What problem does it solve? Managing Kubernetes infrastructure on Azure involves many moving parts — cluster provisioning, application manifests, secrets, security policies, and upgrades — and mixing them together leads to fragile, hard-to-maintain setups. This Skill provides a comprehensive reference for structuring Kubernetes infrastructure-as-code correctly on AKS. ## Core Features & Use Cases - Platform vs Application IaC Separation: Guidance on splitting Terraform/Bicep cluster provisioning from Helm/Kustomize workload manifests into separate repos and pipelines. - GitOps Operations: Flux CD vs ArgoCD selection criteria, config repo structures, and directory-based environment promotion patterns. - AKS Security Hardening: Pod Security Standards, default-deny NetworkPolicies, Workload Identity setup, Azure Policy, Trivy scanning, and private cluster configuration. - Use Case: A platform engineer needs to provision a production AKS cluster with Terraform, set up Flux for GitOps deployments, enforce restricted pod security, and configure Workload Identity — this Skill provides the exact module structures, HCL snippets, and YAML manifests for each step. ## Quick Start Ask the AI to generate a production-ready Terraform module for an AKS cluster with Workload Identity, private API server, and Azure CNI Overlay with Cilium.
