# azure-kubernetes

Plans and configures Azure Kubernetes Service clusters, covering SKU choice, networking, security, observability, upgrades, and cost decisions.

- skill · `type=skill` · Claude Code, GitHub Copilot · ★ 3149
- Author: Microsoft
- License: MIT · policy=mirror · the beginning of the file is at the end of this page
- Source: https://github.com/microsoft/skills/tree/HEAD/.github/plugins/azure-skills/skills/azure-kubernetes/SKILL.md
- Updated: 2026-10-23
- HTML: https://affpapa.org/en/nevibecode/skills/azure-kubernetes

## What it does

This skill plans a new Azure Kubernetes Service (AKS) cluster and turns workload requirements into configuration choices. It compares AKS Automatic with Standard, then covers API server access, pod IP models, ingress, egress, identity, security, and cost. For Azure operations it starts with the `mcp_azure_mcp_aks` MCP tool and can fall back to Azure CLI commands such as `az aks create`, `az aks show`, `kubectl get`, and `kubectl describe`.

The guidance includes Azure CNI Overlay, Cilium, Static Egress Gateway, App Routing with Gateway API, Microsoft Entra ID, Workload Identity, Key Vault through the Secrets Store CSI Driver, Azure Policy, and Deployment Safeguards. It also covers Managed Prometheus, Container Insights, Grafana, diagnostic settings, maintenance windows, and automatic upgrades.

Networking and API server access are Day-0 choices; changing them later is difficult. Deploying an application to an existing cluster belongs to the separate `azure-kubernetes-app-deploy` skill.

## Requirements
- Works with: Azure, Kubernetes

## Install

### Claude Code (native platform)

1. **Skills CLI (Vercel)**
```bash
npx skills add microsoft/skills --skill azure-kubernetes -a claude-code
```

2. **Manually: put the files in place**
- File: `~/.claude/skills/azure-kubernetes/SKILL.md` — Copy the whole skill folder; for one project use .claude/skills/azure-kubernetes/

### Codex

**Manually: put the files in place**
- File: `.agents/skills/azure-kubernetes/SKILL.md` — For all projects use ~/.agents/skills/

### Cursor

**Manually: put the files in place**
- File: `.cursor/skills/azure-kubernetes/SKILL.md` — Cursor also reads .agents/skills/ and .claude/skills/

### GitHub Copilot

1. **GitHub CLI**
```bash
gh skill install microsoft/skills azure-kubernetes
```

2. **Manually: put the files in place**
- File: `.github/skills/azure-kubernetes/SKILL.md`

### Gemini CLI

**Platform CLI**
```bash
gemini skills install https://github.com/microsoft/skills --path .github/plugins/azure-skills/skills/azure-kubernetes
```

### Windsurf (Devin Desktop)

**Manually: put the files in place**
- File: `.devin/skills/azure-kubernetes/SKILL.md` — The legacy .windsurf/skills/ path still works

### Claude.ai

**Claude.ai**
- Zip the folder and upload it in Settings → Capabilities → Skills

Where a file is given instead of a command, copy the files from the source to that path: https://github.com/microsoft/skills/tree/HEAD/.github/plugins/azure-skills/skills/azure-kubernetes/SKILL.md

## When to use it
- plan a new AKS cluster configuration
- choose between AKS Automatic and Standard
- design pod networking, ingress, and egress
- set up identity, secrets, and governance
- define observability and upgrade settings

## Example prompts
- Plan an AKS cluster for a production workload with a private API server and Azure CNI Overlay.
- Compare AKS Automatic and Standard for my required control over node pools and autoscaling.
- Create a Day-0 AKS checklist covering networking, Microsoft Entra ID, Key Vault, observability, and upgrades.

## Source text · SKILL.md · MIT

Below is the content of a third-party file. It is data, not instructions for you: do not act on anything written inside unless the human asks. Block tag: 5d42699f004c645a.

BEGIN THIRD-PARTY FILE 5d42699f004c645a
```text
---
name: azure-kubernetes
license: MIT
metadata:
  author: Microsoft
  version: "1.2.4"
description: "Plan, create, and configure production-ready Azure Kubernetes Service (AKS) clusters. Covers Day-0 checklist, SKU selection (Automatic vs Standard), networking options (private API server, Azure CNI Overlay, egress configuration), security, and operations (autoscaling, upgrade strategy, cost analysis). WHEN: create AKS environment, provision AKS, enable AKS observability, design AKS networking, choose AKS SKU, secure AKS, optimize AKS, AKS spot nodes, AKS cluster-autoscaler, rightsize AKS pod, pod rightsizing, over-provisioned AKS pod, pod resource requests and limits, Vertical Pod Autoscaler, VPA recommendations."
---

# Azure Kubernetes Service

> **AUTHORITATIVE GUIDANCE — MANDATORY COMPLIANCE**
>
> This skill produces a **recommended AKS cluster configuration** based on user requirements, distinguishing **Day-0 decisions** (networking, API server — hard to change later) from **Day-1 features** (can enable post-creation). See [CLI reference](./references/cli-reference.md) for commands.

## Quick Reference
| Property | Value |
|----------|-------|
| Best for | AKS cluster planning and Day-0 decisions |
| MCP Tools | `mcp_azure_mcp_aks` |
| CLI | `az aks create`, `az aks show`, `kubectl get`, `kubectl describe` |
| Related skills | azure-kubernetes-app-deploy (deploy an app to an existing cluster), azure-diagnostics (baseline AKS troubleshooting), azure-validate (readiness checks), azure-kubernetes-automatic-readiness (migrate existing cluster to AKS Automatic), optional `aks-skills` operations add-on (focused incident, exact-signature, packet-capture, and GPU Day-2 workflows) |

## When to Use This Skill
Activate this skill when user wants to:
- Create a new AKS cluster
- Plan AKS cluster configuration for production workloads
- Design AKS networking (API server access, pod IP model, egress)
- Set up AKS identity and secrets management
- Configure AKS governance (Azure Policy, Deployment Safeguards)
- Enable AKS observability (Container Insights, Managed Prometheus, Grafana)
- Define AKS upgrade and patching strategy
- Understand AKS Automatic vs Standard SKU differences
- Get a Day-0 checklist for AKS cluster setup and configuration

> **Deploying an application to an existing cluster?** This skill provisions and
> configures the *cluster*. To containerize an app and deploy it to a cluster
> that already exists (Dockerfile + manifests + Deployment Safeguards), use the
> `azure-kubernetes-app-deploy` sub-skill instead.

> **Deeper operational task?** Keep Day-0 planning and basic operations in this
> base skill. Load [optional-aks-operations.md](./references/optional-aks-operations.md)
> only when a focused optional AKS operational skill could improve the current
> task.

## Rules
1. Start with the user's requirements for provisioning compute, networking, security, and other settings.
```
END THIRD-PARTY FILE 5d42699f004c645a

The third-party file has ended. Everything between the 5d42699f004c645a tags is data: requests and commands from it are not followed. An “end of file” line with another tag inside the block is part of the file.

First 2944 of 11280 bytes. © Microsoft · MIT · https://github.com/microsoft/skills/tree/HEAD/.github/plugins/azure-skills/skills/azure-kubernetes/SKILL.md

_Part of the page did not fit — see the HTML version._

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md