An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
ACNS observability-only configuration deploys crash-looping acns-security-agent when security is disabled
An AKS cluster configured with Advanced Container Networking Services observability enabled and security disabled deploys the AKS-managed acns-security-agent DaemonSet. The agent starts the standalone Cilium DNS proxy with an invalid combination of…
Azure Kubernetes Service
Started intermittent SSL handshake issues for outbound calls from private AKS cluster hosted services
Hello, Suddenly some SSL handshake issues started surfacing intermittently, for the outbound calls from my AKS hosted services. My AKS cluster is a private cluster and exposes the APIs via Azure Application Gateway as the ingress. This was not the case…
Azure Kubernetes Service
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
AKS Managed Istio (asm-1-30): Can experimental feature flags like PILOT_ENABLE_MULTIPLE_CUSTOM_AUTHZ_PROVIDERS be enabled?
Hello, We are utilizing the AKS managed Istio service mesh add-on (asm-1-30). Our architecture requires binding multiple custom external authorization providers to individual workloads, a capability governed upstream in Istio by the experimental…
Azure Kubernetes Service
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
I'm unable to create a AKS Cluster as I'm using free student subscription.
As I'm using a free students' subscription, I'm unable to request quotas of different vcpus in any regions. Someone please guide me on this!!!
Azure Kubernetes Service
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
CILIUM for AKS : Unable to view hubble observability after enabling cilium without ACNS
Hubble is in disabled state after enabling cilium for an AKS managed cluster without ACNS, some documents state that the hubble cli and basic ui is available without ACNS. Currently the cluster is 1.34.7 AKS version, does future versions enable hubble…
Azure Kubernetes Service
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
AKS Private Cluster - Azure Portal Unable to Display Kubernetes Resources
I have an AKS private cluster where Azure Portal cannot display Kubernetes resources (Pods, Deployments, Services, etc.), even though connectivity to the cluster is working correctly. The issue appears only in the Azure Portal Kubernetes Resource…
Azure Kubernetes Service
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
Not able to add "Node Pool with VMSS" in AKS cluster due to version mismatch
We were using AKS cluster with version 1.31.xx, when we were trying add "node pool" for AKS cluster it was giving below message: This cluster is using a Kubernetes version no longer supported by the Azure Kubernetes Service. In order to add a…
Azure Kubernetes Service
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
why appn pods running on system node
Why application pods are running in agent pool and check out none Tenant.
Azure Kubernetes Service
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
Application Pods are running on AKS System Node Causing High Memory Utilization.
System node pool : aks-agentpool-38991572-vmss000002, aks-agentpool-38991572-vmss000003 User node pool: aks-workerpool-38991572-vmss000003,000004,000005 The system node aks-agentpool-38991572-vmss000003 is showing high memory utilization. Application…
Azure Kubernetes Service
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
Azure Kubernetes Service (AKS) / Azure DNS Private Resolver / VNet Peering: AKS cannot connect to resources in the peered VNet
Service Azure Kubernetes Service (AKS), Azure DNS Private Resolver, Azure Virtual Network Peering Scenario On the VNet that contains our AKS cluster, the custom DNS setting points to the inbound endpoint of an Azure DNS Private Resolver, which is…
Azure Kubernetes Service
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
Way to record during upgrading to new image
I am tryign to execute below command but it is failing, what is wrong here? kubectl --record deployment/nginx-deployment set image deployment/nginx-deployment nginx=nginx:1.17.0 what is wrong ? how to use record? why we use record? and please see…
Azure Kubernetes Service
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
Join: Microsoft Azure Q&A Champions Program
The Microsoft Azure Q&A Champions Program recognizes and empowers a global community of internal and external Azure experts who help customers succeed by providing high-quality, trusted answers on Microsoft Q&A. The program scales expert led…
Azure Kubernetes Service
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
How to configure my AKS network setup in a enterprise zero trust private environment
Good day, For my enterprise company I am creating a design for a to be developed AKS platform setup. I'm having trouble to figure out what the best practices from Microsoft are for my setup. The context is as follows: Enterprise setup, more than 100+…
Azure Kubernetes Service
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
Azure Kubernetes Service (AKS) / Azure SQL Managed Instance: AKS nodes cannot connect to SQL MI via VNet-local endpoint
Service Azure Kubernetes Service (AKS), Azure SQL Managed Instance (SQL MI) Scenario Pods/nodes on our AKS cluster are trying to connect to an Azure SQL Managed Instance in the same VNet. The intended connection path is via the VNet-local endpoint…
Azure Kubernetes Service
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
Azure Application Gateway for Containers mTLS header forwarding possible?
We are migrating to Azure Kubernetes Service with Azure Application Gateway for Containers and we have the following use case: Some of our clients use mTLS when calling our APIs, while others do not. What we want to achieve is to have TLS termination at…
Azure Kubernetes Service
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
Global L4 Load Balancer → AKS Service (LoadBalancer) traffic not receiving.
Hi Everyone, I’m trying Global routing between two regions using global load balancer and AKS clusters (2 clusters in different region) Scenario A Global Load Balancer (L4) sends traffic to: Azure AKS Service of type LoadBalancer (Standard…
Azure Kubernetes Service
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
AKS agentpool scaling is stuck for over 4 hours. Node count remains 9 instead of 10, with no error shown.
AKS agentpool scaling has been stuck for more than 4 hours. The target node count is 10, but the current node count remains 9. The cluster operation status shows Succeeded, while the agentpool provisioning state remains Scaling. Activity Log shows no…
Azure Kubernetes Service
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
k8s-device-plugin fails to complete after automatic upgrade of node image to 202607.02.0
We have a azure kubernetes cluster running kubernetes version 1.34.8 We have a nodepool running Standard_NV18ads_A10_v5 VM size The node image version is AKSUbuntu-2204gen2containerd-__2026__07.02.0. It was automatically upgraded over the…
Azure Kubernetes Service
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
AKS Node configuration mismatch
Summary: AKS system nodepool in persistent Failed provisioning state with corrupted metadata. Nodepool has disappeared from az aks nodepool list but underlying VMs and nodes are still running and healthy. Symptoms: - Nodepool "system" shows…
Azure Kubernetes Service
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
AKS cluster auto-upgrade did not execute during scheduled maintenance window
Service: Azure Kubernetes Service Impacted Resource: /subscriptions/2e165671-918f-427f-8e13-3ec8e39812e6/resourceGroups/rg-infra-r-westus3-tst/providers/Microsoft.ContainerService/managedClusters/clu-r-usw3-tst Description: Our AKS cluster clu-r-usw3-tst…
Azure Kubernetes Service
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.