---
name: Azure AKS Edge Essentials
slug: azure-aks-edge-essentials
category: DevOps
description: Azure AKS Edge Essentials provides guidance for deploying, configuring, troubleshooting, and securing Azure Kubernetes Service Edge Essentials and related hybrid or Arc clusters. Use it for edge and on-prem AKS planning, connectivity, integrations, and lifecycle tasks.
github: "https://github.com/MicrosoftDocs/Agent-Skills/tree/main/skills/azure-aks-edge-essentials"
stars: 715
forks: 116
install: "npx degit https://github.com/MicrosoftDocs/Agent-Skills/tree/main/skills/azure-aks-edge-essentials ~/.claude/skills/azure-aks-edge-essentials"
installs_to: ~/.claude/skills/azure-aks-edge-essentials
source_path: skills/azure-aks-edge-essentials/SKILL.md
collection_size: 25
category_size: 798
collection_url: "https://dirskills.com/collections/MicrosoftDocs/Agent-Skills"
added: 2026-08-23T05:20:05.322Z
last_synced: 2026-08-23T05:20:05.322Z
canonical_url: "https://dirskills.com/skills/azure-aks-edge-essentials"
---

# Azure AKS Edge Essentials

Azure AKS Edge Essentials provides guidance for deploying, configuring, troubleshooting, and securing Azure Kubernetes Service Edge Essentials and related hybrid or Arc clusters. Use it for edge and on-prem AKS planning, connectivity, integrations, and lifecycle tasks.

**Install:**

```bash
npx degit https://github.com/MicrosoftDocs/Agent-Skills/tree/main/skills/azure-aks-edge-essentials ~/.claude/skills/azure-aks-edge-essentials
```

## README

# Azure Kubernetes Service Edge Essentials Skill

This skill provides expert guidance for Azure Kubernetes Service Edge Essentials. Covers troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.

## How to Use This Skill

> **IMPORTANT for Agent**: Use the **Category Index** below to locate relevant sections. For categories with line ranges (e.g., `L35-L120`), use `read_file` with the specified lines. For categories with file links (e.g., `[security.md](security.md)`), use `read_file` on the linked reference file

> **IMPORTANT for Agent**: If `metadata.generated_at` is more than 3 months old, suggest the user pull the latest version from the repository. If `mcp_microsoftdocs` tools are not available, suggest the user install it: [Installation Guide](https://github.com/MicrosoftDocs/mcp/blob/main/README.md)

This skill requires **network access** to fetch documentation content:
- **Preferred**: Use `mcp_microsoftdocs:microsoft_docs_fetch` with query string `from=learn-agent-skill`. Returns Markdown.
- **Fallback**: Use `fetch_webpage` with query string `from=learn-agent-skill&accept=text/markdown`. Returns Markdown.

## Category Index

| Category | Lines | Description |
|----------|-------|-------------|
| Troubleshooting | L37-L82 | Diagnosing and fixing AKS Edge/Hybrid/Arc issues: cluster creation/upgrade failures, networking, storage, auth, encryption, logs, VMware/Azure Local problems, and support/repair tools. |
| Best Practices | L83-L91 | Guidance on resilient AKS Edge Essentials setups: availability sets, Azure Policy on Windows Server, restoring AKS Arc after VM failure, and upgrading AKS Arc clusters/Kubernetes versions. |
| Decision Making | L92-L100 | Guidance on AKS Edge/Hybrid deployment choices, pricing/licensing, trials, monitoring/logging options, and planning/operating disconnected or on-premises AKS environments. |
| Architecture & Design Patterns | L101-L107 | Designing AKS on Windows Server for Azure Local: high availability on two-node setups, SDN VNet architectures, and deployment patterns for AKS Arc target clusters. |
| Limits & Quotas | L108-L125 | Limits, system requirements, IP capacity planning, supported versions, and scale/support boundaries for AKS Edge Essentials, AKS on bare metal/VMware/Windows Server, and AKS on Azure Local. |
| Security | L126-L162 | Identity, auth, RBAC, certificates, SSH, key rotation, gMSA, image validation, and other security hardening for AKS Edge/Hybrid/Arc/Azure Local clusters. |
| Configuration | L163-L255 | Configuring AKS Edge/Hybrid/Arc clusters: networking, storage, load balancers, autoscaling, GPU, proxies, Arc connectivity, monitoring/logging, offline/upgrade flows, and PowerShell/CLI settings. |
| Integrations & Coding Patterns | L256-L309 | Integrations, APIs, and PowerShell for connecting AKS Edge/Hybrid to Arc, IoT/OPC/ONVIF, TPM, storage/backup, metrics, AI models, CSI plugins, and Key Vault secrets. |
| Deployment | L310-L348 | Deploying, managing, upgrading, and removing AKS Edge/AKS hybrid/AKS Arc clusters and node pools, including Windows nodes, offline images, preview channels, and PowerShell-based lifecycle operations |

### Troubleshooting
| Topic | URL |
|-------|-----|
| Run AKS Arc diagnostic checker for cluster failures | https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-arc-diagnostic-checker |
| Resolve AKS Arc Kubernetes image not ready issues | https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-arc-image-not-ready |
| Work around known AKS Hybrid and Edge issues | https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-arc-known-issues |
| Validate and troubleshoot AKS Edge secret encryption | https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-howto-secret-encryption |
| Collect and use AKS Edge Essentials logs for troubleshooting | https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-resources-logs |
| Troubleshoot common AKS Edge Essentials issues | https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-troubleshoot-overview |
| Collect and analyze kubelet logs on AKS Hybrid nodes | https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-get-kubelet-logs |
| Troubleshoot common issues in AKS Hybrid and Edge | https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-troubleshoot |
| Known issues and workarounds for AKS Hybrid and Edge on VMware | https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-vmware-known-issues |
| Troubleshoot and request support for AKS Hybrid and Edge on VMware | https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-vmware-support-troubleshoot |
| Use troubleshooting guide for AKS Arc on VMware errors | https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-vmware-troubleshooting-guide |
| Fix AKS cluster creation failures after Azure Local upgrade | https://learn.microsoft.com/en-us/azure/aks/aksarc/cluster-create-fails-after-azure-local-upgrade |
| Resolve K8sVersionValidation errors for AKS on Azure Local | https://learn.microsoft.com/en-us/azure/aks/aksarc/cluster-k8s-version |
| Recover AKS Hybrid cluster unhealthy after upgrade | https://learn.microsoft.com/en-us/azure/aks/aksarc/cluster-unhealthy-after-kubernetes-upgrade |
| Unstick AKS Hybrid cluster upgrades stuck in Upgrading state | https://learn.microsoft.com/en-us/azure/aks/aksarc/cluster-upgrade-status |
| Troubleshoot BGP with FRR and MetalLB in AKS Arc | https://learn.microsoft.com/en-us/azure/aks/aksarc/connectivity-troubleshoot |
| Resolve AKS control plane configuration validation errors | https://learn.microsoft.com/en-us/azure/aks/aksarc/control-plane-validation-errors |
| Clean up undeleted PodDisruptionBudget resources after AKS cluster deletion | https://learn.microsoft.com/en-us/azure/aks/aksarc/delete-cluster-pdb |
| Mitigate AKS Hybrid issues after storage volume deletion | https://learn.microsoft.com/en-us/azure/aks/aksarc/delete-storage-volume |
| Remove deleted AKS Hybrid clusters still visible in portal | https://learn.microsoft.com/en-us/azure/aks/aksarc/deleted-cluster-visible |
| Monitor and troubleshoot etcd secret encryption in AKS Arc | https://learn.microsoft.com/en-us/azure/aks/aksarc/encrypt-secrets |
| Fix repeated Entra auth prompts with kubectl RBAC | https://learn.microsoft.com/en-us/azure/aks/aksarc/entra-prompts |
| Fix AKS on Azure Local image download failures for cluster operations | https://learn.microsoft.com/en-us/azure/aks/aksarc/gallery-image-not-usable |
| Collect on-demand diagnostic logs for AKS Arc | https://learn.microsoft.com/en-us/azure/aks/aksarc/get-on-demand-logs |
| Fix GPU-enabled AKS Arc cluster creation failures | https://learn.microsoft.com/en-us/azure/aks/aksarc/gpu-enabled-cluster-issue |
| Diagnose and fix 'MOC unreachable' errors for AKS on Azure Local | https://learn.microsoft.com/en-us/azure/aks/aksarc/infrastructure-operation-failures |
| Fix kube-apiserver unreachable errors from Arc Resource Bridge | https://learn.microsoft.com/en-us/azure/aks/aksarc/kube-api-server-unreachable |
| Resolve control plane disk exhaustion from kube-apiserver audit logs | https://learn.microsoft.com/en-us/azure/aks/aksarc/kube-apiserver-log-overflow |
| Monitor Kubernetes object events in AKS Arc | https://learn.microsoft.com/en-us/azure/aks/aksarc/kubernetes-monitor-object-events |
| Fix .local domain network validation error in AKS Arc | https://learn.microsoft.com/en-us/azure/aks/aksarc/network-validation-error-local |
| Troubleshoot AKS Arc network validation errors | https://learn.microsoft.com/en-us/azure/aks/aksarc/network-validation-errors |
| Diagnose and auto-repair unhealthy AKS Arc nodes | https://learn.microsoft.com/en-us/azure/aks/aksarc/node-repair |
| Repair AKS Edge KMS plugin with PowerShell | https://learn.microsoft.com/en-us/azure/aks/aksarc/reference/aks-edge-ps/repair-aksedgekms |
| Collect AKS hybrid PowerShell module event logs | https://learn.microsoft.com/en-us/azure/aks/aksarc/reference/ps/get-akshcieventlog |
| Collect AKS hybrid pod logs into zip archive | https://learn.microsoft.com/en-us/azure/aks/aksarc/reference/ps/get-akshcilogs |
| Repair AKS hybrid host certificates with Repair-AksHciCerts | https://learn.microsoft.com/en-us/azure/aks/aksarc/reference/ps/repair-akshcicerts |
| Repair AKS hybrid cluster certificates with Repair-AksHciClusterCerts | https://learn.microsoft.com/en-us/azure/aks/aksarc/reference/ps/repair-akshciclustercerts |
| Resolve AKS Hybrid storage provisioning and disk space issues | https://learn.microsoft.com/en-us/azure/aks/aksarc/storage-provision-issue |
| Use Support.AksArc PowerShell module for diagnostics | https://learn.microsoft.com/en-us/azure/aks/aksarc/support-module |
| Troubleshoot high resource usage by AKS telemetry pod | https://learn.microsoft.com/en-us/azure/aks/aksarc/telemetry-pod-resources |
| Resolve MetalLB speaker pods blocked by node taints | https://learn.microsoft.com/en-us/azure/aks/aksarc/troubleshoot-metallb-speaker-taint |
| Find troubleshooting guides for AKS on Windows Server | https://learn.microsoft.com/en-us/azure/aks/aksarc/troubleshoot-overview |

### Best Practices
| Topic | URL |
|-------|-----|
| Use availability sets to improve AKS workload resilience | https://learn.microsoft.com/en-us/azure/aks/aksarc/availability-sets |
| Apply Azure policy best practices to AKS on Windows Server | https://learn.microsoft.com/en-us/azure/aks/aksarc/policy-guidance |
| Restore AKS Arc clusters after management VM failure | https://learn.microsoft.com/en-us/azure/aks/aksarc/restore-aks-cluster |
| Upgrade AKS Arc workload clusters with PowerShell | https://learn.microsoft.com/en-us/azure/aks/aksarc/upgrade |
| Upgrade AKS Arc Kubernetes version via Admin Center | https://learn.microsoft.com/en-us/azure/aks/aksarc/upgrade-kubernetes |

### Decision Making
| Topic | URL |
|-------|-----|
| Understand AKS Edge Essentials pricing and licensing options | https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-pricing |
| Choose monitoring and logging options for AKS Hybrid | https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-monitor-logging |
| Choose between AKS cloud, edge, and on-premises | https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-platforms-compare |
| Plan and manage disconnected AKS on Azure Local | https://learn.microsoft.com/en-us/azure/aks/aksarc/disconnected-operations-aks |
| Evaluate AKS on Windows Server pricing and trials | https://learn.microsoft.com/en-us/azure/aks/aksarc/pricing |

### Architecture & Design Patterns
| Topic | URL |
|-------|-----|
| Understand AKS on Windows Server availability on two-node Azure Local | https://learn.microsoft.com/en-us/azure/aks/aksarc/deploy-cluster-on-two-node-hci |
| Deploy AKS Arc target clusters across SDN VNets | https://learn.microsoft.com/en-us/azure/aks/aksarc/deploy-target-clusters-virtual-networks |
| Architect AKS on Windows Server with SDN virtual networking | https://learn.microsoft.com/en-us/azure/aks/aksarc/software-defined-networking |

### Limits & Quotas
| Topic | URL |
|-------|-----|
| Understand preview limitations for AKS on bare metal | https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-bare-metal-preview-limitations |
| Check system requirements for AKS on bare metal | https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-bare-metal-system-requirements |
| Check system requirements for AKS Edge Essentials hosts | https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-system-requirements |
| Plan IP address capacity for AKS Hybrid and Edge | https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-hci-ip-address-planning |
| Understand AKS on Azure Local support limits | https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-on-azure-local-support-policy |
| Cluster and node pool scale limits for AKS VMware | https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-vmware-scale-requirements |
| System requirements and support matrix for AKS VMware | https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-vmware-system-requirements |
| Track AKS Hybrid and Edge release changes | https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-whats-new-local |
| Review tested resource limits and VM sizes for AKS on Windows Server | https://learn.microsoft.com/en-us/azure/aks/aksarc/concepts-support |
| Plan AKS Arc multi-rack IP address capacity | https://learn.microsoft.com/en-us/azure/aks/aksarc/multi-rack/plan-aks-ip-address |
| Check AKS on Azure Local multi-rack scale limits | https://learn.microsoft.com/en-us/azure/aks/aksarc/multi-rack/scale-requirements |
| AKS on Azure Local cluster and node pool scale limits | https://learn.microsoft.com/en-us/azure/aks/aksarc/scale-requirements |
| Support policies and limitations for AKS on Windows Server | https://learn.microsoft.com/en-us/azure/aks/aksarc/support-policies |
| Check supported Kubernetes versions for AKS Arc clusters | https://learn.microsoft.com/en-us/azure/aks/aksarc/supported-kubernetes-versions |

### Security
| Topic | URL |
|-------|-----|
| Configure AD single sign-on to AKS Arc API server | https://learn.microsoft.com/en-us/azure/aks/aksarc/ad-sso |
| Use Key Manager to rotate AKS Edge service account keys | https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-howto-key-manager |
| Configure workload identity on AKS Edge Essentials | https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-workload-identity |
| Retrieve certificate-based admin kubeconfig for AKS VMware | https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-vmware-retrieve-kubeconfig |
| Set up Azure RBAC authorization for AKS Arc clusters | https://learn.microsoft.com/en-us/azure/aks/aksarc/azure-rbac-aks-hybrid |
| Use Azure RBAC to control kubeconfig access in AKS Arc | https://learn.microsoft.com/en-us/azure/aks/aksarc/azure-rbac-local |
| Manage certificates for secure communication in AKS on Windows Server | https://learn.microsoft.com/en-us/azure/aks/aksarc/certificates-overview |
| Apply security concepts for AKS on Windows Server clusters | https://learn.microsoft.com/en-us/azure/aks/aksarc/concepts-security |
| Configure SSH key access for AKS Hybrid clusters | https://learn.microsoft.com/en-us/azure/aks/aksarc/configure-ssh-keys |
| Implement container security in AKS on Windows Server | https://learn.microsoft.com/en-us/azure/aks/aksarc/container-security |
| Enable Microsoft Entra authentication for AKS Hybrid and Edge | https://learn.microsoft.com/en-us/azure/aks/aksarc/enable-authentication-microsoft-entra-id |
| Encrypt Kubernetes etcd secrets in AKS on Azure Local | https://learn.microsoft.com/en-us/azure/aks/aksarc/encrypt-etcd-secrets |
| Control AKS Arc access with Entra ID and Kubernetes RBAC | https://learn.microsoft.com/en-us/azure/aks/aksarc/kubernetes-rbac-entra-id |
| Configure Kubernetes RBAC with Microsoft Entra ID in AKS Arc | https://learn.microsoft.com/en-us/azure/aks/aksarc/kubernetes-rbac-local |
| Configure access and identity for AKS on Azure Local | https://learn.microsoft.com/en-us/azure/aks/aksarc/multi-rack/concepts-security-access-identity |
| Configure Azure RBAC for AKS on Azure Local multi-rack | https://learn.microsoft.com/en-us/azure/aks/aksarc/multi-rack/use-azure-rbac |
| Configure gMSA-based AD authentication for AKS Windows containers | https://learn.microsoft.com/en-us/azure/aks/aksarc/prepare-windows-nodes-gmsa |
| Add gMSA credential spec for AKS hybrid | https://learn.microsoft.com/en-us/azure/aks/aksarc/reference/ps/add-akshcigmsacredentialspec |
| Enable AKS hybrid Active Directory auth with Install-AksHciAdAuth | https://learn.microsoft.com/en-us/azure/aks/aksarc/reference/ps/install-akshciadauth |
| Install gMSA webhook addon on AKS hybrid with Install-AksHciGmsaWebhook | https://learn.microsoft.com/en-us/azure/aks/aksarc/reference/ps/install-akshcigmsawebhook |
| Rotate AKS hybrid cloud agent CA certificates with Invoke-AksHciRotateCACertificate | https://learn.microsoft.com/en-us/azure/aks/aksarc/reference/ps/invoke-akshcirotatecacertificate |
| Create AKS hybrid SSH configurations with New-AksHciSSHConfiguration | https://learn.microsoft.com/en-us/azure/aks/aksarc/reference/ps/new-akshcisshconfiguration |
| Delete AKS hybrid gMSA credential specs with Remove-AksHciGmsaCredentialSpec | https://learn.microsoft.com/en-us/azure/aks/aksarc/reference/ps/remove-akshcigmsacredentialspec |
| Restrict SSH access to AKS Hybrid virtual machines | https://learn.microsoft.com/en-us/azure/aks/aksarc/restrict-ssh-access |
| Restrict SSH access to AKS Windows Server nodes | https://learn.microsoft.com/en-us/azure/aks/aksarc/restrict-ssh-access-22h2 |
| Review AKS Arc security bulletins and mitigations | https://learn.microsoft.com/en-us/azure/aks/aksarc/security-bulletins |
| Configure multiple administrators for AKS on Windows Server | https://learn.microsoft.com/en-us/azure/aks/aksarc/set-multiple-administrators |
| SSH into Windows and Linux AKS Hybrid nodes | https://learn.microsoft.com/en-us/azure/aks/aksarc/ssh-connect-to-windows-and-linux-worker-nodes |
| Securely connect to AKS Arc nodes using SSH | https://learn.microsoft.com/en-us/azure/aks/aksarc/ssh-connection |
| Configure trusted certificate bundles for AKS Arc hosts | https://learn.microsoft.com/en-us/azure/aks/aksarc/update-certificate-bundle |
| Manage infrastructure and Kubernetes certificates in AKS Arc | https://learn.microsoft.com/en-us/azure/aks/aksarc/update-certificates |
| Validate signed container images in AKS on Azure Local | https://learn.microsoft.com/en-us/azure/aks/aksarc/validate-signed-container-images |
| Configure workload identity on AKS Hybrid clusters | https://learn.microsoft.com/en-us/azure/aks/aksarc/workload-identity |

### Configuration
| Topic | URL |
|-------|-----|
| Meet system and storage requirements for AKS on Azure Local | https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-arc-local-requirements |
| Configure node taints for AKS Arc clusters | https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-arc-use-node-taints |
| Configure AKS on bare metal cluster via ARM template | https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-bare-metal-create-cluster-arm-template |
| Define AKS on bare metal clusters using Bicep | https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-bare-metal-create-cluster-bicep |
| Configure networking for AKS Edge Essentials clusters | https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-concept-networking |
| Configure AKS Edge Essentials via aksedge-config.json | https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-deployment-config-json |
| Enable GPU acceleration in AKS Edge Essentials | https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-gpu |
| Connect AKS Edge Essentials clusters to Azure Arc | https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-howto-connect-to-arc |
| Expose Kubernetes services on AKS Edge Essentials | https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-howto-expose-service |
| Advanced AKS Edge Essentials configuration and scripts | https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-howto-more-configs |
| Configure multiple NICs for AKS Edge Essentials Linux nodes | https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-howto-multi-nic |
| Configure AKS Edge Essentials for offline installation | https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-howto-offline-install |
| Prepare and configure machines for AKS Edge Essentials | https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-howto-setup-machine |
| Configure nested virtualization for AKS Edge Essentials | https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-howto-setup-nested-environment |
| Uninstall AKS Edge Essentials from host machines | https://learn.microsoft.com/en-us/azure/aks/aksarc/aks-edge-howto-uninstall |
| U