What is the support policy for a Linux container image running on AKS when an OS-related problem occurs?

Yamamoto, Tsubasa/山本 翼 40 Reputation points
2023-01-13T01:29:06.7433333+00:00

[Background] I am considering making our company products that run on Linux in an on-premises environment into a container image and running it on AKS.

So I would like to know about the Linux OS image support policy on AKS.

https://learn.microsoft.com/en-us/answers/questions/1016638/container-image-types-supported-by-aks

The above QA states that OCI compliant container images are supported, but I'm not sure about the level of support in case of trouble.


[Question] What kind of OS container image can I receive commercial support (Investigation of cause of trouble, presentation of workarounds, etc.) if I have trouble caused by OS in a container while running on AKS?

What kind of OS container image, version, and combination with the host OS (OS on which Kubernetes is installed)?

I checked the contents of the following site, but I could not find any clear information.


[Note]

My understanding is that the OS system calls from the container run on the host OS where Kubernetes is installed.

Therefore, if an OS-related problem occurs in a container, I think it is required to investigate the problem on the host OS.

So I would like to know the OS container image supported by AKS.

Azure Kubernetes Service (AKS)
Azure Kubernetes Service (AKS)
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
2,232 questions
0 comments No comments
{count} votes

Accepted answer
  1. Andrei Barbu 2,591 Reputation points Microsoft Employee
    2023-01-13T08:45:54.5433333+00:00

    Hello Yamamoto!

    I understand you are asking what kind of commercial support (Investigation of cause of trouble, presentation of workarounds, etc.) if you have trouble caused by OS in a container while running on AKS. Please let me know if my understanding is not correct.

    As per this, we understand AKS is not Platform-as-a-Service (PaaS) solution. Basically, if you would need help with the OS container image and that image is not AKS managed, you will not receive support. If you would report an issue for the OS of the AKS node/VM, then support is provided in that case.

    Let's take the following example where I am running a pod with a container with "redhat/ubi8" image from Docker Hub on an AKS Ubuntu node. For the container OS (Red Hat), there will be no support, but for the OS of the node (Ubuntu), AKS provides support.
    User's image

    Please note that there is also Microsoft Container Registry (MCR) and for that one, I think there is some sort of support, but not from AKS team specifically (unless the image is AKS managed). If you are interested to use an image from MCR for your app and you want to know if there is support for MCR images, just let me know and I can try to explore more and get back to you.

    Please "Accept as Answer" and Upvote if it helped, so that it can help others in the community looking for help on similar topics.

    Thank you!

    1 person found this answer helpful.

1 additional answer

Sort by: Most helpful
  1. Andrei Barbu 2,591 Reputation points Microsoft Employee
    2023-01-13T07:24:12.21+00:00

    Hello Yamamoto!

    I understand you are asking what kind of commercial support (Investigation of cause of trouble, presentation of workarounds, etc.) if you have trouble caused by OS in a container while running on AKS. Please let me know if my understanding is not correct.

    As per this, we understand AKS is NOT Platform-as-a-Service (PaaS) solution and some components, like agent nodes, have shared responsibility.

    For the container OS image you run your application, AKS doesn't provide any support. The support for AKS is as an infrastructure platform. If you would report an issue with the host OS (the OS of the AKS nodes/VMs, which at this moment is Ubuntu or Mariner), then support will be provided for this. Same thing applies if you are reporting an issue with the Container Runtime, which as per this, is supported by Microsoft.

    Let's take the following example where I am running a pod with a container with image "redhat/ubi8" from Docker Hub on an AKS Ubuntu 18.04 node. From AKS, you will NOT receive support for the image OS, which is Red Hat, but you will receive for the node OS, which is Ubuntu:
    User's image

    However, if you would use a base image from Microsoft Container Registry (MCR), I think you would receive support for mcr images themselves, but not from AKS. If you are interested about support of base images from MCR that you can use for your app, for example [https://mcr.microsoft.com/en-us/product/cbl-mariner/base/core/about, let me know and I can try to get this information for you.

    Please "Accept as Answer" and Upvote if it helped, so that it can help others in the community looking for help on similar topics.

    Thank you!

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.