azure-kubernetes-service

Azure Kubernetes Service (AKS) Skill

This skill provides expert guidance for Azure Kubernetes Service (AKS). Covers troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., L35-L120), use read_file with the specified lines. For categories with file links (e.g., [security.md](security.md)), use read_file on the linked reference file

IMPORTANT for Agent: If metadata.generated_at is more than 3 months old, suggest the user pull the latest version from the repository. If mcp_microsoftdocs tools are not available, suggest the user install it: Installation Guide

This skill requires network access to fetch documentation content:

• Preferred: Use mcp_microsoftdocs:microsoft_docs_fetch with query string from=learn-agent-skill. Returns Markdown.
• Fallback: Use fetch_webpage with query string from=learn-agent-skill&accept=text/markdown. Returns Markdown.

Category Index

Category	Lines	Description
Troubleshooting	L37-L64	Diagnosing and fixing AKS cluster issues: networking, DNS, upgrades, workloads, GPU/Windows nodes, Fleet, encryption, logs, and add-ons using tools like ACNS, Desktop Insights, and NPD.
Best Practices	L65-L115	Operational best practices for running AKS in production: upgrades, reliability, performance, cost, security, networking, storage, autoscaling, multi-tenancy, and workload isolation.
Decision Making	L116-L174	Guidance for planning and decision-making on AKS: migrations, upgrades, networking, scaling, cost optimization, compliance, OS/VM choices, and comparing AKS with other platforms/services.
Architecture & Design Patterns	L175-L203	Architectural patterns and design choices for AKS and Fleet: HA/DR (active-active/passive-cold), networking/ingress, PCI, GPUs, stateful apps, multi-region, and cross-cluster placement.
Limits & Quotas	L204-L230	AKS limits, SLAs, quotas, version/support policies, networking and outbound requirements, autoscaling and Istio/KEDA constraints, and node/system pool capacity and upgrade behavior
Security	L231-L315	Securing AKS clusters: identity/RBAC, Entra auth, managed identities, network isolation, encryption, CIS hardening, PCI controls, Azure Policy, secure node/ingress access, and key/cert management.
Configuration	L316-L481	Configuring AKS clusters and fleets: networking, storage, GPUs, autoscaling, security, routing/ingress, extensions, databases, monitoring, and node/fleet lifecycle and upgrade settings.
Integrations & Coding Patterns	L482-L508	Patterns and code for integrating AKS with AI toolchains, KAITO, Ray, storage, secrets, observability, autoscaling, dev tools, and external services (MCP, Istio, KEDA, Key Vault, etc.).
Deployment	L509-L558	Deploying and upgrading AKS clusters and apps, including CI/CD, service meshes, autoscaling, storage and networking migrations, AI/ML and Wasm workloads, and cross-cloud app migration.

Troubleshooting

Topic	URL
Diagnose and fix common Agentic CLI for AKS issues	https://learn.microsoft.com/en-us/azure/aks/agentic-cli-for-aks-troubleshoot
Diagnose AKS workloads with AKS Desktop AI assistant	https://learn.microsoft.com/en-us/azure/aks/aks-desktop-deploy-ai-assistant
Use AKS Desktop Insights to troubleshoot workloads	https://learn.microsoft.com/en-us/azure/aks/aks-desktop-deploy-troubleshooting
Support and troubleshooting options for Azure Kubernetes Service	https://learn.microsoft.com/en-us/azure/aks/aks-support-help
Troubleshoot AKS network issues using ACNS metrics and logs	https://learn.microsoft.com/en-us/azure/aks/container-network-observability-guide
Troubleshoot CoreDNS issues in AKS clusters	https://learn.microsoft.com/en-us/azure/aks/coredns-troubleshoot
Use CanIPull to diagnose AKS–ACR connectivity	https://learn.microsoft.com/en-us/azure/aks/deploy-canipull-application-aks
Use Kubernetes events to troubleshoot AKS clusters	https://learn.microsoft.com/en-us/azure/aks/events
Diagnose GPU node health with NPD in AKS	https://learn.microsoft.com/en-us/azure/aks/gpu-health-monitoring
Troubleshoot Inspektor Gadget extension issues on AKS	https://learn.microsoft.com/en-us/azure/aks/inspektor-gadget-troubleshoot
Monitor and troubleshoot AKS KMS etcd encryption	https://learn.microsoft.com/en-us/azure/aks/kms-observability
Collect and view kubelet logs from AKS nodes	https://learn.microsoft.com/en-us/azure/aks/kubelet-logs
Abort and inspect AKS long-running operations	https://learn.microsoft.com/en-us/azure/aks/manage-abort-operations
Diagnose and fix common Open Service Mesh add-on issues on AKS	https://learn.microsoft.com/en-us/azure/aks/open-service-mesh-troubleshoot
Use AKS security bulletins for vulnerability troubleshooting	https://learn.microsoft.com/en-us/azure/aks/security-bulletins/overview
Handle AKS upgrade blocks from deprecated Kubernetes APIs	https://learn.microsoft.com/en-us/azure/aks/stop-cluster-upgrade-api-breaking-changes
Troubleshoot Container Network Insights Agent issues on AKS	https://learn.microsoft.com/en-us/azure/aks/troubleshoot-container-network-insights-agent
Troubleshoot SNAT port exhaustion for AKS load balancers	https://learn.microsoft.com/en-us/azure/aks/troubleshoot-source-network-address-translation
Troubleshoot UDP packet drops in AKS clusters	https://learn.microsoft.com/en-us/azure/aks/troubleshoot-udp-packet-drops
Diagnose and resolve Azure AKS upgrade issues	https://learn.microsoft.com/en-us/azure/aks/upgrade-aks-faq
Resolve common Windows Server on AKS issues	https://learn.microsoft.com/en-us/azure/aks/windows-faq
Identify and migrate preview Azure Kubernetes Fleet CRDs to supported versions	https://learn.microsoft.com/en-us/azure/kubernetes-fleet/howto-migrate-preview-to-ga-fleets
Interpret Fleet resource placement status for debugging	https://learn.microsoft.com/en-us/azure/kubernetes-fleet/howto-understand-placement
Access and use Azure Fleet agent logs	https://learn.microsoft.com/en-us/azure/kubernetes-fleet/view-fleet-agent-logs

Best Practices

Topic	URL
Apply AKS production cluster upgrade strategies	https://learn.microsoft.com/en-us/azure/aks/aks-production-upgrade-strategies
Apply AKS deployment and cluster reliability practices	https://learn.microsoft.com/en-us/azure/aks/best-practices-app-cluster-reliability
Optimize AKS cluster costs with practical guidelines	https://learn.microsoft.com/en-us/azure/aks/best-practices-cost
Apply GPU best practices on AKS clusters	https://learn.microsoft.com/en-us/azure/aks/best-practices-gpu
Apply GPU observability best practices on AKS	https://learn.microsoft.com/en-us/azure/aks/best-practices-gpu-observability
Apply MLOps best practices on AKS clusters	https://learn.microsoft.com/en-us/azure/aks/best-practices-ml-ops
Apply proactive monitoring best practices for AKS clusters	https://learn.microsoft.com/en-us/azure/aks/best-practices-monitoring-proactive
Apply multi-tenancy best practices in AKS clusters	https://learn.microsoft.com/en-us/azure/aks/best-practices-multi-tenancy
Optimize AKS performance and scaling for small to medium workloads	https://learn.microsoft.com/en-us/azure/aks/best-practices-performance-scale
Tune AKS for large-scale performance and scaling	https://learn.microsoft.com/en-us/azure/aks/best-practices-performance-scale-large
Best practices for AKS ephemeral NVMe disks	https://learn.microsoft.com/en-us/azure/aks/best-practices-storage-nvme
Configure and tune AKS cluster autoscaler	https://learn.microsoft.com/en-us/azure/aks/cluster-autoscaler-overview
Apply pod sandboxing resource and security practices in AKS	https://learn.microsoft.com/en-us/azure/aks/considerations-pod-sandboxing
Enforce AKS deployment safeguards and best practices	https://learn.microsoft.com/en-us/azure/aks/deployment-safeguards
Implement pod security best practices on AKS	https://learn.microsoft.com/en-us/azure/aks/developer-best-practices-pod-security
Optimize AKS workload resource management practices	https://learn.microsoft.com/en-us/azure/aks/developer-best-practices-resource-management
Apply GPU profiling best practices on AKS	https://learn.microsoft.com/en-us/azure/aks/gpu-profiling-faq
Use Image Cleaner to remove vulnerable AKS images	https://learn.microsoft.com/en-us/azure/aks/image-cleaner
Use TCP keepalive to improve AKS network resilience	https://learn.microsoft.com/en-us/azure/aks/improve-network-fault-tolerance-in-aks-using-tcp-keepalive
Select appropriate Inspektor Gadget tools on AKS	https://learn.microsoft.com/en-us/azure/aks/inspektor-gadget-catalog
Plan AKS rollback strategies for failed migrations	https://learn.microsoft.com/en-us/azure/aks/kubernetes-migration-rollback-strategies
Apply network security best practices to AKS clusters	https://learn.microsoft.com/en-us/azure/aks/network-policy-best-practices
Plan node image updates for NAP in AKS	https://learn.microsoft.com/en-us/azure/aks/node-auto-provisioning-upgrade-image
Configure and monitor AKS node auto-repair	https://learn.microsoft.com/en-us/azure/aks/node-auto-repair
Control AKS node reimage and disruption behavior	https://learn.microsoft.com/en-us/azure/aks/node-disruption-policy
Operate cost-optimized AKS clusters at scale	https://learn.microsoft.com/en-us/azure/aks/operate-cost-optimized-scale
Apply AKS scheduler features for workload isolation	https://learn.microsoft.com/en-us/azure/aks/operator-best-practices-advanced-scheduler
Implement cluster isolation strategies in Azure Kubernetes Service	https://learn.microsoft.com/en-us/azure/aks/operator-best-practices-cluster-isolation
Apply AKS cluster security operator best practices	https://learn.microsoft.com/en-us/azure/aks/operator-best-practices-cluster-security
Implement container image security best practices in AKS	https://learn.microsoft.com/en-us/azure/aks/operator-best-practices-container-image-management
Apply AKS network resource best practices	https://learn.microsoft.com/en-us/azure/aks/operator-best-practices-network
Apply AKS scheduler best practices for quotas	https://learn.microsoft.com/en-us/azure/aks/operator-best-practices-scheduler
Apply AKS storage and backup operator best practices	https://learn.microsoft.com/en-us/azure/aks/operator-best-practices-storage
Protect data on AKS for PCI DSS compliance	https://learn.microsoft.com/en-us/azure/aks/pci-data
Apply PCI risk assessment and code practices on AKS	https://learn.microsoft.com/en-us/azure/aks/pci-ra-code-assets
Design zone-resilient Azure Kubernetes Service clusters	https://learn.microsoft.com/en-us/azure/aks/reliability-zone-resiliency-recommendations
Load test and validate MongoDB resiliency on AKS	https://learn.microsoft.com/en-us/azure/aks/resiliency-mongodb-cluster
Use AKS node pool version rollback safely	https://learn.microsoft.com/en-us/azure/aks/roll-back-node-pool-version
Apply security best practices to Azure Kubernetes Service clusters	https://learn.microsoft.com/en-us/azure/aks/secure-aks
Validate MongoDB resiliency during AKS node pool upgrades	https://learn.microsoft.com/en-us/azure/aks/upgrade-mongodb-cluster
Handle AKS Linux node reboots using kured	https://learn.microsoft.com/en-us/azure/aks/upgrade-node-image-kured
Upgrade AKS node pools and control plane safely	https://learn.microsoft.com/en-us/azure/aks/upgrade-node-pools
Apply OS upgrade best practices for AKS clusters	https://learn.microsoft.com/en-us/azure/aks/upgrade-os-version
Validate Valkey resiliency during AKS node pool upgrades	https://learn.microsoft.com/en-us/azure/aks/upgrade-valkey-aks-nodepool
Validate and operate PostgreSQL HA deployments on AKS	https://learn.microsoft.com/en-us/azure/aks/validate-postgresql-ha
Load test and validate Valkey cluster resiliency on AKS	https://learn.microsoft.com/en-us/azure/aks/validate-valkey-cluster
Apply AKS Windows container best practices	https://learn.microsoft.com/en-us/azure/aks/windows-best-practices

Decision Making

Topic	URL
Choose migration paths for legacy apps to AKS	https://learn.microsoft.com/en-us/azure/aks/aks-legacy-migration
Plan and execute migration to Azure Kubernetes Service	https://learn.microsoft.com/en-us/azure/aks/aks-migration
Choose VM sizes and generations for AKS workloads	https://learn.microsoft.com/en-us/azure/aks/aks-virtual-machine-sizes
Use AKS application routing with Kubernetes Gateway API	https://learn.microsoft.com/en-us/azure/aks/app-routing-gateway-api
Migrate AKS Automatic clusters between SKUs	https://learn.microsoft.com/en-us/azure/aks/automatic/aks-automatic-sku-migration
Migrate AKS clusters from Availability Sets to VM node pools	https://learn.microsoft.com/en-us/azure/aks/availability-sets-on-aks
Choose between AKS and other Azure container services	https://learn.microsoft.com/en-us/azure/aks/compare-container-options-with-aks
Choose small vs large language models on AKS	https://learn.microsoft.com/en-us/azure/aks/concepts-ai-ml-language-models
Plan IP address space for Azure AKS clusters	https://learn.microsoft.com/en-us/azure/aks/concepts-network-ip-address-planning
Choose and understand legacy CNI options in Azure Kubernetes Service	https://learn.microsoft.com/en-us/azure/aks/concepts-network-legacy-cni
Choose the right AKS scaling option for workloads	https://learn.microsoft.com/en-us/azure/aks/concepts-scale
Use Azure Advisor recommendations for AKS cost	https://learn.microsoft.com/en-us/azure/aks/cost-advisors
Migrate from Dapr OSS to Dapr extension on AKS	https://learn.microsoft.com/en-us/azure/aks/dapr-migration
Compare AWS and Azure platforms for EDW workloads	https://learn.microsoft.com/en-us/azure/aks/eks-edw-understand
Understand AWS vs Azure differences for web apps	https://learn.microsoft.com/en-us/azure/aks/eks-web-understand
Plan migration off Flatcar Container Linux on AKS	https://learn.microsoft.com/en-us/azure/aks/flatcar-container-linux-for-aks
Choose and configure AKS Free, Standard, Premium tiers	https://learn.microsoft.com/en-us/azure/aks/free-standard-pricing-tiers
Adopt and migrate to Gen2 VMs for AKS node pools	https://learn.microsoft.com/en-us/azure/aks/generation-2-vms
Select AKS Automatic or Standard for workloads	https://learn.microsoft.com/en-us/azure/aks/get-started-aks
Choose and configure HPA for AKS workloads	https://learn.microsoft.com/en-us/azure/aks/horizontal-pod-autoscaler
Choose and configure AKS hyperscale control plane	https://learn.microsoft.com/en-us/azure/aks/hyperscale-configuration-aks
Plan and execute migration from NPM to Cilium in AKS	https://learn.microsoft.com/en-us/azure/aks/migrate-from-npm-to-cilium-network-policy
Plan and execute legacy .NET migration to AKS	https://learn.microsoft.com/en-us/azure/aks/migrate-legacy-dotnet-to-aks
Migrate AKS node pools to Azure Container Linux	https://learn.microsoft.com/en-us/azure/aks/migrate-nodes-azure-container-linux
Migrate from open source Istio to AKS Istio add-on using canary strategy	https://learn.microsoft.com/en-us/azure/aks/migration-from-open-source-istio-to-addon
Choose appropriate AKS node images and lifecycles	https://learn.microsoft.com/en-us/azure/aks/node-images
Map AKS Open Service Mesh policies to Istio add-on	https://learn.microsoft.com/en-us/azure/aks/open-service-mesh-istio-migration-guidance
Choose and tune AKS options to reduce costs	https://learn.microsoft.com/en-us/azure/aks/optimize-aks-costs
Apply PCI customized approach controls in AKS	https://learn.microsoft.com/en-us/azure/aks/pci-customized-approach-guidance
Map AKS controls to PCI DSS 4.0.1 requirements	https://learn.microsoft.com/en-us/azure/aks/pci-requirement-mapping-matrix
Perform targeted PCI risk analysis for AKS workloads	https://learn.microsoft.com/en-us/azure/aks/pci-targeted-risk-analysis
Design application networking for Azure Kubernetes Service workloads	https://learn.microsoft.com/en-us/azure/aks/plan-application-networking
Select AKS control plane networking configuration	https://learn.microsoft.com/en-us/azure/aks/plan-control-plane-networking
Plan deployment and configuration of AKS flex nodes	https://learn.microsoft.com/en-us/azure/aks/plan-flex-nodes-deployment
Plan AKS workload networking options and trade-offs	https://learn.microsoft.com/en-us/azure/aks/plan-networking
Plan AKS node networking models and choices	https://learn.microsoft.com/en-us/azure/aks/plan-node-networking
Choose AKS pod networking configuration options	https://learn.microsoft.com/en-us/azure/aks/plan-pod-networking
Choose and configure AKS scale-down mode	https://learn.microsoft.com/en-us/azure/aks/scale-down-mode
Add and use Azure Spot node pools in AKS	https://learn.microsoft.com/en-us/azure/aks/spot-node-pool
Update AKS clusters to new Azure CNI IPAM and data planes	https://learn.microsoft.com/en-us/azure/aks/update-azure-cni
Migrate AKS from Basic to Standard Load Balancer	https://learn.microsoft.com/en-us/azure/aks/upgrade-basic-load-balancer-on-aks
Plan AKS upgrade capacity and cost constraints	https://learn.microsoft.com/en-us/azure/aks/upgrade-capacity-cost-planning
Choose between AKS Automatic and AKS Standard upgrades	https://learn.microsoft.com/en-us/azure/aks/upgrade-options
Select the right AKS upgrade scenario path	https://learn.microsoft.com/en-us/azure/aks/upgrade-scenarios-hub
Choose and execute AKS Windows OS upgrade paths	https://learn.microsoft.com/en-us/azure/aks/upgrade-windows-os
Use Arm64 node pools in AKS for cost efficiency	https://learn.microsoft.com/en-us/azure/aks/use-arm64-vms
Decide on using Azure Linux OS Guard for AKS	https://learn.microsoft.com/en-us/azure/aks/use-azure-linux-os-guard
Choose between AKS Automatic and Standard clusters	https://learn.microsoft.com/en-us/azure/aks/what-is-aks
Use and migrate from Windows Server Annual Channel on AKS	https://learn.microsoft.com/en-us/azure/aks/windows-annual-channel
Plan Windows vs. Linux containers on AKS	https://learn.microsoft.com/en-us/azure/aks/windows-vs-linux-containers
Choose a migration path to AKS Workload ID	https://learn.microsoft.com/en-us/azure/aks/workload-identity-migrate-from-pod-identity
Choose the right Azure Kubernetes Fleet Manager configuration	https://learn.microsoft.com/en-us/azure/kubernetes-fleet/concepts-choosing-fleet
Choose appropriate member cluster types in Fleet Manager	https://learn.microsoft.com/en-us/azure/kubernetes-fleet/concepts-member-cluster-types
Migrate Kubernetes update workflows from Terraform to Fleet	https://learn.microsoft.com/en-us/azure/kubernetes-fleet/howto-migrate-updates-from-terraform
Upgrade Azure Kubernetes Fleet Manager from hubless to hubful	https://learn.microsoft.com/en-us/azure/kubernetes-fleet/upgrade-hub-cluster-type

Architecture & Design Patterns

Topic	URL
Active-active high availability pattern for AKS	https://learn.microsoft.com/en-us/azure/aks/active-active-solution
Design active-passive disaster recovery for AKS	https://learn.microsoft.com/en-us/azure/aks/active-passive-solution
Use blue-green node pool upgrades in AKS	https://learn.microsoft.com/en-us/azure/aks/blue-green-node-pool-upgrade
Choose GPU partitioning strategies in AKS	https://learn.microsoft.com/en-us/azure/aks/concepts-gpu-partitioning
Choose Azure CNI Pod Subnet modes in AKS	https://learn.microsoft.com/en-us/azure/aks/concepts-network-azure-cni-pod-subnet
Choose ingress networking options for AKS clusters	https://learn.microsoft.com/en-us/azure/aks/concepts-network-ingress
Rearchitect AWS EDW workload for Azure AKS	https://learn.microsoft.com/en-us/azure/aks/eks-edw-rearchitect
Rearchitect AWS EKS web app and WAF for AKS	https://learn.microsoft.com/en-us/azure/aks/eks-web-rearchitect
Design networking for AKS flex node connectivity	https://learn.microsoft.com/en-us/azure/aks/flex-nodes-networking-concepts
Isolate AKS node pools with unique subnets	https://learn.microsoft.com/en-us/azure/aks/node-pool-unique-subnet
Passive-cold disaster recovery pattern for AKS	https://learn.microsoft.com/en-us/azure/aks/passive-cold-solution
Design AKS architecture for PCI DSS 4.0.1 workloads	https://learn.microsoft.com/en-us/azure/aks/pci-intro
Review summary of AKS PCI reference architecture	https://learn.microsoft.com/en-us/azure/aks/pci-summary
Choose connectivity options for private AKS clusters	https://learn.microsoft.com/en-us/azure/aks/private-cluster-connect
Use proximity placement groups to reduce AKS latency	https://learn.microsoft.com/en-us/azure/aks/reduce-latency-ppg
Multi-region AKS deployment models and trade-offs	https://learn.microsoft.com/en-us/azure/aks/reliability-multi-region-deployment-models
Plan AKS upgrades for stateful database workloads	https://learn.microsoft.com/en-us/azure/aks/stateful-workload-upgrades
Design and migrate stateful workloads on AKS	https://learn.microsoft.com/en-us/azure/aks/stateful-workloads-overview
Architect Valkey clusters on AKS for resilience	https://learn.microsoft.com/en-us/azure/aks/valkey-overview
Configure eviction and disruption budgets in Fleet CRP	https://learn.microsoft.com/en-us/azure/kubernetes-fleet/concepts-eviction-disruption
Manage workload drift with Fleet applyStrategy	https://learn.microsoft.com/en-us/azure/kubernetes-fleet/concepts-placement-drift
Control workload takeover behavior in Fleet placement	https://learn.microsoft.com/en-us/azure/kubernetes-fleet/concepts-placement-takeover
Design rollout strategies for Fleet resource placement	https://learn.microsoft.com/en-us/azure/kubernetes-fleet/concepts-rollout-strategy
Move Kubernetes workloads between clusters with Fleet	https://learn.microsoft.com/en-us/azure/kubernetes-fleet/howto-move-workloads-between-clusters
Use intelligent cross-cluster placement in Fleet	https://learn.microsoft.com/en-us/azure/kubernetes-fleet/intelligent-resource-placement

Limits & Quotas

Topic	URL
Create AKS Automatic clusters in custom networks with SLA	https://learn.microsoft.com/en-us/azure/aks/automatic/quick-automatic-custom-network
Use AKS Automatic pod readiness SLA guarantees	https://learn.microsoft.com/en-us/azure/aks/automatic/quick-automatic-managed-network
Deploy private AKS Automatic clusters with readiness SLA	https://learn.microsoft.com/en-us/azure/aks/automatic/quick-automatic-private-custom-network
Understand AKS preview API lifecycle and deprecation timing	https://learn.microsoft.com/en-us/azure/aks/concepts-preview-api-life-cycle
Use AKS automatic zone placement with limits	https://learn.microsoft.com/en-us/azure/aks/configure-automatic-zone-placement
Configure static block allocation for Azure CNI Pod Subnet	https://learn.microsoft.com/en-us/azure/aks/configure-azure-cni-static-block-allocation
Configure custom certificate authorities in AKS	https://learn.microsoft.com/en-us/azure/aks/custom-certificate-authority
Understand AKS limits, quotas, and platform constraints	https://learn.microsoft.com/en-us/azure/aks/faq
Understand AKS identity binding scale limits and behavior	https://learn.microsoft.com/en-us/azure/aks/identity-bindings-concepts
Compare latency impact across AKS Istio add-on versions	https://learn.microsoft.com/en-us/azure/aks/istio-latency
Understand Istio add-on performance, capacity, and scaling limits on AKS	https://learn.microsoft.com/en-us/azure/aks/istio-scale
Understand KEDA limitations and autoscaling behavior in AKS	https://learn.microsoft.com/en-us/azure/aks/keda-about
Use AKS long-term support for Kubernetes versions	https://learn.microsoft.com/en-us/azure/aks/long-term-support
Understand AKS node resource reservations and capacity	https://learn.microsoft.com/en-us/azure/aks/node-resource-reservations
Required outbound ports and FQDNs for AKS clusters	https://learn.microsoft.com/en-us/azure/aks/outbound-rules-control-egress
Review AKS resource limits, quotas, and SKUs	https://learn.microsoft.com/en-us/azure/aks/quotas-skus-regions
Understand AKS support policies and limitations	https://learn.microsoft.com/en-us/azure/aks/support-policies
Understand supported Kubernetes versions in AKS	https://learn.microsoft.com/en-us/azure/aks/supported-kubernetes-versions
Manage AKS node image upgrade cadence and rollout	https://learn.microsoft.com/en-us/azure/aks/upgrade-node-image
Scale AKS with multiple Standard Load Balancers	https://learn.microsoft.com/en-us/azure/aks/use-multiple-standard-load-balancer
Configure and manage AKS system node pools	https://learn.microsoft.com/en-us/azure/aks/use-system-pools
Kubernetes version support policy for Azure Kubernetes Fleet Manager	https://learn.microsoft.com/en-us/azure/kubernetes-fleet/concepts-fleet-kubernetes-version-support
Understand lifecycle limits for Fleet Manager preview APIs	https://learn.microsoft.com/en-us/azure/kubernetes-fleet/concepts-preview-api-lifecycle

Security

Topic	URL
Apply Conditional Access to AKS clusters and nodes	https://learn.microsoft.com/en-us/azure/aks/access-control-managed-azure-ad
Access private AKS clusters using command invoke and Run command	https://learn.microsoft.com/en-us/azure/aks/access-private-cluster
Configure service account and workload identity for Agentic CLI	https://learn.microsoft.com/en-us/azure/aks/agentic-cli-for-aks-service-account-workload-identity-setup
Configure RBAC permissions for AKS Desktop projects	https://learn.microsoft.com/en-us/azure/aks/aks-desktop-permissions
Reference AKS service permissions and roles	https://learn.microsoft.com/en-us/azure/aks/aks-service-permissions
Configure AKS API server authorized IP ranges	https://learn.microsoft.com/en-us/azure/aks/api-server-authorized-ip-ranges
Configure AKS API server authorized IP ranges with service tags	https://learn.microsoft.com/en-us/azure/aks/api-server-service-tags
Use customer-managed keys for AKS managed disk encryption	https://learn.microsoft.com/en-us/azure/aks/azure-disk-customer-managed-keys
Configure and manage AKS certificate rotation policies	https://learn.microsoft.com/en-us/azure/aks/certificate-rotation
Harden AKS Azure Linux 2.0 nodes to CIS benchmark	https://learn.microsoft.com/en-us/azure/aks/cis-azure-linux
Harden AKS Azure Linux 3.0 nodes to CIS benchmark	https://learn.microsoft.com/en-us/azure/aks/cis-azure-linux-v3
Apply CIS Kubernetes benchmark controls in AKS	https://learn.microsoft.com/en-us/azure/aks/cis-kubernetes
Apply CIS-aligned Ubuntu security settings for AKS nodes	https://learn.microsoft.com/en-us/azure/aks/cis-ubuntu
Align AKS Windows node image with CIS benchmark	https://learn.microsoft.com/en-us/azure/aks/cis-windows
Configure secure AKS access to Azure Container Registry	https://learn.microsoft.com/en-us/azure/aks/cluster-container-registry-integration
Understand access and identity scenarios in AKS	https://learn.microsoft.com/en-us/azure/aks/concepts-identity
Secure network-isolated AKS cluster connectivity requirements	https://learn.microsoft.com/en-us/azure/aks/concepts-network-isolated
Restrict kubeconfig access using Azure RBAC in AKS	https://learn.microsoft.com/en-us/azure/aks/control-kubeconfig-access
Secure AKS CSI Driver access to Azure Key Vault	https://learn.microsoft.com/en-us/azure/aks/csi-secrets-store-identity-access
Configure FIPS-compliant node pools in Azure Kubernetes Service	https://learn.microsoft.com/en-us/azure/aks/enable-fips-nodes
Enable host-based encryption for AKS node data	https://learn.microsoft.com/en-us/azure/aks/enable-host-encryption
Configure Entra ID authorization for AKS Kubernetes API	https://learn.microsoft.com/en-us/azure/aks/entra-id-authorization
Enable Entra ID authentication for AKS control plane	https://learn.microsoft.com/en-us/azure/aks/entra-id-control-plane-authentication
Configure external identity providers for AKS authentication	https://learn.microsoft.com/en-us/azure/aks/external-identity-provider-authentication-configure
Configure identity and access for AKS flex nodes	https://learn.microsoft.com/en-us/azure/aks/flex-nodes-identity-access-concepts
Deploy WireGuard encryption for AKS networking	https://learn.microsoft.com/en-us/azure/aks/how-to-apply-wireguard
Enforce signed container image validation on AKS	https://learn.microsoft.com/en-us/azure/aks/image-integrity
Restrict AKS pod access to IMDS endpoint	https://learn.microsoft.com/en-us/azure/aks/imds-restriction
Plug external CA certificates into AKS Istio add-on	https://learn.microsoft.com/en-us/azure/aks/istio-plugin-ca
Configure HTTPS and mTLS secure ingress gateways for AKS Istio add-on	https://learn.microsoft.com/en-us/azure/aks/istio-secure-gateway
Secure KEDA-based autoscaling on AKS with workload identity	https://learn.microsoft.com/en-us/azure/aks/keda-workload-identity
Authenticate to AKS clusters using kubelogin	https://learn.microsoft.com/en-us/azure/aks/kubelogin-authentication
Configure Microsoft Entra ID and Kubernetes RBAC for AKS access control	https://learn.microsoft.com/en-us/azure/aks/kubernetes-rbac-entra-id
Configure Entra service principals for AKS clusters	https://learn.microsoft.com/en-us/azure/aks/kubernetes-service-principal
Restrict AKS egress traffic using Azure Firewall	https://learn.microsoft.com/en-us/azure/aks/limit-egress-traffic
Disable or manage AKS local admin accounts securely	https://learn.microsoft.com/en-us/azure/aks/local-accounts
Configure and manage SSH access to AKS nodes	https://learn.microsoft.com/en-us/azure/aks/manage-ssh-node-access
Use managed identities for AKS cluster-to-Azure access	https://learn.microsoft.com/en-us/azure/aks/managed-identity-overview
Create network-isolated AKS clusters with restricted egress	https://learn.microsoft.com/en-us/azure/aks/network-isolated
Securely connect to AKS cluster nodes for maintenance	https://learn.microsoft.com/en-us/azure/aks/node-access
Configure AKS NAP cluster in custom VNet securely	https://learn.microsoft.com/en-us/azure/aks/node-auto-provisioning-custom-vnet
Configure AKS node resource group lockdown and deny assignments	https://learn.microsoft.com/en-us/azure/aks/node-resource-group-lockdown
Secure AKS access to Azure OpenAI with Entra	https://learn.microsoft.com/en-us/azure/aks/open-ai-secure-access-quickstart
Implement anti-phishing controls for AKS PCI access	https://learn.microsoft.com/en-us/azure/aks/pci-anti-phishing-social-engineering
Set up continuous security monitoring for AKS PCI	https://learn.microsoft.com/en-us/azure/aks/pci-continuous-security-monitoring
Manage cryptography and keys on AKS for PCI DSS	https://learn.microsoft.com/en-us/azure/aks/pci-cryptography-key-management
Implement enhanced MFA for AKS PCI environments	https://learn.microsoft.com/en-us/azure/aks/pci-enhanced-mfa-implementation
Configure PCI-compliant identity and access for AKS	https://learn.microsoft.com/en-us/azure/aks/pci-identity
Deploy malware protection for PCI workloads on AKS	https://learn.microsoft.com/en-us/azure/aks/pci-malware
Configure PCI-compliant monitoring and logging on AKS	https://learn.microsoft.com/en-us/azure/aks/pci-monitor
Implement PCI-compliant network security for AKS	https://learn.microsoft.com/en-us/azure/aks/pci-network
Define security policies for PCI-regulated AKS clusters	https://learn.microsoft.com/en-us/azure/aks/pci-policy
Plan security awareness training for AKS PCI teams	https://learn.microsoft.com/en-us/azure/aks/pci-security-awareness-training
Secure third-party and supply chain for AKS PCI	https://learn.microsoft.com/en-us/azure/aks/pci-third-party-supply-chain-security
Use built-in Azure Policy definitions for AKS	https://learn.microsoft.com/en-us/azure/aks/policy-reference
Use pre-created kubelet managed identity in AKS	https://learn.microsoft.com/en-us/azure/aks/pre-created-kubelet-managed-identity
Prepare flex node host identity and access for AKS	https://learn.microsoft.com/en-us/azure/aks/prepare-flex-node-host-identity
Configure private AKS clusters with secure networking	https://learn.microsoft.com/en-us/azure/aks/private-clusters
Use PIM for just-in-time AKS cluster access	https://learn.microsoft.com/en-us/azure/aks/privileged-identity-management
RDP and SSH access to AKS Windows nodes	https://learn.microsoft.com/en-us/azure/aks/rdp
Manually rotate and manage AKS cluster certificates	https://learn.microsoft.com/en-us/azure/aks/rotate-certificates
Harden AKS containers with user namespaces, AppArmor, seccomp	https://learn.microsoft.com/en-us/azure/aks/secure-container-access
Use Azure Policy regulatory controls for AKS	https://learn.microsoft.com/en-us/azure/aks/security-controls-policy
Configure system-assigned managed identity for AKS clusters	https://learn.microsoft.com/en-us/azure/aks/system-assigned-managed-identity
Configure Trusted Access for secure AKS API access	https://learn.microsoft.com/en-us/azure/aks/trusted-access-feature
Rotate AKS service principal and Entra app credentials	https://learn.microsoft.com/en-us/azure/aks/update-credentials
Use Microsoft Entra pod-managed identities in AKS	https://learn.microsoft.com/en-us/azure/aks/use-azure-ad-pod-identity
Secure AKS clusters using Azure Policy add-on	https://learn.microsoft.com/en-us/azure/aks/use-azure-policy
Run secure workloads with Confidential GPUs on AKS	https://learn.microsoft.com/en-us/azure/aks/use-confidential-gpus
Enable GMSA for Windows nodes in AKS clusters	https://learn.microsoft.com/en-us/azure/aks/use-group-managed-service-accounts
Enable legacy KMS etcd encryption with AKS and Key Vault	https://learn.microsoft.com/en-us/azure/aks/use-kms-etcd-encryption
Migrate AKS clusters from KMS v1 to KMS v2	https://learn.microsoft.com/en-us/azure/aks/use-kms-v2
Secure AKS pod traffic with network policies	https://learn.microsoft.com/en-us/azure/aks/use-network-policies
Configure OIDC issuer for secure AKS authentication	https://learn.microsoft.com/en-us/azure/aks/use-oidc-issuer
Configure Pod Security Admission policies in AKS	https://learn.microsoft.com/en-us/azure/aks/use-psa
Enable Trusted Launch security for AKS node pools	https://learn.microsoft.com/en-us/azure/aks/use-trusted-launch
Enable user-assigned managed identity for AKS clusters	https://learn.microsoft.com/en-us/azure/aks/user-assigned-managed-identity
Configure cross-tenant workload identity for AKS	https://learn.microsoft.com/en-us/azure/aks/workload-identity-cross-tenant
Use Microsoft Entra Workload ID with AKS	https://learn.microsoft.com/en-us/azure/aks/workload-identity-overview
Assign Azure RBAC roles for Kubernetes Fleet Manager	https://learn.microsoft.com/en-us/azure/kubernetes-fleet/concepts-rbac
Use managed identities securely with Azure Kubernetes Fleet Manager	https://learn.microsoft.com/en-us/azure/kubernetes-fleet/use-managed-identity

Configuration

Topic	URL
Install and configure Agentic CLI for AKS clusters	https://learn.microsoft.com/en-us/azure/aks/agentic-cli-for-aks-install
Configure AI inference metrics monitoring on AKS	https://learn.microsoft.com/en-us/azure/aks/ai-toolchain-operator-monitoring
Create infrastructure for Apache Airflow on AKS	https://learn.microsoft.com/en-us/azure/aks/airflow-create-infrastructure
Configure storage and secrets to deploy Airflow on AKS with Helm	https://learn.microsoft.com/en-us/azure/aks/airflow-deploy
Configure AKS Communication Manager for maintenance notifications	https://learn.microsoft.com/en-us/azure/aks/aks-communication-manager
Manage AKS component versioning and patching strategy	https://learn.microsoft.com/en-us/azure/aks/aks-component-versioning
Configure AKS clusters for AKS Desktop compatibility	https://learn.microsoft.com/en-us/azure/aks/aks-desktop-install-cluster-setup
Configure AKS Kubernetes end-of-support notifications	https://learn.microsoft.com/en-us/azure/aks/aks-end-of-support-notifications
List and filter AKS-supported VM SKUs by region	https://learn.microsoft.com/en-us/azure/aks/aks-list-skus
Configure AKS-managed GPU node pools with NVIDIA stack	https://learn.microsoft.com/en-us/azure/aks/aks-managed-gpu-nodes
Configure AKS application routing add-on with NGINX	https://learn.microsoft.com/en-us/azure/aks/app-routing
Set up custom domains and SSL for AKS application routing	https://learn.microsoft.com/en-us/azure/aks/app-routing-dns-ssl
Configure AKS Application Routing with Azure DNS and TLS	https://learn.microsoft.com/en-us/azure/aks/app-routing-gateway-api-dns-tls
Manually configure TLS ingress with Gateway API on AKS	https://learn.microsoft.com/en-us/azure/aks/app-routing-gateway-api-tls
Configure multiple NGINX ingress controllers and annotations in AKS	https://learn.microsoft.com/en-us/azure/aks/app-routing-nginx-configuration
Monitor AKS NGINX ingress metrics with Prometheus	https://learn.microsoft.com/en-us/azure/aks/app-routing-nginx-prometheus
Attach and bootstrap flex nodes to AKS clusters	https://learn.microsoft.com/en-us/azure/aks/attach-flex-node-to-aks
Configure automatic upgrade channels for AKS clusters	https://learn.microsoft.com/en-us/azure/aks/auto-upgrade-cluster
Configure AKS node OS image autoupgrade channels	https://learn.microsoft.com/en-us/azure/aks/auto-upgrade-node-os-image
Install and manage Azure App Configuration extension on AKS	https://learn.microsoft.com/en-us/azure/aks/azure-app-configuration
Configure AKS workloads with App Configuration provider	https://learn.microsoft.com/en-us/azure/aks/azure-app-configuration-quickstart
Tune Azure App Configuration extension settings for AKS	https://learn.microsoft.com/en-us/azure/aks/azure-app-configuration-settings
Configure Azure CNI Overlay networking for AKS clusters	https://learn.microsoft.com/en-us/azure/aks/azure-cni-overlay
Configure Azure CNI powered by Cilium for AKS	https://learn.microsoft.com/en-us/azure/aks/azure-cni-powered-by-cilium
Configure Azure NetApp Files for AKS pods	https://learn.microsoft.com/en-us/azure/aks/azure-netapp-files
Provision Azure NetApp Files dual-protocol volumes	https://learn.microsoft.com/en-us/azure/aks/azure-netapp-files-dual-protocol
Provision Azure NetApp Files NFS volumes on AKS	https://learn.microsoft.com/en-us/azure/aks/azure-netapp-files-nfs
Provision Azure NetApp Files SMB volumes on AKS	https://learn.microsoft.com/en-us/azure/aks/azure-netapp-files-smb
Create and mount Linux NFS server volumes in AKS	https://learn.microsoft.com/en-us/azure/aks/azure-nfs-volume
Configure and tune AKS cluster autoscaler behavior	https://learn.microsoft.com/en-us/azure/aks/cluster-autoscaler
Configure and manage AKS cluster extensions lifecycle	https://learn.microsoft.com/en-us/azure/aks/cluster-extensions
Deploy and configure AKS Cluster Health Monitor	https://learn.microsoft.com/en-us/azure/aks/cluster-health-monitor
Configure AKS scheduler profiles and plugins	https://learn.microsoft.com/en-us/azure/aks/configure-aks-scheduler
Configure Azure CNI networking for AKS clusters	https://learn.microsoft.com/en-us/azure/aks/configure-azure-cni
Configure Azure CNI dynamic IP allocation in AKS	https://learn.microsoft.com/en-us/azure/aks/configure-azure-cni-dynamic-ip-allocation
Configure dual-stack IPv4/IPv6 networking in AKS	https://learn.microsoft.com/en-us/azure/aks/configure-dual-stack
Configure dual-stack IPv4/IPv6 networking in AKS	https://learn.microsoft.com/en-us/azure/aks/configure-dual-stack
Configure networking and flex node pools in AKS	https://learn.microsoft.com/en-us/azure/aks/configure-flex-nodes-networking
Configure kube-proxy backends on AKS clusters	https://learn.microsoft.com/en-us/azure/aks/configure-kube-proxy
Configure kubenet networking for Azure Kubernetes Service clusters	https://learn.microsoft.com/en-us/azure/aks/configure-kubenet
Configure Public Standard Load Balancer settings in AKS	https://learn.microsoft.com/en-us/azure/aks/configure-load-balancer-standard
Configure AKS scheduler profiles for node bin packing	https://learn.microsoft.com/en-us/azure/aks/configure-node-binpack-scheduler
Configure Kueue queues for Ray jobs on AKS	https://learn.microsoft.com/en-us/azure/aks/configure-ray-kueue-queues
Set up Static Egress Gateway for AKS pods	https://learn.microsoft.com/en-us/azure/aks/configure-static-egress-gateway
Configure Container Network Observability for AKS monitoring	https://learn.microsoft.com/en-us/azure/aks/container-network-observability-how-to
Configure Cilium mTLS encryption on AKS with ACNS	https://learn.microsoft.com/en-us/azure/aks/container-network-security-cilium-mutual-tls-how-to
Configure CoreDNS autoscaling settings in AKS	https://learn.microsoft.com/en-us/azure/aks/coredns-autoscale
Customize CoreDNS behavior in AKS clusters	https://learn.microsoft.com/en-us/azure/aks/coredns-custom
Monitor and reduce AKS idle costs with cost analysis	https://learn.microsoft.com/en-us/azure/aks/cost-analysis-idle-costs
Create Azure infrastructure for MongoDB on AKS	https://learn.microsoft.com/en-us/azure/aks/create-mongodb-infrastructure
Configure private NGINX ingress with Azure private DNS	https://learn.microsoft.com/en-us/azure/aks/create-nginx-ingress-private-controller
Create infrastructure for HA PostgreSQL on AKS with CloudNativePG	https://learn.microsoft.com/en-us/azure/aks/create-postgresql-ha
Create Azure infrastructure for Valkey clusters on AKS	https://learn.microsoft.com/en-us/azure/aks/create-valkey-infrastructure
Configure Azure Disk persistent volumes in AKS	https://learn.microsoft.com/en-us/azure/aks/create-volume-azure-disk
Configure Azure Files persistent volumes for AKS	https://learn.microsoft.com/en-us/azure/aks/create-volume-azure-files
Tune Azure Key Vault CSI Driver configuration on AKS	https://learn.microsoft.com/en-us/azure/aks/csi-secrets-store-configuration-options
Configure CSI storage drivers for AKS workloads	https://learn.microsoft.com/en-us/azure/aks/csi-storage-drivers
Configure AKS node and kubelet settings	https://learn.microsoft.com/en-us/azure/aks/custom-node-configuration
Configure AKS node pools with custom node parameters	https://learn.microsoft.com/en-us/azure/aks/custom-node-configuration-reference
Customize resource configuration for AKS managed add-ons	https://learn.microsoft.com/en-us/azure/aks/customize-resource-configuration
Configure Dapr extension settings on AKS and Arc	https://learn.microsoft.com/en-us/azure/aks/dapr-settings
Delete AKS node pools and understand side effects	https://learn.microsoft.com/en-us/azure/aks/delete-node-pool
Schedule and deploy batch jobs with Kueue on AKS	https://learn.microsoft.com/en-us/azure/aks/deploy-batch-jobs-with-kueue
Deploy and manage AKS cluster extensions with Azure CLI	https://learn.microsoft.com/en-us/azure/aks/deploy-extensions-az-cli
Configure and deploy a MongoDB cluster on AKS	https://learn.microsoft.com/en-us/azure/aks/deploy-mongodb-cluster
Deploy a highly available PostgreSQL database on AKS	https://learn.microsoft.com/en-us/azure/aks/deploy-postgresql-ha
Provision Ray and Kueue infrastructure on AKS	https://learn.microsoft.com/en-us/azure/aks/deploy-ray-infrastructure
Configure and deploy a Valkey cluster on AKS	https://learn.microsoft.com/en-us/azure/aks/deploy-valkey-cluster
Configure AKS cluster egress outbound types	https://learn.microsoft.com/en-us/azure/aks/egress-outboundtype
Configure AKS egress with user-defined routes	https://learn.microsoft.com/en-us/azure/aks/egress-udr
Enable full caching for AKS ephemeral OS disks	https://learn.microsoft.com/en-us/azure/aks/full-cache-ephemeral-os-disk
Create infrastructure for highly available GitHub Actions on AKS with Azure Files	https://learn.microsoft.com/en-us/azure/aks/github-actions-azure-files-create-infrastructure
Configure GPU profiling stack on AKS clusters	https://learn.microsoft.com/en-us/azure/aks/gpu-profiling
Set up FQDN filtering policies with ACNS on AKS	https://learn.microsoft.com/en-us/azure/aks/how-to-apply-fqdn-filtering-policies
Configure L7 network policies with ACNS on AKS	https://learn.microsoft.com/en-us/azure/aks/how-to-apply-l7-policies
Configure and use Container Network Insights Agent on AKS	https://learn.microsoft.com/en-us/azure/aks/how-to-configure-container-network-insights-agent
Configure AKS container network logging with ACNS	https://learn.microsoft.com/en-us/azure/aks/how-to-configure-container-network-logs
Configure AKS container network metrics filtering with Cilium	https://learn.microsoft.com/en-us/azure/aks/how-to-configure-container-network-metrics-filtering
Enable and configure eBPF Host Routing on AKS	https://learn.microsoft.com/en-us/azure/aks/how-to-enable-ebpf-host-routing
Configure HTTP proxy settings for AKS nodes	https://learn.microsoft.com/en-us/azure/aks/http-proxy
Configure identity bindings for AKS workload identities	https://learn.microsoft.com/en-us/azure/aks/identity-bindings
Install and configure Inspektor Gadget on AKS	https://learn.microsoft.com/en-us/azure/aks/inspektor-gadget-configure
Configure Istio ingress gateways on Azure Kubernetes Service	https://learn.microsoft.com/en-us/azure/aks/istio-deploy-ingress
Configure Istio Gateway API ingress on AKS	https://learn.microsoft.com/en-us/azure/aks/istio-gateway-api
Configure MeshConfig and supported settings for Istio add-on on AKS	https://learn.microsoft.com/en-us/azure/aks/istio-meshconfig
Enable and configure native sidecar mode for Istio add-on on AKS	https://learn.microsoft.com/en-us/azure/aks/istio-native-sidecar
Configure telemetry and logging for AKS Istio-based service mesh	https://learn.microsoft.com/en-us/azure/aks/istio-telemetry
Configure monitoring and networking for Kafka on AKS using Strimzi	https://learn.microsoft.com/en-us/azure/aks/kafka-configure
Deploy Strimzi and a Kafka cluster on AKS	https://learn.microsoft.com/en-us/azure/aks/kafka-deploy
Prepare Azure infrastructure for Kafka on AKS with Strimzi	https://learn.microsoft.com/en-us/azure/aks/kafka-infrastructure
Configure KMS data encryption for AKS secrets	https://learn.microsoft.com/en-us/azure/aks/kms-data-encryption
Manage AKS Kubernetes resources through Azure portal UI	https://learn.microsoft.com/en-us/azure/aks/kubernetes-portal
Install and configure Kueue for batch on AKS	https://learn.microsoft.com/en-us/azure/aks/kueue-overview
Use Public Standard Load Balancer with AKS	https://learn.microsoft.com/en-us/azure/aks/load-balancer-standard
Configure LocalDNS profiles for AKS clusters	https://learn.microsoft.com/en-us/azure/aks/localdns-custom
Manage, update, and remove AKS flex nodes	https://learn.microsoft.com/en-us/azure/aks/manage-and-remove-flex-nodes
Use managed namespaces to isolate AKS workloads	https://learn.microsoft.com/en-us/azure/aks/managed-namespaces
Configure monitoring for MongoDB clusters on AKS with PMM	https://learn.microsoft.com/en-us/azure/aks/monitor-aks-mongodb
Reference monitoring data schema for Azure AKS	https://learn.microsoft.com/en-us/azure/aks/monitor-aks-reference
Configure GPU metrics collection and monitoring in AKS	https://learn.microsoft.com/en-us/azure/aks/monitor-gpu-metrics
Configure NAT gateway options for Azure Kubernetes Service	https://learn.microsoft.com/en-us/azure/aks/nat-gateway
Configure AKS pod eviction on VM freeze events	https://learn.microsoft.com/en-us/azure/aks/node-auto-drain-evict-on-freeze
Configure AKSNodeClass for AKS node auto-provisioning	https://learn.microsoft.com/en-us/azure/aks/node-auto-provisioning-aksnodeclass
Configure networking for AKS node auto-provisioning	https://learn.microsoft.com/en-us/azure/aks/node-auto-provisioning-networking
Configure AKS Node Auto-Provisioning node pools	https://learn.microsoft.com/en-us/azure/aks/node-auto-provisioning-node-pools
Snapshot AKS node pools for repeatable environments	https://learn.microsoft.com/en-us/azure/aks/node-pool-snapshot
Configure NVIDIA GPU Operator on AKS clusters	https://learn.microsoft.com/en-us/azure/aks/nvidia-gpu-operator
Download and configure the OSM client binary for AKS	https://learn.microsoft.com/en-us/azure/aks/open-service-mesh-binary
Configure cost-optimized add-on scaling in AKS	https://learn.microsoft.com/en-us/azure/aks/optimized-addon-scaling
Configure planned maintenance windows for AKS upgrades	https://learn.microsoft.com/en-us/azure/aks/planned-maintenance
Prepare AKS clusters for flex node support	https://learn.microsoft.com/en-us/azure/aks/prepare-aks-cluster-for-flex-nodes
Configure and manage Prepared Image Specifications in AKS	https://learn.microsoft.com/en-us/azure/aks/prepared-image-specification
Configure AKS private API server access across VNets	https://learn.microsoft.com/en-us/azure/aks/private-apiserver-vnet-integration-cluster
Manually and automatically scale AKS node pools	https://learn.microsoft.com/en-us/azure/aks/scale-node-pools
Enable shared health probes for AKS Services	https://learn.microsoft.com/en-us/azure/aks/shared-health-probes
Use static public IPs with AKS load balancers	https://learn.microsoft.com/en-us/azure/aks/static-ip
Update Key Vault mode for AKS KMS encryption	https://learn.microsoft.com/en-us/azure/aks/update-kms-key-vault
Configure AKS node pool rolling upgrade settings	https://learn.microsoft.com/en-us/azure/aks/upgrade-aks-node-pools-rolling
Configure Advanced Container Networking Services on AKS	https://learn.microsoft.com/en-us/azure/aks/use-advanced-container-networking-services
Configure AMD GPU node pools on AKS	https://learn.microsoft.com/en-us/azure/aks/use-amd-gpus
Run AKS node pools on Azure Dedicated Hosts	https://learn.microsoft.com/en-us/azure/aks/use-azure-dedicated-hosts
Configure custom CNI plugins for Azure Kubernetes Service	https://learn.microsoft.com/en-us/azure/aks/use-byo-cni
Configure capacity reservation groups for AKS node pools	https://learn.microsoft.com/en-us/azure/aks/use-capacity-reservation-groups
Use eTags for concurrency control in AKS APIs	https://learn.microsoft.com/en-us/azure/aks/use-etags
Use Kubernetes node pool labels effectively in AKS	https://learn.microsoft.com/en-us/azure/aks/use-labels
Configure Metrics Server VPA on AKS clusters	https://learn.microsoft.com/en-us/azure/aks/use-metrics-server-vertical-pod-autoscaler
Configure node auto-provisioning in Azure Kubernetes Service	https://learn.microsoft.com/en-us/azure/aks/use-node-auto-provisioning
Configure AKS node disruption policies for reimages	https://learn.microsoft.com/en-us/azure/aks/use-node-disruption-policy
Configure instance-level public IPs for AKS nodes	https://learn.microsoft.com/en-us/azure/aks/use-node-public-ips
Configure node taints for workload scheduling in AKS	https://learn.microsoft.com/en-us/azure/aks/use-node-taints
Configure and use NVIDIA GPUs on AKS clusters	https://learn.microsoft.com/en-us/azure/aks/use-nvidia-gpu
Configure pod sandboxing with Kata on AKS	https://learn.microsoft.com/en-us/azure/aks/use-pod-sandboxing
Configure Premium SSD v2 disks for AKS workloads	https://learn.microsoft.com/en-us/azure/aks/use-premium-v2-disks
Configure Pod Security Admission in AKS clusters	https://learn.microsoft.com/en-us/azure/aks/use-psa
Configure and apply Azure tags in AKS	https://learn.microsoft.com/en-us/azure/aks/use-tags
Enable and configure Ultra Disks on AKS	https://learn.microsoft.com/en-us/azure/aks/use-ultra-disks
Deploy and manage Vertical Pod Autoscaler on AKS	https://learn.microsoft.com/en-us/azure/aks/use-vertical-pod-autoscaler
Configure Windows GPU node pools on AKS	https://learn.microsoft.com/en-us/azure/aks/use-windows-gpu
Use Windows HostProcess and privileged containers on AKS	https://learn.microsoft.com/en-us/azure/aks/use-windows-hpc
Reference for AKS Vertical Pod Autoscaler API	https://learn.microsoft.com/en-us/azure/aks/vertical-pod-autoscaler-api-reference
Configure AKS clusters to use virtual nodes	https://learn.microsoft.com/en-us/azure/aks/virtual-nodes
Configure AKS virtual nodes with Azure CLI and CNI	https://learn.microsoft.com/en-us/azure/aks/virtual-nodes-cli
Configure AKS virtual nodes using Azure portal	https://learn.microsoft.com/en-us/azure/aks/virtual-nodes-portal
Enable and use Virtual Nodes v2 in AKS	https://learn.microsoft.com/en-us/azure/aks/virtual-nodes-v2
Create AKS Windows node pools using containerd runtime	https://learn.microsoft.com/en-us/azure/aks/windows-containerd
Configure AKS cluster with Entra Workload ID	https://learn.microsoft.com/en-us/azure/aks/workload-identity-deploy-cluster
Access the Kubernetes API of an Azure Kubernetes Fleet hub cluster	https://learn.microsoft.com/en-us/azure/kubernetes-fleet/access-fleet-hub-cluster-kubernetes-api
Configure cross-cluster networking in Azure Kubernetes Fleet	https://learn.microsoft.com/en-us/azure/kubernetes-fleet/howto-configure-use-cross-cluster-networking
Set up DNS-based multi-cluster load balancing in Fleet	https://learn.microsoft.com/en-us/azure/kubernetes-fleet/howto-dns-load-balancing
Configure Managed Fleet Namespaces in Azure Kubernetes Fleet	https://learn.microsoft.com/en-us/azure/kubernetes-fleet/howto-managed-namespaces
Configure Azure Monitor alerts for Fleet update runs	https://learn.microsoft.com/en-us/azure/kubernetes-fleet/howto-monitor-update-runs
Create reusable rollout strategies for Fleet placement	https://learn.microsoft.com/en-us/azure/kubernetes-fleet/howto-placement-create-rollout-strategies
Configure Azure Monitor alerts for Fleet Manager gates	https://learn.microsoft.com/en-us/azure/kubernetes-fleet/howto-send-email-pending-gate
Configure resource overrides for Fleet placements	https://learn.microsoft.com/en-us/azure/kubernetes-fleet/howto-use-overrides-customize-resources-placement
Configure Azure Policy to enforce AKS fleet enrollment	https://learn.microsoft.com/en-us/azure/kubernetes-fleet/howto-use-policy-to-add-clusters-to-fleet
Configure multi-cluster L4 load balancing with Fleet	https://learn.microsoft.com/en-us/azure/kubernetes-fleet/l4-load-balancing
Use envelope objects for safe Fleet resource propagation	https://learn.microsoft.com/en-us/azure/kubernetes-fleet/quickstart-envelope-reserved-resources
Configure auto-upgrade profiles in Kubernetes Fleet Manager	https://learn.microsoft.com/en-us/azure/kubernetes-fleet/update-automation
Define reusable multi-cluster update strategies in Fleet Manager	https://learn.microsoft.com/en-us/azure/kubernetes-fleet/update-create-update-strategy
Configure approval gates in Fleet Manager update strategies	https://learn.microsoft.com/en-us/azure/kubernetes-fleet/update-strategies-gates-approvals
Set scheduled start gates for Fleet Manager updates	https://learn.microsoft.com/en-us/azure/kubernetes-fleet/update-strategies-gates-scheduled-start
Configure taints and tolerations for Fleet resource propagation	https://learn.microsoft.com/en-us/azure/kubernetes-fleet/use-taints-tolerations

Integrations & Coding Patterns

Topic	URL
Fine-tune and deploy models with AKS AI toolchain	https://learn.microsoft.com/en-us/azure/aks/ai-toolchain-operator-fine-tune
Integrate MCP servers with KAITO on AKS	https://learn.microsoft.com/en-us/azure/aks/ai-toolchain-operator-mcp
Configure tool calling for KAITO inference on AKS	https://learn.microsoft.com/en-us/azure/aks/ai-toolchain-operator-tool-calling
Attach AKS extension in VS Code to Azure Container Registry	https://learn.microsoft.com/en-us/azure/aks/aks-extension-attach-azure-container-registry
Deploy AI models on AKS using KAITO in VS Code	https://learn.microsoft.com/en-us/azure/aks/aks-extension-kaito
Connect AKS clusters to AI agents via MCP server	https://learn.microsoft.com/en-us/azure/aks/aks-model-context-protocol-server
Autoscale AKS GPU workloads with KEDA and DCGM	https://learn.microsoft.com/en-us/azure/aks/autoscale-gpu-workloads-with-keda
Integrate Azure Blob storage volumes with AKS via CSI	https://learn.microsoft.com/en-us/azure/aks/create-volume-azure-blob-storage
Integrate AKS with Azure Key Vault via CSI Driver	https://learn.microsoft.com/en-us/azure/aks/csi-secrets-store-driver
Configure Secrets Store CSI with NGINX TLS on AKS	https://learn.microsoft.com/en-us/azure/aks/csi-secrets-store-nginx-tls
Refactor EDW application code to use Azure services	https://learn.microsoft.com/en-us/azure/aks/eks-edw-refactor
Use kubectl gadget to inspect AKS workloads	https://learn.microsoft.com/en-us/azure/aks/inspektor-gadget-run-gadgets
Integrate AKS Istio add-on metrics with Azure Managed Prometheus	https://learn.microsoft.com/en-us/azure/aks/istio-metrics-managed-prometheus
Onboard custom HuggingFace models with KAITO on AKS	https://learn.microsoft.com/en-us/azure/aks/kaito-custom-inference-model
Use KEDA integrations with Azure and OSS services	https://learn.microsoft.com/en-us/azure/aks/keda-integrations
Use Azure and OSS integrations with OSM add-on on AKS	https://learn.microsoft.com/en-us/azure/aks/open-service-mesh-integrations
Run vLLM batch inference with Ray on AKS	https://learn.microsoft.com/en-us/azure/aks/ray-batch-inference
Fine-tune Aurora weather model with Ray on AKS	https://learn.microsoft.com/en-us/azure/aks/ray-finetune-aurora
Serve fine-tuned Aurora model with Ray Serve on AKS	https://learn.microsoft.com/en-us/azure/aks/ray-online-serving
Distributed LLM training with Ray on AKS	https://learn.microsoft.com/en-us/azure/aks/ray-train-llm
Use AKS Vulnerability Data API programmatically	https://learn.microsoft.com/en-us/azure/aks/security-vulnerability-api-reference
Use Telepresence with AKS for local microservice debugging	https://learn.microsoft.com/en-us/azure/aks/use-telepresence-aks
Deploy Mongo Express client to connect to MongoDB on AKS	https://learn.microsoft.com/en-us/azure/aks/validate-mongodb-cluster

Deployment

Topic	URL
Deploy AI models on AKS with AI toolchain operator	https://learn.microsoft.com/en-us/azure/aks/ai-toolchain-operator
Deploy AI models on AKS using portal AI toolchain	https://learn.microsoft.com/en-us/azure/aks/ai-toolchain-operator-azure-portal
Migrate AKS app routing from NGINX to Gateway API	https://learn.microsoft.com/en-us/azure/aks/app-routing-nginx-to-gateway-api-migration
Set up automated deployments to AKS with CI/CD	https://learn.microsoft.com/en-us/azure/aks/automated-deployments
Provision production-ready AKS infrastructure on Azure	https://learn.microsoft.com/en-us/azure/aks/create-aks-infrastructure
Move Azure Disk PVs between AKS clusters	https://learn.microsoft.com/en-us/azure/aks/csi-disk-move-subscriptions
Migrate AKS in-tree storage classes to CSI drivers	https://learn.microsoft.com/en-us/azure/aks/csi-migrate-in-tree-volumes
Install Dapr extension on AKS and Arc-enabled clusters	https://learn.microsoft.com/en-us/azure/aks/dapr
Deploy Dapr Workflow applications on AKS via extension	https://learn.microsoft.com/en-us/azure/aks/dapr-workflow
Programmatically deploy Azure Kubernetes applications with Azure CLI	https://learn.microsoft.com/en-us/azure/aks/deploy-application-az-cli
Deploy Azure Kubernetes applications using ARM templates	https://learn.microsoft.com/en-us/azure/aks/deploy-application-template
Deploy production AKS clusters with Terraform AVM	https://learn.microsoft.com/en-us/azure/aks/deploy-cluster-terraform-verified-module
Deploy AKS clusters with Confidential containers via CLI	https://learn.microsoft.com/en-us/azure/aks/deploy-confidential-containers-default-policy
Deploy Kubernetes applications from Azure Marketplace to AKS	https://learn.microsoft.com/en-us/azure/aks/deploy-marketplace
Deploy and run AKS Periscope diagnostics	https://learn.microsoft.com/en-us/azure/aks/deploy-periscope-aks
Deploy SpinKube on AKS for serverless Wasm workloads	https://learn.microsoft.com/en-us/azure/aks/deploy-spinkube
Configure Azure Pipelines CI/CD to deploy to AKS	https://learn.microsoft.com/en-us/azure/aks/devops-pipeline
Install and use Draft extension on AKS	https://learn.microsoft.com/en-us/azure/aks/draft
Deploy and validate AWS EDW workload on Azure AKS	https://learn.microsoft.com/en-us/azure/aks/eks-edw-deploy
Prepare AKS and infrastructure for EDW workload	https://learn.microsoft.com/en-us/azure/aks/eks-edw-prepare
Deploy AWS Yelb web application to Azure AKS	https://learn.microsoft.com/en-us/azure/aks/eks-web-deploy
Prepare production-ready AKS infrastructure for web apps	https://learn.microsoft.com/en-us/azure/aks/eks-web-prepare
Migrate Yelb web application from EKS to AKS	https://learn.microsoft.com/en-us/azure/aks/eks-web-refactor
Deploy AKS with Defender for Containers using Terraform	https://learn.microsoft.com/en-us/azure/aks/enable-defender-for-containers-terraform
Enable KEDA add-on on existing AKS clusters	https://learn.microsoft.com/en-us/azure/aks/enable-keda-existing-cluster
Deploy highly available GitHub Actions runners on AKS	https://learn.microsoft.com/en-us/azure/aks/github-actions-azure-files-deploy-test
Deploy Istio-based service mesh add-on on AKS	https://learn.microsoft.com/en-us/azure/aks/istio-deploy-addon
Uninstall Istio-based service mesh add-on and clean AKS resources	https://learn.microsoft.com/en-us/azure/aks/istio-uninstall-addon
Upgrade Istio-based service mesh add-on revisions on AKS	https://learn.microsoft.com/en-us/azure/aks/istio-upgrade
Deploy KEDA add-on to AKS using ARM templates	https://learn.microsoft.com/en-us/azure/aks/keda-deploy-add-on-arm
Deploy AKS KEDA add-on using Azure CLI	https://learn.microsoft.com/en-us/azure/aks/keda-deploy-add-on-cli
Use GitHub Actions to build and deploy to AKS	https://learn.microsoft.com/en-us/azure/aks/kubernetes-action
Install and use Helm to deploy apps on AKS	https://learn.microsoft.com/en-us/azure/aks/kubernetes-helm
Migrate AKS clusters from autoscaler to node auto-provisioning	https://learn.microsoft.com/en-us/azure/aks/migrate-from-autoscaler-to-node-auto-provisioning
Migrate AKS KMS v2 to infrastructure encryption	https://learn.microsoft.com/en-us/azure/aks/migrate-key-management-service-platform-managed-key-customer-managed-key
Deploy Open Service Mesh add-on on AKS using Bicep templates	https://learn.microsoft.com/en-us/azure/aks/open-service-mesh-deploy-addon-bicep
Uninstall Open Service Mesh add-on and clean up AKS resources	https://learn.microsoft.com/en-us/azure/aks/open-service-mesh-uninstall-add-on
Deploy and use OpenFaaS on Azure Kubernetes Service	https://learn.microsoft.com/en-us/azure/aks/openfaas
Track AKS release rollout status by region	https://learn.microsoft.com/en-us/azure/aks/release-tracker
Migrate AKS clusters to new Azure CNI IPAM and data planes	https://learn.microsoft.com/en-us/azure/aks/update-azure-cni
Upgrade Azure Kubernetes Service control plane safely	https://learn.microsoft.com/en-us/azure/aks/upgrade-aks-control-plane
Automate AKS node upgrades using GitHub Actions	https://learn.microsoft.com/en-us/azure/aks/upgrade-github-actions
Run Flyte data and ML pipelines on AKS	https://learn.microsoft.com/en-us/azure/aks/use-flyte
Deploy wasmCloud on AKS for distributed Wasm apps	https://learn.microsoft.com/en-us/azure/aks/wasmcloud
Plan zero-downtime migrations and releases on AKS	https://learn.microsoft.com/en-us/azure/aks/zero-downtime-migration
Set up automated multi-cluster deployments with Fleet Manager	https://learn.microsoft.com/en-us/azure/kubernetes-fleet/howto-automated-deployments
Run staged rollout deployments for Fleet placements	https://learn.microsoft.com/en-us/azure/kubernetes-fleet/howto-staged-update-run