Azure Kubernetes Service
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
2,772 questions
1 answer
AKS agentpool scaling is stuck for over 4 hours. Node count remains 9 instead of 10, with no error shown.
AKS agentpool scaling has been stuck for more than 4 hours. The target node count is 10, but the current node count remains 9. The cluster operation status shows Succeeded, while the agentpool provisioning state remains Scaling. Activity Log shows no…
Azure Kubernetes Service
asked 2026-07-16T11:52:41.4666667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(19.2, 46%, 11%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMU%3C/text%3E%3C/svg%3E)
Muzammil - Unicorn lab
0
Reputation points
answered 2026-07-17T09:29:59.4166667+00:00
Christos Panagiotidis
1,601
Reputation points
2 answers
k8s-device-plugin fails to complete after automatic upgrade of node image to 202607.02.0
We have a azure kubernetes cluster running kubernetes version 1.34.8 We have a nodepool running Standard_NV18ads_A10_v5 VM size The node image version is AKSUbuntu-2204gen2containerd-__2026__07.02.0. It was automatically upgraded over the…
Azure Kubernetes Service
Azure Kubernetes Service
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
2,772 questions
asked 2026-07-13T13:18:44.73+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(140.8, 82%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERS%3C/text%3E%3C/svg%3E)
Ryszard Sikora
0
Reputation points
commented 2026-07-16T01:55:51.29+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(12.8, 76%, 11%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EV%3C/text%3E%3C/svg%3E)
VarunTha
15,005
Reputation points Microsoft External Staff
Moderator
1 answer
How to configure my AKS network setup in a enterprise zero trust private environment
Good day, For my enterprise company I am creating a design for a to be developed AKS platform setup. I'm having trouble to figure out what the best practices from Microsoft are for my setup. The context is as follows: Enterprise setup, more than 100+…
Azure Kubernetes Service
Azure Kubernetes Service
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
2,772 questions
asked 2026-07-15T06:39:29.6133333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(214.4, 94%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EYB%3C/text%3E%3C/svg%3E)
Yang, Bin Bin
0
Reputation points
answered 2026-07-15T07:28:50.49+00:00
Christos Panagiotidis
1,601
Reputation points
1 answer
AKS Node configuration mismatch
Summary: AKS system nodepool in persistent Failed provisioning state with corrupted metadata. Nodepool has disappeared from az aks nodepool list but underlying VMs and nodes are still running and healthy. Symptoms: - Nodepool "system" shows…
Azure Kubernetes Service
Azure Kubernetes Service
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
2,772 questions
asked 2026-07-08T13:45:17.58+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(272, 11%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDP%3C/text%3E%3C/svg%3E)
David Poor
0
Reputation points
answered 2026-07-14T07:56:36.3066667+00:00
Alex Burlachenko
24,545
Reputation points MVP
Volunteer Moderator
2 answers
AKS cluster auto-upgrade did not execute during scheduled maintenance window
Service: Azure Kubernetes Service Impacted Resource: /subscriptions/2e165671-918f-427f-8e13-3ec8e39812e6/resourceGroups/rg-infra-r-westus3-tst/providers/Microsoft.ContainerService/managedClusters/clu-r-usw3-tst Description: Our AKS cluster clu-r-usw3-tst…
Azure Kubernetes Service
Azure Kubernetes Service
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
2,772 questions
asked 2026-06-10T21:27:06.46+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(25.6, 25%, 12%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EYY%3C/text%3E%3C/svg%3E)
Ying Yang
0
Reputation points Microsoft Employee
commented 2026-07-10T13:23:17.4566667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(54.400000000000006, 73%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAN%3C/text%3E%3C/svg%3E)
Anusree Nashetty
6,555
Reputation points Microsoft External Staff
Moderator
2 answers
AZURE AKS mounted disk go in readonly
We have some issues with zone redundant disk in our Azure AKS cluster. There are moment and we expect that Microsoft is doing some maintenance where the disk are fall in read only mode on the nodes. The disk is not writable anymore for us in the pod. …
Azure Kubernetes Service
Azure Kubernetes Service
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
2,772 questions
asked 2026-07-06T18:50:12.4666667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(227.2, 30%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESD%3C/text%3E%3C/svg%3E)
Seth Daemen
0
Reputation points
commented 2026-07-10T04:23:57.2133333+00:00
Jose Benjamin Solis Nolasco
9,626
Reputation points
Volunteer Moderator
2 answers
My private AKS cluster and my VM both are in the same VNET, but in different subnets. But I am not able to view full list of pods even after logged in using right credentials having full Kubernetes access
My private AKS cluster and my VM both are in the same VNET, but in different subnets. But I am not able to view full list of pods even after logged in using right credentials having full Kubernetes access. Using Azure portal, the cluster shows all…
Azure Kubernetes Service
Azure Kubernetes Service
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
2,772 questions
asked 2026-06-17T12:08:29.96+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(169.60000000000002, 66%, 26%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EC%3C/text%3E%3C/svg%3E)
cargobuddy
20
Reputation points
commented 2026-07-08T12:30:39.86+00:00
Anusree Nashetty
6,555
Reputation points Microsoft External Staff
Moderator
2 answers
AKS agent pool never provisions nodes — cluster stuck in "Creating", node resource group (MC_*) stays empty with no error, across all regions and SKUs
Summary On a sponsored Azure subscription, every AKS managed cluster I create brings up the control plane (powerState = Running, valid API server FQDN) but the system node-pool VMSS is NEVER created. The managed/node resource group (MC_*) stays…
Azure Kubernetes Service
Azure Kubernetes Service
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
2,772 questions
asked 2026-06-27T09:44:10.56+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(227.2, 44%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EHH%3C/text%3E%3C/svg%3E)
Hansen Huang
0
Reputation points
commented 2026-07-07T01:02:46.6933333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(195.2, 52%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMA%3C/text%3E%3C/svg%3E)
Manasa Akula
770
Reputation points Microsoft External Staff
Moderator
1 answer
WHat will be the DR strategy for AKS based solution
WHat will be the DR strategy for AKS based solution, provide the architecture diagram for it.
Azure Kubernetes Service
Azure Kubernetes Service
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
2,772 questions
asked 2026-07-06T12:47:32.4333333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(3.2, 43%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
azuretech
0
Reputation points
answered 2026-07-06T13:18:50.7466667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(291.2, 38%, 38%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMP%3C/text%3E%3C/svg%3E)
Marcin Policht
96,670
Reputation points MVP
Volunteer Moderator
2 answers
Azure Kubernetes Service's node show "Node is not ready"
I am using Azure Kubernetest Service for awhile with several node and sever deployment I mainly use vmszie Standard D2as_v5 ( 2core, 8RAM, no temp disk). Recently I found an issue realating to one of my deployment. Whenever this deployment deploy a pod…
Azure Kubernetes Service
Azure Kubernetes Service
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
2,772 questions
asked 2026-07-04T20:40:20.95+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(96, 69%, 19%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ELX%3C/text%3E%3C/svg%3E)
Le Xuan Chien
20
Reputation points
answered 2026-07-06T08:08:10.89+00:00
Le Xuan Chien
20
Reputation points
1 answer
Will Azure Key Vault certificate renewal automatically update the Kubernetes TLS secret used by AKS Ingress?
Hi Team, We have a wildcard TLS certificate stored in Azure Key Vault. The certificate is currently in an Issued state, has Auto-Renew enabled, and is valid until 31 August 2026. Our AKS clusters are not directly referencing the certificate from Azure…
Azure Kubernetes Service
Azure Kubernetes Service
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
2,772 questions
asked 2026-07-05T15:14:59.65+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(156.8, 74%, 25%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDR%3C/text%3E%3C/svg%3E)
Dhanushree R
40
Reputation points
answered 2026-07-05T16:12:49.3933333+00:00
Jerald Felix
17,305
Reputation points
Volunteer Moderator
3 answers
Azure Pricing Calculator not listing AKS available instance SKUs
Azure Pricing Calculator doesn't seem to reflect latest supported instance SKUs hence unavailable to select v6 instance SKUs. Any reason for this?
Azure Kubernetes Service
Azure Kubernetes Service
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
2,772 questions
asked 2026-07-03T07:45:32.49+00:00
CHUNSIK KIM
1
Reputation point Microsoft Employee
answered 2026-07-03T12:09:14.63+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(268.8, 19%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESL%3C/text%3E%3C/svg%3E)
Sujitha Lakkireddy
5
Reputation points Microsoft External Staff
Moderator
3 answers
How should I allow Argo Workflow pods egress to the Kubernetes API in a NetworkPolicy, and can the API endpoint change?
We run Argo Workflows in a namespace with a default-deny egress NetworkPolicy. The workflow pod needs to post to workflowtaskresults on the Kubernetes API, but it fails with a transient connection error when trying to reach the API server. I’m trying to…
Azure Kubernetes Service
Azure Kubernetes Service
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
2,772 questions
asked 2026-05-21T21:55:33.2+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(259.20000000000005, 21%, 35%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAR%3C/text%3E%3C/svg%3E)
Anusha Rao
20
Reputation points
commented 2026-07-02T20:26:41.5166667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(249.60000000000002, 21%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMD%3C/text%3E%3C/svg%3E)
Manish Deshpande
7,770
Reputation points Microsoft External Staff
Moderator
1 answer
One of the answers was accepted by the question author.
AKS AGIC App Gateway backend pool limit for 100+ apps
For AKS ingress I am using Application gateway ingress controller (AGIC). I want to host more than 100 java applications in AKS using AGIC as ingress. As per my understanding each backend service will create backend pools and backend settings in AppGW.…
Azure Kubernetes Service
Azure Kubernetes Service
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
2,772 questions
asked 2026-06-26T12:10:29.21+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(288, 60%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ELP%3C/text%3E%3C/svg%3E)
Laha, Prithwish
25
Reputation points
accepted 2026-07-02T07:22:02.5033333+00:00
Laha, Prithwish
25
Reputation points
1 answer
Application routing add on Gateway API implementation Limitation Query
I am exploring Application routing add on Gateway API implementation for AKS ingress solution. I want to implement end to end TLS on traffic (Client <-> Gateway API <-> k8s backend service/Application Pods). The documentation states below…
Azure Kubernetes Service
Azure Kubernetes Service
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
2,772 questions
asked 2026-06-29T13:24:42.36+00:00
Laha, Prithwish
25
Reputation points
commented 2026-06-30T13:47:32.37+00:00
Alex Burlachenko
24,545
Reputation points MVP
Volunteer Moderator
3 answers
One of the answers was accepted by the question author.
Who provides OS-level support for Ubuntu worker nodes in AKS (Microsoft vs Canonical)?
What we’re trying to confirm: Does Microsoft provide full support for the Ubuntu OS layer on AKS nodes, including: -Kernel issues -OS-level vulnerabilities -FIPS-enabled node images Is Canonical ever a required support path for AKS environments, or is…
Azure Kubernetes Service
Azure Kubernetes Service
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
2,772 questions
asked 2026-06-17T13:35:58.4566667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(233.6, 77%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERS%3C/text%3E%3C/svg%3E)
Ryan Smith
20
Reputation points
accepted 2026-06-29T11:11:57.6133333+00:00
Ryan Smith
20
Reputation points
1 answer
I am facing the issue while creating a NAP node pool through Azure portal
Every time I try to create a new NAP pool, I am getting the error that the name is already taken, please choose a different name. No matter what name I use. I have already enabled Karpenter in my AKS cluster using the portal. But what next to do after…
Azure Kubernetes Service
Azure Kubernetes Service
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
2,772 questions
asked 2026-06-17T11:43:25.4466667+00:00
cargobuddy
20
Reputation points
commented 2026-06-27T18:08:25.59+00:00
Manish Deshpande
7,770
Reputation points Microsoft External Staff
Moderator
1 answer
Rotation of rootCA on AKS manged cluster with microsoft.dapr extension
Rotation of root CA on AKS managed cluster with microsoft.dapr extension is failing. The MSFT version does not exist in a public repository, and you will get an error like this: certificate rotation failed: chart "dapr" version…
Azure Kubernetes Service
Azure Kubernetes Service
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
2,772 questions
asked 2026-02-26T16:59:59.4366667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(252.8, 7.000000000000001%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMR%3C/text%3E%3C/svg%3E)
Milen Rusev Admin
0
Reputation points
commented 2026-06-27T11:54:59.8133333+00:00
Abhishek Sharma
0
Reputation points
2 answers
AKS Cilium hubble local access
I am using Cilium through the Azure CNI overlay. Advanced Container Networking Services are enabled so I have hubble relay. I want to monitor network flows, particularly what cilium is blocking, to help build out policies. Ideally I can do this locally…
Azure Kubernetes Service
Azure Kubernetes Service
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
2,772 questions
asked 2026-01-28T14:06:57.5433333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(304, 14.000000000000002%, 39%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ELR%3C/text%3E%3C/svg%3E)
Luke Rosser
165
Reputation points
answered 2026-06-26T13:12:46.4866667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(48, 79%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJR%3C/text%3E%3C/svg%3E)
Jakub Rudnik
0
Reputation points
1 answer
AKS KMS etcd encryption stuck in RotateAzureKeyVaultKmsKeyError after key version expiry; --disable-azure-keyvault-kms now stuck in ProvisioningControlPlane (prod)
Summary Our production AKS cluster's KMS etcd encryption is stuck. After an Azure Key Vault key version expired and we switched the cluster to a newer version, every 'az aks update --enable-azure-keyvault-kms ... --azure-keyvault-kms-key-id ...'fails…
Azure Kubernetes Service
Azure Kubernetes Service
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
2,772 questions
asked 2026-06-18T04:24:27.09+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(6.4, 19%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPK%3C/text%3E%3C/svg%3E)
Priyanshu Katiyar
0
Reputation points
commented 2026-06-25T11:11:03.36+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(96, 78%, 19%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESI%3C/text%3E%3C/svg%3E)
Staņislavs Barkovskis
0
Reputation points