CLOUD OPERATIONS / Microsoft
AKS Automatic Readiness
Pins Microsoft's AKS Automatic readiness skill, which assesses a cluster or local manifests without changing the cluster and writes files only after an accepted diff.
“Assess Kubernetes workloads and cluster configuration for AKS Automatic compatibility. Identifies incompatibilities, generates fixes, and guides migration from AKS Standard to AKS Automatic. WHEN: migrate to AKS Automatic, check AKS Automatic readiness, validate manifests for Automatic, assess cluster for Automatic compatibility, fix deployment for Automatic compatibility, identify AKS Automatic migration blockers, is my cluster ready for AKS Automatic.”
01 / THE REASONING
Why this made the selection.
- The first guardrail says the assessment never modifies cluster state and names kubectl apply and az aks update as forbidden.
- Secret and ConfigMap values are withheld, and a local manifest write waits for an explicit acceptance of the diff.
02 / THE REVIEW RECORD
What we actually inspected.
Source review has boundaries.
A clear record is more useful than a “safe” badge.
Material inspected
- .github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-automatic-readiness/SKILL.md
- .github/plugins/azure-skills/README.md
- README.md
- LICENSE
Our findings
- Guardrail 1 says the assessment is read-only and not to run kubectl apply, az aks update, or any other command that changes the cluster.
- Guardrail 2 says not to transmit or display Secret data, ConfigMap data values, secretKeyRef values, service account tokens, or connection strings.
- Local file edits are presented as diffs, and both a single fix and a fix-all batch wait for explicit approval before any write.
- It says not to guess an image tag, and it says migration to Automatic is a new cluster plus a workload move rather than an in-place Standard to Automatic change.
Not established by this review
- The resource was not executed and its tools were not called.
- kubectl, jq, and the Azure MCP reads were not run.
- The bundled constraint spec and sanitizer script were not fetched.
- Not executed: it was not installed or run.
The review applies to the material and revision named here. A newer upstream release can change its behavior.
03 / PUT IT TO WORK
Add a skill to your workflow.
DOCUMENTED COMMAND
/plugin install azure@skillsCopying does not execute this command. It may retrieve a newer version than the reviewed source.
- The repository README tells Copilot CLI to add the microsoft/skills marketplace and then run /plugin install azure@skills.
- That command installs the Azure plugin group named in the README table, not this skill file by itself.
- The azure-skills plugin README instead prints /plugin marketplace add microsoft/azure-skills and /plugin install azure@azure-skills. This review did not resolve that second marketplace name.
Before you start
- Node.js 22 or later, which the plugin README requires for the Azure MCP server
- Azure authentication by Azure CLI login, service-principal environment variables, or managed identity, as the plugin README lists
- A host that can run the Copilot CLI plugin slash command
04 / FOLLOW THE EVIDENCE
The source trail.
Our notes are separate from the original resource.
Check upstream before adopting a new version.
https://github.com/microsoft/skills/blob/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-automatic-readiness/SKILL.md
Supports: read-only cluster rule, secret redaction, and diff approval before file writes
- Repository README ↗Checked
https://github.com/microsoft/skills/blob/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/README.md
Supports: MIT licence heading and the azure plugin install line
- Azure plugin README ↗Checked
https://github.com/microsoft/skills/blob/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/.github/plugins/azure-skills/README.md
Supports: Azure authentication options, Node.js 22, and a different plugin install line
- Repository LICENSE ↗Checked
https://github.com/microsoft/skills/blob/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/LICENSE
Supports: MIT License, copyright Microsoft Corporation
https://raw.githubusercontent.com/microsoft/skills/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-automatic-readiness/SKILL.md
Supports: upstreamDescription, bestFor, review.reviewedAt, review.notTested