azure-kubernetes

microsoft/azure-skillsCloud PlatformsAudit passedSnapshot 3935b8697681

Summary

Plan, create, and configure production-ready Azure Kubernetes Service (AKS) clusters. Covers Day-0 checklist, SKU selection (Automatic vs Standard), networking options (private API server, Azure CNI Overlay, egress configuration), security, and operations (autoscaling, upgrade strategy, cost analysis). WHEN: create AKS environment, provision AKS, enable AKS observability, design AKS networking, choose AKS SKU, secure AKS, optimize AKS, AKS spot nodes, AKS cluster-autoscaler, rightsize AKS pod, pod rightsizing, over-provisioned AKS pod, pod resource requests and limits, Vertical Pod Autoscaler, VPA recommendations.

SKILL.md

Azure Kubernetes Service

AUTHORITATIVE GUIDANCE — MANDATORY COMPLIANCE

This skill produces a recommended AKS cluster configuration based on user requirements, distinguishing Day-0 decisions (networking, API server — hard to change later) from Day-1 features (can enable post-creation). See CLI reference for commands.

Quick Reference

Property	Value
Best for	AKS cluster planning and Day-0 decisions
MCP Tools	`mcp_azure_mcp_aks`
CLI	`az aks create`, `az aks show`, `kubectl get`, `kubectl describe`
Related skills	azure-kubernetes-app-deploy (deploy an app to an existing cluster), azure-diagnostics (troubleshooting AKS), azure-validate (readiness checks), azure-kubernetes-automatic-readiness (migrate existing cluster to AKS Automatic)

When to Use This Skill

Activate this skill when user wants to:

Create a new AKS cluster
Plan AKS cluster configuration for production workloads
Design AKS networking (API server access, pod IP model, egress)
Set up AKS identity and secrets management
Configure AKS governance (Azure Policy, Deployment Safeguards)

Scenario	Trigger Keywords	Reference
Pod Rightsizing	over-provisioned pods, CPU requests, memory requests, rightsize workloads	azure-aks-rightsizing.md
VPA Setup	vertical pod autoscaler, VPA recommendations, VPA enable	azure-aks-vpa.md
Cluster Autoscaler	idle nodes, CAS off, enable autoscaler, scale-down profile, node utilization	azure-aks-autoscaler.md
Spot Node Pools	Spot VMs, Spot nodes, batch workloads, cheaper nodes	azure-aks-spot.md

Tool	Purpose	Key Parameters
`mcp_azure_mcp_aks`	AKS MCP entry point used to discover the exact AKS-specific tools exposed by the client	Discover the callable AKS tool first, then use that tool's parameters

Error / Symptom	Likely Cause	Remediation
MCP tool call fails or times out	Invalid credentials, subscription, or AKS context	Verify `az login`, confirm the active subscription context with `az account show`, and check the target resource group without echoing subscription identifiers back to the user
Quota exceeded	Regional vCPU or resource limits	Request quota increase or select different region/VM SKU
Networking conflict (IP exhaustion)	Pod subnet too small for overlay/CNI	Re-plan IP ranges; may require cluster recreation (Day-0)
Workload Identity not working	Missing OIDC issuer or federated credential	Enable `--enable-oidc-issuer --enable-workload-identity`, configure federated identity

azure-kubernetes

Summary

SKILL.md

Azure Kubernetes Service

Quick Reference

When to Use This Skill

Rules

Required Inputs (Ask only what’s needed)

Workflow

1. Cluster Type

2. Networking (Pod IP, Egress, Ingress, Dataplane)

3. Security

4. Observability

5. Upgrades & Patching

6. Performance

7. Node Pools & Compute

8. Reliability

9. Cost Controls

Guardrails / Safety

MCP Tools

Error Handling

Related skills