Voir en action
AKS CSE: exact signature, verification and documented fix
Complete original CSE signature table. A bare VMExtensionProvisioningError or number is insufficient; all signatures require AKS vmssCSE context. Verification is read-only and not run; fixes require approval.
Exemple de résultat
The outer `VMExtensionProvisioningError` or a number alone is insufficient; a
numeric exit requires AKS `vmssCSE`/CSE context.
| Signature | Cause | Verify, then documented fix | Microsoft Learn |
|---|---|---|---|
| `VMExtensionError_OutboundConnFail`, `ERR_OUTBOUND_CONN_FAIL`, or exit **50** | CSE cannot reach endpoints needed for node packages | Test `mcr.microsoft.com:443`; inspect firewall, proxy, NSG, UDR, and AKS egress rules; correct the blocking path | [OutboundConnFail](https://learn.microsoft.com/troubleshoot/azure/azure-kubernetes/error-codes/vmextensionerror-outboundconnfail) |
| `VMExtensionError_K8SAPIServerConnFail`, `ERR_K8S_API_SERVER_CONN_FAIL`, or exit **51** | Node cannot reach the API server on TCP 443 | Test the API FQDN on 443; inspect NSG, UDR, firewall/proxy, authorized IPs, private endpoint, and TLS inspection; correct the failing path | [APIServerConnFail](https://learn.microsoft.com/troubleshoot/azure/azure-kubernetes/error-codes/vmextensionerror-k8sapiserverconnfail) |
| `VMExtensionError_K8SAPIServerDNSLookupFail`, `ERR_K8S_API_SERVER_DNS_LOOKUP_FAIL`, or exit **52** | Node cannot resolve the API-server FQDN | Resolve the FQDN and inspect DNS port 53, forwarders, and private-zone records/links; correct DNS | [APIServerDNSLookupFail](https://learn.microsoft.com/troubleshoot/azure/azure-kubernetes/error-codes/vmextensionerror-k8sapiserverdnslookupfail) |Licence
Complete selected author section retained verbatim; surrounding chapter omitted. Source placeholders and limitations preserved. No cloud action, source installer, account sign-in, model, command or API execution. This is an author recipe/illustration, not a reproduced site result.
MIT License
Copyright 2025 (c) Microsoft Corporation.
Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:
The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWAREMode d’emploi
- Copiez la commande et examinez le paquet avant de l’installer dans votre environnement agent.
- Consultez le document original pour les outils, identifiants et environnements requis.
- Décrivez les entrées et le livrable souhaité ; comparez la sortie aux sources.
npx skills add https://github.com/microsoft/azure-skills --skill aks-known-issuesAvant de commencer
- L’installation n’inclut ni abonnement au modèle, ni quota API, ni accès aux fichiers.
- Étoiles et installations reflètent l’activité, pas un test indépendant de qualité ou de sécurité.
Rendu depuis le dépôt source en conservant titres, exemples, code, tableaux, liens et images.
AKS Known Issues
Quick Reference
| Property | Value |
|---|---|
| Best for | Exact signature plus AKS operation |
| Output | Cause, fix, and Learn citation |
Use the catalog.
When to Use This Skill
Named catalog signatures only. Generic AKS → aks-troubleshooting; non-AKS → no AKS skill.
If every qualifier for a catalog row is not present, do not use this skill. This catalog has no quota-error rows; route AKS quota incidents to aks-troubleshooting.
MCP Tools
None required. Use advertised read-only Azure tools or CLI queries.
Workflow
- Capture exact code, nested message, operation, and AKS resource.
- Require every qualifier; codes are not substrings.
- Give cause, fix, citation, and read-only verification.
- State what ran; require explicit approval before every mutation.
Error Handling
| Input | Response |
|---|---|
| Bare wrapper/number | Request nested signature and CSE context |
| Generic AKS | aks-troubleshooting |
| Non-AKS | No AKS skill |



