skills.rest
microsoft
microsoftOFFICIAL
Explore all skills by this author →
Website𝕏@OpenAtMicrosoftGitHub

azure-kubernetes-app-deploy

Generates Dockerfiles and Kubernetes manifests, then deploys web applications to existing AKS clusters.

3.0k|341|Updated Jan 16, 2026
Search Tags:#kubernetes#Azure#manifests#Dockerfile#Deployment#AKS#Workload Identity
One-click install
npx skills add https://github.com/microsoft/skills --skill azure-kubernetes-app-deploy
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: azure-kubernetes-app-deploy
Source: https://github.com/microsoft/skills/tree/main/.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy
Command: npx skills add https://github.com/microsoft/skills --skill azure-kubernetes-app-deploy

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Deploying an existing web application to Azure Kubernetes Service requires writing a Dockerfile, authoring a dozen Kubernetes manifests, satisfying AKS Deployment Safeguards (DS001–DS013), and wiring up routing and identity — a process that is error-prone and easy to get wrong for each framework.

Core Features & Use Cases

  • Framework Detection & Generation: Detects Spring Boot, Express, Next.js, FastAPI, Django, NestJS, ASP.NET Core, Go, and Flask projects, then generates a production-grade Dockerfile and full manifest set (Deployment, Service, HPA, PDB, Ingress or Gateway API, NetworkPolicy).
  • Safeguards Validation: Validates and auto-fixes manifests against AKS Deployment Safeguards DS001–DS013, including non-root security contexts, probes, resource limits, and read-only root filesystems.
  • End-to-End Deploy & Verify: Builds images with az acr build, applies manifests with kubectl, waits for rollout, verifies the external endpoint, and provides rollback procedures on failure.
  • Use Case: You have a Django API and an existing AKS cluster. The skill detects the framework, generates a Dockerfile and safeguard-compliant manifests with Workload Identity, deploys via ACR, and verifies the health endpoint.

Quick Start

Deploy my existing web application to my running AKS cluster, generating the Dockerfile and Kubernetes manifests and validating them against AKS Deployment Safeguards.

Frequently Asked Questions about azure-kubernetes-app-deploy

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I deploy an existing app to an AKS cluster?▼

Run the quick-deploy workflow: it detects your framework, generates a Dockerfile and Kubernetes manifests from templates, validates them against AKS Deployment Safeguards, builds the image with az acr build, applies the manifests with kubectl, and verifies the rollout and health endpoint.

How to generate Kubernetes manifests that pass AKS Deployment Safeguards?▼

The skill generates manifests pre-configured for DS001–DS013: resource requests and limits, liveness and readiness probes, runAsNonRoot, no privileged containers, read-only root filesystem, and minimum two replicas. It then validates and auto-fixes 12 of the 13 rules, with DS009 (no :latest tag) resolved by tagging images with the git SHA.

Which frameworks are supported for AKS deployment?▼

Supported frameworks include Spring Boot, Express, Fastify, NestJS, Next.js, FastAPI, Django, Flask, ASP.NET Core, and Go (Gin, Echo, Fiber, or net/http). Each has a knowledge pack covering health endpoints, port defaults, resource sizing, writable paths, and common AKS issues.

Does this skill create or provision an AKS cluster?▼

No. It only deploys applications to an already-running AKS cluster and requires az login and kubectl to be configured. For cluster provisioning use the azure-kubernetes skill, and for AKS Automatic migration assessment use azure-kubernetes-automatic-readiness.

Why do my AKS pods fail with ImagePullBackOff after deployment?▼

ImagePullBackOff usually means the cluster cannot pull from Azure Container Registry. Verify the image name in the deployment matches the ACR, and run az aks check-acr to confirm the kubelet identity has pull access; attach the ACR with az aks update --attach-acr if the check fails.

How does Workload Identity work for pods on AKS?▼

Workload Identity lets pods authenticate to Azure services like Key Vault, PostgreSQL, and Storage without stored secrets. It links a Managed Identity, a federated credential, and an annotated ServiceAccount; the webhook injects AZURE_CLIENT_ID and a projected token that DefaultAzureCredential picks up automatically.

Related Skills

Explore More Software Engineering Skills→
fgarofalo56fgarofalo56
6

azure-aks

Provide guidance and commands for deploying and managing Azure Kubernetes Service clusters.

Community
Advanced
codewithmukeshcodewithmukesh
640

ci-cd

Automate .NET build, test, and deployment pipelines with GitHub Actions or Azure DevOps.

Official
Intermediate
jorgeasaurusjorgeasaurus
12

azure-kubernetes-automatic-readiness

Evaluate Kubernetes workloads and cluster configurations for AKS Automatic compatibility.

Community
Advanced
HouseGarofaloHouseGarofalo
3

azure-aks

Manage Azure Kubernetes Service clusters for deploying containerized applications.

Official
Advanced