This article provides guidance on configuring container network metrics filtering for Azure Kubernetes Service (AKS) using Cilium. It covers prerequisites, installation of necessary CLI extensions, and the steps to register feature flags and create AKS clusters with advanced networking features.

This article explains node image updates for Node Auto-Provisioning (NAP) in AKS, detailing how it works, recommended maintenance windows, and examples for effective management of cluster nodes.

This article describes how to enable or disable Node Auto-Provisioning (NAP) in AKS using Azure CLI or ARM templates, including prerequisites and steps for implementation.

This article provides an overview of the different types of member clusters supported in Azure Kubernetes Fleet Manager, including AKS and Arc-enabled Kubernetes clusters, along with their capabilities and limitations.

This article details how to configure advanced scheduler profiles on Azure Kubernetes Service (AKS) to achieve advanced scheduling behaviors, including the use of in-tree scheduling plugins.

This article explains how to deploy a fully managed resource group using node resource group lockdown in AKS, detailing the benefits and steps for implementation.

Learn the step-by-step process of how AKS performs rolling upgrades to minimize disruption to your running workloads.

Learn about Azure Linux with OS Guard (preview) on Azure Kubernetes Service (AKS), including key features, region availability, and resources to get started.

New page added.

Learn how to provision a fully managed GPU node pool on your new or existing cluster on Azure Kubernetes Service (AKS).

Learn about scheduler configuration and advanced scheduling concepts for Azure Kubernetes Service (AKS).

Learn how to create an AKS cluster with node auto-provisioning in a custom virtual network.

Learn how to troubleshoot SNAT port exhaustion issues for a Standard Load Balancer in Azure Kubernetes Service (AKS).

Learn about node auto-provisioning in AKS, including how it works, prerequisites, upgrade behavior, limitations, and resources to get started.

Learn how to use shared health probes for Services with externalTrafficPolicy set to Cluster in Azure Kubernetes Service (AKS) to improve load balancer efficiency and reduce configuration complexity.

Learn about networking configuration requirements and recommendations for AKS clusters using node auto-provisioning (NAP), including supported configurations, subnet behavior, RBAC setup, and CIDR considerations.

This article provides a conceptual overview of Azure Kubernetes Fleet Manager integration with Azure Arc-enabled Kubernetes clusters.

This article provides an overview of managed identities in Azure Kubernetes Service (AKS), including system-assigned, user-assigned, and pre-created kubelet managed identities. It also explains how they work, role assignments, and AKS-specific managed identity features.

Learn how you can configure a public standard load balancer in Azure Kubernetes Service (AKS) to meet your workload needs, including changing the inbound pool type, scaling outbound IPs, and configuring allocated outbound ports.

This article shows you how to configure node pools for Node Auto-Provisioning (NAP) in Azure Kubernetes Service (AKS), including SKU selectors, limits, and weights.

Learn how to configure node disruption policies for node auto-provisioning (NAP) nodes in Azure Kubernetes Service (AKS) to optimize resource utilization.

The documentation has been updated to include instructions for installing the `aks-preview` extension and registering the `AksWindows2025Preview` feature flag, which are necessary for deploying Windows Server 2025 containers on Azure Kubernetes Service (AKS). Users are now informed that they must use the `az extension add` and `az feature register` commands, along with the requirement to update th…

The documentation for Azure Disk CSI has been updated to reflect changes in command anchor links, replacing underscores with hyphens for better consistency and usability. Users can now access commands such as `az-disk-list`, `az-snapshot-create`, and `az-extension-add` with the updated link formats, enhancing navigation and clarity in the documentation.

The documentation has been updated to clarify the requirements for Network Security Groups (NSGs) in custom virtual networks for Azure Kubernetes Service (AKS). Users are now directed to ensure that NSG rules permit the necessary types of communication between cluster components, with a reference to detailed requirements in the "Custom virtual network requirements" section. Additionally, the secti…

The documentation now clarifies that users can manage multiple Kubernetes clusters, not just Azure Kubernetes Service (AKS) clusters, as a single entity using a fleet resource. Additionally, it emphasizes the importance of understanding the types of supported Kubernetes clusters that can be joined as members, directing users to the "Azure Kubernetes Fleet Manager member cluster types" section for…

The documentation now clarifies that users can adjust the TCP Reset on idle timeout period for the Load Balancer in AKS using the `az aks update` command. The default timeout is set to 30 minutes, and users can extend it to 45 minutes or any desired duration by modifying the command accordingly. This update enhances user understanding of managing idle timeout settings effectively.

The documentation now specifies that users should use the command `cert-manager oci://quay.io/jetstack/charts/cert-manager` with version `v1.19.1` instead of the previous `jetstack/cert-manager` version `v1.17.1`. Additionally, the instructions for creating an HTTPRoute have been clarified to emphasize replacing `contoso.com` with the actual domain name for certificate issuance.

The documentation for the Azure CLI commands related to deleting node pools in AKS has been updated to correct the anchor links. Users can now access the commands for `az aks nodepool delete` and `az aks nodepool delete-machines` using the updated link format, which replaces underscores with hyphens in the URLs. This change ensures that users can navigate to the correct sections of the documentati…

The documentation for Azure NetApp Files has been updated to correct the anchor links for several commands, including `az-aks-show`, `az-netappfiles-account-create`, `az-netappfiles-pool-create`, `az-netappfiles-volume-create`, `az-netappfiles-volume-show`, and `az-network-vnet-subnet-create`. Users can now access these commands more easily through the updated links, which use hyphens instead of u…

The documentation for upgrading the Basic Load Balancer to a Standard Load Balancer on AKS has been updated to correct the command links, changing underscores to hyphens in the command references for `az aks update`, `az aks show`, `az network public-ip show`, and `az aks list`. Users can now more easily access the correct commands and verify the migration process, ensuring they follow the updated…

The documentation for Azure Kubernetes Service (AKS) has been updated to reflect changes in command anchor formatting. Users can now access the `az aks get-credentials`, `az extension add`, and `az extension update` commands using hyphens in their URLs instead of underscores, improving consistency and usability in the command references. This change enhances the clarity of the documentation and en…

The documentation for the Azure CLI commands related to Azure Kubernetes Service (AKS) has been updated to correct the anchor links for the `az aks show`, `az aks start`, and `az aks stop` commands. Users can now access these commands more easily through the updated links, which use hyphens instead of underscores in the anchor references. This change enhances navigation and usability for users loo…

The documentation now includes an important note clarifying that when RBAC roles are assigned at a managed namespace scope, access is granted to any unmanaged Kubernetes namespaces on member clusters with the same name, regardless of their origin. Additionally, the links for the Azure CLI commands have been updated to use hyphens instead of underscores in their anchors, which may affect how users…

The documentation for the Azure HPC Cache and Azure AKS has been updated to reflect changes in command syntax, specifically in the formatting of command links. Users can now access commands like `az-hpc-cache-create` and `az-aks-show` with the correct hyphenated format in the links, improving navigation and usability. Additionally, similar updates were made for other commands related to networking…

The documentation for using NVIDIA GPUs in Azure Kubernetes Service has been updated to reflect the latest device plugin version, now specifying `nvcr.io/nvidia/k8s-device-plugin:v0.18.0`. Additionally, the command anchors for `az aks create`, `az aks nodepool update`, `az aks nodepool add`, and `az aks get-credentials` have been standardized to use hyphens instead of underscores, improving clarit…

The documentation for Azure Kubernetes Service (AKS) and Azure Active Directory (AD) has been updated to reflect changes in command anchor links. Users can now access commands such as `az aks get-credentials`, `az aks show`, `az ad group create`, and others using the updated link formats, which replace underscores with hyphens for better consistency and usability. This change enhances navigation a…

The documentation for the Azure CLI commands has been updated to reflect changes in the anchor links for the `az-feature-register`, `az-feature-show`, and `az-provider-register` commands, switching from underscores to hyphens. This change ensures that users can correctly navigate to the relevant sections of the documentation when using these commands. Users should now find it easier to access the…

The documentation now clarifies that a frontend cannot be associated with more than one Application Gateway for Containers, and it specifies that a single Application Gateway can support more than one frontend. Additionally, it details that an Application Gateway for Containers security policy defines security configurations, such as WAF, and allows for more than one security policy to be referred…

The Web Application Firewall (WAF) has transitioned from Preview to General Availability (GA), indicating that users can now utilize this feature in a production environment with full support. This change enhances the security capabilities of the Application Gateway for containers, allowing users to implement WAF protections more confidently.

The documentation for the Azure CLI commands has been updated to reflect changes in the anchor links for the `az group create`, `az aks create`, and `az aks get-credentials` commands, replacing underscores with hyphens. This change ensures that users can access the correct sections of the documentation more easily and consistently.

The documentation for the Azure CLI commands has been updated to correct the anchor links for several commands, including `az aks show`, `az role assignment create`, `az network private link service list`, and `az network private endpoint create`. Users can now access these commands more easily through the updated links, which use hyphens instead of underscores in the anchor names. This change enh…

The documentation for Azure Kubernetes Service (AKS) has been updated to reflect changes in command anchor links, replacing underscores with hyphens for better consistency and usability. Users can now access commands such as `az aks show`, `az group show`, and `az ad group create` using the updated links, which should enhance navigation and clarity when referencing these commands.

The documentation now specifies that users can join both Azure Kubernetes Service (AKS) clusters and Arc-enabled Kubernetes clusters (in Preview) as member clusters in Azure Kubernetes Fleet Manager. Additionally, the required version of the `fleet` Azure CLI extension has been updated to 1.6.2 or later, and users are directed to ensure that the Kubernetes clusters they join meet the supported ver…

The documentation now includes a new feature, **container network metrics filtering**, which allows users to filter metrics at the source before they are collected and stored, optimizing storage costs and reducing noise. This feature is particularly beneficial for large-scale production environments and supports various filtering dimensions, such as namespace, pod, and metric-specific filtering. U…

The documentation for Azure NetApp Files has been updated to correct the anchor links for several commands, including `az-aks-show`, `az-netappfiles-account-create`, `az-netappfiles-pool-create`, `az-netappfiles-volume-create`, `az-netappfiles-volume-show`, and `az-network-vnet-subnet-create`. Users can now access these commands more easily through the updated links, which use hyphens instead of u…

The documentation for Azure CLI commands has been updated to reflect changes in the anchor links for several commands. Users can now access the commands `az group create`, `az aks create`, `az aks nodepool add`, `az aks install-cli`, and `az aks get-credentials` using hyphens in the URLs instead of underscores, improving consistency and usability in the documentation.

The documentation has been updated to reflect changes in the command links for `az-identity-create` and `az-role-assignment-create`, switching from underscores to hyphens in the anchor URLs. This change ensures that users can access the correct sections of the Azure CLI documentation more reliably.

The documentation now includes support for managed identity-based authentication for SMB access to Azure Files, allowing applications to securely access Azure Files without managing credentials. Users must ensure that the user-assigned Kubelet identity has the `Storage File Data SMB MI Admin` role on the storage account, and they can enable managed identity for dynamically provisioned volumes by c…

The documentation for Azure Kubernetes Service (AKS) has been updated to reflect changes in command anchor links. Users can now access the commands `az aks create`, `az aks update`, and `az extension add` using hyphens in the URLs, which improves consistency and usability. Additionally, the command `az aks get-versions` has also been updated to use hyphens, enhancing the clarity of the documentati…

The documentation for the Azure Kubernetes Service (AKS) upgrade process has been updated to correct the anchor links for several commands, including `az aks get-upgrades`, `az aks upgrade`, `az aks show`, `az aks nodepool add`, `az aks nodepool update`, and `az aks nodepool upgrade`. Users can now access the relevant sections more easily through the updated links, which use hyphens instead of und…

The documentation for Azure Kubernetes Service (AKS) has been updated to reflect changes in command anchor links, specifically replacing underscores with hyphens in the following commands: `az-aks-nodepool-get-upgrades`, `az-aks-nodepool-show`, `az-aks-nodepool-upgrade`, `az-aks-nodepool-update`, `az-aks-upgrade`, and `az-aks-show`. Users can now access these commands more accurately through the u…

The documentation has been updated to reflect changes in the command anchor links for Azure CLI commands. Users can now access the `az-account-list`, `az-account-set`, and `az-aks-get-credentials` commands using the correct hyphenated format in the URLs, improving navigation and usability within the documentation. This change ensures that users can find the relevant command information more easily…

The documentation for the Azure Kubernetes Service (AKS) node pool commands has been updated to correct the anchor links for the `az aks nodepool add` and `az aks nodepool delete` commands. Users can now access the correct sections of the documentation using the updated links, which use hyphens instead of underscores in the anchors. This change improves navigation and ensures users find the releva…

The documentation now specifies that the minimum version of the Azure CLI required for the steps in this article is updated to 2.79.0. Additionally, users can install or update the Azure CLI preview extension using the updated commands for `az extension add` and `az extension update`, as well as register the `AdvancedNetworkingL7PolicyPreview` feature flag with the corresponding command. These cha…

The documentation now includes updated Helm commands for installing Cert-Manager, specifically changing from `helm upgrade -i` to `helm install` with a new OCI registry path and version. Additionally, users can enable the Gateway API by setting `config.enableGatewayAPI=true` and `crds.enabled=true`, providing more flexibility for deploying Application Gateway for Containers alongside Cert-Manager…

The documentation for the Azure Kubernetes Service (AKS) has been updated to reflect changes in the command anchor links for the `az aks upgrade`, `az aks get-upgrades`, and `az aks nodepool upgrade` commands. Users can now access these commands using hyphens in the URLs instead of underscores, improving consistency and usability when navigating the documentation.

The documentation now includes support for Windows Server 2025 (preview) in the Long Term Servicing Channel Releases (LTSC) section, allowing users to utilize this upcoming version alongside Windows Server 2022 and 2019. Additionally, when enabling managed Prometheus, users are instructed to add the parameter `–enable-windows-recording-rules` for accurate dashboard data presentation, and Grafana…

The documentation now emphasizes that RBAC roles assigned to a managed namespace will be deleted when the namespace itself is deleted, regardless of the delete policy configuration. This important note is highlighted multiple times to ensure users are aware of the implications for role management within managed namespaces.

The documentation now clarifies the pricing structure for enabling the Web Application Firewall (WAF) on Application Gateway for Containers. Users will incur higher charges for each meter when WAF is enabled, with specific rates provided for application gateway, frontend, association, and capacity unit usage, including both standard and WAF pricing. This change allows users to better understand th…

The documentation for using a public Standard Load Balancer in Azure Kubernetes Service (AKS) has been updated to clarify the prerequisites and features available with the Standard SKU. Users can now specify their own outbound public IPs or prefixes when creating or updating a cluster, and the process for scaling managed outbound public IPs has been detailed, including the use of the `–load-balan…

The documentation now specifies that for Kubernetes versions 1.25 and higher, Windows Server 2022 is the default operating system, with Windows Server 2019 being retired after Kubernetes version 1.32 reaches end-of-life. Additionally, it clarifies that Windows Server 2022 will not be supported in Kubernetes version 1.35 and above, while Windows Server 2019 will not be supported in version 1.33 and…

The documentation for Azure CLI commands has been updated to reflect changes in the anchor links for several commands. Users can now access the commands `az-extension-add`, `az-extension-update`, `az-feature-list`, `az-feature-register`, `az-aks-install-cli`, and `az-provider-register` using the corrected hyphenated format in the URLs, improving navigation and usability.

The documentation for Azure Kubernetes Service (AKS) has been updated to reflect changes in the command links for node pool operations. Users can now access the commands `az aks nodepool add`, `az aks nodepool list`, `az aks nodepool show`, and `az aks nodepool delete` using hyphens in the URLs instead of underscores, improving link consistency and usability.

The documentation for the Azure CLI commands has been updated to reflect changes in the anchor links, specifically replacing underscores with hyphens in the command references. Users can now access the commands for creating Azure resource groups, Cosmos DB instances, and listing Cosmos DB keys using the updated links: `az-group-create`, `az-cosmosdb-create`, and `az-cosmosdb-keys-list`. This chang…

The documentation for the `NginxIngressController` Custom Resource Definition (CRD) has been updated to clarify that the `loadBalancerAnnotations` field can be used to control the behavior of the NGINX ingress controller’s service. Additionally, the links to further information about load balancer annotations have been changed to direct users to the correct section on customizations via Kubernetes…

The documentation now includes a note indicating that CloudNativePG will deprecate native Barman Cloud support in favor of the Barman Cloud plugin in an upcoming release. Users are advised to plan for migration to the plugin once it stabilizes, although the current steps in the guide will continue to work. Additionally, the formatting of endpoint descriptions has been updated for clarity.

The documentation now clarifies that application developers can deploy Kubernetes resources into multiple clusters located in both cloud and on-premises environments. Additionally, it specifies that users should join their supported Kubernetes clusters as members of the Fleet Manager, rather than just Azure Kubernetes Service (AKS) clusters, enhancing the flexibility of resource placement across v…

The documentation for the Azure CLI commands `az aks create` and `az aks update` has been updated to reflect changes in the anchor links, switching from underscores to hyphens. This adjustment improves the consistency and usability of the links within the documentation, allowing users to navigate more easily to the relevant sections for these commands.

The documentation for Azure CLI commands has been updated to reflect changes in anchor links, replacing underscores with hyphens for better consistency and usability. Users can now access the commands for `az-feature-register`, `az-feature-show`, `az-provider-register`, `az-policy-assignment-create`, `az-aks-update`, `az-policy-assignment-delete`, and `az-policy-remediation-create` using the updat…

The documentation for the Azure CLI commands related to AKS node pools has been updated to correct the anchor links for the `az aks nodepool stop`, `az aks nodepool start`, and `az aks nodepool show` commands. Users can now access the correct sections of the documentation using the updated links that replace underscores with hyphens in the anchor names, improving navigation and usability.

The documentation has been updated to include new features and fixes in the Application Gateway Controller for Kubernetes. Users can now utilize the slow start load balancing algorithm introduced in version 1.8.9, which enhances traffic management. Additionally, a hotfix in version 1.7.12 addresses pod crashes caused by invalid Provider IDs, improving stability for users.

The documentation now specifies the use of the nanoserver base image for creating host process containers on Windows nodes, which allows for faster image downloads. Users are instructed to run a script to create the `hostprocess.yaml` file, and it is clarified that while the nanoserver image does not include PowerShell, it is accessible from the underlying VM when running as a host process contain…

The documentation for the Azure CLI commands related to Azure Kubernetes Service (AKS) has been updated to correct the anchor links from using underscores to hyphens. Users can now access the commands such as `az aks update`, `az aks show`, and others with the updated link format, improving navigation and usability within the documentation. This change ensures that users can more easily find the r…

The documentation has been updated to reflect changes in the command links for `az-deployment-group-create` and `az-group-delete`, switching from underscores to hyphens in the anchor URLs. This change ensures that users can access the correct command documentation more easily and consistently.

The documentation now includes guidance on using the kube-scheduler for advanced scheduling features in Azure Kubernetes Service (AKS). Users can install and configure Kueue for efficient, policy-driven scheduling of batch workloads, and they can also configure a scheduler to optimize pod and job prioritization based on specific nodes and resources. These updates enhance the ability to manage work…

The documentation has been updated to reflect changes in the command syntax for upgrading AKS components. Users can now use the `az aks get-upgrades`, `az aks upgrade`, and `az aks nodepool upgrade` commands with hyphens instead of underscores in their respective links, ensuring consistency and accuracy in command usage. This change enhances clarity for users following the upgrade procedures for A…

The documentation for the Azure Kubernetes Service (AKS) has been updated to reflect changes in the command anchor links for the Azure CLI commands. Users can now access the commands `az aks create`, `az aks install-cli`, and `az aks get-credentials` using the updated anchor format, which replaces underscores with hyphens in the URLs. This change improves the consistency and usability of the docum…

The documentation has been updated to reflect changes in the command links for Azure CLI features, specifically replacing underscores with hyphens in the anchors for `az-feature-register`, `az-feature-show`, and `az-provider-register`. This change ensures that users can access the correct documentation pages without encountering broken links. Additionally, the support status for Windows Server 202…

The documentation now includes a caution regarding the AKS-ACR integration through `az aks –attach-acr`, specifying that it is not supported for ABAC-enabled ACR registries with the role assignment permissions mode set to "RBAC Registry + ABAC Repository Permissions." Users must manually assign the `Container Registry Repository Reader` role for image pull permissions instead of using the `AcrPul…

The documentation has been updated to reflect the renaming of "Fleet" to "Fleet Manager" throughout the quickstart guide, clarifying that users can now create a Fleet Manager and join supported Kubernetes clusters as members. Additionally, the permissions required for user or service principal identities have been specified for both Fleet resources and member cluster resources, enhancing clarity o…

The documentation for Azure Kubernetes Service (AKS) has been updated to clarify the default node images for Windows node pools based on VM size and hypervisor generation. Users can now see that if a VM size supports both Generation 1 and Generation 2, the node image selected will depend on the specific Windows Server version being used, with Windows Server 2019 or 2022 defaulting to Generation 1…

The documentation for Azure CLI commands has been updated to reflect changes in anchor formatting, replacing underscores with hyphens in the links for several commands. Users can now access the commands `az acr create`, `az acr build`, `az group delete`, `az aks get-credentials`, `az aks create`, and `az aks install-cli` using the updated links that follow the new format. This change enhances the…

The documentation for Azure Kubernetes Service (AKS) has been updated to correct the anchor links for several Azure CLI commands, including `az aks get-credentials`, `az aks show`, `az account show`, `az ad user show`, `az role assignment create`, `az role assignment delete`, and `az ad group show`. Users can now access these commands more easily through the updated links, which use hyphens instea…

The documentation now includes a new section on "WireGuard Encryption," which allows users to secure workload traffic by ensuring that all communication between Cilium-managed endpoints across different nodes within an AKS cluster is encrypted by default. Additionally, the commands for installing or updating the Azure CLI preview extension, registering the `AdvancedNetworkingL7PolicyPreview` featu…

The documentation has been updated to reflect changes in command anchor links for Azure CLI commands related to Azure Kubernetes Service (AKS) and Azure Active Directory (AD). Users can now access the commands using the updated links, which include hyphens instead of underscores, improving consistency and usability when referencing commands such as `az-aks-create`, `az-ad-user-show`, and others. T…

The documentation for creating a PostgreSQL high availability setup on AKS has been updated to clarify the instructions for defining a new CSI driver storage class. Users are now explicitly informed that their cluster must utilize VM SKUs that support local NVMe drives and that the instructions require Azure Container Storage version 2.0.0 or later. Additionally, minor adjustments were made to imp…

The documentation for limiting egress traffic in Azure Kubernetes Service (AKS) has been updated to clarify that simply adding a route for 0.0.0.0/0 will not provide outbound Internet connectivity without a public IP for Source Network Address Translation (SNAT). Additionally, the section on using a pre-created kubelet managed identity has been renamed for clarity, now directing users to create a…

The documentation has been updated to reflect changes in command syntax for Azure CLI commands related to Azure Service Bus and AKS. Specifically, the command anchors for `az-servicebus-namespace-create`, `az-servicebus-queue-create`, `az-servicebus-queue-authorization-rule-create`, `az-servicebus-namespace-show`, `az-servicebus-queue-authorization-rule-keys-list`, and `az-aks-get-credentials` hav…

The documentation for creating specialized node pools in Azure Kubernetes Service (AKS) has been updated to include a new section that provides links to various articles on creating different types of node pools, such as Azure Spot, Virtual Machines, and dedicated system node pools. This enhancement allows users to easily access relevant resources for managing specialized node pools, improving the…

The documentation now includes an acknowledgment section highlighting the collaboration with EnterpriseDB and the contributions of Gabriele Bartolini, enhancing the credibility of the content. Additionally, it clarifies that the CloudNativePG operator has introduced new container image catalogs and updated defaults, guiding users on when to use specific operand images and how to manage non-TLS acc…

The documentation for Azure Kubernetes Service (AKS) has been updated to reflect changes in command syntax for several Azure CLI commands. Users can now access commands such as `az aks get-credentials`, `az aks create`, and `az vmss list-instance-public-ips` with updated anchor links that use hyphens instead of underscores, improving consistency and usability. Additionally, the commands for managi…

The documentation for the Azure CLI commands `az aks update` and `az aks upgrade` has been updated to reflect changes in the anchor links, switching from underscores to hyphens. This change improves the consistency and usability of the links, allowing users to access the relevant sections more easily. Users should now use the updated links for better navigation within the documentation.

The documentation has been updated to direct users to the new "managed-identity-overview.md" instead of the previous "use-managed-identity.md" for information on managed identities used by Azure Kubernetes Service (AKS). This change ensures that users access the most current and relevant information regarding managed identities in AKS.

The documentation now specifies that users can create a new AKS cluster with eBPF Host Routing by enabling Advanced Container Networking Services (ACNS) through the `–enable-acns` flag and setting the acceleration mode with `–acns-datapath-acceleration-mode BpfVeth`. Additionally, the `az aks update` command has been updated to include the `–acns-datapath-acceleration-mode BpfVeth` parameter, a…

The documentation has been updated to reflect that the article now specifically addresses the Center for Internet Security (CIS) Ubuntu 24.04 benchmark, clarifying that the recommendations apply only to the Ubuntu 24.04 image used by Azure Kubernetes Service (AKS). Users can now find detailed security configurations and compliance information relevant to this specific version, ensuring they can ve…

The documentation for Azure Kubernetes Service (AKS) has been updated to reflect changes in command anchor links, specifically for the `az aks create`, `az aks nodepool update`, `az aks nodepool add`, and `az aks get-credentials` commands. Users can now access these commands using hyphens in the URLs instead of underscores, improving consistency and usability when navigating the documentation.

The documentation for the NGINX ingress controller configuration in Azure Kubernetes Service (AKS) has been updated to clarify that the application routing add-on supports two methods for configuring ingress controllers and objects. Users can now enable application routing on a new cluster using the `az aks create` command with specific flags, and they can also update the default ingress controlle…

The documentation now specifies that users can create an AMD GPU-enabled node pool using the `az aks nodepool add` command while skipping the default driver installation by setting the `–gpu-driver` parameter to `none`. Additionally, the links for the `az aks get-credentials` command have been updated to use hyphens instead of underscores in the anchors, ensuring consistency and improved accessib…

The documentation for Azure Kubernetes Service (AKS) has been updated to reflect changes in command syntax for several Azure CLI commands, including `az-identity-create`, `az-group-create`, `az-network-vnet-create`, and `az-aks-create`, which now use hyphens instead of underscores in their URLs. Additionally, the section on managing user-assigned identities has been revised to clarify the process…

The documentation for deploying a highly available PostgreSQL database on AKS has been updated to clarify the steps for creating the required infrastructure, emphasizing that users should follow the provided instructions if they still need to set up the environment. Additionally, users are now required to manually create and manage a PodMonitor for the CNPG operator, as the operator-managed PodMon…

The documentation for the Azure Kubernetes Service (AKS) has been updated to reflect changes in command anchor formatting. Users can now access the commands for `az aks get-credentials`, `az aks install-cli`, `az group create`, `az group delete`, and `az sshkey create` using hyphens instead of underscores in the URLs. This change improves the consistency and usability of the command links in the d…

The documentation now includes instructions for users to install the `aks-preview` extension and register the `AksWindows2025Preview` feature flag if they are using the `Windows2025` OS SKU. Additionally, it specifies that the `OsSKU` parameter requires PowerShell Az module version 9.2.0 or higher, and provides updated commands for creating resource groups and AKS clusters, including the necessary…

The documentation for the Azure CLI commands related to AKS has been updated to correct the anchor links for `az aks get-credentials` and `az aks rotate-certs`, replacing underscores with hyphens. This change ensures that users can accurately navigate to the relevant sections of the documentation when using these commands.

The documentation now includes detailed requirements for Network Security Group (NSG) rules when using custom virtual networks with AKS clusters. Users must ensure that specific communication types between subnets are permitted, including rules for communication between the API server, Azure Load Balancer, Nodes, and Pods. This update clarifies the necessary configurations for both AKS Standard an…

The documentation for the Azure CLI commands `az aks get-upgrades` and `az aks upgrade` has been updated to correct the anchor links from using underscores to hyphens. Users can now access the relevant sections more easily and accurately through the updated links, ensuring a smoother experience when referencing these commands.

The documentation for the Azure Kubernetes Service (AKS) has been updated to reflect changes in command anchor formatting. Users can now access the commands `az aks show`, `az aks get-upgrades`, `az aks upgrade`, `az group delete`, and `az aks update` using hyphens instead of underscores in the URLs, improving consistency and usability when navigating the documentation.

The documentation for the Azure CLI commands has been updated to reflect changes in the anchor links, replacing underscores with hyphens for better consistency and usability. Users can now access the commands `az aks get-credentials`, `az acr create`, `az acr show`, `az acr credential show`, and `az acr delete` using the updated links, which improves navigation and reduces confusion when referenci…

The documentation now includes a new section on `CiliumClusterwideNetworkPolicy (CCNP)`, highlighting its support for FQDN filtering. Users can implement policies that allow egress traffic to specific FQDNs, such as "*.bing.com", enhancing their ability to manage network security at a granular level. Additionally, the `az aks update` command has been clarified to emphasize the inclusion of Advance…

The documentation now clarifies that Cilium eBPF can bypass iptables in the host namespace, enhancing routing efficiency. Additionally, it emphasizes that when eBPF Host Routing is active, the `ip-masq-agent` remains operational but ignores its iptables rules, as Cilium takes over SNAT responsibilities. Users should also note that eBPF host routing is incompatible with non-Ubuntu 24.04 OSes and is…

The documentation for the Azure Kubernetes Service (AKS) has been updated to reflect changes in command anchor links for the Azure CLI. Users can now access the commands `az aks update`, `az aks create`, and `az aks show` using the correct hyphenated format in the links, improving navigation and usability within the documentation. This change ensures that users can more easily find and reference t…

The documentation for the Azure AKS Load Balancer Annotations has been updated to reflect a change in the reference from "load-balancer-standard.md" to "configure-load-balancer-standard.md" for customizations via Kubernetes annotations. Users can now find more accurate guidance on configuring load balancer annotations in the updated section, enhancing their ability to customize their AKS deploymen…

The documentation now clarifies that modifying the `Host` header is not supported with a `requestHeaderModifier` rule. Users are instructed to use a `URLRewrite` filter to override the `Host` value specified for the backend target, enhancing their understanding of header management in the Gateway API.

The documentation for the Azure CLI commands has been updated to reflect changes in the anchor links for the `az-feature-register`, `az-feature-show`, and `az-provider-register` commands, switching from underscores to hyphens. This change ensures that users can access the correct sections of the documentation more easily when navigating through the CLI references.

The documentation for the ALB Controller Helm chart has been updated to include new parameters for `podIdentity` and `init` resources, allowing users to specify a client ID for pod identity and resource limits for the init container. Additionally, the `securityPolicyFeatureFlag` has been clarified to enable the Application Load Balancer Security Policy Resource, enhancing security options for user…

The documentation has been updated to reflect changes in the command links for Azure CLI commands. Users can now access the `az group create`, `az group delete`, and `az sshkey create` commands using the correct anchor format, which replaces underscores with hyphens in the URLs. This change ensures that users can navigate to the appropriate sections more easily and accurately.

The documentation for setting up a custom domain name and SSL certificate with the Application Routing add-on for Azure Kubernetes Service (AKS) has been updated to clarify the process of enabling the secret autorotation feature of the Secret Store CSI driver. Users can now ensure that the add-on reloads certificates from Azure Key Vault automatically when they change by using the `–enable-secret…

The documentation for the Azure Kubernetes Service (AKS) has been updated to reflect changes in command anchor links, specifically for the `az ad sp create`, `az ad sp delete`, `az ad app credential list`, `az aks create`, and `az aks update` commands. Users can now access these commands using the updated anchor formats, which improve link consistency and usability within the documentation.

The documentation now clarifies that modifying the `Host` header is not supported with a `requestHeaderModifier` rule. Users are instructed to use a `URLRewrite` filter to override the `Host` value specified to the backend target, enhancing their understanding of header manipulation capabilities in the context of ingress API configurations.

The documentation for Azure Kubernetes Service (AKS) has been updated to reflect changes in command anchor links, specifically replacing underscores with hyphens for better consistency and usability. Users can now access commands like `az aks get-credentials`, `az aks create`, and others using the updated links, which improves navigation and clarity in the documentation.

The documentation has been updated to reflect the new version 1.8.9 for several commands related to deploying the Application Gateway for containers. Users should now reference this updated version in their configurations to ensure compatibility and access to the latest features and improvements.

The documentation for migrating from Application Gateway Ingress Controller (AGIC) to Application Gateway for Containers (AGC) has been updated to clarify that configurable request timeout values are now available through the `appgw.ingress.kubernetes.io/request-timeout` parameter, allowing users to utilize `RoutePolicy` and `IngressBackendSettings`. Additionally, the text has been refined for cla…

The documentation for Azure Kubernetes Service (AKS) has been updated to reflect changes in command syntax for several Azure CLI commands. Users can now access commands like `az aks create`, `az aks get-upgrades`, and `az aks nodepool add` with hyphens instead of underscores in their URLs, improving consistency and usability. Additionally, the commands for managing extensions, such as `az extensio…

The documentation now clarifies that Layer 7 (L7) policy is not supported by CiliumClusterwideNetworkPolicy (CCNP), which is crucial for users relying on this feature. Additionally, the overview section has been updated to remove the "Preview" label, indicating that the maximum supported cluster size remains at 1,000 nodes or 40,000 pods, and users should be aware of potential latency issues when…

The documentation for Azure Kubernetes Service (AKS) has been updated to reflect changes in command anchor links, specifically for the commands `az aks get-credentials`, `az aks nodepool add`, `az aks delete`, `az aks create`, and `az aks update`. Users can now access these commands using updated URLs that replace underscores with hyphens in the anchor links, improving the consistency and usabilit…

The documentation has been updated to correct a typo in the command syntax for configuring advanced filters in Event Grid. Users should now use the corrected parameter format `–advanced-filter` instead of the incorrect `–advanced-filterdata` when specifying the gate type in their commands. This change ensures that users can successfully apply the intended filters without encountering errors.

The documentation for the Azure CLI commands related to WireGuard has been updated to correct the anchor links by replacing underscores with hyphens. Users can now accurately reference commands such as `az extension add`, `az feature register`, and `az aks update` with the correct link formatting. This change ensures that users can access the relevant command documentation without encountering bro…

The documentation for upgrading the OS version for Azure Kubernetes Service (AKS) Windows workloads has been updated to clarify that a node pool update to migrate from one Windows Server version to another is not supported, and that different Windows Server versions cannot coexist on the same node pool. Additionally, it now specifies that Windows Server 2025 (in preview) is supported starting in K…

The documentation has been updated to reflect changes in command anchor links for Azure CLI commands related to Azure Kubernetes Service (AKS) and resource groups. Users can now access the commands for creating AKS clusters, adding node pools, and managing resource groups with updated links that use hyphens instead of underscores, improving consistency and usability.

The documentation for Azure CLI commands related to Azure Kubernetes Service (AKS) has been updated to standardize the anchor links by replacing underscores with hyphens. Users can now access commands such as `az-group-create`, `az-network-vnet-create`, and `az-aks-create` using the new link format, which improves consistency and usability in navigating the documentation. Additionally, the links f…

The documentation for importing images into Azure Container Registry has been updated to clarify the use of the `–registry <source-registry-resource-id>` and `-SourceRegistryResourceId <source-registry-resource-id>` flags, which are necessary for Entra identity authentication when accessing a source registry with a disabled public endpoint. Additionally, examples have been revised to specify that…

The documentation for adding a node pool with a unique subnet in an existing AKS cluster has been updated to correct the anchor links for the `az aks nodepool add` command, changing from underscores to hyphens. This change ensures that users can accurately access the command reference when using the `–vnet-subnet-id` parameter.

The documentation now clarifies that L7 policy is not supported by `CiliumClusterwideNetworkPolicy` (CCNP), which may impact users relying on Layer 7 policies for their network configurations. Additionally, the FAQ section has been updated to confirm support for `CiliumLocalRedirectPolicy` and `CiliumClusterwideNetworkPolicy`, providing users with clearer guidance on the capabilities of these poli…

The documentation for monitoring GPU metrics in Azure Kubernetes Service (AKS) has been updated to transition from a how-to guide to a conceptual overview. Users can now learn about key NVIDIA DCGM GPU metrics, including utilization, memory usage, and performance data, which are essential for optimizing GPU workloads. Additionally, the article clarifies that managed GPU metrics are not currently s…

The documentation has been updated to reflect changes in command anchor links for Azure CLI commands, specifically replacing underscores with hyphens in the URLs for commands such as `az-group-create`, `az-aks-create`, and others. This change ensures that users can access the correct command documentation more easily and consistently. Users should now use the updated links to navigate to the relev…

The documentation now includes an important note clarifying that the article applies only to AKS clusters that fully support log ingestion, and that Arc-enabled Kubernetes clusters in preview do not currently support this feature. Users are directed to the "Azure Kubernetes Fleet Manager member cluster types" article for further information on cluster compatibility.

The documentation now specifies that the Application Gateway for Containers WAF must have its policy in the same subscription and region as the resource. Users are informed that only Default Rule Set (DRS) managed rules are supported, and that Bot Manager Ruleset versions 1.0 and 1.1 are the only supported versions, while JavaScript and Captcha challenge actions cannot be set on Bot Manager rules.…

The documentation has been updated to reflect significant changes in the Application Gateway for Containers API specifications. The "BackendTLSPolicy" has been renamed to "BackendLoadBalancingPolicy," and corresponding sections have been modified to describe the new configuration options, including "BackendLoadBalancingPolicySpec" and "LoadBalancingConfig." Users can now utilize the updated schema…

The documentation now includes information that FQDN filtering can be applied cluster-wide using `CiliumClusterwideNetworkPolicy` (CCNP). This enhancement allows users to implement more comprehensive network security policies across their Kubernetes clusters.

The documentation now clarifies that API Server VNet Integration is available in all GA public cloud regions except for eastus2 and qatarcentral, with ongoing efforts to enable this feature in those regions. Users may encounter an error indicating that the feature is temporarily unavailable in certain regions due to high demand and limited capacity, and they are advised to either retry later or se…

The documentation for the Azure CLI commands related to Azure Kubernetes Service (AKS) has been updated to reflect changes in the anchor links. Users can now access the commands for creating and managing resource groups and AKS clusters using the updated link formats, which replace underscores with hyphens in the URLs. This change enhances the consistency and usability of the documentation.

The documentation for the Azure CLI commands has been updated to reflect changes in the anchor links for the `az acr create`, `az acr repository list`, and `az group create` commands, switching from underscores to hyphens in the URLs. This change improves the consistency and usability of the documentation, allowing users to access the relevant sections more easily. Users should now use the updated…

The documentation for using managed identities in Azure Kubernetes Service (AKS) has been significantly restructured to enhance clarity and usability. Users can now learn how to enable and utilize system-assigned, user-assigned, or pre-created kubelet managed identities more effectively, with detailed step-by-step instructions. Additionally, the prerequisites and Azure CLI version requirements hav…

The documentation for the `az aks update` command has been updated to correct the anchor links from using underscores to hyphens, ensuring that users can accurately navigate to the relevant sections. This change enhances the clarity and usability of the documentation, allowing users to more easily find information related to updating existing Azure Kubernetes Service clusters.

The documentation now includes a new section on enabling Istio CNI for the Istio service mesh add-on, providing users with guidance on this feature in the next steps of the istio-deploy-addon.md. This addition allows users to better integrate Istio CNI into their service mesh deployments.

The documentation for Azure CLI commands related to AKS node pools has been updated to reflect changes in the URL structure for command anchors. Users can now access the commands `az aks nodepool add`, `az aks nodepool show`, and `az aks nodepool update` using hyphens instead of underscores in the URLs. Additionally, the command `az vm list-skus` has also been updated to follow the same URL format…

The documentation now includes a new section on "Pod CIDR Expansion" for Azure CNI Overlay clusters, allowing users to expand their Pod CIDR space without recreating the AKS cluster, specifically for Linux nodes. Users must register the `EnableAzureCNIOverlayPodCIDRExpansion` feature flag and can utilize the `az aks update` command to perform the expansion, with specific limitations noted regardin…

The documentation for Azure NetApp Files has been updated to reflect changes in command anchor formatting. Users can now access the commands for `az-aks-show`, `az-netappfiles-account-create`, `az-netappfiles-pool-create`, `az-netappfiles-volume-create`, `az-netappfiles-volume-show`, and `az-network-vnet-subnet-create` using hyphens instead of underscores in the URLs, improving consistency and usa…

The documentation for Azure Kubernetes Service (AKS) has been updated to reflect changes in the command syntax for the `az aks nodepool` commands. Users can now access the commands `az aks nodepool add`, `az aks nodepool show`, and `az aks nodepool delete` with the correct anchor links, which have been modified to use hyphens instead of underscores. This change ensures that users can navigate to t…

The documentation for the Azure Kubernetes Service (AKS) has been updated to reflect changes in command anchor formatting. Users can now access the commands `az aks show`, `az aks scale`, and `az aks nodepool scale` with the correct anchor syntax using hyphens instead of underscores in the URLs. This change improves the accuracy of links within the documentation, enhancing user navigation and expe…

The documentation for connecting to Azure Kubernetes Service (AKS) private clusters has been updated to clarify that users can now manage the API server using a virtual machine (VM) or container with access to the cluster’s virtual network (VNet). Additionally, new sections detail how to connect via Azure Cloud Shell and Azure Bastion, including steps for deploying required resources and configuri…

The documentation for Azure Kubernetes Service (AKS) has been updated to reflect changes in command anchor links, replacing underscores with hyphens for better consistency and usability. Users can now access commands like `az aks create`, `az aks get-credentials`, and others with the updated link format, improving navigation within the documentation.

The documentation clarifies that clusters being joined to the fleet for the first time after an upgrade do not require reconciliation using the `az fleet member reconcile` command. Additionally, it emphasizes that deleting the resource group will not remove AKS clusters if they are located in a different resource group. These updates enhance user understanding of the upgrade process and resource m…

The documentation now highlights that Application Gateway for Containers supports regular expression matching for `headers`, `queryParams`, and `path` rules using Regular Expression 2 (RE2) syntax. This enhancement allows users to implement more complex routing rules based on these parameters, improving the flexibility and functionality of their application gateway configurations.

The documentation for the Azure CLI commands has been updated to correct the anchor links for `az-aks-get-credentials`, `az-provider-list`, and `az-provider-register`, changing underscores to hyphens. This change ensures that users can accurately navigate to the relevant sections in the documentation without encountering broken links. Users can now find the correct command references more easily,…

The documentation for Azure Kubernetes Service (AKS) has been updated to reflect changes in command anchor links, specifically for the commands related to resource creation. Users can now access the commands for creating resource groups, public IPs, NAT gateways, virtual networks, and adding node pools using the updated anchor format, which uses hyphens instead of underscores in the links. This ch…