Azure Kubernetes Service

Azure Kubernetes Service
Name	Azure Kubernetes Service
Developer	Microsoft
Released	2018
Operating system	Linux, Windows
Programming language	Go
License	Proprietary

Azure Kubernetes Service

Azure Kubernetes Service is a managed container orchestration platform provided by Microsoft for deploying, scaling, and managing containerized applications. It integrates services across Microsoft's cloud portfolio and interoperates with projects and vendors in the cloud native ecosystem to support modern application delivery and microservices patterns.

Overview

Azure Kubernetes Service provides a hosted control plane and automated management features that simplify running Kubernetes clusters on Microsoft Azure. It builds on open-source projects such as containerd, etcd, Prometheus, Helm (software), and Envoy (software) while integrating with Microsoft offerings like Azure Active Directory, Azure Virtual Network, Azure Monitor, and Azure DevOps. AKS aims to reduce operational overhead compared with self-managed Kubernetes installations and to support hybrid scenarios alongside Azure Arc and partnerships with vendors including Red Hat, Canonical (company), and VMware, Inc..

Features

AKS includes features for automated cluster lifecycle management, including node scaling, upgrade orchestration, and integration with CI/CD pipelines such as GitHub Actions, Jenkins (software), and Azure Pipelines. It supports workload scheduling using native Kubernetes constructs, service discovery with CoreDNS, ingress with NGINX or Traefik, and service mesh patterns via Istio or Linkerd. Observability is provided through integrations with Prometheus, Grafana, and Azure Monitor, while logging can be routed to Log Analytics Workspace or third-party platforms such as Splunk and Datadog. Networking features include support for Calico, Cilium, and Azure CNI, enabling network policy enforcement and advanced routing.

Architecture and Components

The AKS architecture separates a managed control plane hosted by Microsoft Azure from customer-managed worker nodes provisioned in a user's subscription. The control plane components—API server, controller manager, scheduler, and etcd—are maintained by Microsoft. Worker nodes run kubelet and container runtimes such as containerd or Docker (software), and can be provisioned using Virtual Machine Scale Sets or Azure Spot Virtual Machines. Storage integrates with Azure Disk Storage and Azure Files, while persistent volumes are exposed via the Container Storage Interface and drivers from partners like NetApp and Pure Storage. Authentication and authorization leverage Azure Active Directory and Role-Based Access Control mechanisms, and identity features extend to Managed Identities for Azure resources and integrations with HashiCorp Vault.

Deployment and Management

Clusters can be created and managed via the Azure CLI, the Azure Portal, or infrastructure-as-code tools such as Terraform (software), Pulumi, and ARM templates. Continuous deployment patterns leverage Helm (software), Kustomize, or GitOps tooling like Flux (software) and Argo CD. Upgrades are coordinated with Microsoft's supported Kubernetes release cycle and can be automated or scheduled to align with organizational change controls employed by entities such as National Health Service (England), Deutsche Bank, or Walmart. Backup and restore solutions integrate with vendors including Velero and Veeam to protect persistent state and cluster configuration.

Security and Compliance

AKS supports cluster hardening through features like role-based access control with Azure Active Directory, network policy enforcement via Calico or Azure Policy, and image scanning tools from Aqua Security, Twistlock (Palo Alto Networks), and Qualys. It enables encryption at rest with Azure Key Vault for secrets management and uses Azure Security Center (now Microsoft Defender for Cloud) for posture management and threat detection. Compliance certifications applicable to AKS deployments include standards such as ISO 27001, SOC 2, PCI DSS, and frameworks relevant to public sector organizations like FedRAMP and EU GDPR depending on region and configuration.

Pricing and Licensing

AKS control plane management is provided without an explicit charge for standard clusters, while compute, storage, networking, and ancillary services incur fees within Microsoft Azure's consumption-based billing model. Advanced features, support, and enterprise offerings may involve subscriptions such as Azure Support Plans or third-party marketplace solutions from vendors like Red Hat or SUSE. Cost optimization strategies include using Azure Reserved Virtual Machine Instances, Azure Spot Virtual Machines, right-sizing with the Cluster Autoscaler, and integrating with financial governance tools such as Azure Cost Management.

Adoption and Use Cases

AKS is adopted by organizations across industries for scenarios including microservices platforms for companies like Adobe, batch and HPC workloads in Schlumberger and Siemens, CI/CD pipelines for firms such as Accenture, and edge or hybrid deployments coordinated with Azure Stack and Azure Arc. Common use cases encompass modernizing monolithic applications, running data processing pipelines with Apache Spark or Kafka (software project), hosting machine learning inference workloads integrated with Azure Machine Learning, and supporting multi-tenant SaaS platforms deployed by firms like Salesforce partners and independent software vendors.

Category:Microsoft Azure