Azure Container Services Docs – Weekly Update (2026-08-02 to 2026-08-09)

AKS – Istio Support Policy

Summary

Updates content with clarifications and improvements.

AKS – Pci Identity

Summary

Updates content with clarifications and improvements.

AKS – Operate Cost Optimized Scale

Summary

Updates content with clarifications and improvements.

AKS – Concepts Ai Ml Language Models

Summary

The documentation now emphasizes that for most production AI and machine learning workloads on Azure Kubernetes Service (AKS), users should utilize AKS Automatic as the recommended default, which simplifies cluster management by providing production-ready configurations and built-in security features. Additionally, the content has been updated to clarify the distinctions between small and large language models, including their parameter counts and use cases, enhancing users’ understanding of when to apply each model type in their workflows.

AKS – Pci Data

Summary

Updates content with clarifications and improvements.

AKS – Azure Cni Powered by Cilium

Summary

The document now includes important information about outbound NSG rules that may block Cilium diagnostic logs, advising customers to allow egress to the Azure Monitor service tag for proper telemetry.

AKS – App Routing Gateway API

Summary

The documentation now specifies that starting with AKS version 1.36, new AKS Automatic clusters will use the Kubernetes Gateway API via the application routing add-on by default, making it the recommended ingress model for production workloads. Users are informed that they cannot enable both the application routing Gateway API and the Istio service mesh add-on simultaneously, and they must delete specific Istio resources when transitioning between these two implementations. Additionally, Envoy access logging is enabled by default on Gateway proxy pods, providing detailed logs for ingress traffic without requiring additional configuration.

AKS – Workload Identity Deploy Cluster

Summary

The documentation now emphasizes the need for the identity to have permission to create role assignments at the key vault scope, specifically noting that the Contributor and Key Vault Contributor roles cannot perform this action. Additionally, users are informed that the `ARM_SUBSCRIPTION_ID` environment variable is required for resource creation in AzureRM 4.x. The instructions for creating an Azure Key Vault have been updated to include purge protection, and users are advised that Azure role assignments may take up to 10 minutes to propagate, which could affect subsequent operations.

AKS – Configure Automatic Zone Placement

Summary

Learn how to use automatic zone placement (–zones auto) to let AKS dynamically select availability zones for your node pools.

AKS – Deploy Ray

Summary

The article has been removed, which may impact users looking for guidance on deploying a Ray cluster on AKS.

AKS – Configure AKS Scheduler

Summary

The documentation now reflects the correct parameter for the Kubernetes scheduler name, changing from `default_scheduler` to `default-scheduler`. This update ensures users configure the AKS scheduler accurately, aligning with the expected syntax for Kubernetes configurations.

AKS – Inspektor Gadget Configure

Summary

Learn how to install, configure, and remove the Inspektor Gadget cluster extension on Azure Kubernetes Service (AKS) by using the Azure CLI.

AKS – Outbound Rules Control Egress

Summary

Updates content with clarifications and improvements.

AKS – Quick Kubernetes Deploy Rm Template

Summary

Updates content with clarifications and improvements.

AKS – Kubernetes Portal

Summary

Updates content with clarifications and improvements.

AKS – Best Practices Performance Scale Large

Summary

The document provides best practices for scaling large AKS clusters, emphasizing the importance of scaling in batches to avoid API throttling. It includes updated recommendations for node scaling operations.

AKS – Quick Kubernetes Deploy Powershell

Summary

Updates content with clarifications and improvements.

AKS – AKS Automatic Sku Migration

Summary

Learn how to migrate to or from an Azure Kubernetes Service (AKS) Automatic cluster with managed system node pool.

AKS – Enable Fips Nodes

Summary

The documentation has been updated to reflect the support for FIPS 140-3 in Azure Kubernetes Service (AKS), allowing users to create Linux and Windows node pools with FIPS 140-3 enabled. Additionally, it specifies that Trusted Launch with FIPS is only supported for Ubuntu 22.04 on Generation 2 VM sizes, and provides detailed instructions for adding a Linux node pool with both FIPS and Trusted Launch enabled using Azure CLI, ARM templates, and Bicep. Users can now verify their node pool configurations and ensure they are using Trusted Launch images through specific commands.

AKS – App Routing Gateway API Dns Tls

Summary

Use the Application Routing add-on to automatically manage Azure DNS records and Azure Key Vault TLS certificates for ingress traffic on Azure Kubernetes Service (AKS) with the Kubernetes Gateway API.

AKS – Create Volume Azure Blob Storage

Summary

The documentation for Azure Blob storage volume guidance has been updated to clarify the creation of Data Lake Storage accounts and the parameters required for dynamic provisioning. Users can now specify `isHnsEnabled: "true"` in the storage class parameters to enable hierarchical namespace for Data Lake Storage accounts and utilize the `–use-adls=true` mount option for blobfuse access in static provisioning. Additionally, the parameters for configuring storage accounts, containers, and endpoints have been reorganized for better clarity, enhancing user understanding of how to set up and manage their Azure Blob storage configurations.

AKS – Create Node Pools

Summary

The documentation now clarifies that you cannot enable Windows support on a cluster created without it, requiring the `windowsProfile` to be configured during initial creation. Additionally, users are informed that they cannot change the max pods setting of a node pool after creation; to adjust this, a new node pool must be created with the desired setting. Furthermore, the command for creating a new Windows node pool has been updated to include the `–enable-fips-image` parameter, which is necessary for Windows Server 2025 node pools.

AKS – Concepts Scale

Summary

The documentation for scaling options in Azure Kubernetes Service (AKS) has been significantly updated to provide a clearer overview of scaling methods, including Horizontal Pod Autoscaler (HPA), Vertical Pod Autoscaler (VPA), Cluster Autoscaler, and Kubernetes Event-driven Autoscaling (KEDA). Users can now better understand which scaling method is best suited for their workloads, with detailed guidance on metrics and scenarios for each method. Additionally, the integration of Azure Container Instances (ACI) for rapid scaling has been emphasized, allowing users to handle burst demands more effectively without needing to provision additional VM nodes.

AKS – Keda About

Summary

Updates content with clarifications and improvements.

AKS – Configure Ray Kueue Queues

Summary

This new article explains how to configure Kueue ResourceFlavors, ClusterQueues, and LocalQueues to manage admission control for Ray workloads on Azure Kubernetes Service (AKS). It provides a practical guide for users looking to optimize their Ray workloads.

AKS – Localdns Custom

Summary

Updates content with clarifications and improvements.

AKS – Node Auto Provisioning

Summary

Updates content with clarifications and improvements.

AKS Arc – Refresh Cluster Proxy Settings

Summary

This article describes how to refresh an existing AKS on Azure Local cluster to apply updated HTTP proxy settings after a configuration change. It includes prerequisites, the command to refresh the cluster, and next steps for further configuration.

AKS – Node Auto Provisioning Disruption

Summary

The documentation now clarifies that the Expiration method for node disruption is a forceful approach, allowing users to set a maximum age for NAP nodes, which are marked as expired after reaching the specified age in the node pool’s `spec.disruption.expireAfter` value. Additionally, it emphasizes that while users can rate limit Karpenter’s graceful disruptions through the `spec.disruption.budgets` field, the Expiration method is not subject to these limits. Users can also confine NAP disruptions to a maintenance window by setting `expireAfter: Never` and relying on disruption-budget-gated drift and consolidation.

AKS Arc – AKS Troubleshoot

Summary

The documentation has been updated to reflect the rebranding of "AKS enabled by Azure Arc" to "AKS Hybrid and Edge," including changes in section titles and descriptions throughout the troubleshooting guide. Users will now find references to "AKS Hybrid and Edge" instead of "AKS enabled by Azure Arc," which may affect how they search for and interpret troubleshooting information. Additionally, the support request instructions have been updated to align with the new terminology.

AKS – Node Auto Provisioning Aksnodeclass

Summary

The documentation for AKSNodeClass has been updated to reflect a change in the nodeClassRef configuration, specifically replacing the apiVersion with the group designation "karpenter.azure.com." This change may impact how users define node classes in their configurations, requiring them to use the updated group reference instead of the previous apiVersion format.

AKS – Resize Node Pool

Summary

This document has been updated to improve references to pod disruption budgets (PDBs), enhancing guidance on managing disruptions during node pool resizing.

AKS – Pci Cryptography Key Management

Summary

Updates content with clarifications and improvements.

AKS – AKS Managed Gpu Nodes

Summary

The documentation now specifies that users can enable Managed GPU with node auto-provisioning (NAP) by adding the `EnableManagedGPUExperience:"true"` tag to their `AKSNodeClass` custom resource definition (CRD). Additionally, the recommended node VM size has been updated to `Standard_NC4as_T4_v3`, providing users with a different GPU SKU option for their deployments. Users can follow the new examples provided for configuring the `AKSNodeClass` and `NodePool` CRDs to utilize these features effectively.

AKS – Passive Cold Solution

Summary

Updates content with clarifications and improvements.

AKS – Pci Network

Summary

Updates content with clarifications and improvements.

AKS – Operator Best Practices Cluster Security

Summary

Updates content with clarifications and improvements.

AKS Arc – Ssh Connection

Summary

The document has been updated to include SSH connection instructions for both Windows and Linux worker nodes, enhancing clarity for IT professionals performing maintenance.

AKS – Pci Enhanced Mfa Implementation

Summary

Updates content with clarifications and improvements.

AKS – Node Pool Unique Subnet

Summary

Updates content with clarifications and improvements.

AKS – Migrate Legacy Dotnet to AKS

Summary

A step-by-step guide for migrating legacy .NET Framework and Windows IIS applications to Azure Kubernetes Service (AKS), covering assessment, planning, and execution.

AKS – Core AKS Concepts

Summary

The documentation now includes updated information on the Azure-managed AKS control plane components and clarifies that clusters using Azure CNI powered by Cilium will utilize Cilium instead of kube-proxy for service routing. Additionally, the supported operating systems for AKS have been expanded to include Azure Container Linux, and the pricing tiers have been detailed, specifying features and node limits for Free, Standard, and Premium tiers. Users can now better understand the differences in node pool management and the implications of choosing different operating systems and pricing options.

AKS – Operator Best Practices Container Image Management

Summary

Updates content with clarifications and improvements.

AKS – Container Network Observability How to

Summary

The documentation now clarifies that to enable FIPS support when using Advanced Container Networking Services (ACNS) on non-Cilium data planes, users must utilize either an Ubuntu 22.04 node pool or an Azure Linux node pool, as FIPS support is not available on Ubuntu 20.04 nodes due to kernel restrictions. Additionally, the FIPS support matrix has been updated to reflect this change.

AKS – Best Practices Performance Scale

Summary

The documentation now includes information on automatic zone placement for node pools in AKS, allowing users to let AKS dynamically select zones with capacity for their VM SKU instead of manually specifying zones. Additionally, the descriptions of the LIST and UPDATE operations have been clarified, ensuring users understand how to retrieve and modify resources within their Kubernetes cluster effectively.

AKS – Inspektor Gadget Run Gadgets

Summary

Learn how to use the kubectl gadget plugin to run gadgets and inspect DNS, file, process, and network activity on Azure Kubernetes Service (AKS).

AKS – Optimized Addon Scaling

Summary

Updates content with clarifications and improvements.

AKS – Free Standard Pricing Tiers

Summary

The documentation for Azure Kubernetes Service (AKS) has been updated to clarify the pricing tiers available for cluster management, specifically highlighting the Free, Standard, and Premium tiers. Users can now see that AKS Automatic clusters are preconfigured to use the Standard tier by default, which includes enhanced features such as uptime SLA and pod readiness SLA coverage. Additionally, the commands for creating and updating AKS clusters have been streamlined, providing clearer examples for setting the tier and support plan during cluster creation and updates.

AKS – Concepts Vulnerability Management

Summary

The updated article discusses how Microsoft manages security vulnerabilities for Azure Kubernetes Service (AKS) clusters, highlighting the production-ready default experience with AKS Automatic. It outlines the components involved in vulnerability management and the benefits of using AKS Automatic.

AKS – Configure Static Egress Gateway

Summary

The documentation for the Static Egress Gateway in Azure Kubernetes Service (AKS) has been updated to clarify that the feature now supports only IPv4 clusters and is not compatible with dual-stack clusters. Additionally, users are informed that Kubernetes network policies do not apply to traffic routed through the gateway node pool, and that the gateway node pool should exclusively be used for egress traffic, not for general-purpose workloads. The prerequisites section now specifies that Azure CLI version 2.75.0 or later is required for managing gateway node pools.

AKS – Concepts Network Cni Overview

Summary

The documentation for CNI networking in Azure Kubernetes Service (AKS) has been updated to clarify the differences between IP address management (IPAM) options and networking models, emphasizing that users should choose an IPAM option based on their specific requirements. Additionally, the prerequisites section now includes detailed restrictions on AKS address ranges and permissions needed for custom roles when using a user-defined virtual network. Users are also informed about the implications of network security groups (NSGs) when using Azure CNI Overlay, ensuring they understand how to configure traffic rules appropriately.

AKS – Open Ai Quickstart

Summary

The documentation has been updated to clarify the deployment process for the AKS Store Demo application using Azure OpenAI or the OpenAI API. Users can now configure the AI microservice to generate product descriptions by setting specific environment variables, including `USE_AZURE_OPENAI`, `AZURE_OPENAI_DEPLOYMENT_NAME`, `AZURE_OPENAI_ENDPOINT`, and `OPENAI_API_KEY`. Additionally, the instructions emphasize the importance of not storing sensitive information directly in Kubernetes manifests and suggest using managed identities or Azure Key Vault for production workloads.

AKS – Keda Deploy Add on Arm

Summary

Updates content with clarifications and improvements.

AKS – Egress Outboundtype

Summary

The documentation for customizing egress in Azure Kubernetes Service (AKS) has been updated to clarify the available outbound types, which now include `none` and `block`, in addition to load balancer, NAT gateway, and user-defined routes. Users are now informed that changing the outbound type can disrupt network connectivity and alter the cluster’s egress IP address, necessitating updates to firewall rules. Additionally, specific commands and requirements for using the `managedNATGatewayV2` outbound type have been detailed, including the need for the latest Azure CLI and `aks-preview` extension.

AKS – Release Tracker

Summary

The release tracker has been updated to include upcoming Kubernetes versions and their support status in AKS, providing users with essential information for planning upgrades.

AKS – Internal Lb

Summary

The documentation now clarifies that when specifying an IP address for the load balancer, it must be available within the subnet used by the load balancer and should not be an Azure-reserved IP or already assigned to another resource. Additionally, users must ensure their AKS cluster runs a supported Kubernetes version and utilizes a Standard Load Balancer with the appropriate backend pool type for Private Link Service connections. New restrictions for Private Link Service have also been added, including requirements for `externalTrafficPolicy` and health probe configurations.

AKS – Manage Abort Operations

Summary

The documentation now clarifies that users can abort long-running Azure resource operations on an AKS managed cluster or node pool, including create, upgrade, and scale operations. The commands `az aks operation-abort` and `az aks nodepool operation-abort` are introduced for canceling the latest running operations, and the Azure CLI version requirement has been updated to 2.85.0 or later. Additionally, the article emphasizes that canceling an operation does not roll back changes already applied before the cancellation.

AKS – Cost Analysis

Summary

The documentation for AKS cost analysis has been updated to clarify that users must allow up to 24 hours for data collection after enabling the cost analysis add-on. Additionally, it now specifies that the add-on is not available in certain regions, including `usnateast`, `usnatwest`, `usseceast`, or `ussecwest`. Users can also find enhanced instructions for viewing cost allocation data in the Azure portal, including navigating to the Cost Management section and selecting Kubernetes clusters.

AKS – Open Ai Secure Access Quickstart

Summary

Updates content with clarifications and improvements.

AKS – Best Practices App Cluster Reliability

Summary

The article has been updated with new best practices for ensuring application reliability in AKS clusters, including additional recommendations and clarifications.

AKS – Operator Best Practices Cluster Isolation

Summary

Updates content with clarifications and improvements.

AKS – Virtual Machines Node Pools

Summary

The documentation for Virtual Machines node pools in Azure Kubernetes Service (AKS) has been updated to correct the feature flag name to `VMsAgentPoolAutoscalePreview`, which is necessary for enabling the cluster autoscaler. Additionally, users can now utilize up to five scale profiles per node pool, allowing for more flexible scaling options, including multi-version manual and autoscaling. The requirements for Azure CLI have also been updated to version 2.85.0 or later to support these features.

AKS – Kaito Custom Inference Model

Summary

Updates content with clarifications and improvements.

AKS – Reliability Availability Zones Configure

Summary

This update includes changes to the guidance on AKS quotas, SKU, and region availability. It modifies references to supported VM sizes to improve clarity and accuracy.

AGC – Quickstart Create Application Gateway for Containers Managed by Alb Controller

Summary

The documentation now clarifies that when the identity is created via the Add-on for the Application Gateway for Containers, the identity name will be `applicationloadbalancer-<cluster-name>`, and it specifies that the _AppGW for Containers Configuration Manager_ role is already assigned. Additionally, the service identifier has been updated from `azure-appgw-for-containers` to `azure-application-gateway-containers`, reflecting a more accurate service designation.

AKS – Csi Storage Drivers

Summary

Starting with Kubernetes version 1.26, AKS no longer supports creating volumes using the in-tree drivers for Azure Disks and Azure Files, requiring users to migrate to the corresponding CSI drivers (`disk.csi.azure.com` and `file.csi.azure.com`). Additionally, the documentation now clarifies that while existing persistent volumes using in-tree drivers will continue to function through CSI migration, users should perform the migration to utilize CSI features effectively. The Azure Blob storage CSI driver is also detailed with its built-in storage classes and supported features.

AKS – Image Cleaner

Summary

The documentation for Image Cleaner on Azure Kubernetes Service (AKS) has been updated to clarify that it is preconfigured on AKS Automatic clusters, enabling automatic removal of unused images with vulnerabilities by default. Users can now explicitly enable Image Cleaner on AKS Standard clusters using the `–enable-image-cleaner` parameter during cluster creation or updates, and they can configure the cleanup interval with the `–image-cleaner-interval-hours` parameter. Additionally, the section detailing the actions performed by Image Cleaner upon deployment has been enhanced for better clarity.

AKS – Full Cache Ephemeral Os Disk

Summary

Learn how to enable full caching for ephemeral OS disks in Azure Kubernetes Service (AKS) to improve resiliency and performance.

AKS – Concepts Network Azure Cni Overlay

Summary

The documentation now clarifies that to make an application reachable from outside the cluster, users should expose it through a Kubernetes service or application-routing layer, such as a LoadBalancer service or an ingress controller. Additionally, it specifies that on Azure CNI Overlay clusters with Linux nodes, users can expand the pod CIDR to a larger contiguous superset, but shrinking or replacing the range is not supported. The maximum number of pods per node can be configured during cluster creation or when adding a new node pool, with a default and maximum value of 250 pods.

AKS – Entra Id Authorization

Summary

The documentation for using Microsoft Entra ID authorization for the Kubernetes API in Azure Kubernetes Service (AKS) has been updated to clarify that AKS Automatic clusters are preconfigured with Azure RBAC for Kubernetes authorization, eliminating the need to enable it manually. Additionally, the prerequisites section now specifies that users must have Azure CLI version 2.24.0 or later and `kubectl` version 1.18.3 or later installed. Users can also now create custom roles with Azure ABAC conditions to restrict access to specific custom resource groups or kinds, enhancing their ability to manage permissions effectively.

AKS – Roll Back Node Pool Version

Summary

The documentation for rolling back node pool versions in Azure Kubernetes Service (AKS) has been updated to remove the requirement for the `aks-preview` Azure CLI extension, allowing users to perform rollbacks with Azure CLI version 2.88.0 or later. Additionally, users are now informed that the rollback process can temporarily disrupt workloads, and they should verify their workloads’ capacity and Pod Disruption Budgets before initiating a rollback. The API version requirement has also been updated to `2026-04-01` or later.

AKS – Operator Best Practices Scheduler

Summary

The documentation for the "Operator best practices – Basic scheduler features in Azure Kubernetes Service (AKS)" article has been updated to clarify the use of resource quotas and pod disruption budgets (PDBs). Users can now better understand how to set resource requests and limits in pod specifications, and how to define PDBs to manage the availability of applications during maintenance events, ensuring a minimum number of pods remain operational. Additionally, the explanation of the unhealthy pod eviction policy has been enhanced, allowing users to make informed decisions about pod management during disruptions.

AKS – Container Network Security Fqdn Filtering Concepts

Summary

The article has been updated to reflect the partial support of wildcard FQDN policies, which is essential for users configuring DNS policies in their AKS environments.

AKS – Inspektor Gadget Troubleshoot

Summary

Troubleshoot common installation, configuration, and runtime errors with the Inspektor Gadget cluster extension on Azure Kubernetes Service (AKS).

AKS – Quick Kubernetes Deploy CLI

Summary

This article has been modified to improve clarity and usability for users looking to quickly deploy Kubernetes using the Azure CLI. It remains a key resource for beginners in AKS.

AKS – Gpu Profiling

Summary

The GPU profiling documentation has been enhanced to provide clearer instructions on optimizing GPU workloads on AKS. It now emphasizes the use of the Inspektor Gadget extension for GPU profiling and includes additional details on the installation process.

AKS – Node Problem Detector

Summary

Updates content with clarifications and improvements.

AKS – Open Service Mesh Uninstall Add on

Summary

Updates content with clarifications and improvements.

AKS – Keda Workload Identity

Summary

Updates content with clarifications and improvements.

AKS – Best Practices Ml Ops

Summary

The documentation now includes enhanced best practices for implementing MLOps in Azure Kubernetes Service (AKS), detailing key areas such as Infrastructure as Code (IaC), containerization, model management, automation, scalability, and security. Users can expect clearer guidance on configuring GPU workloads, including the use of NVIDIA device plugins, and managing GPU node pools with autoscaling capabilities. Additionally, the article emphasizes the importance of defining and versioning IaC templates for AI pipelines, optimizing resource usage, and implementing compliance controls to protect data.

AKS – Nat Gateway

Summary

Updates content with clarifications and improvements.

AKS – Private Clusters

Summary

The documentation for Azure Kubernetes Service (AKS) private clusters has been updated to clarify the configuration of custom DNS servers, now requiring users to set up a conditional forwarder for the cluster’s private DNS zone to the Azure DNS virtual server at the IP address 168.63.129.16. Additionally, the guidance on using Azure Private Link service has been refined to specify that it only supports Standard Load Balancer, and users are now instructed on the necessity of maintaining a private or public DNS zone for API server name resolution when disabling the public FQDN.

AKS – Optimize AKS Costs

Summary

Updates content with clarifications and improvements.

AKS – Monitor AKS Mongodb

Summary

Updates content with clarifications and improvements.

AKS – Ingress Nginx Retirement

Summary

The documentation now indicates that the Istio Gateway API has reached General Availability (GA), allowing service mesh users to migrate from Istio Ingress to the Istio Gateway API. This change provides users with a stable and supported option for managing ingress traffic in their service mesh implementations.

AKS – Open Service Mesh Istio Migration Guidance

Summary

Updates content with clarifications and improvements.

AKS – Azure Cni Overlay

Summary

Users can now create Azure CNI Overlay AKS clusters with dual-stack networking for both Linux and Windows node pools by installing the `aks-preview` Azure CLI extension and registering the `AzureOverlayDualStackPreview` feature flag. Additionally, the documentation clarifies that for dual-stack networking, users must utilize a supported Kubernetes version available in their region. New instructions have been added for exposing an NGINX deployment with both IPv4 and IPv6 LoadBalancer services, including the necessary commands and configurations.

AKS – Supported Kubernetes Versions

Summary

The documentation for AKS supported Kubernetes versions has been updated to clarify that minor versions add new features, but deprecated APIs and features may be removed according to the Kubernetes Deprecation Policy. Additionally, it now specifies that the control plane can be up to three minor versions ahead of node pools starting with Kubernetes 1.28, and it emphasizes the importance of upgrading to the latest patch release for the current minor version to ensure clusters remain fully patched and supported.

AKS – Ai Toolchain Operator

Summary

The documentation now specifies that the `Windows` OS SKU is not supported for AKS. Additionally, it highlights that the AKS stop and start operations (using `az aks stop` and `az aks start`) may lead to issues such as node pool reconciliation conflicts or provisioning failures when active KAITO Workspaces are present. Users should be aware of these limitations when managing their AKS clusters.

AKS – Cluster Autoscaler Overview

Summary

The documentation now emphasizes the use of a single node pool for each availability zone when implementing the cluster autoscaler, recommending the `–balance-similar-node-groups` parameter to ensure balanced node distribution during scaling operations. Additionally, users can utilize automatic zone placement with the `–zones auto` parameter to dynamically allocate nodes in zones with available capacity, which can be applied when creating or updating node pools. The guidance on managing workloads has been clarified, advising the separation of long-running and bursty job workloads into distinct node pools for optimal performance.

AKS – Deploy Ray Tuning

Summary

This article provides guidance on configuring and deploying a Ray cluster for tuning with BlobFuse on Azure Kubernetes Service (AKS). It covers the setup process, integration with BlobFuse for high-throughput data access, and resource management.

AKS – Quick Windows Container Deploy Powershell

Summary

Updates content with clarifications and improvements.

AKS – Long Term Support

Summary

This article provides an overview of the long-term support (LTS) options available for Kubernetes versions in Azure Kubernetes Service (AKS). It explains the support windows and the importance of keeping up with Kubernetes releases, along with the benefits of LTS for planning upgrades.

AKS – Best Practices Multi Tenancy

Summary

This article provides implementation best practices for multi-tenancy in Azure Kubernetes Service (AKS), covering aspects such as namespace isolation, Kubernetes RBAC with Microsoft Entra ID, and resource quotas. It emphasizes the importance of security and operational efficiency in multi-tenant environments.

AKS – Dns Concepts

Summary

The documentation now clarifies that AKS Automatic clusters come preconfigured with LocalDNS, enhancing DNS performance and reliability without additional setup. In contrast, LocalDNS is optional for AKS Standard, requiring users to enable and configure it separately. Users can also find updated guidance on the benefits and capabilities of LocalDNS, including reduced DNS resolution latency and customizable DNS behavior.

AKS – Node Resource Reservations

Summary

Updates content with clarifications and improvements.

AKS – Node Auto Provisioning Networking

Summary

Updates content with clarifications and improvements.

AKS – Best Practices Gpu

Summary

The documentation now emphasizes the use of AKS Automatic as the recommended default for most production GPU workloads, highlighting its production-ready configuration and reduced operational overhead. Users can follow specific guidance on choosing between AKS Automatic and AKS Standard based on their workload needs, and the article provides detailed best practices for managing GPU-enabled nodes, including scheduling controls and validation policies to ensure optimal resource utilization. Additionally, it outlines the benefits of AKS Automatic, such as built-in safeguards and SLA-backed pod readiness, which enhance the deployment experience for GPU workloads.

AKS – Open Service Mesh Integrations

Summary

Updates content with clarifications and improvements.

AKS – Quick Kubernetes Deploy Portal

Summary

Updates content with clarifications and improvements.

AKS – Network Policy Best Practices

Summary

This article has been refreshed to provide updated best practices for designing and using network policies in Azure Kubernetes Service (AKS). It includes new insights and recommendations for effective network policy management.

AKS – Openfaas

Summary

Updates content with clarifications and improvements.

AKS – Artifact Streaming Overview

Summary

Learn about Artifact Streaming on Azure Kubernetes Service (AKS) with Azure Container Registry (ACR), including how it works, benefits, and use cases.

AKS – Quick Kubernetes Deploy Azd

Summary

Updates content with clarifications and improvements.

AKS – Artifact Streaming

Summary

The documentation for Artifact Streaming on Azure Kubernetes Service (AKS) has been updated to clarify that users can now enable and disable the Artifact Streaming feature on their AKS node pools, which helps reduce deployment times by streaming container images from Azure Container Registry (ACR). Additionally, the prerequisites have been specified, including the requirement for a Premium SKU ACR and support for only Linux AMD64 architecture images. Users can also check the enablement status of Artifact Streaming on their node pools using the updated commands.

AKS Arc – Delete Cluster Pdb

Summary

The documentation has been updated to clarify that when deleting an AKS cluster with PodDisruptionBudget (PDB) resources, users may encounter issues where the PDB resources are not removed. Users are now instructed to access the AKS cluster’s kubeconfig and delete all PDBs before proceeding with the deletion. Additionally, references to "AKS Arc" have been replaced with "AKS" to reflect the updated terminology.

AKS – Kubernetes Migration Rollback Strategies

Summary

Guidance on rollback strategies for Kubernetes migration on Azure Kubernetes Service (AKS)

AGC – Application Gateway for Containers Components

Summary

Users can now control the Application Gateway for Containers’ association subnet with route table rules, which is particularly useful when integrating a network virtual appliance between the Application Gateway and an AKS cluster. Additionally, the documentation clarifies that an incorrect route table configuration can lead to asymmetrical routing, emphasizing the importance of ensuring that internet ingress traffic returns directly to the internet rather than through a virtual appliance.

AKS – Limit Egress Traffic

Summary

Updates content with clarifications and improvements.

AKS – Kubernetes Center Azure Portal

Summary

Updates content with clarifications and improvements.

AKS – Certificate Rotation

Summary

The documentation for certificate management and rotation in Azure Kubernetes Service (AKS) has been updated to provide a clearer overview of how certificates are used for authentication between components. Users can now find detailed information on the automatic rotation of kubelet client certificates and the requirements for enabling this feature, including the necessity of Kubernetes RBAC. Additionally, the article emphasizes the importance of manually rotating certain certificates and provides updated commands for managing these processes effectively.

AKS – Inspektor Gadget Catalog

Summary

Browse the catalog of official gadgets available with the Inspektor Gadget cluster extension on Azure Kubernetes Service (AKS), grouped by category.

AKS – Quick Windows Container Deploy Portal

Summary

Updates content with clarifications and improvements.

AKS – Quick Windows Container Deploy CLI

Summary

Updates content with clarifications and improvements.

AKS – Managed Identity Overview

Summary

The overview of managed identities in AKS has been expanded, detailing the implications of changing identity types and emphasizing the advantages of using managed identities over application service principals.

AKS – Concepts Multi Tenancy

Summary

Multi-tenancy in AKS is the practice of running multiple isolated workloads—belonging to different teams, applications, or customers—on a shared Kubernetes cluster. This article details the core concepts and architectural models for multi-tenancy on Azure Kubernetes Service (AKS).

AKS – Identity Bindings

Summary

The document has been updated to correct the variable name for Key Vault secrets, changing from ${KEYVAULT_SECRET_NAME} to ${KEY_VAULT_SECRET_NAME}, ensuring accurate configuration.

AKS – Operator Best Practices Advanced Scheduler

Summary

Minor updates have been made to this article, which discusses advanced scheduling practices in Azure Kubernetes Service (AKS). It remains a valuable resource for users looking to optimize their scheduling strategies.

AKS – Quick Azure Container Linux Deploy CLI

Summary

Updates content with clarifications and improvements.

AKS – Node Auto Provisioning Custom VNet

Summary

The documentation for creating an Azure Kubernetes Service (AKS) cluster with Node Auto-Provisioning (NAP) in a custom virtual network has been updated to clarify the requirements for subnet creation. Users must now create a node subnet with an address prefix of `/24` instead of `/28`, and they need to delegate the subnet to `Microsoft.ContainerService/managedClusters`. Additionally, the instructions emphasize the importance of assigning the Network Contributor role to the managed identity with the `–assignee-principal-type` parameter to avoid replication delays.

AKS – Pci Anti Phishing Social Engineering

Summary

Updates content with clarifications and improvements.

AKS – Node Auto Provisioning Upgrade Image

Summary

Updates content with clarifications and improvements.

AKS – How to Apply Fqdn Filtering Policies

Summary

The article clarifies that wildcard FQDN policies are partially supported, allowing specific patterns with leading wildcards but not universal wildcards. This is crucial for users implementing DNS policies.

AKS – How to Configure Container Network Insights Agent

Summary

The documentation now emphasizes that users must create a Microsoft Entra ID app registration to sign in to the Container Network Insights Agent using Microsoft Entra ID (MSAL) with OAuth2/OIDC, which is required for production deployments. Additionally, the sign-in instructions have been updated to specify that users should sign in with their Microsoft Entra ID account, streamlining the authentication process for production environments.

AKS – Azure Hpc Cache

Summary

The article on integrating Azure HPC Cache with AKS has been removed, indicating a significant update in the documentation structure and content focus.

AKS – Nvidia Gpu Operator

Summary

Updates content with clarifications and improvements.

AKS – Load Balancer Standard

Summary

Updates content with clarifications and improvements.

AKS – Pci Customized Approach Guidance

Summary

Updates content with clarifications and improvements.

AKS – Istio Deploy Ingress

Summary

Updates content with clarifications and improvements.

AKS – Quick Azure Container Linux Deploy Arm Template

Summary

Updates content with clarifications and improvements.

AKS – Pci Requirement Mapping Matrix

Summary

Updates content with clarifications and improvements.

AKS Arc – Proxy Change

Summary

The documentation has been updated to reflect that AKS on Windows Server now supports one global proxy configuration per AKS deployment, rather than per AKS Arc deployment. Users should refer to the section on using proxy server settings in AKS for guidance on initial proxy server setup. This change clarifies the scope of proxy settings updates within the AKS environment.

AKS – Migrate From Autoscaler to Node Auto Provisioning

Summary

Updates content with clarifications and improvements.

AKS – Istio Gateway API

Summary

Updates content with clarifications and improvements.

AKS – Monitor AKS

Summary

The documentation for AKS monitoring has been updated to clarify that platform metrics are now automatically collected by Azure Monitor without requiring additional configuration. Additionally, the prerequisites for enabling the managed service for Prometheus have been revised to specify the need for managed identity authentication and the registration of the `AzureMonitorMetricsControlPlanePreview` feature flag. Users are also informed that node-level network metrics are collected by default when enabling Azure Monitor managed service for Prometheus, with instructions to enable advanced metrics through Container Network Observability.

AKS – AKS Desktop Cluster View

Summary

Learn how to connect to Azure Kubernetes Service (AKS) clusters, view cluster resources, deploy new applications, and manage existing applications using AKS desktop.

AKS – API Server Authorized IP Ranges

Summary

The documentation for the API server authorized IP ranges in Azure Kubernetes Service (AKS) has been updated to clarify that AKS now only supports the Standard SKU load balancer, and the Basic SKU is no longer supported. Users are advised to migrate existing clusters using the Basic SKU to the Standard SKU, which requires downtime and additional prerequisites. Additionally, the instructions for creating clusters with authorized IP ranges have been refined for clarity, including the use of specific commands and parameters for both Azure CLI and Azure PowerShell.

AKS – Create Volume Azure Disk

Summary

The documentation now specifies that the default value for the `networkAccessPolicy` property has changed from `AllowAll` to `DenyAll`, enhancing security by preventing the generation of SAS URIs for disks or snapshots unless explicitly allowed. Additionally, the `publicNetworkAccess` property has been introduced, allowing users to enable or disable public access to the underlying data of a disk over the internet, with the default set to `Disabled`.

AKS – App Routing Gateway API Tls

Summary

The documentation now provides a detailed explanation of how to manually configure TLS termination on a `Gateway` resource using a `SecretProviderClass`, allowing users to have full control over the certificate sync workflow. It introduces two options for supplying TLS certificates: storing them as Key Vault secrets or referencing a Key Vault certificate object directly, with clear instructions on how to implement each option. Additionally, users are advised on the importance of choosing only one option to avoid conflicts during the setup process.

AKS – Create Volume Azure Files

Summary

The documentation now includes new parameters for Azure Files, such as `createFolderIfNotExist`, `enableLargeFileShares`, `provisionedBandwidth`, and `provisionedIOPS`, allowing users to customize their Azure file share configurations more effectively. Additionally, the `useDataPlaneAPI` parameter has been updated to support an `oauth` value for authentication, enhancing security options. The sections on encryption in transit and managed identity access have been clarified to reflect their availability in specific AKS versions, ensuring users are informed about the latest features and limitations.

AKS – Deploy Ray Infrastructure

Summary

Learn how to deploy the AKS cluster, KubeRay operator, Kueue controller, and Azure Blob storage for running Ray AI workloads.

AKS – Auto Upgrade Node Os Image

Summary

The documentation for the "Autoupgrade Node OS Images" section has been updated to clarify that AKS Automatic clusters use the NodeImage channel by default, which includes weekly security and bug fixes without requiring user configuration. Additionally, users are informed that for AKS Standard clusters, they must manually select their upgrade channel, with the documentation providing a comparison of the two cluster modes and their respective configurations. This change enhances user understanding of the upgrade processes and requirements for different AKS cluster types.

AKS – Concepts Network Isolated

Summary

The documentation now specifies that using BYO ACR with the `authentication-as-arm` feature disabled is not supported, providing clearer guidance for users configuring their Azure Container Registry. Additionally, the previous note regarding Domain Name Label (DNL) support has been removed, indicating a shift in focus for users setting up their registries.

AKS – Node Auto Repair

Summary

Updates content with clarifications and improvements.

AKS – Inspektor Gadget Overview

Summary

Learn about the Inspektor Gadget cluster extension, an eBPF-based tool that helps you inspect and troubleshoot workloads on Azure Kubernetes Service (AKS) clusters.

AKS – Pci Ra Code Assets

Summary

Updates content with clarifications and improvements.

AKS – Upgrade Node Image

Summary

The document now provides updated instructions on upgrading node images in AKS clusters, emphasizing the importance of keeping node images current for optimal performance and security.

AKS – App Routing

Summary

The documentation for the Azure Kubernetes Service (AKS) application routing has been updated to clarify the process of enabling the managed NGINX Ingress controller and configuring Ingress objects for traffic routing. Users can now find specific instructions on how to enable the application routing add-on using the Azure CLI, including updated command syntax for resource group and cluster names. Additionally, the documentation emphasizes that certain snippet annotation values will prevent Ingress configuration, and it specifies that injecting non-Microsoft-managed sidecars into the managed proxy pods is not officially supported.

AKS – Intro AKS Automatic

Summary

Updates content with clarifications and improvements.

AKS – Pci Policy

Summary

Updates content with clarifications and improvements.

AKS – Custom Node Configuration

Summary

The documentation now includes prerequisites for using the Node Customization Preview, specifically requiring users to register the `CustomNodeConfigPreview` feature flag in their Azure subscription before utilizing the `kubeReserved` and `hardEvictionThreshold` kubelet settings. Users can now follow detailed steps to register the feature flag and verify its status using the `az feature register` and `az feature show` commands, enabling them to configure these settings on Linux node pools effectively. Additionally, the documentation clarifies that these settings are only applicable to Linux node pools and outlines the specific parameters and their requirements.

AKS – Container Network Observability Metrics

Summary

The documentation now clarifies that FIPS is not available on Ubuntu 20.04 nodes due to kernel restrictions, and users are advised to use an Azure Linux or Ubuntu 22.04 node pool instead. Additionally, several new metrics have been added for network observability on Linux, including conntrack RX/TX byte and packet counts, total conntrack connections, and DNS request/response counts, enhancing users’ ability to monitor network performance and statistics.

AKS – Node Auto Drain

Summary

Updates content with clarifications and improvements.

AKS – Delete Node Pool

Summary

The document has been updated to improve references to pod disruption budgets (PDBs), enhancing clarity on how to manage disruptions during node pool deletions.

AKS – AKS Production Upgrade Strategies

Summary

The documentation for Azure Kubernetes Service (AKS) production upgrade strategies has been updated to clarify the guidance for safely upgrading AKS clusters with minimal downtime and controlled risk. Key changes include a refined focus on blue-green deployments for minimal downtime, enhanced descriptions of emergency security patching, and improved application resilience patterns. Additionally, the documentation now emphasizes the importance of rapid traffic rollback during migration cutover scenarios, providing clearer instructions for implementing these strategies effectively.

AKS – Azure Disk Customer Managed Keys

Summary

The documentation now specifies that the AKS cluster identity requires **Reader** access to the DiskEncryptionSet instead of Contributor access, which changes the permissions needed for successful operation. Additionally, users are guided to retrieve the Key Vault resource ID and set it as a variable before granting the DiskEncryptionSet identity access to the Key Vault, enhancing clarity on the necessary steps for configuration.

AKS – Concepts Storage

Summary

The documentation for Azure Kubernetes Service (AKS) has been updated to clarify the default OS disk sizing and ephemeral OS disks, emphasizing that ephemeral disks are non-persistent and lost if the VM is deallocated. Additionally, the Azure Container Storage section now specifies that version 2 supports local NVMe disks and Azure Elastic SAN, while version 1 supports Azure Disks and ephemeral disks, providing clearer guidance on storage class dependencies based on the major version. Users can now better understand the implications of storage choices and configurations for their AKS workloads.

AKS – Node Resource Group Lockdown

Summary

Updates content with clarifications and improvements.

AKS – App Routing Nginx to Gateway API Migration

Summary

The documentation now provides updated guidance on configuring Azure DNS and TLS with the Application Routing Gateway API implementation, replacing the previous note indicating that this feature was not yet supported. Users can now follow the new instructions to set up Azure DNS and Key Vault TLS wiring effectively.

AKS – Node Images

Summary

Updates content with clarifications and improvements.

AKS – Concepts Identity

Summary

The documentation for Azure Kubernetes Service (AKS) has been updated to clarify the identity scenarios applicable to both AKS Automatic and AKS Standard. Users can now better understand the operational differences, with AKS Automatic providing preconfigured identity and security defaults, while AKS Standard allows for more manual control and setup choices. Additionally, the article emphasizes the recommendation to use AKS Automatic as the default for most production workloads, enhancing user guidance on identity management in AKS.

AKS – Pci Intro

Summary

Updates content with clarifications and improvements.

AKS – AKS Automatic Limitations

Summary

The documentation now clarifies that migration from the AKS base SKU to the automatic SKU is not supported. Additionally, it specifies that configuring custom scraping of Prometheus metrics and log collection is not supported, along with the inability to enable ACNS observability during Automatic cluster creation; users must enable it after the cluster is created.

AKS – AKS Legacy Migration

Summary

This guide provides a four-phase framework for assessing and migrating legacy applications to Azure Kubernetes Service (AKS), including practical migration pathways, Windows and .NET Framework specifics, operational checks, and a FAQ.

AKS – Supported Versions

Summary

The documentation now includes updated guidance on the AKS supported Kubernetes versions, specifically enhancing the section on the AKS Kubernetes release calendar to include upcoming versions. Users can access more comprehensive information regarding both current and future supported versions of Kubernetes in AKS, improving their ability to plan and manage their deployments effectively.

AKS – Istio Deploy Egress

Summary

Updates content with clarifications and improvements.

AKS – Pci Malware

Summary

Updates content with clarifications and improvements.

AKS Arc – Kubernetes RBAC Entra Id

Summary

The documentation has been updated to reflect the rebranding of AKS Arc to simply AKS, impacting references throughout the article. Users will now see instructions and descriptions that refer to "AKS" instead of "AKS Arc," which may affect their understanding of the context in which Kubernetes RBAC is applied. Additionally, the guidance for security has been updated to refer to "AKS Hybrid and Edge" instead of "AKS enabled by Azure Arc."

AKS – Auto Upgrade Cluster

Summary

The documentation for automatically upgrading an Azure Kubernetes Service (AKS) cluster has been updated to clarify that AKS Automatic clusters use the stable channel by default, which requires no configuration for automatic upgrades to the latest patch on minor version N-1. Additionally, it now specifies that AKS Standard clusters require users to manually select an upgrade channel that aligns with their operational needs, providing more flexibility for those clusters.

AKS – Open Service Mesh Troubleshoot

Summary

Updates content with clarifications and improvements.

AKS – Pci Monitor

Summary

Updates content with clarifications and improvements.

AGC – How to Inference Gateway

Summary

The documentation now specifies that users should deploy the EPP and `InferencePool` together using the `inferencepool` Helm chart from the release-1.5 branch, which includes necessary components like the EPP `Deployment`, `Service`, and associated permissions. Additionally, the link to the Gateway API Inference Extension guides has been updated to direct users to the "implementers" section for more relevant information.

AKS – Node Auto Provisioning Node Pools

Summary

The documentation now includes the addition of the `nodeClassRef` group and kind for Karpenter, specifically defining it as `AKSNodeClass` under the `karpenter.azure.com` group. This change allows users to better configure and manage node classes within their AKS clusters using Karpenter.

AKS – Node Disruption Policy

Summary

Learn about Node Disruption Policy and how to control when operations that require node reimage are allowed in Azure Kubernetes Service (AKS).

AKS – Quotas Skus Regions

Summary

This article has been updated to provide clearer descriptions of AKS quotas and resource limits, including the introduction of a Premium tier for production workloads.

AKS – API Server VNet Integration

Summary

The documentation now clarifies the differences between API Server VNet Integration in AKS Automatic and AKS Standard, emphasizing that AKS Automatic has this feature preconfigured, while AKS Standard requires explicit enabling during cluster creation. Additionally, users are informed about the limitations of API Server VNet Integration, including the requirement for a manual restart after enabling it on existing clusters and the implications for capacity validation and network security configurations.

AKS – Quick Kubernetes Deploy Terraform

Summary

Updates content with clarifications and improvements.

AKS – Cluster Autoscaler

Summary

The cluster autoscaler documentation has been updated to reflect changes in the topic classification and to provide clearer guidance on how the autoscaler adjusts the number of nodes based on application demands. It now includes additional context on monitoring resource constraints.

AKS – Quick Kubernetes Deploy Bicep Kubernetes Extension

Summary

Updates content with clarifications and improvements.

AKS – Quick Windows Container Deploy Terraform

Summary

Updates content with clarifications and improvements.

AKS – Migrate Nodes Azure Container Linux

Summary

Updates content with clarifications and improvements.

AKS – Istio Cni

Summary

Updates content with clarifications and improvements.

AKS – Pci Continuous Security Monitoring

Summary

Updates content with clarifications and improvements.

AKS – Use Labels

Summary

The documentation now includes updated guidance on supported Kubernetes versions for Azure Kubernetes Service (AKS), specifically highlighting upcoming versions in the release calendar. Users can access more detailed information about both current and future Kubernetes releases by referring to the revised section on the AKS release calendar.

AKS – Horizontal Pod Autoscaler

Summary

Guidance on when and why to use the Kubernetes Horizontal Pod Autoscaler (HPA) on Azure Kubernetes Service (AKS), how it works, when not to use it, comparison with Vertical Pod Autoscaler (VPA), and step‑by‑step configuration and operational notes for AKS.

AKS – Ai Ml Overview

Summary

The documentation now includes a new section on running Ray AI workloads with Kueue on Azure Kubernetes Service (AKS), providing users with updated guidance on this feature. Additionally, the previous link for configuring and deploying a Ray cluster has been removed, which may affect users looking for that specific information.

AKS – Operator Best Practices Network

Summary

Updates content with clarifications and improvements.

AKS – Automatic Pod Disruption Budget Management

Summary

The documentation now clarifies that when enabling PDB auto-creation (`controllerConfig.pdb.create=true`), the extension will create a Pod Disruption Budget (PDB) for unprotected deployments by comparing the PDB’s label selector with the deployment’s pod template labels, ensuring no duplicates are created. Additionally, it specifies that for deployments with Horizontal Pod Autoscaler (HPA) or KEDA, the `minAvailable` value of the PDB will track the autoscaler’s minimum replica floor, enhancing protection against simultaneous pod evictions during voluntary disruptions. The scaling behavior during eviction has also been refined to ensure that scale-down does not occur if nodes remain cordoned or if a drain is in progress, preventing unnecessary churn.

AKS – Csi Secrets Store Service Connector

Summary

The service connector documentation has been improved with additional steps for verifying pod access to Azure Key Vault secrets, enhancing the clarity of the integration process.

AKS – Quick Kubernetes Deploy Bicep

Summary

Updates content with clarifications and improvements.

AKS – Csi Secrets Store Identity Access

Summary

The documentation now includes updated prerequisites for the CSI Driver with workload identity, clarifying that users no longer need the Azure Identity client library or MSAL for token exchanges when using the Secrets Store CSI Driver. Additionally, users must now specify the `KEYVAULT_TENANT_ID` and `USER_ASSIGNED_CLIENT_ID` in their configurations, and new commands have been added for assigning roles and creating Kubernetes service accounts, enhancing the clarity and usability of the setup process.

AKS Arc – Troubleshoot Overview

Summary

The troubleshooting overview for Azure Kubernetes Service on Windows Server has been revised for clarity. It includes updated links for known issues and emphasizes the need for secure SSH connections for maintenance and troubleshooting.