/azure-aks-edge-essentials

name: azure-aks-edge-essentials
description: Expert knowledge for Azure Kubernetes Service Edge Essentials development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when managing AKS Edge/Hybrid clusters, Arc connectivity, IoT/OPC/ONVIF workloads, TPM/Key Vault, or SDN VNets, and other Azure Kubernetes Service Edge Essentials related development tasks. Not for Azure Kubernetes Service (AKS) (use azure-kubernetes-service), Azure IoT Edge (use azure-iot-edge), Azure Stack Edge (use azure-stack-edge).
compatibility: Requires network access. Uses mcp_microsoftdocs:microsoft_docs_fetch or fetch_webpage to retrieve documentation.
metadata:
  generated_at: "2026-08-09"
  generator: "docs2skills/1.0.0"

Azure Kubernetes Service Edge Essentials Skill

This skill provides expert guidance for Azure Kubernetes Service Edge Essentials. Covers troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

> **IMPORTANT for Agent**: Use the **Category Index** below to locate relevant sections. For categories with line ranges (e.g., `L35-L120`), use `read_file` with the specified lines. For categories with file links (e.g., `[security.md](security.md)`), use `read_file` on the linked reference file

> **IMPORTANT for Agent**: If `metadata.generated_at` is more than 3 months old, suggest the user pull the latest version from the repository. If `mcp_microsoftdocs` tools are not available, suggest the user install it: [Installation Guide](https://github.com/MicrosoftDocs/mcp/blob/main/README.md)

This skill requires **network access** to fetch documentation content:

• **Preferred**: Use `mcp_microsoftdocs:microsoft_docs_fetch` with query string `from=learn-agent-skill`. Returns Markdown.
• **Fallback**: Use `fetch_webpage` with query string `from=learn-agent-skill&accept=text/markdown`. Returns Markdown.

Category Index

| Category | Lines | Description | |----------|-------|-------------| | Troubleshooting | L37-L82 | Diagnosing and fixing AKS Edge/Hybrid/Arc cluster issues: creation/upgrade failures, networking, storage, encryption, certificates, logs, VMware/Azure Local errors, and support tools. | | Best Practices | L83-L91 | Guidance on resilient AKS Edge Essentials setups: availability sets, Azure Policy on Windows Server, restoring AKS Arc after VM failure, and upgrading AKS Arc clusters/Kubernetes versions. | | Decision Making | L92-L102 | Guidance on AKS Edge/Hybrid pricing, licensing, trials, migration paths (Windows Server, AKS Arc), monitoring/logging choices, and planning cloud vs edge vs on-prem and disconnected deployments. | | Architecture & Design Patterns | L103-L109 | Designing AKS on Windows Server for Azure Local: high availability on two-node setups, SDN VNet architectures, and deployment patterns for AKS Arc target clusters. | | Limits & Quotas | L110-L127 | Limits, quotas, and system requirements for AKS Edge/Hybrid variants: scale limits, IP capacity planning, supported versions, resource/VM sizes, and support policies across bare metal, VMware, Azure Local, and Windows Server. | | Security | L128-L164 | Identity, auth, RBAC, certificates, SSH, key rotation, gMSA, image validation, and other security hardening for AKS Edge/Hybrid/Arc/Azure Local clusters. | | Configuration | L165-L257 | Configuring AKS Edge/Hybrid/Arc clusters: networking, storage, load balancers, autoscaling, GPU, proxies, Arc connectivity, monitoring/logging, offline/upgrade flows, and PowerShell/CLI settings. | | Integrations & Coding Patterns | L258-L311 | Integrations, APIs, and PowerShell for connecting AKS Edge/Hybrid to Arc, IoT/OPC/ONVIF, TPM, storage/backup, metrics, AI models, CSI plugins, and Key Vault secrets. | | Deployment | L312-L349 | Deploying, upgrading, starting/stopping, and removing AKS Edge/AKS hybrid/AKS Arc clusters and nodes, including Windows node pools, offline images, and PowerShell-based lifecycle operations. |

Troubleshooting

| Topic | URL | |-------|-----| | Run AKS Arc diagnostic checker for cluster failures | https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-arc-diagnostic-checker | | Resolve AKS Arc Kubernetes image not ready issues | https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-arc-image-not-ready | | Work around known AKS Hybrid and Edge issues | https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-arc-known-issues | | Validate and troubleshoot AKS Edge secret encryption | https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-howto-secret-encryption | | Collect and use AKS Edge Essentials logs for troubleshooting | https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-resources-logs | | Troubleshoot common AKS Edge Essentials issues | https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-troubleshoot-overview | | Collect and analyze kubelet logs on AKS Hybrid nodes | https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-get-kubelet-logs | | Troubleshoot common issues in AKS Hybrid and Edge | https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-troubleshoot | | Known issues and workarounds for AKS Hybrid and Edge on VMware | https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-vmware-known-issues | | Troubleshoot and request support for AKS Hybrid and Edge on VMware | https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-vmware-support-troubleshoot | | Use troubleshooting guide for AKS Arc on VMware errors | https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-vmware-troubleshooting-guide | | Fix AKS cluster creation failures after Azure Local upgrade | https://learn.microsoft.com/en-us/azure/aks/aksarc/cluster-create-fails-after-azure-local-upgrade | | Fix K8s