Deploy an application as an azure managed application using AKS.

Question

The application was previously deployed as an Azure Managed Application (Using App service). It has now been migrated to Azure Kubernetes Service.

What are the required changes to deploy the AKS-based architecture through the Microsoft Azure Marketplace?

How we can do that?

This includes updating the Managed Application package to provision AKS clusters, configuring container registry integration, managing identities and role assignments, handling networking setup, and defining deployment parameters.

Answer 1

Hello,

Thank you for reaching out to the Q&A forum.

Since your application was originally deployed as an Azure Managed Application using App Service and has now been migrated to Azure Kubernetes Service (AKS), the deployment package used for your Azure Marketplace offer will need to be updated accordingly

Below is a breakdown of the key changes required, along with the relevant documentation for each area.

1. Update the Managed Application Template to Deploy AKS

The primary change is that the Managed Application must now provision the AKS cluster itself as part of the ARM/Bicep template. Previously, the template deployed Microsoft.Web resources (App Service). It must now define Microsoft.ContainerService/managedClusters, node pools, and associated infrastructure components.

Reference: https://learn.microsoft.com/en-us/azure/aks/deploy-marketplace?tabs=azure-portal https://learn.microsoft.com/en-us/azure/templates/microsoft.containerservice/managedclusters?pivots=deployment-language-bicep

2. Configure Container Registry Integration

Since the workload is now containerized, AKS must be able to pull images from a container registry. This typically involves attaching Azure Container Registry (ACR) or allowing an external registry and assigning the AcrPull role to the cluster identity. Without this configuration, deployments may succeed but application pods will fail to start.

Reference: https://learn.microsoft.com/en-us/azure/aks/cluster-container-registry-integration?tabs=azure-cli

3. Define Managed Identity and RBAC Permissions

Unlike App Service, AKS requires explicit declaration of managed identities and role assignments (for example, permissions to access networking, registry, or monitoring resources). These permissions must be included in the Managed Application template because deployments run under a controlled resource group context.

Reference: https://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/overview

4. Declare Networking Configuration Explicitly

Networking must now be clearly parameterized, including the virtual network, subnet configuration, and exposure method (LoadBalancer or Ingress). App Service abstracted this layer, whereas AKS requires deterministic networking definitions to ensure consistent deployment and Marketplace validation.

Reference: https://learn.microsoft.com/en-us/azure/aks/concepts-network

Because the solution is now Kubernetes-based, it should follow the Marketplace guidance for containerized applications and deployment models.

Reference: https://learn.microsoft.com/en-us/partner-center/marketplace-offers/marketplace-containers

Answer 2

Refer to https://learn.microsoft.com/en-us/azure/aks/deploy-marketplace?tabs=azure-portal

Select and deploy a Kubernetes application

From an AKS cluster

In the Azure portal, navigate to your AKS cluster resource.

From the service menu, under Settings, select Extensions + applications > Add.

You can search for an offer or publisher directly by name, or you can browse all offers. To view Kubernetes application offers, select Containers under Categories.

After you decide on an application, select the offer. The following example uses the TrilioVault for Kubernetes - BYOL offer.

Select Plans + Pricing to ensure the terms are acceptable, and then select Create.

Follow each page in the application creation process, filling in information for your resource group, your cluster, and any configuration options that the application requires. You can decide to deploy on a new AKS cluster or use an existing cluster.

Once you've filled in all the required information, select Review + create > Create.

It might take a few minutes for the application to deploy. You can monitor the deployment status from the Extensions + applications page.

Search in the Azure portal

From the Azure portal home page, search for and select Marketplace.

You can search for an offer or publisher directly by name, or you can browse all offers. To find Kubernetes application offers, on the left side under Categories select Containers.

After you decide on an application, select the offer. The following example uses the TrilioVault for Kubernetes - BYOL offer.

Select Plans + Pricing to ensure the terms are acceptable, and then select Create.

Follow each page in the application creation process, filling in information for your resource group, your cluster, and any configuration options that the application requires. You can decide to deploy on a new AKS cluster or use an existing cluster.

Once you've filled in all the required information, select Review + create > Create.

It might take a few minutes for the application to deploy. You can monitor the deployment status from the Extensions + applications page.

Verify the deployment

• Azure portal
• Azure CLI

1. Navigate to the cluster where you recently installed the application.
2. From the service menu, under Settings, select Extensions + applications.
3. Verify that the extension is listed and the Provisioning State shows Succeeded.

Manage the offer lifecycle

For lifecycle management, a Kubernetes offer is represented as a cluster extension for AKS. For more information, see Cluster extensions for AKS. Purchasing an offer from Azure Marketplace creates a new instance of the extension on your AKS cluster.

1. In the Azure portal, navigate to the cluster where you recently installed the application.
2. From the service menu, under Settings, select Extensions + applications.
3. Select an extension name to navigate to a properties view where you're able to disable autoupgrades, check the provisioning state, delete the extension instance, or modify configuration settings as needed.

Monitor billing and usage information

1. In the Azure portal, navigate to your cluster's resource group.
2. From the service menu, under Cost Management, select Cost analysis. Under Product, you can see a cost breakdown for the plan that you selected.

   Select and deploy a Kubernetes application

   From an AKS cluster

   In the Azure portal, navigate to your AKS cluster resource.

     From the service menu, under **Settings**, select **Extensions + applications** > **Add**.
   
        You can search for an offer or publisher directly by name, or you can browse all offers. To view Kubernetes application offers, select **Containers** under **Categories**.
   
           After you decide on an application, select the offer. The following example uses the **TrilioVault for Kubernetes - BYOL** offer.
   
              Select **Plans + Pricing** to ensure the terms are acceptable, and then select **Create**.
   
              [![Screenshot of the offer purchasing page in the Azure portal, showing plan and pricing information.](https://learn.microsoft.com/en-us/azure/aks/media/deploy-marketplace/plans-pricing.png)](https://learn.microsoft.com/en-us/azure/aks/media/deploy-marketplace/plans-pricing.png#lightbox)
   
                 Follow each page in the application creation process, filling in information for your resource group, your cluster, and any configuration options that the application requires. You can decide to deploy on a new AKS cluster or use an existing cluster.
   
                    Once you've filled in all the required information, select **Review + create** > **Create**.
   
                    It might take a few minutes for the application to deploy. You can monitor the deployment status from the **Extensions + applications** page.
   

   Search in the Azure portal

   From the Azure portal home page, search for and select Marketplace.

     You can search for an offer or publisher directly by name, or you can browse all offers. To find Kubernetes application offers, on the left side under **Categories** select **Containers**.
   
        After you decide on an application, select the offer. The following example uses the **TrilioVault for Kubernetes - BYOL** offer.
   
           Select **Plans + Pricing** to ensure the terms are acceptable, and then select **Create**.
   
           [![Screenshot of the offer purchasing page in the Azure portal, showing plan and pricing information.](https://learn.microsoft.com/en-us/azure/aks/media/deploy-marketplace/plans-pricing.png)](https://learn.microsoft.com/en-us/azure/aks/media/deploy-marketplace/plans-pricing.png#lightbox)
   
              Follow each page in the application creation process, filling in information for your resource group, your cluster, and any configuration options that the application requires. You can decide to deploy on a new AKS cluster or use an existing cluster.
   
                 Once you've filled in all the required information, select **Review + create** > **Create**.
   
                 It might take a few minutes for the application to deploy. You can monitor the deployment status from the **Extensions + applications** page.
   

   Verify the deployment

   • Azure portal
     • Azure CLI
       1. Navigate to the cluster where you recently installed the application.
          1. From the service menu, under Settings, select Extensions + applications.
             1. Verify that the extension is listed and the Provisioning State shows Succeeded.

   Manage the offer lifecycle

   For lifecycle management, a Kubernetes offer is represented as a cluster extension for AKS. For more information, see Cluster extensions for AKS. Purchasing an offer from Azure Marketplace creates a new instance of the extension on your AKS cluster.
   1. In the Azure portal, navigate to the cluster where you recently installed the application.
      1. From the service menu, under Settings, select Extensions + applications.
         1. Select an extension name to navigate to a properties view where you're able to disable autoupgrades, check the provisioning state, delete the extension instance, or modify configuration settings as needed.

   Monitor billing and usage information

   1. In the Azure portal, navigate to your cluster's resource group.
   2. From the service menu, under Cost Management, select Cost analysis. Under Product, you can see a cost breakdown for the plan that you selected.

---

If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

hth

Marcin