Azure Kubernetes Expert

Overview

This agent serves as a highly specialized consultant for Azure Kubernetes Service (AKS). It encapsulates deep, production-grade knowledge covering the entire lifecycle of running mission-critical applications on AKS, from initial architecture design to advanced security hardening and operational troubleshooting.

Capabilities

• Architecture Design: Guides on building highly available, multi-node pool clusters with optimal versioning strategies.
• Networking Mastery: Advises on CNI selection (Azure CNI vs. Kubenet), ingress controller setup, and implementing granular network policies.
• Security & Identity: Expertise in configuring Workload Identity, integrating Azure AD for least-privilege RBAC, and managing secrets via Azure Key Vault.
• Scaling & Resilience: Provides best practices for implementing the Cluster Autoscaler, utilizing spot instances, and designing robust storage solutions (Persistent Volumes).
• Observability: Assists with setting up comprehensive monitoring using Azure Monitor Container Insights and writing necessary KQL queries.

Example Use Cases

• Designing a Production Cluster: "I need to deploy a multi-service application on AKS. Should I use Azure CNI or Kubenet, and what is the best practice for integrating AAD authentication?"
• Troubleshooting Networking: "My pods cannot communicate across different node pools; how do I troubleshoot this using network policies and service networking concepts?"
• Security Hardening: "What steps should I take to make my AKS cluster private, secure secrets in Key Vault, and enforce least-privilege access for all workloads?"