Failed to delete loadbalancer: stale cross-subscription references
Issue: Unable to delete AKS managed resource group due to stale VMSS references Details: Cross-subscription reference preventing load balancer deletion Impact: Blocking Container Apps deployment due to IP conflict Can you please delete the resource…
Azure Kubernetes Service
How to enable Microsoft Defender for Container on one cluster instead of whole subscription
Hi, I am trying to enable Microsoft Defender for Container on a specific AKS cluster instead of the whole subscription. I do not want to enable it on the whole subscription. I also tried to auto fix it under the recommendation "Azure Kubernetes…
Azure Kubernetes Service
Microsoft Security Microsoft Defender Microsoft Defender for Cloud
KEDA Cold Start Request Failures in AKS
Using AKS with KEDA and the HTTP add-on for auto-scaling to zero is resulting in cold start request failures. Upon hitting a cold start request, KEDA successfully scales the pod from 0 to 1, but the request experiences a context cancellation after…
Azure Kubernetes Service
I'm unable to add my public IP address under the "Authorized IP ranges" section in the Networking tab of the AKS service (Public access). I believe I should be able to add my public IP, but I'm encountering an issue
I'm unable to add my public IP address under the "Authorized IP ranges" section in the Networking tab of the AKS service (Public access). I believe I should be able to add my public IP, but I'm encountering an issue. Could you please advise on…
Azure Kubernetes Service
Istio on Azure AKS Confidential Computing Nodes
I'm trying to setup Istio on Azure AKS Confidential Computing Nodes. I have deployed confidential computing node pool using instructions from https://learn.microsoft.com/en-us/azure/aks/deploy-confidential-containers-default-policy. I checked the…
Azure Kubernetes Service
I am getting error : " MountVolume.SetUp failed for volume "secrets-store01-inline" : kubernetes.io/csi: mounter.SetUpAt failed to get CSI client: driver name secrets-store.csi.k8s.io not found in the list of registered CSI drivers"
I have installed drivers and providers in my aks . All pods are running on all the nodes . I updated client id , tenant id and key vault details properly in my secretproviderclass yaml file . But i am facing issue with driver . MountVolume.SetUp failed…
Azure Kubernetes Service
Packet dropping in jitsi videobridge (UDP) running in kubernetes behind an AKS LB
We're getting package dropping every 10 minutes or so. There's no direct relationship with load, as it has failed more with less load, and we've exactly the same setup as we had 4 days ago working with no issues, so we don't know if it's something we can…
Azure Kubernetes Service
After installation of ALB controller as part of Application Gateway for Containers, alb controller bootstrap pod not available
After installation of ALB controller as part of Application Gateway for Containers, alb controller bootstrap pod not available
Azure Kubernetes Service
AKS Scaling Issue
Auto Scaling in AKS cluster is timing out due to rate limits in API. Need help in solving it or increase limit.
Azure Kubernetes Service
How to fix Azure Machine Learning extension deployment in AKS?
I ran the below command in Azure cloud shell: az k8s-extension create --name test-ml-extension --extension-type Microsoft.AzureML.Kubernetes --config enableInference=True allowInsecureConnections=True inferenceRouterServiceType=LoadBalancer…
Azure Kubernetes Service
AKS Ingress LB Ports 80/443 Closed - Health Probes Fail Despite Healthy Pods & Correct NSG Rules
Hello, We are facing a critical issue on our AKS cluster where our NGINX Ingress Controller's public IP is unreachable on ports 80 and 443. This is blocking all inbound traffic and preventing cert-manager from completing http-01 challenges. We have…
Azure Kubernetes Service
What could be the reason for the difference in the boot time of my PodVMs?
Hello, I am currently facing some issues trying to explain a concept in my experiments. I am using AKS and CoCo (https://github.com/confidential-containers) to deploy some PodVMs. In my scenario, I create a job manifest that should create 30 PodVMs…
Azure Kubernetes Service
AKS 1.25.6 Cluster — Blocked Upgrade Path Due to Missing Intermediate Versions (Central India)
Hi Team, We have an AKS cluster in Central India region that is currently on Kubernetes version 1.25.6. When attempting to upgrade, we find that only 1.30.x versions are offered (az aks get-upgrades). No intermediate versions (1.26.x, 1.27.x, 1.28.x,…
Azure Kubernetes Service
The request did not have a subscription or a valid tenant level resource provider.
When i trying to run command az ad sp create-for-rbac --role="Contributor" --scopes="/subscription/<<Subscription ID>>" I am getting error as (MissingSubscription) The request did not have a subscription or a valid tenant…
Azure Role-based access control
Azure Kubernetes Service
Microsoft Security Microsoft Entra Microsoft Entra ID

Is receiving prometheus KubeClientErrors alerts a sign of an unhealthy AKS cluster?
Following setup: AKS cluster, version 1.30.10 Deployment of kube-prometheus-stack (https://github.com/prometheus-community/helm-charts/tree/main/charts/kube-prometheus-stack), version 57.2.0 with enabled Alertmanager deployment and default rule set…
Azure Kubernetes Service
Run C program compiled as DLL in AKS POD
Hi Team, Currently we have a customer running application in C program compiled as dll's and hosted the apps into Windows 2016 server in their on-prem data center. Now we have to migrate the apps into Azure cloud. Customer prefer to deploy this apps into…
Azure Kubernetes Service
Keda not getting enabled through ARM template
I am able to enable keda from the portal but unable to enable it through ARM template. Not sure if my apiVersion is incorrect. Getting this error on deployment: ERROR:…
Azure Kubernetes Service
Azure Blob NFS managed identity
We are using azure blob nfs for storage class and pvc. Here we are facing some authorization issues with default identity when it is trying to create container. We can give permission to the default identity and hopefully fix that. But in azure is there…
Azure Kubernetes Service
AKS Node - Disk used metric
Hi team, I need to understand if the metric for AKS node disk used percentage in InsightsMetrics table in Log analytics is the following: Origin: container.azm.ms/telegraf Namespace:container.azm.ms/disk Name: used_percent There is a confusion because…
Azure Kubernetes Service
KS v1.33 — Manual OS Patch Process, Ubuntu 24.04 Node Image Support, and Node Upgrade Options for Critical Vulnerabilities
Hi team, We are running an AKS cluster on Kubernetes version 1.33, and we have a few critical concerns related to node-level security patching and node image upgrades. After referring to AKS release notes and node image upgrade guidance, I wanted to…