- Home
- Infrastructure as Code Tools
- Azure Service Operator
On the recordRead 11 Oct 202621 facts
Azure Service Operator
On the record
- Application configuration
- It can manage Azure resources alongside a Kubernetes application and configure the application to use them, such as a Redis cache or PostgreSQL server.azure.github.io · read 11 Oct 2026
- Authentication
- ASO authenticates with Azure using an identity or service principal, and the project recommends Azure Workload Identity for production use.azure.github.io · read 11 Oct 2026
- Azure lifecycle
- ASO models Azure resource lifecycle using Kubernetes garbage collection through ownership references.azure.github.io · read 11 Oct 2026
- Deletion behavior
- Deleting an ASO resource from the cluster also deletes its corresponding Azure resource unless the documented skip-reconcile annotation is applied first.azure.github.io · read 11 Oct 2026
- GitOps integrations
- The security guide recommends tools such as Argo CD or Flux to review changes to ASO custom resources before applying them.azure.github.io · read 11 Oct 2026
- Installation
- The project identifies Helm as its preferred installation and management method and also documents installation from release YAML.azure.github.io · read 11 Oct 2026
- Integrations
- The project recommends using ArgoCD or Flux to review changes to ASO custom resources before they are merged and applied.azure.github.io · read 10 Oct 2026
- Intended users
- ASO is aimed at users who want to manage Azure resources with Kubernetes tooling and primitives such as kubectl apply.github.com · read 10 Oct 2026
- Kubernetes interface
- ASO provides Kubernetes custom resource definitions and Go API structures for deploying and managing Azure resources.azure.github.io · read 11 Oct 2026
- Prerequisites
- Getting started requires a Kubernetes cluster version 1.32 or later and an Azure subscription.azure.github.io · read 11 Oct 2026
- Project status
- The project describes itself as stable and says it follows the Kubernetes definition of stable.azure.github.io · read 11 Oct 2026
- Purpose
- Azure Service Operator lets users deploy and maintain Azure resources from within a Kubernetes cluster using Kubernetes tooling.azure.github.io · read 11 Oct 2026
- Reconciliation
- ASO uses asynchronous reconciliation and does not block while Azure resources are created.azure.github.io · read 11 Oct 2026
- Resource coverage
- ASO v2 supports more than 150 Azure resources, with more added in each release.azure.github.io · read 10 Oct 2026
- Resource lifecycle
- ASO models Azure resource lifecycle through Kubernetes garbage collection and ownership references.azure.github.io · read 10 Oct 2026
- Security controls
- The security guide recommends controlling installed CRDs, Azure identities and permissions, and Kubernetes identities and permissions.azure.github.io · read 11 Oct 2026
- Security guidance
- The project recommends Azure Workload Identity, namespace-scoped credentials, least-privilege Azure roles, and installing only needed CRDs.azure.github.io · read 10 Oct 2026
- Security limit
- The security guide warns that the RoleAssignment CRD can enable privilege escalation if used carelessly.azure.github.io · read 10 Oct 2026
