MicrosoftDocs/azure-aks-docs/articles/aks

Merge pull request #3708 from lzhecheng/add-kms-reconcile-error-note Add troubleshooting note for ReconcileAzureKeyVaultKmsError in enabling steps

Merge pull request #3545 from therealmitchconnors/patch-2 Remove ingress-nginx retirement notice from gateway api guide

Merge pull request #3896 from rahulrai-in/docs/localdns-nap-drift-behavior Clarify LocalDNS change impact on existing NAP nodes (drift, not reimage)

docs: complete the LocalDNS block in the comprehensive example The LocalDNS block in the comprehensive AKSNodeClass example showed only `mode: Disabled` plus a placeholder comment, which isn't applyable as written. The v1beta1 CRD marks both `vnetDNSOverrides` and `kubeDNSOverrides` as `+required` regardless of mode, requires the `.` and `cluster.local` zones in each list, and marks all nine per-zone fields `+required`. Fill in both lists so the example applies cleanly, and note the mode-independent requirement in the surrounding comments. Addresses review feedback on PR #3896. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Update host requirements for AKS flex node

Add AKS desktop Headlamp plugins article (#3815) * Add AKS desktop Headlamp plugins article Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> * Address Headlamp article review feedback Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> * Resolve Headlamp authoring suggestions Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> --------- Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

AKS-MCP article update to match the AKS-MCP release v0.0.20 which is … (#3942) * AKS-MCP article update to match the AKS-MCP release v0.0.20 which is now stdio-only * Update articles/aks/aks-model-context-protocol-server.md Co-authored-by: learn-build-service-prod-07[bot] <274430390+learn-build-service-prod-07[bot]@users.noreply.github.com> * Update articles/aks/aks-model-context-protocol-server.md Co-authored-by: learn-build-service-prod-07[bot] <274430390+learn-build-service-prod-07[bot]@users.noreply.github.com> * Update articles/aks/aks-model-context-protocol-server.md Co-authored-by: learn-build-service-prod-07[bot] <274430390+learn-build-service-prod-07[bot]@users.noreply.github.com> * updated review comments --------- Co-authored-by: learn-build-service-prod-07[bot] <274430390+learn-build-service-prod-07[bot]@users.noreply.github.com>

Remove obsolete pod sandboxing feature registration Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Merge branch 'main' into identity-bindings-ga

Update Windows OS upgrade guidance for Server 2025 migration (#3928) * Update Windows OS upgrade guidance for Server 2025 migration Document the preview CLI path for migrating Windows Server 2022 node pools to Windows Server 2025, including the aks-preview version requirement, Kubernetes minimum, and Gen 2 VM behavior. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Organize Windows OS upgrade doc by migration path Restructure the article headings so the migration workflows are grouped under in-place migration and manual migration sections. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Apply batched suggestions from code review Co-authored-by: learn-build-service-prod-08[bot] <274430765+learn-build-service-prod-08[bot]@users.noreply.github.com> * Clarify Windows OS SKU migration guidance Update general OS version guidance to document the Windows Server 2022 to 2025 preview in-place migration exception and clarify that ACL migration limitations apply to Windows node pools migrating to ACL. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Add Windows Server 2025 migration FAQ Document the supported in-place migration path from Windows Server 2022 to Windows Server 2025 in the Windows FAQ. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Apply suggestion from @allyford * Apply suggestion from @allyford * Apply batched suggestions from code review Co-authored-by: learn-build-service-prod-03[bot] <274428581+learn-build-service-prod-03[bot]@users.noreply.github.com> Co-authored-by: Ally Ford <37671069+allyford@users.noreply.github.com> * Add Windows Server 2025 migration considerations Document FIPS, Generation 2 VM, Kubernetes version, and supported source configuration considerations for in-place Windows Server 2022 to Windows Server 2025 migration. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Clarify Windows in-place migration behavior Clarify that in-place migration uses az aks nodepool update on the existing node pool and triggers an automatic reimage. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Separate Windows migration methods Clarify that in-place migration uses the nodepool update command and manual migration creates a new node pool, with all manual steps nested under the manual migration section. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Trim Windows migration source configuration table Remove unsupported and extra source configuration rows from the Windows Server 2025 in-place migration table. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Remove preview setup steps from Windows migration doc Remove the aks-preview install, update, and version verification instructions from the in-place migration section while keeping the nodepool update command. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Add Windows migration verification step Add a kubectl describe node verification step showing the Windows2025 OS SKU label and Windows Server 2025 node image after in-place migration. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Apply batched suggestions from code review Co-authored-by: learn-build-service-prod-06[bot] <274430002+learn-build-service-prod-06[bot]@users.noreply.github.com> Co-authored-by: Ally Ford <37671069+allyford@users.noreply.github.com> * Bullet single-step procedure --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Co-authored-by: learn-build-service-prod-08[bot] <274430765+learn-build-service-prod-08[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-03[bot] <274428581+learn-build-service-prod-03[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-06[bot] <274430002+learn-build-service-prod-06[bot]@users.noreply.github.com> Co-authored-by: Dennis Rea <v-denrea@microsoft.com>

Update articles/aks/use-network-policies.md Co-authored-by: learn-build-service-prod-06[bot] <274430002+learn-build-service-prod-06[bot]@users.noreply.github.com>

Update articles/aks/use-network-policies.md Co-authored-by: learn-build-service-prod-06[bot] <274430002+learn-build-service-prod-06[bot]@users.noreply.github.com>

Authoring Assistant suggestions

removing NPM for windows from docs as it's deprecated

Apply Authoring Assistant suggestions Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Point AKS Chaos Studio guidance to Chaos Studio Workspaces Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Update unsupported extensions for network isolated clusters Removed supported AKS cluster extensions from the documentation: Azure Backup and Azure App Config

Apply batched suggestions from code review Co-authored-by: learn-build-service-prod-06[bot] <274430002+learn-build-service-prod-06[bot]@users.noreply.github.com>

vn2 (#3747) * vn2 * standard command removal * author * Apply suggestions from code review Co-authored-by: learn-build-service-prod-10[bot] <274431553+learn-build-service-prod-10[bot]@users.noreply.github.com> * update extension table * conventions * vn2 changes * vn2 onboarding changes * Apply batched suggestions from code review learn build suggestions Co-authored-by: learn-build-service-prod-08[bot] <274430765+learn-build-service-prod-08[bot]@users.noreply.github.com> * delete command * mention on vn page * Apply batched suggestions from code review Co-authored-by: learn-build-service-prod-08[bot] <274430765+learn-build-service-prod-08[bot]@users.noreply.github.com> * nits * nits * nits * nits * nits * fill extension table --------- Co-authored-by: learn-build-service-prod-10[bot] <274431553+learn-build-service-prod-10[bot]@users.noreply.github.com> Co-authored-by: learn-build-service-prod-08[bot] <274430765+learn-build-service-prod-08[bot]@users.noreply.github.com>

Merge pull request #3922 from leslielin-5/leslielin/flex-nodes-workdir-guards Flex nodes fast follow: regional availability, agent v0.2.0, and WORK_DIR