What problem does it solve?
This Skill helps teams make Day-0 and Day-1 decisions needed to plan, create, and operate production-grade Azure Kubernetes Service (AKS) clusters, reducing risk from irreversible networking and identity choices and accelerating secure, observable deployments.
Core Features & Use Cases
- Cluster Planning & SKU Selection: Recommend AKS Automatic vs Standard SKU, node VM sizes, and node pool topology for dev/test or production workloads.
- Networking & Egress Design: Define pod IP model (Azure CNI Overlay vs VNet-routable), egress strategy (static egress gateways, UDR + firewall), and ingress choices (Gateway API, App Routing, Application Gateway).
- Security, Identity & Observability: Advise Microsoft Entra ID and Workload Identity, Key Vault via CSI driver, Azure Policy, Managed Prometheus, Container Insights, and guardrails for secrets and image signing.
- Operations & Reliability: Provide autoscaling, maintenance windows, upgrade strategy, multi-zone reliability, and cost-control recommendations including spot pools and reserve options.
Quick Start
Create a production AKS cluster plan for eastus with 3 availability zones, Azure CNI overlay networking, managed identities and Key Vault integration, autoscaling node pools, and observability enabled.