Setting the file. One moment.
Skill 04 · AKS Network Capture
Subchapter 4.1
references/capture-authorization.mdMarkdown1 KBView on GitHub
Selecting packet capture or asking where packets drop is not approval to create resources. Before setup, capture, generated traffic, a debug container, or retrieval:
az aks showIf direct pod exec fails, stop and present the pinned ephemeral debug container
as a separate decision. Use --allow-debug-container (Bash) or
-AllowDebugContainer (PowerShell) only after approval; never escalate
automatically.
Retrieve and delete only resources carrying the exact capture run ID. Report cleanup failures rather than widening deletion to other capture resources.
Sources: AKS support policies (opens in a new tab) and Kubernetes ephemeral-container debugging (opens in a new tab).