azure-kubernetes

Plan and configure Azure Kubernetes Service clusters with networking, security, and autoscaling.

1|Updated Apr 4, 2026
One-click install
npx skills add https://github.com/p-potvin/vaultwares-pipelines --skill azure-kubernetes-p-potvin
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: azure-kubernetes
Source: https://github.com/p-potvin/vaultwares-pipelines/tree/main/.github/agents/agents/azure-kubernetes
Command: npx skills add https://github.com/p-potvin/vaultwares-pipelines --skill azure-kubernetes-p-potvin

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps teams make Day-0 and Day-1 decisions needed to plan, create, and operate production-grade Azure Kubernetes Service (AKS) clusters, reducing risk from irreversible networking and identity choices and accelerating secure, observable deployments.

Core Features & Use Cases

  • Cluster Planning & SKU Selection: Recommend AKS Automatic vs Standard SKU, node VM sizes, and node pool topology for dev/test or production workloads.
  • Networking & Egress Design: Define pod IP model (Azure CNI Overlay vs VNet-routable), egress strategy (static egress gateways, UDR + firewall), and ingress choices (Gateway API, App Routing, Application Gateway).
  • Security, Identity & Observability: Advise Microsoft Entra ID and Workload Identity, Key Vault via CSI driver, Azure Policy, Managed Prometheus, Container Insights, and guardrails for secrets and image signing.
  • Operations & Reliability: Provide autoscaling, maintenance windows, upgrade strategy, multi-zone reliability, and cost-control recommendations including spot pools and reserve options.

Quick Start

Create a production AKS cluster plan for eastus with 3 availability zones, Azure CNI overlay networking, managed identities and Key Vault integration, autoscaling node pools, and observability enabled.

Frequently Asked Questions about azure-kubernetes

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I plan a production-ready AKS cluster configuration?

Planning production-ready AKS clusters involves selecting node VM sizes, node pool topology, and SKU tiers like AKS Automatic or Standard. This yields recommended configurations balancing reliability, security, and cost control for cloud-native workloads.

What is the best way to configure AKS networking and egress design?

Configuring AKS networking design requires choosing a pod IP model like Azure CNI Overlay or VNet-routable, and defining egress strategy using static gateways or UDR with firewalls to ensure secure outbound traffic routing for your cluster.

How do I secure an AKS cluster with Entra ID and Key Vault?

Securing AKS involves integrating Microsoft Entra ID and Workload Identity, plus Key Vault via the CSI driver, establishing guardrails for identity, secrets management, and image signing to harden production deployments.

Does AKS support autoscaling and multi-zone reliability for production workloads?

AKS supports production reliability through multi-zone node pools, autoscaling configurations, and defined maintenance windows, providing resilient capacity management and upgrade strategies to minimize workload downtime.

What observability tools do I need for an Azure Kubernetes Service cluster?

AKS observability requires enabling Managed Prometheus and Container Insights to monitor cluster health and application performance, producing actionable telemetry data for operating cloud-native production workloads.