Azure Container Services Docs – Weekly Update (2026-07-05 to 2026-07-12)

Fleet – Faq

Summary

The documentation now clarifies that the **NodeSecurityPatch** feature, which provides AKS-managed security patches applied to the existing VHD running on the node, is no longer labeled as a preview. This change indicates that users can rely on this feature for production environments without the previous preview limitations. Additionally, details regarding a security patch have been rolled back, which may affect users’ understanding of the current security patching process.

Fleet – Concepts Update Orchestration

Summary

The documentation for the Kubernetes Fleet’s update orchestration has been updated to remove the details regarding the SecurityPatch channel, which previously allowed for weekly updates of Linux nodes with only security fixes. Users are now directed to create an Auto-upgrade Profile solely with the NodeImage channel if they wish to upgrade their Node Image version, as the SecurityPatch channel has been deprecated.

AKS – Valkey Overview

Summary

The Valkey overview documentation has been updated to improve clarity on deploying Valkey on AKS. It now includes specific details about the deployment process and the configuration of StatefulSets for high availability.

AKS – Deploy Ray Tuning

Summary

This article has been updated to reflect the latest practices for deploying a Ray cluster for tuning with BlobFuse on AKS, emphasizing the integration of scalable storage for high-throughput data access.

AKS – Deploy Ray

Summary

The documentation now includes detailed instructions for deploying a Ray cluster on Azure Kubernetes Service (AKS) using KubeRay, with two deployment methods: non-interactive using a `deploy.sh` script and manual deployment steps. Users can also learn how to submit a Ray Job specification to train a PyTorch model and view results on the Ray Dashboard, including necessary modifications to the Ray Job specification for their environment. Additionally, the prerequisites section has been updated to include the requirement for the Azure Kubernetes Service Preview extension and Terraform or OpenTofu installation.

AKS – Nat Gateway

Summary

The documentation for creating a managed or user-assigned NAT gateway for Azure Kubernetes Service (AKS) has been updated to include new features and clarifications. It now specifies the types of NAT gateways available, their benefits, and how to create an AKS cluster with these gateways. The updates also emphasize the recommended use of AKS Automatic for production workloads.

AKS – Upgrade Cluster Components

Summary

The upgrade documentation for Azure Kubernetes Service (AKS) clusters has been revised to clarify the upgrade process and emphasize the importance of keeping Kubernetes versions up to date. It now includes details on automatic upgrades and the benefits of regular node image updates.

AKS – Configure Ray Kueue Queues

Summary

An article focused on configuring Kueue queues for managing Ray workloads on AKS. It explains the setup of ClusterQueues and LocalQueues, providing examples for both single and team queue configurations.

ACR – Container Registry Ipv6 Dual Stack

Summary

This new document introduces IPv6 dual-stack endpoints in Azure Container Registry, allowing clients to access the registry over both IPv4 and IPv6. It outlines the prerequisites, benefits, and configurations necessary for enabling this feature, which is currently in preview.

AKS – Autoscale Gpu Workloads with Keda

Summary

The documentation now includes updated links for monitoring GPU metrics from the NVIDIA DCGM exporter with Azure Managed Prometheus and Azure Managed Grafana, directing users to the correct resource. Additionally, the reference to AKS clusters with NVIDIA GPU-enabled node pools has been updated to point to the appropriate section on using NVIDIA GPUs, enhancing clarity on confirming GPU schedulability.

AKS – Azure Cni Powered by Cilium

Summary

The documentation now clarifies the steps required to use Azure CNI Powered by Cilium, specifying the differences based on the AKS cluster mode, which improves user understanding of the setup process.

AKS – Localdns Custom

Summary

This document outlines the configuration and management of LocalDNS in Azure Kubernetes Service, detailing its benefits for DNS resolution performance and resiliency. It includes guidance on enabling and customizing LocalDNS for different AKS cluster modes.

AKS Arc – AKS Bare Metal System Requirements

Summary

The documentation now includes a new command for registering the Microsoft.Compute feature, allowing users to enable hidden preview access for the Hybrid Container Service. This addition provides clear instructions on how to execute the command using the Azure CLI, enhancing user capability in managing their Azure resources.

AKS – Entra Id Authorization

Summary

The documentation for using Microsoft Entra ID authorization for the Kubernetes API in Azure Kubernetes Service (AKS) has been updated to clarify that AKS Automatic clusters are preconfigured with Azure RBAC for Kubernetes authorization, eliminating the need to enable it manually. Additionally, the prerequisites section now specifies the required versions for Azure CLI and kubectl, and emphasizes that managed Microsoft Entra integration must be enabled on the cluster before adding Microsoft Entra ID authorization. Users can now better understand the setup process and requirements for both AKS Automatic and AKS Standard clusters.

AKS – Intro AKS Automatic

Summary

The introduction of AKS Automatic has been updated to reflect the latest features and benefits, including guaranteed pod readiness and simplified management for cluster administrators. The document emphasizes the importance of using preconfigured settings for production-ready applications.

AKS Arc – Scale Requirements

Summary

The documentation now specifies that the only supported GPU model is the NVIDIA RTX Pro 6000 Blackwell with 96 GiB of memory, an increase from the previous 48 GiB. Users should refer to the updated section on supported GPU-enabled VM sizes and deployment steps for compute-intensive workloads.

AKS – Ray Batch Inference

Summary

This article describes how to run batch inference using Ray on AKS, detailing the setup for Kueue and the necessary environment configurations. It provides practical examples for submitting RayJobs for inference tasks.

AKS – Create Volume Azure Disk

Summary

The documentation for creating Azure Disk volumes has been updated to reflect changes in the `networkAccessPolicy` and the addition of the `publicNetworkAccess` property. The default value for `networkAccessPolicy` has changed from `AllowAll` to `DenyAll`, and `publicNetworkAccess` can now be set to enable or disable public access to disk data over the internet.

AKS – Ai Ml Overview

Summary

The AI and ML overview documentation has been updated to include new links and references for running Ray AI workloads with Kueue on Azure Kubernetes Service (AKS). This change enhances the guidance available for users looking to leverage these technologies in AKS.

AKS – Nvidia Gpu Operator

Summary

The documentation now clarifies that users can skip automatic GPU driver installation by creating an NVIDIA GPU-enabled node pool with the `az aks nodepool add` command and setting the `–gpu-driver` parameter to `none`. Additionally, users are directed to check the schedulability of their GPUs and run GPU workloads after installing the GPU Operator, with updated links to relevant sections for better navigation.

AKS – Stop Cluster Upgrade API Breaking Changes

Summary

This article explains how Azure Kubernetes Service (AKS) can automatically block cluster upgrades when deprecated Kubernetes API usage is detected. It provides guidance on how to remediate or bypass validation, ensuring smoother upgrade processes and reducing unexpected disruptions.

AKS – Inspektor Gadget Run Gadgets

Summary

This article teaches users how to utilize the kubectl gadget plugin to run various gadgets for inspecting system-level behavior in AKS. It includes examples of commands and the types of system activities that can be monitored.

AKS – Inspektor Gadget Overview

Summary

The overview explains the Inspektor Gadget extension for AKS, detailing its purpose as an observability tool that uses eBPF to inspect and troubleshoot workloads. It describes how the extension enriches kernel events with Kubernetes metadata.

AKS – Inspektor Gadget Troubleshoot

Summary

This document outlines common installation, configuration, and runtime errors associated with the Inspektor Gadget extension on AKS. It provides troubleshooting steps and diagnostic commands to resolve issues.

AKS – Inspektor Gadget Catalog

Summary

The catalog provides a comprehensive list of official gadgets available with the Inspektor Gadget extension for AKS, categorized by their functionality. It serves as a guide for users to select the appropriate gadget for their needs.

AKS – Use Nvidia Gpu

Summary

The documentation now recommends using a minimum node pool size of `Standard_NC4as_T4_v3` for AKS, replacing the previous recommendation of `Standard_NC6s_v3`. This change affects the `–node-vm-size` parameter, which users must now set to `Standard_NC4as_T4_v3` when configuring their AKS node pools. Additionally, the NVv4 series (based on AMD GPUs) remains unsupported on AKS.

AKS Arc – Deploy Gpu Node Pool

Summary

The documentation now reflects updated specifications for the NVIDIA RTX Pro 6000 Blackwell GPU node pools, indicating that users can utilize models with 96 GiB of memory instead of the previous 48 GiB. This change allows for enhanced performance and capacity in GPU workloads when deploying node pools using the `Standard_NC16_RTX6000Pro_1` and `Standard_NC32_RTX6000Pro_1` configurations.

AKS – Best Practices Performance Scale Large

Summary

Minor updates were made to the scaling recommendations for AKS clusters, specifically advising on scaling in batches to prevent Azure API throttling. This change enhances the guidance for users managing large-scale deployments.

ACR – Container Registry Firewall Rules

Summary

The firewall rules documentation has been updated to include considerations for IPv6 dual-stack endpoints, ensuring that firewall rules based on FQDNs continue to function and that IPv6 traffic is accounted for in IP-based allowlists.

AKS – Overview

Summary

This update introduces the AKS-2026-0005 security bulletin, which addresses a significant increase in reported Linux kernel CVEs for AKS Ubuntu 22.04 node images due to Canonical’s reclassification of vulnerabilities. It emphasizes the need for users to verify their kernel versions against the Ubuntu CVE Tracker and outlines recommended actions to mitigate exposure.

AKS – Monitor AKS

Summary

The documentation now emphasizes that AKS Automatic is the recommended default for production workloads, providing a preconfigured monitoring baseline that includes managed service for Prometheus, Container insights, and Azure Monitor dashboards with Grafana. Users can leverage these features automatically in AKS Automatic, while in AKS Standard, they have the option to enable and configure these monitoring capabilities based on their specific requirements. Additionally, the section on monitoring capabilities has been clarified to highlight the differences between AKS Automatic and AKS Standard regarding default settings for various monitoring tools.

AKS – Deploy Ray Infrastructure

Summary

Learn how to deploy the AKS cluster, KubeRay operator, Kueue controller, and Azure Blob storage for running Ray AI workloads.

ACR – Container Registry Retention Policy

Summary

The retention policy documentation has been revised to clarify support for OCI media types and the use of the acr purge command for cleaning up untagged OCI manifests, enhancing the clarity of supported manifest types.

AKS Arc – AKS Bare Metal Create Cluster Portal

Summary

The documentation has been updated to reflect a change in the search terminology for Azure Arc. Users are now instructed to enter **Azure Arc** instead of **Kubernetes – Azure Arc** in the search bar, which simplifies the search process for accessing relevant resources.

AKS – Free Standard Pricing Tiers

Summary

The documentation now clarifies that AKS Automatic clusters are preconfigured to use the Standard tier during creation, which is recommended for most production workloads. Additionally, the pricing tiers for AKS cluster management have been reorganized and detailed, highlighting the differences in capabilities and recommended use cases for the Free, Standard, and Premium tiers, including specific SLA coverage and node support. Users can now better understand the implications of choosing each tier based on their workload requirements.

AKS – Ray Overview

Summary

The Ray overview documentation has been updated to reflect changes in how Ray AI workloads are managed on AKS. It now provides a clearer description of the deployment process and the integration with Kueue for workload management.

AKS – Inspektor Gadget Configure

Summary

This article provides instructions on how to install, configure, and remove the Inspektor Gadget cluster extension on Azure Kubernetes Service (AKS) using the Azure CLI. It details the prerequisites and the steps to manage the extension effectively.

AKS – Use Azure Linux

Summary

The documentation on using Azure Linux with AKS has been updated to clarify the differences between AKS Automatic and AKS Standard. It now provides detailed guidance on how to use Azure Linux in both scenarios, enhancing the user experience.

AKS – Upgrade Capacity Cost Planning

Summary

The documentation now includes a new section on "AKS Automatic," which outlines how this feature simplifies capacity and cost management for users. Key enhancements include automatic node provisioning that eliminates the need for manual `maxSurge` tuning, efficient bin packing to optimize resource utilization, and built-in safeguards against upgrade failures due to deprecated APIs. Users of AKS Automatic can expect a more streamlined upgrade process with reduced manual configuration and improved cost efficiency compared to AKS Standard clusters.

AKS – Quickstart Dapr

Summary

The documentation has been updated to reflect the transition from Azure Cache for Redis to Azure Managed Redis, including changes to the creation flow and parameters. Users are now instructed to enable access-key authentication on the default database using the command `az redisenterprise database update`, and to retrieve the primary key for the default database with `az redisenterprise database list-keys`. Additionally, the SSL port has been updated to 10000, and users should now create a Kubernetes secret for the Redis password using the retrieved primary key.

AKS – AKS Managed Gpu Nodes

Summary

The documentation for AKS managed GPU nodes has been updated to reflect a change in the recommended VM size for nodes. Users should now use `–node-vm-size Standard_NC4as_T4_v3` instead of the previously suggested `–node-vm-size Standard_NC6s_v3`, which may impact performance and cost considerations for GPU workloads.

AKS – Ray Train Llm

Summary

A new article detailing how to fine-tune the Qwen2.5-7B model using Ray on AKS. It includes prerequisites, setup instructions, and a comprehensive guide on submitting RayJobs for distributed training.

ACR – Container Registry Dedicated Data Endpoints

Summary

This document has been updated to clarify that dedicated data endpoints are a prerequisite for enabling IPv6 dual-stack endpoints. It provides guidance on how to enable these endpoints.

AKS – Gpu Profiling

Summary

The documentation for GPU profiling on Azure Kubernetes Service (AKS) has been updated to include new commands for enabling GPU profiling via the Inspektor Gadget extension. The previous command using ‘helm’ has been replaced with ‘az k8s-extension create’, and additional tips for capturing memory allocation events have been added to enhance user understanding.

AGC – How to Inference Gateway

Summary

The documentation for the Application Gateway for Containers has been updated to include a note on the current limitations of the inference gateway feature. It clarifies that this feature is not supported through the AKS add-on and provides guidance on deploying the ALB Controller via Helm.

AKS – AKS Production Upgrade Strategies

Summary

This article has been revised to enhance clarity on AKS production upgrade strategies, including the introduction of AKS Automatic, which simplifies upgrade processes and ensures minimal downtime. It also provides updated descriptions and tips for production environments.

AKS – Upgrade Conceptual

Summary

This document has been enhanced to explain the upgrade processes for AKS clusters, highlighting the differences between AKS Automatic and AKS Standard. It outlines the benefits of using AKS Automatic for production workloads, including automatic upgrades and built-in safeguards, making it easier for users to understand the upgrade mechanics.

ACR – Container Registry RBAC Abac Repository Permissions

Summary

The documentation now emphasizes the importance of assigning equivalent ABAC-enabled roles before switching an existing Azure Container Registry (ACR) to ABAC-enabled mode to prevent access disruptions for existing identities. Users are advised that switching modes will invalidate cached credentials from the RBAC-only mode, leading to authentication errors until clients refresh their credentials, which can take from a few minutes to several hours. Additionally, the steps for refreshing cached credentials have been clarified to ensure users can minimize disruptions during the transition.

AKS – Stateful Workloads Overview

Summary

The article has been updated to provide a comprehensive overview of running and migrating stateful workloads on Azure Kubernetes Service (AKS), including design patterns, storage options, and migration on-ramps for databases and stateful services. New sections on migrating stateful workloads and common migration scenarios for PostgreSQL and MongoDB have been added.

ACR – Container Registry Endpoint Reference

Summary

The endpoint protocol settings have been updated to include the new `IPv4AndIPv6` option for Azure Container Registry. This change requires dedicated data endpoints to be enabled and specifies the necessary Azure CLI version for updates.

AKS – Quick Kubernetes Deploy CLI

Summary

The quickstart guide for deploying Kubernetes using the Azure CLI has been updated to improve clarity and usability. It now includes enhanced instructions for creating resource groups and AKS clusters, along with verification steps for successful provisioning.

AKS – Ray Finetune Aurora

Summary

A new guide on fine-tuning the Aurora weather model using Ray on AKS, detailing the integration of Kueue for managing workloads and providing step-by-step instructions for setup and execution.

AKS – Automatic Pod Disruption Budget Management

Summary

The documentation now clarifies the behavior of Pod Disruption Budgets (PDBs) during AKS cluster upgrades, emphasizing that misconfigured PDBs can block pod eviction entirely, potentially leading to downtime. It also highlights the risks associated with deployments lacking PDBs, which do not protect pods from simultaneous eviction during upgrades. This improved explanation helps users better understand how to configure PDBs to maintain application availability during upgrades.

AKS – Ray Online Serving

Summary

This article provides updated instructions for serving models online using Ray on AKS, detailing the setup of RayService and the necessary configurations for persistent HTTP endpoints.