/what-is-aks
Use and migrate from Windows Server Annual Channel on AKShttps://learn.microsoft.com/en-us/azure/aks/windows-annual-channel
Plan Windows vs. Linux containers on AKShttps://learn.microsoft.com/en-us/azure/aks/windows-vs-linux-containers
Choose a migration path to AKS Workload IDhttps://learn.microsoft.com/en-us/azure/aks/workload-identity-migrate-from-pod-identity
Choose the right Azure Kubernetes Fleet Manager configurationhttps://learn.microsoft.com/en-us/azure/kubernetes-fleet/concepts-choosing-fleet
Choose appropriate member cluster types in Fleet Managerhttps://learn.microsoft.com/en-us/azure/kubernetes-fleet/concepts-member-cluster-types
Migrate Kubernetes update workflows from Terraform to Fleethttps://learn.microsoft.com/en-us/azure/kubernetes-fleet/howto-migrate-updates-from-terraform
Upgrade Azure Kubernetes Fleet Manager from hubless to hubfulhttps://learn.microsoft.com/en-us/azure/kubernetes-fleet/upgrade-hub-cluster-type

Architecture & Design Patterns

TopicURL
Active-active high availability pattern for AKShttps://learn.microsoft.com/en-us/azure/aks/active-active-solution
Design active-passive disaster recovery for AKShttps://learn.microsoft.com/en-us/azure/aks/active-passive-solution
Use blue-green node pool upgrades in AKShttps://learn.microsoft.com/en-us/azure/aks/blue-green-node-pool-upgrade
Choose GPU partitioning strategies in AKShttps://learn.microsoft.com/en-us/azure/aks/concepts-gpu-partitioning
Rearchitect AWS EDW workload for Azure AKShttps://learn.microsoft.com/en-us/azure/aks/eks-edw-rearchitect
Rearchitect AWS EKS web app and WAF for AKShttps://learn.microsoft.com/en-us/azure/aks/eks-web-rearchitect
Design networking for AKS flex node connectivityhttps://learn.microsoft.com/en-us/azure/aks/flex-nodes-networking-concepts
Design AKS workloads with multi-NIC pod networkinghttps://learn.microsoft.com/en-us/azure/aks/multiple-network-interfaces-for-pods-overview
Isolate AKS node pools with unique subnetshttps://learn.microsoft.com/en-us/azure/aks/node-pool-unique-subnet
Passive-cold disaster recovery pattern for AKShttps://learn.microsoft.com/en-us/azure/aks/passive-cold-solution
Design AKS architecture for PCI DSS 4.0.1 workloadshttps://learn.microsoft.com/en-us/azure/aks/pci-intro
Review summary of AKS PCI reference architecturehttps://learn.microsoft.com/en-us/azure/aks/pci-summary
Choose connectivity options for private AKS clustershttps://learn.microsoft.com/en-us/azure/aks/private-cluster-connect
Use proximity placement groups to reduce AKS latencyhttps://learn.microsoft.com/en-us/azure/aks/reduce-latency-ppg
Multi-region AKS deployment models and trade-offshttps://learn.microsoft.com/en-us/azure/aks/reliability-multi-region-deployment-models
Plan AKS upgrades for stateful database workloadshttps://learn.microsoft.com/en-us/azure/aks/stateful-workload-upgrades
Design and migrate stateful workloads on AKShttps://learn.microsoft.com/en-us/azure/aks/stateful-workloads-overview
Architect Valkey clusters on AKS for resiliencehttps://learn.microsoft.com/en-us/azure/aks/valkey-overview
Configure eviction and disruption budgets in Fleet CRPhttps://learn.microsoft.com/en-us/azure/kubernetes-fleet/concepts-eviction-disruption
Manage workload drift with Fleet applyStrategyhttps://learn.microsoft.com/en-us/azure/kubernetes-fleet/concepts-placement-drift
Control workload takeover behavior in Fleet placementhttps://learn.microsoft.com/en-us/azure/kubernetes-fleet/concepts-placement-takeover
Design rollout strategies for Fleet resource placementhttps://learn.microsoft.com/en-us/azure/kubernetes-fleet/concepts-rollout-strategy
Move Kubernetes workloads between clusters with Fleethttps://learn.microsoft.com/en-us/azure/kubernetes-fleet/howto-move-workloads-between-clusters
Use intelligent cross-cluster placement in Fleethttps://learn.microsoft.com/en-us/azure/kubernetes-fleet/intelligent-resource-placement

Limits & Quotas

TopicURL
Create AKS Automatic clusters in custom networks with SLAhttps://learn.microsoft.com/en-us/azure/aks/automatic/quick-automatic-custom-network
Use AKS Automatic pod readiness SLA guaranteeshttps://learn.microsoft.com/en-us/azure/aks/automatic/quick-automatic-managed-network
Deploy private AKS Automatic clusters with readiness SLAhttps://learn.microsoft.com/en-us/azure/aks/automatic/quick-automatic-private-custom-network
Understand AKS preview API lifecycle and deprecation timinghttps://learn.microsoft.com/en-us/azure/aks/concepts-preview-api-life-cycle
Use AKS automatic zone placement with limitshttps://learn.microsoft.com/en-us/azure/aks/configure-automatic-zone-placement
Configure static block allocation for Azure CNI Pod Subnethttps://learn.microsoft.com/en-us/azure/aks/configure-azure-cni-static-block-allocation
Configure custom certificate authorities in AKShttps://learn.microsoft.com/en-us/azure/aks/custom-certificate-authority
Understand AKS limits, quotas, and platform constraintshttps://learn.microsoft.com/en-us/azure/aks/faq
Understand AKS identity binding scale limits and behaviorhttps://learn.microsoft.com/en-us/azure/aks/identity-bindings-concepts
Compare latency impact across AKS Istio add-on versionshttps://learn.microsoft.com/en-us/azure/aks/istio-latency
Understand Istio add-on performance, capacity, and scaling limits on AKShttps://learn.microsoft.com/en-us/azure/aks/istio-scale
Understand KEDA limitations and autoscaling behavior in AKShttps://learn.microsoft.com/en-us/azure/aks/keda-about
Understand AKS node resource reservation limitshttps://learn.microsoft.com/en-us/azure/aks/node-resource-reservations
Required outbound ports and FQDNs for AKS clustershttps://learn.microsoft.com/en-us/azure/aks/outbound-rules-control-egress
Review AKS resource limits, quotas, and SKUshttps://learn.microsoft.com/en-us/azure/aks/quotas-skus-regions
Understand AKS support policies and limitationshttps://learn.microsoft.com/en-us/azure/aks/support-policies
Manage AKS node image upgrade cadence and rollouthttps://learn.microsoft.com/en-us/azure/aks/upgrade-node-image
Scale AKS with multiple Standard Load Balancershttps://learn.microsoft.com/en-us/azure/aks/use-multiple-standard-load-balancer
Configure and manage AKS system node poolshttps://learn.microsoft.com/en-us/azure/aks/use-system-pools
Kubernetes version support policy for Azure Kubernetes Fleet Managerhttps://learn.microsoft.com/en-us/azure/kubernetes-fleet/concepts-fleet-kubernetes-version-support
Understand lifecycle limits for Fleet Manager preview APIshttps://learn.microsoft.com/en-us/azure/kubernetes-fleet/concepts-preview-api-lifecycle

Security

TopicURL
Apply Conditional Access to AKS clusters and nodeshttps://learn.microsoft.com/en-us/azure/aks/access-control-managed-azure-ad
Access private AKS clusters using command invoke and Run commandhttps://learn.microsoft.com/en-us/azure/aks/access-private-cluster
Configure service account and workload identity for Agentic CLIhttps://learn.microsoft.com/en-us/azure/aks/agentic-cli-for-aks-service-account-workload-identity-setup
Configure RBAC permissions for AKS Desktop projectshttps://learn.microsoft.com/en-us/azure/aks/aks-desktop-permissions
Reference AKS service permissions and roleshttps://learn.microsoft.com/en-us/azure/aks/aks-service-permissions
Configure AKS API server authorized IP rangeshttps://learn.microsoft.com/en-us/azure/aks/api-server-authorized-ip-ranges
Configure AKS API server authorized IP ranges with service tagshttps://learn.microsoft.com/en-us/azure/aks/api-server-service-tags
Use customer-managed keys for AKS managed disk encryptionhttps://learn.microsoft.com/en-us/azure/aks/azure-disk-customer-managed-keys
Manage and rotate AKS cluster certificates securelyhttps://learn.microsoft.com/en-us/azure/aks/certificate-rotation
Harden AKS Azure Linux 2.0 nodes to CIS benchmarkhttps://learn.microsoft.com/en-us/azure/aks/cis-azure-linux
Harden AKS Azure Linux 3.0 nodes to CIS benchmarkhttps://learn.microsoft.com/en-us/azure/aks/cis-azure-linux-v3
Apply CIS Kubernetes benchmark controls in AKShttps://learn.microsoft.com/en-us/azure/aks/cis-kubernetes
Apply CIS-aligned Ubuntu security settings for AKS nodeshttps://learn.microsoft.com/en-us/azure/aks/cis-ubuntu
Align AKS Windows node image with CIS benchmarkhttps://learn.microsoft.com/en-us/azure/aks/cis-windows
Configure secure AKS access to Azure Container Registryhttps://learn.microsoft.com/en-us/azure/aks/cluster-container-registry-integration
Understand access and identity scenarios in AKShttps://learn.microsoft.com/en-us/azure/aks/concepts-identity
Secure network-isolated AKS cluster connectivity requirementshttps://learn.microsoft.com/en-us/azure/aks/concepts-network-isolated
Restrict kubeconfig access using Azure RBAC in AKShttps://learn.microsoft.com/en-us/azure/aks/control-kubeconfig-access
Secure AKS CSI Driver access to Azure Key Vaulthttps://learn.microsoft.com/en-us/azure/aks/csi-secrets-store-identity-access
Configure FIPS-compliant node pools in Azure Kubernetes Servicehttps://learn.microsoft.com/en-us/azure/aks/enable-fips-nodes
Enable host-based encryption for AKS node datahttps://learn.microsoft.com/en-us/azure/aks/enable-host-encryption
Configure Entra ID authorization for AKS Kubernetes APIhttps://learn.microsoft.com/en-us/azure/aks/entra-id-authorization
Enable Entra ID authentication for AKS control planehttps://learn.microsoft.com/en-us/azure/aks/entra-id-control-plane-authentication
Configure external identity providers for AKS authenticationhttps://learn.microsoft.com/en-us/azure/aks/external-identity-provider-authentication-configure
Configure identity and access for AKS flex nodeshttps://learn.microsoft.com/en-us/azure/aks/flex-nodes-identity-access-concepts
Deploy WireGuard encryption for AKS networkinghttps://learn.microsoft.com/en-us/azure/aks/how-to-apply-wireguard
Enforce signed container image validation on AKShttps://learn.microsoft.com/en-us/azure/aks/image-integrity
Restrict AKS pod access to IMDS endpointhttps://learn.microsoft.com/en-us/azure/aks/imds-restriction
Plug external CA certificates into AKS Istio add-onhttps://learn.microsoft.com/en-us/azure/aks/istio-plugin-ca
Configure HTTPS and mTLS secure ingress gateways for AKS Istio add-onhttps://learn.microsoft.com/en-us/azure/aks/istio-secure-gateway
Secure KEDA-based autoscaling on AKS with workload identityhttps://learn.microsoft.com/en-us/azure/aks/keda-workload-identity
Authenticate to AKS clusters using kubeloginhttps://learn.microsoft.com/en-us/azure/aks/kubelogin-authentication
Configure Microsoft Entra ID and Kubernetes RBAC for AKS access controlhttps://learn.microsoft.com/en-us/azure/aks/kubernetes-rbac-entra-id
Configure Entra service principals for AKS clustershttps://learn.microsoft.com/en-us/azure/aks/kubernetes-service-principal
Restrict AKS egress traffic using Azure Firewallhttps://learn.microsoft.com/en-us/azure/aks/limit-egress-traffic
Disable or manage AKS local admin accounts securelyhttps://learn.microsoft.com/en-us/azure/aks/local-accounts
Configure and manage SSH access to AKS nodeshttps://learn.microsoft.com/en-us/azure/aks/manage-ssh-node-access
Use managed identities for AKS cluster-to-Azure accesshttps://learn.microsoft.com/en-us/azure/aks/managed-identity-overview
Create network-isolated AKS clusters with restricted egresshttps://learn.microsoft.com/en-us/azure/aks/network-isolated
Securely connect to AKS cluster nodes for maintenancehttps://learn.microsoft.com/en-us/azure/aks/node-access
Configure AKS NAP cluster in custom VNet securelyhttps://learn.microsoft.com/en-us/azure/aks/node-auto-provisioning-custom-vnet
Configure AKS node resource group lockdown and deny assignmentshttps://learn.microsoft.com/en-us/azure/aks/node-resource-group-lockdown
Secure AKS access to Azure OpenAI with Entrahttps://learn.microsoft.com/en-us/azure/aks/open-ai-secure-access-quickstart
Implement anti-phishing controls for AKS PCI accesshttps://learn.microsoft.com/en-us/azure/aks/pci-anti-phishing-social-engineering
Set up continuous security monitoring for AKS PCIhttps://learn.microsoft.com/en-us/azure/aks/pci-continuous-security-monitoring
Manage cryptography and keys on AKS for PCI DSShttps://learn.microsoft.com/en-us/azure/aks/pci-cryptography-key-management
Implement enhanced MFA for AKS PCI environmentshttps://learn.microsoft.com/en-us/azure/aks/pci-enhanced-mfa-implementation
Configure PCI-compliant identity and access for AKShttps://learn.microsoft.com/en-us/azure/aks/pci-identity
Deploy malware protection for PCI workloads on AKShttps://learn.microsoft.com/en-us/azure/aks/pci-malware
Configure PCI-compliant monitoring and logging on AKShttps://learn.microsoft.com/en-us/azure/aks/pci-monitor
Implement PCI-compliant network security for AKShttps://learn.microsoft.com/en-us/azure/aks/pci-network
Define security policies for PCI-regulated AKS clustershttps://learn.microsoft.com/en-us/azure/aks/pci-policy
Plan security awareness training for AKS PCI teamshttps://learn.microsoft.com/en-us/azure/aks/pci-security-awareness-training
Secure third-party and supply chain for AKS PCIhttps://learn.microsoft.com/en-us/azure/aks/pci-third-party-supply-chain-security
Use built-in Azure Policy definitions for AKShttps://learn.microsoft.com/en-us/azure/aks/policy-reference
Use pre-created kubelet managed identity in AKShttps://learn.microsoft.com/en-us/azure/aks/pre-created-kubelet-managed-identity
Prepare flex node host identity and access for AKShttps://learn.microsoft.com/en-us/azure/aks/prepare-flex-node-host-identity
Configure private AKS clusters with secure networkinghttps://learn.microsoft.com/en-us/azure/aks/private-clusters
Use PIM for just-in-time AKS cluster accesshttps://learn.microsoft.com/en-us/azure/aks/privileged-identity-management
RDP and SSH access to AKS Windows nodeshttps://learn.microsoft.com/en-us/azure/aks/rdp
Manually rotate and manage AKS cluster certificateshttps://learn.microsoft.com/en-us/azure/aks/rotate-certificates
Harden AKS containers with user namespaces, AppArmor, seccomphttps://learn.microsoft.com/en-us/azure/aks/secure-container-access
Use Azure Policy regulatory controls for AKShttps://learn.microsoft.com/en-us/azure/aks/security-controls-policy
Configure system-assigned managed identity for AKS clustershttps://learn.microsoft.com/en-us/azure/aks/system-assigned-managed-identity
Configure Trusted Access for secure AKS API accesshttps://learn.microsoft.com/en-us/azure/aks/trusted-access-feature
Rotate AKS service principal and Entra app credentialshttps://learn.microsoft.com/en-us/azure/aks/update-credentials
Update AKS custom roles for external-node certificate bootstraphttps://learn.microsoft.com/en-us/azure/aks/update-custom-roles-external-node-certificate-bootstrap
Use Microsoft Entra pod-managed identities in AKShttps://learn.microsoft.com/en-us/azure/aks/use-azure-ad-pod-identity
Secure AKS clusters using Azure Policy add-onhttps://learn.microsoft.com/en-us/azure/aks/use-azure-policy
Run secure workloads with Confidential GPUs on AKShttps://learn.microsoft.com/en-us/azure/aks/use-confidential-gpus
Enable GMSA for Windows nodes in AKS clustershttps://learn.microsoft.com/en-us/azure/aks/use-group-managed-service-accounts
Enable legacy KMS etcd encryption with AKS and Key Vaulthttps://learn.microsoft.com/en-us/azure/aks/use-kms-etcd-encryption
Migrate AKS clusters from KMS v1 to KMS v2https://learn.microsoft.com/en-us/azure/aks/use-kms-v2
Secure AKS pod traffic with network policieshttps://learn.microsoft.com/en-us/azure/aks/use-network-policies
Configure OIDC issuer for secure AKS authenticationhttps://learn.microsoft.com/en-us/azure/aks/use-oidc-issuer
Configure Pod Security Admission policies in AKShttps://learn.microsoft.com/en-us/azure/aks/use-psa
Configure Trusted Launch security for AKS nodeshttps://learn.microsoft.com/en-us/azure/aks/use-trusted-launch
Enable user-assigned managed identity for AKS clustershttps://learn.microsoft.com/en-us/azure/aks/user-assigned-managed-identity
Configure cross-tenant workload identity for AKShttps://learn.microsoft.com/en-us/azure/aks/workload-identity-cross-tenant
Assign Azure RBAC roles for Kubernetes Fleet Managerhttps://learn.microsoft.com/en-us/azure/kubernetes-fleet/concepts-rbac
Use managed identities securely with Azure Kubernetes Fleet Managerhttps://learn.microsoft.com/en-us/azure/kubernetes-fleet/use-managed-identity

Configuration

TopicURL
Install and configure Agentic CLI for AKS clustershttps://learn.microsoft.com/en-us/azure/aks/agentic-cli-for-aks-install
Configure AI inference metrics monitoring on AKShttps://learn.microsoft.com/en-us/azure/aks/ai-toolchain-operator-monitoring
Create infrastructure for Apache Airflow on AKShttps://learn.microsoft.com/en-us/azure/aks/airflow-create-infrastructure
Configure storage and secrets to deploy Airflow on AKS with Helmhttps://learn.microsoft.com/en-us/azure/aks/airflow-deploy
Configure AKS Communication Manager notifications for maintenancehttps://learn.microsoft.com/en-us/azure/aks/aks-communication-manager
Manage AKS component versioning and patching strategyhttps://learn.microsoft.com/en-us/azure/aks/aks-component-versioning
Configure AKS clusters for AKS Desktop compatibilityhttps://learn.microsoft.com/en-us/azure/aks/aks-desktop-install-cluster-setup
Configure AKS Kubernetes end-of-support notificationshttps://learn.microsoft.com/en-us/azure/aks/aks-end-of-support-notifications
List and filter AKS-supported VM SKUs by regionhttps://learn.microsoft.com/en-us/azure/aks/aks-list-skus
Configure AKS-managed GPU node pools with NVIDIA stackhttps://learn.microsoft.com/en-us/azure/aks/aks-managed-gpu-nodes
Configure the AKS Model Context Protocol server for AI agentshttps://learn.microsoft.com/en-us/azure/aks/aks-model-context-protocol-server
Configure AKS application routing add-on with NGINXhttps://learn.microsoft.com/en-us/azure/aks/app-routing
Configure custom domains and SSL for AKS app routinghttps://learn.microsoft.com/en-us/azure/aks/app-routing-dns-ssl
Configure AKS Application Routing with Azure DNS and TLShttps://learn.microsoft.com/en-us/azure/aks/app-routing-gateway-api-dns-tls
Manually configure TLS ingress with Gateway API on AKShttps://learn.microsoft.com/en-us/azure/aks/app-routing-gateway-api-tls
Configure multiple NGINX ingress controllers and annotations in AKShttps://learn.microsoft.com/en-us/azure/aks/app-routing-nginx-configuration
Configure Prometheus scraping for AKS ingress-nginx metricshttps://learn.microsoft.com/en-us/azure/aks/app-routing-nginx-prometheus
Attach and bootstrap flex nodes to AKS clustershttps://learn.microsoft.com/en-us/azure/aks/attach-flex-node-to-aks
Configure AKS node OS image autoupgrade channelshttps://learn.microsoft.com/en-us/azure/aks/auto-upgrade-node-os-image
Install and manage Azure App Configuration extension on AKShttps://learn.microsoft.com/en-us/azure/aks/azure-app-configuration
Configure AKS workloads with App Configuration providerhttps://learn.microsoft.com/en-us/azure/aks/azure-app-configuration-quickstart
Tune Azure App Configuration extension settings for AKShttps://learn.microsoft.com/en-us/azure/aks/azure-app-configuration-settings
Configure Azure CNI Overlay networking for AKS clustershttps://learn.microsoft.com/en-us/azure/aks/azure-cni-overlay
Configure Azure CNI powered by Cilium for AKShttps://learn.microsoft.com/en-us/azure/aks/azure-cni-powered-by-cilium
Configure Azure NetApp Files for AKS podshttps://learn.microsoft.com/en-us/azure/aks/azure-netapp-files
Provision Azure NetApp Files dual-protocol volumeshttps://learn.microsoft.com/en-us/azure/aks/azure-netapp-files-dual-protocol
Provision Azure NetApp Files NFS volumes on AKShttps://learn.microsoft.com/en-us/azure/aks/azure-netapp-files-nfs
Provision Azure NetApp Files SMB volumes on AKShttps://learn.microsoft.com/en-us/azure/aks/azure-netapp-files-smb
Create and mount Linux NFS server volumes in AKShttps://learn.microsoft.com/en-us/azure/aks/azure-nfs-volume
Configure and tune AKS cluster autoscaler behaviorhttps://learn.microsoft.com/en-us/azure/aks/cluster-autoscaler
Manage AKS cluster extensions lifecycle via ARMhttps://learn.microsoft.com/en-us/azure/aks/cluster-extensions
Deploy and configure AKS Cluster Health Monitorhttps://learn.microsoft.com/en-us/azure/aks/cluster-health-monitor
Configure AKS scheduler profiles and pluginshttps://learn.microsoft.com/en-us/azure/aks/configure-aks-scheduler
Configure Azure CNI networking for AKS clustershttps://learn.microsoft.com/en-us/azure/aks/configure-azure-cni
Configure Azure CNI dynamic IP allocation in AKShttps://learn.microsoft.com/en-us/azure/aks/configure-azure-cni-dynamic-ip-allocation
Configure dual-stack IPv4/IPv6 networking in AKShttps://learn.microsoft.com/en-us/azure/aks/configure-dual-stack
Configure dual-stack IPv4/IPv6 networking in AKShttps://learn.microsoft.com/en-us/azure/aks/configure-dual-stack
Configure networking and flex node pools in AKShttps://learn.microsoft.com/en-us/azure/aks/configure-flex-nodes-networking
Configure kube-proxy backends on AKS clustershttps://learn.microsoft.com/en-us/azure/aks/configure-kube-proxy
Configure kubenet networking for Azure Kubernetes Service clustershttps://learn.microsoft.com/en-us/azure/aks/configure-kubenet
Configure Public Standard Load Balancer settings in AKShttps://learn.microsoft.com/en-us/azure/aks/configure-load-balancer-standard
Configure AKS clusters for multi-NIC pod supporthttps://learn.microsoft.com/en-us/azure/aks/configure-multiple-network-interfaces-for-pods
Configure AKS scheduler profiles for node bin packinghttps://learn.microsoft.com/en-us/azure/aks/configure-node-binpack-scheduler
Configure managed Kueue queues and priorities on AKShttps://learn.microsoft.com/en-us/azure/aks/configure-queues-with-automatic-resource-flavors
Configure Kueue queues for Ray jobs on AKShttps://learn.microsoft.com/en-us/azure/aks/configure-ray-kueue-queues
Set up Static Egress Gateway for AKS podshttps://learn.microsoft.com/en-us/azure/aks/configure-static-egress-gateway
Configure Container Network Observability for AKS monitoringhttps://learn.microsoft.com/en-us/azure/aks/container-network-observability-how-to
Configure Cilium mTLS encryption on AKS with ACNShttps://learn.microsoft.com/en-us/azure/aks/container-network-security-cilium-mutual-tls-how-to
Configure CoreDNS autoscaling settings in AKShttps://learn.microsoft.com/en-us/azure/aks/coredns-autoscale
Customize CoreDNS behavior in AKS clustershttps://learn.microsoft.com/en-us/azure/aks/coredns-custom
Monitor and reduce AKS idle costs with cost analysishttps://learn.microsoft.com/en-us/azure/aks/cost-analysis-idle-costs
Create Azure infrastructure for MongoDB on AKShttps://learn.microsoft.com/en-us/azure/aks/create-mongodb-infrastructure
Configure private NGINX ingress with Azure private DNShttps://learn.microsoft.com/en-us/azure/aks/create-nginx-ingress-private-controller
Create infrastructure for HA PostgreSQL on AKS with CloudNativePGhttps://learn.microsoft.com/en-us/azure/aks/create-postgresql-ha
Create Azure infrastructure for Valkey clusters on AKShttps://learn.microsoft.com/en-us/azure/aks/create-valkey-infrastructure
Configure Azure Disk persistent volumes in AKShttps://learn.microsoft.com/en-us/azure/aks/create-volume-azure-disk
Configure Azure Files persistent volumes in AKShttps://learn.microsoft.com/en-us/azure/aks/create-volume-azure-files
Tune Azure Key Vault CSI Driver configuration on AKShttps://learn.microsoft.com/en-us/azure/aks/csi-secrets-store-configuration-options
Configure CSI storage drivers for AKS workloadshttps://learn.microsoft.com/en-us/azure/aks/csi-storage-drivers
Configure OS and kubelet settings for AKS nodeshttps://learn.microsoft.com/en-us/azure/aks/custom-node-configuration
Configure custom node parameters for AKS node poolshttps://learn.microsoft.com/en-us/azure/aks/custom-node-configuration-reference
Customize resource configuration for AKS managed add-onshttps://learn.microsoft.com/en-us/azure/aks/customize-resource-configuration
Configure Dapr extension settings on AKS and Archttps://learn.microsoft.com/en-us/azure/aks/dapr-settings
Delete AKS node pools and understand side effectshttps://learn.microsoft.com/en-us/azure/aks/delete-node-pool
Schedule and deploy batch jobs with Kueue on AKShttps://learn.microsoft.com/en-us/azure/aks/deploy-batch-jobs-with-kueue
Deploy and manage AKS cluster extensions with Azure CLIhttps://learn.microsoft.com/en-us/azure/aks/deploy-extensions-az-cli
Configure and deploy a MongoDB cluster on AKShttps://learn.microsoft.com/en-us/azure/aks/deploy-mongodb-cluster
Deploy a highly available PostgreSQL database on AKShttps://learn.microsoft.com/en-us/azure/aks/deploy-postgresql-ha
Provision Ray and Kueue infrastructure on AKShttps://learn.microsoft.com/en-us/azure/aks/deploy-ray-infrastructure
Configure and deploy a Valkey cluster on AKShttps://learn.microsoft.com/en-us/azure/aks/deploy-valkey-cluster
Customize AKS egress using outbound type settingshttps://learn.microsoft.com/en-us/azure/aks/egress-outboundtype
Configure AKS egress with user-defined routeshttps://learn.microsoft.com/en-us/azure/aks/egress-udr
Enable full caching for AKS ephemeral OS diskshttps://learn.microsoft.com/en-us/azure/aks/full-cache-ephemeral-os-disk
Create infrastructure for highly available GitHub Actions on AKS with Azure Fileshttps://learn.microsoft.com/en-us/azure/aks/github-actions-azure-files-create-infrastructure
Configure GPU profiling stack on AKS clustershttps://learn.microsoft.com/en-us/azure/aks/gpu-profiling
Set up FQDN filtering policies with ACNS on AKShttps://learn.microsoft.com/en-us/azure/aks/how-to-apply-fqdn-filtering-policies
Configure L7 network policies with ACNS on AKShttps://learn.microsoft.com/en-us/azure/aks/how-to-apply-l7-policies
Configure and use Container Network Insights Agent on AKShttps://learn.microsoft.com/en-us/azure/aks/how-to-configure-container-network-insights-agent
Configure AKS container network logging with ACNShttps://learn.microsoft.com/en-us/azure/aks/how-to-configure-container-network-logs
Configure AKS container network metrics filtering with Ciliumhttps://learn.microsoft.com/en-us/azure/aks/how-to-configure-container-network-metrics-filtering
Enable and configure eBPF Host Routing on AKShttps://learn.microsoft.com/en-us/azure/aks/how-to-enable-ebpf-host-routing
Configure HTTP proxy settings for AKS nodeshttps://learn.microsoft.com/en-us/azure/aks/http-proxy
Configure identity bindings for AKS workload identitieshttps://learn.microsoft.com/en-us/azure/aks/identity-bindings
Install and configure Inspektor Gadget on AKShttps://learn.microsoft.com/en-us/azure/aks/inspektor-gadget-configure
Configure Istio ingress gateways on Azure Kubernetes Servicehttps://learn.microsoft.com/en-us/azure/aks/istio-deploy-ingress
Configure Istio Gateway API ingress on AKShttps://learn.microsoft.com/en-us/azure/aks/istio-gateway-api
Configure MeshConfig and supported settings for Istio add-on on AKShttps://learn.microsoft.com/en-us/azure/aks/istio-meshconfig
Enable and configure native sidecar mode for Istio add-on on AKShttps://learn.microsoft.com/en-us/azure/aks/istio-native-sidecar
Configure telemetry and logging for AKS Istio-based service meshhttps://learn.microsoft.com/en-us/azure/aks/istio-telemetry
Configure monitoring and networking for Kafka on AKS using Strimzihttps://learn.microsoft.com/en-us/azure/aks/kafka-configure
Deploy Strimzi and a Kafka cluster on AKShttps://learn.microsoft.com/en-us/azure/aks/kafka-deploy
Prepare Azure infrastructure for Kafka on AKS with Strimzihttps://learn.microsoft.com/en-us/azure/aks/kafka-infrastructure
Configure KMS data encryption for AKS Kubernetes secretshttps://learn.microsoft.com/en-us/azure/aks/kms-data-encryption
Manage AKS Kubernetes resources through Azure portal UIhttps://learn.microsoft.com/en-us/azure/aks/kubernetes-portal
Use Public Standard Load Balancer with AKShttps://learn.microsoft.com/en-us/azure/aks/load-balancer-standard
Configure LocalDNS profiles and modes in AKShttps://learn.microsoft.com/en-us/azure/aks/localdns-custom
Manage, update, and remove AKS flex nodeshttps://learn.microsoft.com/en-us/azure/aks/manage-and-remove-flex-nodes
Use managed namespaces to isolate AKS workloadshttps://learn.microsoft.com/en-us/azure/aks/managed-namespaces
Configure monitoring for MongoDB clusters on AKS with PMMhttps://learn.microsoft.com/en-us/azure/aks/monitor-aks-mongodb
Reference monitoring data schema for Azure AKShttps://learn.microsoft.com/en-us/azure/aks/monitor-aks-reference
Configure GPU metrics collection and monitoring in AKShttps://learn.microsoft.com/en-us/azure/aks/monitor-gpu-metrics
Configure managed and user-assigned NAT gateways for AKShttps://learn.microsoft.com/en-us/azure/aks/nat-gateway
Configure AKS pod eviction on VM freeze eventshttps://learn.microsoft.com/en-us/azure/aks/node-auto-drain-evict-on-freeze
Configure AKSNodeClass for AKS node auto-provisioninghttps://learn.microsoft.com/en-us/azure/aks/node-auto-provisioning-aksnodeclass
Configure disruption policies for AKS NAP nodeshttps://learn.microsoft.com/en-us/azure/aks/node-auto-provisioning-disruption
Configure networking for AKS node auto-provisioninghttps://learn.microsoft.com/en-us/azure/aks/node-auto-provisioning-networking
Configure AKS Node Auto-Provisioning node poolshttps://learn.microsoft.com/en-us/azure/aks/node-auto-provisioning-node-pools
Enable and tune AKS node hardening settingshttps://learn.microsoft.com/en-us/azure/aks/node-hardening
Snapshot AKS node pools for repeatable environmentshttps://learn.microsoft.com/en-us/azure/aks/node-pool-snapshot
Configure NVIDIA GPU Operator on AKS clustershttps://learn.microsoft.com/en-us/azure/aks/nvidia-gpu-operator
Download and configure the OSM client binary for AKShttps://learn.microsoft.com/en-us/azure/aks/open-service-mesh-binary
Configure cost-optimized add-on scaling in AKShttps://learn.microsoft.com/en-us/azure/aks/optimized-addon-scaling
Prepare AKS clusters for flex node supporthttps://learn.microsoft.com/en-us/azure/aks/prepare-aks-cluster-for-flex-nodes
Configure and manage Prepared Image Specifications in AKShttps://learn.microsoft.com/en-us/azure/aks/prepared-image-specification
Configure AKS private API server access across VNetshttps://learn.microsoft.com/en-us/azure/aks/private-apiserver-vnet-integration-cluster
Manually and automatically scale AKS node poolshttps://learn.microsoft.com/en-us/azure/aks/scale-node-pools
Enable shared health probes for AKS Serviceshttps://learn.microsoft.com/en-us/azure/aks/shared-health-probes
Use static public IPs with AKS load balancershttps://learn.microsoft.com/en-us/azure/aks/static-ip
Update Key Vault mode for AKS KMS encryptionhttps://learn.microsoft.com/en-us/azure/aks/update-kms-key-vault
Configure AKS node pool rolling upgrade settingshttps://learn.microsoft.com/en-us/azure/aks/upgrade-aks-node-pools-rolling
Configure Advanced Container Networking Services on AKShttps://learn.microsoft.com/en-us/azure/aks/use-advanced-container-networking-services
Configure AMD GPU node pools on AKShttps://learn.microsoft.com/en-us/azure/aks/use-amd-gpus
Run AKS node pools on Azure Dedicated Hostshttps://learn.microsoft.com/en-us/azure/aks/use-azure-dedicated-hosts
Configure custom CNI plugins for Azure Kubernetes Servicehttps://learn.microsoft.com/en-us/azure/aks/use-byo-cni
Configure capacity reservation groups for AKS node poolshttps://learn.microsoft.com/en-us/azure/aks/use-capacity-reservation-groups
Use eTags for concurrency control in AKS APIshttps://learn.microsoft.com/en-us/azure/aks/use-etags
Use Kubernetes node pool labels effectively in AKShttps://learn.microsoft.com/en-us/azure/aks/use-labels
Configure Metrics Server VPA on AKS clustershttps://learn.microsoft.com/en-us/azure/aks/use-metrics-server-vertical-pod-autoscaler
Configure node auto-provisioning in Azure Kubernetes Servicehttps://learn.microsoft.com/en-us/azure/aks/use-node-auto-provisioning
Assign and manage node public IPs in AKShttps://learn.microsoft.com/en-us/azure/aks/use-node-public-ips
Configure node taints for workload scheduling in AKShttps://learn.microsoft.com/en-us/azure/aks/use-node-taints
Configure and use NVIDIA GPUs on AKS clustershttps://learn.microsoft.com/en-us/azure/aks/use-nvidia-gpu
Configure pod sandboxing with Kata on AKShttps://learn.microsoft.com/en-us/azure/aks/use-pod-sandboxing
Configure Premium SSD v2 disks for AKS workloadshttps://learn.microsoft.com/en-us/azure/aks/use-premium-v2-disks
Configure Pod Security Admission in AKS clustershttps://learn.microsoft.com/en-us/azure/aks/use-psa
Configure and apply Azure tags in AKShttps://learn.microsoft.com/en-us/azure/aks/use-tags
Enable and configure Ultra Disks on AKShttps://learn.microsoft.com/en-us/azure/aks/use-ultra-disks
Deploy and manage Vertical Pod Autoscaler on AKShttps://learn.microsoft.com/en-us/azure/aks/use-vertical-pod-autoscaler
Configure Windows GPU node pools on AKShttps://learn.microsoft.com/en-us/azure/aks/use-windows-gpu
Use Windows HostProcess and privileged containers on AKShttps://learn.microsoft.com/en-us/azure/aks/use-windows-hpc
Reference for AKS Vertical Pod Autoscaler APIhttps://learn.microsoft.com/en-us/azure/aks/vertical-pod-autoscaler-api-reference
Configure AKS clusters to use virtual nodeshttps://learn.microsoft.com/en-us/azure/aks/virtual-nodes
Configure AKS virtual nodes with Azure CLI and CNIhttps://learn.microsoft.com/en-us/azure/aks/virtual-nodes-cli
Configure AKS virtual nodes using Azure portalhttps://learn.microsoft.com/en-us/azure/aks/virtual-nodes-portal
Enable and use Virtual Nodes v2 in AKShttps://learn.microsoft.com/en-us/azure/aks/virtual-nodes-v2
Create AKS Windows node pools using containerd runtimehttps://learn.microsoft.com/en-us/azure/aks/windows-containerd
Configure AKS cluster with Entra Workload IDhttps://learn.microsoft.com/en-us/azure/aks/workload-identity-deploy-cluster
Access the Kubernetes API of an Azure Kubernetes Fleet hub clusterhttps://learn.microsoft.com/en-us/azure/kubernetes-fleet/access-fleet-hub-cluster-kubernetes-api
Configure cross-cluster networking in Azure Kubernetes Fleethttps://learn.microsoft.com/en-us/azure/kubernetes-fleet/howto-configure-use-cross-cluster-networking
Set up DNS-based multi-cluster load balancing in Fleethttps://learn.microsoft.com/en-us/azure/kubernetes-fleet/howto-dns-load-balancing
Configure Managed Fleet Namespaces in Azure Kubernetes Fleethttps://learn.microsoft.com/en-us/azure/kubernetes-fleet/howto-managed-namespaces
Configure Azure Monitor alerts for Fleet update runshttps://learn.microsoft.com/en-us/azure/kubernetes-fleet/howto-monitor-update-runs
Create reusable rollout strategies for Fleet placementhttps://learn.microsoft.com/en-us/azure/kubernetes-fleet/howto-placement-create-rollout-strategies
Configure Azure Monitor alerts for Fleet Manager gateshttps://learn.microsoft.com/en-us/azure/kubernetes-fleet/howto-send-email-pending-gate
Configure resource overrides in AKS Fleet placementshttps://learn.microsoft.com/en-us/azure/kubernetes-fleet/howto-use-overrides-customize-resources-placement
Configure Azure Policy to enforce AKS fleet enrollmenthttps://learn.microsoft.com/en-us/azure/kubernetes-fleet/howto-use-policy-to-add-clusters-to-fleet
Configure multi-cluster L4 load balancing with Fleethttps://learn.microsoft.com/en-us/azure/kubernetes-fleet/l4-load-balancing
Use envelope objects for safe Fleet resource propagationhttps://learn.microsoft.com/en-us/azure/kubernetes-fleet/quickstart-envelope-reserved-resources
Configure auto-upgrade profiles in Kubernetes Fleet Managerhttps://learn.microsoft.com/en-us/azure/kubernetes-fleet/update-automation
Define reusable multi-cluster update strategies in Fleet Managerhttps://learn.microsoft.com/en-us/azure/kubernetes-fleet/update-create-update-strategy
Configure approval gates in Fleet Manager update strategieshttps://learn.microsoft.com/en-us/azure/kubernetes-fleet/update-strategies-gates-approvals
Set scheduled start gates for Fleet Manager updateshttps://learn.microsoft.com/en-us/azure/kubernetes-fleet/update-strategies-gates-scheduled-start
Configure taints and tolerations for Fleet resource propagationhttps://learn.microsoft.com/en-us/azure/kubernetes-fleet/use-taints-tolerations

Integrations & Coding Patterns

TopicURL
Fine-tune and deploy models with AKS AI toolchainhttps://learn.microsoft.com/en-us/azure/aks/ai-toolchain-operator-fine-tune
Integrate MCP servers with KAITO on AKShttps://learn.microsoft.com/en-us/azure/aks/ai-toolchain-operator-mcp
Configure tool calling for KAITO inference on AKShttps://learn.microsoft.com/en-us/azure/aks/ai-toolchain-operator-tool-calling
Manage and troubleshoot Headlamp plugins in AKS desktophttps://learn.microsoft.com/en-us/azure/aks/aks-desktop-headlamp-plugins
Attach AKS extension in VS Code to Azure Container Registryhttps://learn.microsoft.com/en-us/azure/aks/aks-extension-attach-azure-container-registry
Deploy AI models on AKS using KAITO in VS Codehttps://learn.microsoft.com/en-us/azure/aks/aks-extension-kaito
Autoscale AKS GPU workloads with KEDA and DCGMhttps://learn.microsoft.com/en-us/azure/aks/autoscale-gpu-workloads-with-keda
Integrate Azure Blob storage volumes with AKS via CSIhttps://learn.microsoft.com/en-us/azure/aks/create-volume-azure-blob-storage
Integrate AKS with Azure Key Vault via CSI Driverhttps://learn.microsoft.com/en-us/azure/aks/csi-secrets-store-driver
Configure Secrets Store CSI and NGINX TLS on AKShttps://learn.microsoft.com/en-us/azure/aks/csi-secrets-store-nginx-tls
Refactor EDW application code to use Azure serviceshttps://learn.microsoft.com/en-us/azure/aks/eks-edw-refactor
Use kubectl gadget to inspect AKS workloadshttps://learn.microsoft.com/en-us/azure/aks/inspektor-gadget-run-gadgets
Integrate AKS Istio add-on metrics with Azure Managed Prometheushttps://learn.microsoft.com/en-us/azure/aks/istio-metrics-managed-prometheus
Onboard custom HuggingFace models with KAITO on AKShttps://learn.microsoft.com/en-us/azure/aks/kaito-custom-inference-model
Use KEDA integrations with Azure and OSS serviceshttps://learn.microsoft.com/en-us/azure/aks/keda-integrations
Use Azure and OSS integrations with OSM add-on on AKShttps://learn.microsoft.com/en-us/azure/aks/open-service-mesh-integrations
Run vLLM batch inference with Ray on AKShttps://learn.microsoft.com/en-us/azure/aks/ray-batch-inference
Fine-tune Aurora weather model with Ray on AKShttps://learn.microsoft.com/en-us/azure/aks/ray-finetune-aurora
Serve fine-tuned Aurora model with Ray Serve on AKShttps://learn.microsoft.com/en-us/azure/aks/ray-online-serving
Distributed LLM training with Ray on AKShttps://learn.microsoft.com/en-us/azure/aks/ray-train-llm
Use AKS Vulnerability Data API programmaticallyhttps://learn.microsoft.com/en-us/azure/aks/security-vulnerability-api-reference
Use Telepresence with AKS for local microservice debugginghttps://learn.microsoft.com/en-us/azure/aks/use-telepresence-aks
Deploy Mongo Express client to connect to MongoDB on AKShttps://learn.microsoft.com/en-us/azure/aks/validate-mongodb-cluster

Deployment

TopicURL
Deploy AI models on AKS with AI toolchain operatorhttps://learn.microsoft.com/en-us/azure/aks/ai-toolchain-operator
Deploy AI models on AKS using portal AI toolchainhttps://learn.microsoft.com/en-us/azure/aks/ai-toolchain-operator-azure-portal
Migrate AKS app routing from NGINX to Gateway APIhttps://learn.microsoft.com/en-us/azure/aks/app-routing-nginx-to-gateway-api-migration
Configure automatic upgrades for AKS clustershttps://learn.microsoft.com/en-us/azure/aks/auto-upgrade-cluster
Set up automated deployments to AKS with CI/CDhttps://learn.microsoft.com/en-us/azure/aks/automated-deployments
Provision production-ready AKS infrastructure on Azurehttps://learn.microsoft.com/en-us/azure/aks/create-aks-infrastructure
Move Azure Disk PVs between AKS clustershttps://learn.microsoft.com/en-us/azure/aks/csi-disk-move-subscriptions
Migrate AKS in-tree storage classes to CSI drivershttps://learn.microsoft.com/en-us/azure/aks/csi-migrate-in-tree-volumes
Install Dapr extension on AKS and Arc-enabled clustershttps://learn.microsoft.com/en-us/azure/aks/dapr
Deploy Dapr Workflow applications on AKS via extensionhttps://learn.microsoft.com/en-us/azure/aks/dapr-workflow
Programmatically deploy Azure Kubernetes applications with Azure CLIhttps://learn.microsoft.com/en-us/azure/aks/deploy-application-az-cli
Deploy Azure Kubernetes applications using ARM templateshttps://learn.microsoft.com/en-us/azure/aks/deploy-application-template
Deploy production AKS clusters with Terraform AVMhttps://learn.microsoft.com/en-us/azure/aks/deploy-cluster-terraform-verified-module
Deploy AKS clusters with Confidential containers via CLIhttps://learn.microsoft.com/en-us/azure/aks/deploy-confidential-containers-default-policy
Deploy Kubernetes applications from Azure Marketplace to AKShttps://learn.microsoft.com/en-us/azure/aks/deploy-marketplace
Deploy and run AKS Periscope diagnosticshttps://learn.microsoft.com/en-us/azure/aks/deploy-periscope-aks
Deploy SpinKube on AKS for serverless Wasm workloadshttps://learn.microsoft.com/en-us/azure/aks/deploy-spinkube
Configure Azure Pipelines CI/CD to deploy to AKShttps://learn.microsoft.com/en-us/azure/aks/devops-pipeline
Install and use Draft extension on AKShttps://learn.microsoft.com/en-us/azure/aks/draft
Deploy and validate AWS EDW workload on Azure AKShttps://learn.microsoft.com/en-us/azure/aks/eks-edw-deploy
Prepare AKS and infrastructure for EDW workloadhttps://learn.microsoft.com/en-us/azure/aks/eks-edw-prepare
Deploy AWS Yelb web application to Azure AKShttps://learn.microsoft.com/en-us/azure/aks/eks-web-deploy
Prepare production-ready AKS infrastructure for web appshttps://learn.microsoft.com/en-us/azure/aks/eks-web-prepare
Migrate Yelb web application from EKS to AKShttps://learn.microsoft.com/en-us/azure/aks/eks-web-refactor
Deploy AKS with Defender for Containers using Terraformhttps://learn.microsoft.com/en-us/azure/aks/enable-defender-for-containers-terraform
Enable KEDA add-on on existing AKS clustershttps://learn.microsoft.com/en-us/azure/aks/enable-keda-existing-cluster
Deploy highly available GitHub Actions runners on AKShttps://learn.microsoft.com/en-us/azure/aks/github-actions-azure-files-deploy-test
Deploy Istio-based service mesh add-on on AKShttps://learn.microsoft.com/en-us/azure/aks/istio-deploy-addon
Uninstall Istio-based service mesh add-on and clean AKS resourceshttps://learn.microsoft.com/en-us/azure/aks/istio-uninstall-addon
Upgrade Istio-based service mesh add-on revisions on AKShttps://learn.microsoft.com/en-us/azure/aks/istio-upgrade
Deploy KEDA add-on to AKS using ARM templateshttps://learn.microsoft.com/en-us/azure/aks/keda-deploy-add-on-arm
Deploy AKS KEDA add-on using Azure CLIhttps://learn.microsoft.com/en-us/azure/aks/keda-deploy-add-on-cli
Use GitHub Actions to build and deploy to AKShttps://learn.microsoft.com/en-us/azure/aks/kubernetes-action
Install and use Helm to deploy apps on AKShttps://learn.microsoft.com/en-us/azure/aks/kubernetes-helm
Migrate AKS clusters from autoscaler to node auto-provisioninghttps://learn.microsoft.com/en-us/azure/aks/migrate-from-autoscaler-to-node-auto-provisioning
Migrate AKS KMS v2 to infrastructure encryptionhttps://learn.microsoft.com/en-us/azure/aks/migrate-key-management-service-platform-managed-key-customer-managed-key
Deploy Open Service Mesh add-on on AKS using Bicep templateshttps://learn.microsoft.com/en-us/azure/aks/open-service-mesh-deploy-addon-bicep
Uninstall Open Service Mesh add-on and clean up AKS resourceshttps://learn.microsoft.com/en-us/azure/aks/open-service-mesh-uninstall-add-on
Deploy and use OpenFaaS on Azure Kubernetes Servicehttps://learn.microsoft.com/en-us/azure/aks/openfaas
Track AKS release rollout status by regionhttps://learn.microsoft.com/en-us/azure/aks/release-tracker
Migrate AKS clusters to new Azure CNI IPAM and data planeshttps://learn.microsoft.com/en-us/azure/aks/update-azure-cni
Upgrade Azure Kubernetes Service control plane safelyhttps://learn.microsoft.com/en-us/azure/aks/upgrade-aks-control-plane
Automate AKS node upgrades using GitHub Actionshttps://learn.microsoft.com/en-us/azure/aks/upgrade-github-actions
Run Flyte data and ML pipelines on AKShttps://learn.microsoft.com/en-us/azure/aks/use-flyte
Deploy wasmCloud on AKS for distributed Wasm appshttps://learn.microsoft.com/en-us/azure/aks/wasmcloud
Plan zero-downtime migrations and releases on AKShttps://learn.microsoft.com/en-us/azure/aks/zero-downtime-migration
Set up automated multi-cluster deployments with Fleet Managerhttps://learn.microsoft.com/en-us/azure/kubernetes-fleet/howto-automated-deployments
Run staged rollout deployments for Fleet placementshttps://learn.microsoft.com/en-us/azure/kubernetes-fleet/howto-staged-update-run

FAQ

What does the azure-kubernetes-service skill do?

Expert knowledge for Azure Kubernetes Service (AKS) development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when securing AKS with Entra/RBAC, configuring Fleet, GPUs or KEDA, or running AI/ML, Wasm, or PCI workloads, and other Azure Kubernetes Service (AKS) related development tasks. Not for Azure Container Apps (use azure-container-apps), Azure Container Instances (use azure-container-instances), Azure Container Registry (use azure-container-registry), Azure Red Hat OpenShift (use azure-redhat-openshift).

How do I install azure-kubernetes-service?

Run npx skills add https://github.com/microsoftdocs/agent-skills --skill azure-kubernetes-service in your project. The skills CLI detects the agents you use and copies the skill into the right folder. For Claude Code you can also place the skill folder at ~/.claude/skills/azure-kubernetes-service/ (personal) or .claude/skills/azure-kubernetes-service/ (project).

Which AI agents can use azure-kubernetes-service?

Any agent that supports the open Agent Skills format (a folder with a SKILL.md file), including Claude Code, Codex, Cursor, GitHub Copilot, Gemini CLI, Windsurf, Cline, OpenCode and more.

Is azure-kubernetes-service safe to install?

No partner security audit is available yet. Skills can run commands and scripts, so read the SKILL.md and any bundled files before installing.

Who maintains azure-kubernetes-service?

It is published by microsoftdocs in microsoftdocs/agent-skills. It has 242 recorded installs.

More from microsoftdocs/agent-skills

View all →

azure-container-apps

microsoftdocs/agent-skills

Expert knowledge for Azure Container Apps development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when configuring ACA auth/networking, workload profiles/GPUs, CI/CD deployments, KEDA/Dapr scaling, or Java microservices, and other Azure Container Apps related development tasks. Not for Azure App Service (use azure-app-service), Azure Functions (use azure-functions), Azure Kubernetes Service (AKS) (use azure-kubernetes-service), Azure Spring Apps (use azure-spring-apps).

DevOps & Cloud1.3K installs

azure-sql-database

microsoftdocs/agent-skills

Expert knowledge for Azure SQL Database development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when choosing DTU/vCore tiers, configuring serverless or Hyperscale, geo-replication/DR, CI/CD, or Terraform, and other Azure SQL Database related development tasks. Not for Azure SQL Managed Instance (use azure-sql-managed-instance), SQL Server on Azure Virtual Machines (use azure-sql-virtual-machines), Azure Cosmos DB (use azure-cosmos-db), Azure Data Factory (use azure-data-factory).

Data & Databases1.3K installs

azure-well-architected

microsoftdocs/agent-skills

Expert guidance for designing, assessing, and optimizing Azure workloads using Azure Well Architected. Covers design review checklists, recommendations, design principles, tradeoffs, service guides, workload patterns, and assessment questions. Use when designing AI/HPC/SaaS workloads, AVD/AVS deployments, WAF assessments, or App Service/AKS/SQL architectures, and other Azure Well Architected related development tasks.

DevOps & Cloud646 installs

azure-pipelines

microsoftdocs/agent-skills

Expert knowledge for Azure Pipelines development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when configuring YAML pipelines, agents, service connections, Key Vault secrets, or Kubernetes/web app deployments, and other Azure Pipelines related development tasks. Not for Azure DevOps (use azure-devops), Azure Boards (use azure-boards), Azure Repos (use azure-repos), Azure Test Plans (use azure-test-plans).

DevOps & Cloud439 installs

azure-architecture

microsoftdocs/agent-skills

Expert guidance for designing Azure solutions using Azure Architecture. Covers reference architectures, solution ideas, design patterns, technology choices, architecture styles, best practices, anti-patterns, example workloads, and migration guides. Use when designing AKS or App Service apps, SAP/ERP or IoT workloads, hybrid/Arc setups, or AI/ML solutions on Azure, and other Azure Architecture related development tasks.

Code Quality & Workflow419 installs

azure-devops

microsoftdocs/agent-skills

Expert knowledge for Azure DevOps development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when managing org/projects, repos, pipelines, work items, dashboards/analytics, or Azure DevOps Server deployments, and other Azure DevOps related development tasks. Not for Azure Boards (use azure-boards), Azure Pipelines (use azure-pipelines), Azure Repos (use azure-repos), Azure Test Plans (use azure-test-plans).

DevOps & Cloud407 installs

Popular devops & cloud skills

View category →

microsoft-foundry

microsoft/azure-skills

Build, deploy, evaluate, optimize, fine-tune, and manage Microsoft Foundry agents, models, and resources end to end. USE FOR: foundry, azd ai agent, azd provision/deploy, hosted agent scaffold/develop/run/deploy/troubleshoot, prompt agent create, managed harness agent create, GitHub Copilot harness agent, create agent, update agent, add tool to agent, invoke agent, agent insights, evaluate agent, batch eval, continuous eval, continuous monitoring, agent CI/CD, optimize prompt, improve prompt, optimize agent instructions, Agent Optimizer scaffold, dataset curation from traces, deploy model, model fine-tuning (SFT/DPO/RFT), Foundry project, RBAC, role assignment, permissions, quota, capacity, region, deployment failure, AI Services, create Foundry resource, knowledge index, customize deployment, onboard, availability, training-data, grader, distillation, large file upload. DO NOT USE FOR: Azure Functions, App Service, general Azure deploy (use azure-deploy), general Azure prep (use azure

OfficialDevOps & Cloud579.1K installs

azure-diagnostics

microsoft/azure-skills

Debug Azure production issues on Azure using AppLens, Azure Monitor, resource health, and safe triage. WHEN: debug production issues, troubleshoot app service, app service high CPU, app service deployment failure, troubleshoot container apps, container app 503 or target port mismatch, troubleshoot functions, function telemetry missing or stopped after a config/connection-string change, troubleshoot AKS, VM RDP, Linux SSH, VM black screen, can't connect to VM, reset VM password, NSG or firewall blocking, kubectl cannot connect, kube-system/CoreDNS failures, pod pending, crashloop, node not ready, upgrade failures, analyze logs, KQL, insights, image pull failures, cold start issues, health probe failures, resource health, root cause of errors, troubleshoot event hubs, troubleshoot service bus, messaging SDK error, AMQP connection failure, message lock lost, lock renewal during long-running processing, service bus dead letter.

OfficialDevOps & Cloud569.8K installs

azure-prepare

microsoft/azure-skills

Prepare azd-based Azure projects for deployment: generates azure.yaml, infrastructure (Bicep/Terraform), and Dockerfiles for the Azure Developer CLI (azd) workflow. USE ONLY when the user explicitly wants to use azd as the deployment tool, or the project already has an azure.yaml file. DO NOT USE FOR: non-azd deployments, Python App Service code-only deploys (use python-appservice-deploy), or cross-cloud migration (use azure-cloud-migrate). WHEN: prepare app for azd, create azure.yaml, set up azd infrastructure, modernize app for Azure with azd, deploy with azd, function app, timer trigger, service bus trigger, event-driven function, managed identity, generate Bicep, generate Terraform, create and deploy to Azure.

OfficialDevOps & Cloud569K installs

azure-ai

microsoft/azure-skills

Use for Azure AI: Search, Speech, OpenAI, Document Intelligence. Helps with search, vector/hybrid search, speech-to-text, text-to-speech, transcription, OCR. WHEN: AI Search, query search, vector search, hybrid search, semantic search, speech-to-text, text-to-speech, transcribe, OCR, convert text to speech.

OfficialDevOps & Cloud568.8K installs

azure-deploy

microsoft/azure-skills

Execute Azure deployments for ALREADY-PREPARED applications that have existing .azure/deployment-plan.md and infrastructure files. DO NOT use this skill when the user asks to CREATE a new application — use azure-prepare instead. This skill runs azd up, azd deploy, terraform apply, and az deployment commands with built-in error recovery. Requires .azure/deployment-plan.md from azure-prepare and validated status from azure-validate. WHEN: "run azd up", "run azd deploy", "execute deployment", "push to production", "push to cloud", "go live", "ship it", "bicep deploy", "terraform apply", "publish to Azure", "launch on Azure". DO NOT USE WHEN: "create and deploy", "build and deploy", "create a new app", "set up infrastructure", "create and deploy to Azure using Terraform" — use azure-prepare for these.

OfficialDevOps & Cloud568.6K installs

azure-validate

microsoft/azure-skills

Pre-deployment validation for Azure readiness. Run deep checks on configuration, infrastructure (Bicep or Terraform), RBAC role assignments, managed identity permissions, and prerequisites before deploying. WHEN: validate my app, check deployment readiness, run preflight checks, verify configuration, check if ready to deploy, validate azure.yaml, validate Bicep, test before deploying, troubleshoot deployment errors, validate Azure Functions, validate function app, validate serverless deployment, verify RBAC roles, check role assignments, review managed identity permissions, what-if analysis, validate Container Apps deployment.

OfficialDevOps & Cloud568K installs