Azure Kubernetes Service: Cloud Kubernetes Ledger

Part of the Managed Cloud Kubernetes Ledger (edition 2026-10-13). How the scores work: methodology.

1. Snapshot

Tier: Hyperscaler
Owner: Microsoft Corporation (listed, profitable)
Licence model: Free tier with no control-plane fee; Standard $0.10 per cluster-hour; Premium adds LTS ($0.60 meter); AKS Automatic $0.16 per cluster-hour plus node meters
Products scored: AKS Standard and Automatic clusters, LTS, Fleet Manager, add-ons and extensions
Latest release: Kubernetes 1.36 GA in release 2026-06-19, 58 days after upstream; 1.37 in preview since 2026-09-04
Next signal: 1.37 GA planned for October 2026; roadmap ETAs: pod subnet dual-stack November 2026, Ubuntu 26.04 January 2027
Archetype: Open roadmap, free entry
Evidence grade: A. Weekly release notes, roadmap issues with edit history, version calendar, Azure update snapshots, MSRC and NVD records were opened; compliance scope, region counts and partner data were not re-verified.

2. Scorecard

Dimension	Score	Direction
Capability today	86.8 / 100	higher is better
Momentum since end of 2022	+16.0 points	higher is better
Credibility	22.0 / 25	higher is better
Commercial risk	6.5 / 25	lower is better
Technical lock-in	9.5 / 25	lower is better
Integrator fit	17.0 / 20	higher is better
AI leverage	13.5 / 20	higher is better
Ledger Index	80.8 / 100	balanced weights

3. Capability by domain

Scores 0 to 5 against fixed anchors; total is weighted to 100.

Domain (weight)	2016	2019	2022	Today
Versions, upgrades and support (12)	n/a	2	3.5	4.5
Nodes, autoscaling and compute choice (12)	n/a	3.5	4	4.5
Networking (10)	n/a	3	3.5	4.5
Storage and data protection (8)	n/a	2	3.5	4.5
Security and compliance (12)	n/a	2.5	4.5	4
Observability and day-2 operations (8)	n/a	2	3	4.5
Multi-cluster, hybrid and fleet (10)	n/a	1	3	4.5
Developer and app platform (8)	n/a	2	3.5	4.5
GPU and AI workloads (10)	n/a	2	3.5	4
Regions, sovereignty and SLA (10)	n/a	2	3	4
Total / 100	not released	44.8	70.8	86.8

Year by year: 2018: 39.4 · 2019: 44.8 · 2020: 53.8 · 2021: 59.4 · 2022: 70.8 · 2023: 81.2 · 2024: 85.0 · 2025: 89.2 · 2026: 86.8

What moved the score

Year	Domain	Change	Points	Trigger
2019	Developer and app platform	1.5 → 2	+0.8	Azure Dev Spaces
2019	Networking	2.5 → 3	+1.0	Azure and Calico network policy, authorized IP ranges 2019-10-28
2019	Nodes, autoscaling and compute choice	2 → 3.5	+3.6	Multiple node pools, cluster autoscaler and zones GA 2019-10-28
2020	Networking	3 → 3.5	+1.0	Private clusters GA 2020-03-09
2020	Nodes, autoscaling and compute choice	3.5 → 4	+1.2	Windows nodes GA 2020-04-27, Spot pools 2020-10-26
2020	Regions, sovereignty and SLA	2 → 3	+2.0	Optional uptime SLA, 99.95% with zones; Azure Government and China
2020	Security and compliance	2.5 → 3.5	+2.4	Managed identity 2020-03-16, managed Azure AD 2020-07-27, Azure Policy add-on 2020-09-21, private clusters
2020	Versions, upgrades and support	2 → 3	+2.4	Max surge upgrades GA 2020-11-16; auto-upgrade channels
2021	Multi-cluster, hybrid and fleet	1 → 3	+4.0	Azure Arc-enabled Kubernetes and AKS on Azure Stack HCI
2021	Storage and data protection	2 → 3	+1.6	Disk and Files CSI drivers GA 2021-07-15
2022	Developer and app platform	2 → 3.5	+2.4	Cluster extensions GA 2022-05-22 with Flux GitOps and Dapr
2022	GPU and AI workloads	2 → 3.5	+3.0	Multi-instance GPU GA 2022-09-11, A100 and InfiniBand sizes
2022	Observability and day-2 operations	2 → 3	+1.6	Advisor deprecated-API alerts, release tracker 2022-06-05
2022	Security and compliance	3.5 → 4.5	+2.4	Defender agent 2022-07-10, KMS etcd encryption 2022-07-31, confidential VM pools 2022-10-10
2022	Storage and data protection	3 → 3.5	+0.8	Blob CSI object storage GA 2022-11-06
2022	Versions, upgrades and support	3 → 3.5	+1.2	Alias minor versions 2022-05-22; lag about 100 days
2023	Developer and app platform	3.5 → 4	+0.8	Kubernetes Apps marketplace 2023-05-28, KEDA add-on
2023	Multi-cluster, hybrid and fleet	3 → 4	+2.0	Fleet Manager GA 2023-11-15 with update orchestration
2023	Networking	3.5 → 4	+1.0	Azure CNI Overlay and Cilium eBPF dataplane GA 2023
2023	Observability and day-2 operations	3 → 4	+1.6	Managed Prometheus GA 2023-05-28 with Managed Grafana
2023	Regions, sovereignty and SLA	3 → 3.5	+1.0	Standard tier with SLA 2023-02-05
2023	Security and compliance	4.5 → 5	+1.2	Workload identity GA 2023-04-09 and Azure Linux 2023-05-28
2023	Storage and data protection	3.5 → 4.5	+1.6	Azure Backup for AKS GA 2023-11-22; vaulted and cross-region restore 2024
2023	Versions, upgrades and support	3.5 → 4	+1.2	LTS from 1.27 (2023-04), planned maintenance 2023-08-20, node OS channel, stop on breaking API changes
2024	GPU and AI workloads	3.5 → 4	+1.0	Capacity reservation groups 2024-02-07; GPU health monitoring 2025-09; DRA not available
2024	Multi-cluster, hybrid and fleet	4 → 4.5	+1.0	Fleet workload placement GA 2024-05-13; staged rollouts 2026-10-05; multi-cluster L7 load balancing still on the roadmap
2024	Networking	4 → 4.5	+1.0	Managed Istio 2024-02-26, dual-stack Overlay 2024-04-11, Advanced Container Networking 2024-10-25; Gateway API 2026-07-10; no multi-cluster L7
2024	Observability and day-2 operations	4 → 4.5	+0.8	Cost analysis per namespace GA 2024-03-31; GPU health monitoring 2025-09-21
2025	Developer and app platform	4 → 4.5	+0.8	Automated Deployments 2024-05-13 and AKS Automatic 2025-08-29
2025	Nodes, autoscaling and compute choice	4 → 4.5	+1.2	Node auto-provisioning on Karpenter GA 2025-07-20 and AKS Automatic 2025-08-29; no bare-metal nodes
2025	Regions, sovereignty and SLA	3.5 → 4	+1.0	Pod readiness SLA and sovereign-cloud features; EU Data Boundary not re-verified
2025	Versions, upgrades and support	4 → 4.5	+1.2	LTS for every version from 2025-07 (24 months); node pool rollback 2026-08-07; median lag still 90 days
2026	Security and compliance	5 → 4	-2.4	Minus 1.0: WireServing 2024-08 and CVE-2026-33105, -56163, -50516 fixed by Microsoft in AKS itself

4. Direction, 2023 to 2026

Each item carries one theme and one driver (V vision, C customer need, M market window, U upstream, P portfolio).

Date	Item	Theme	Driver
2023-04	LTS for 1.27 in a Premium tier	D1 Versions and lifecycle	P
2023-04	Workload identity GA	D9 Security	C
2023-05	Azure CNI powered by Cilium GA	D4 Networking	U
2023-11	Azure Backup for AKS GA	D5 Storage and data protection	C
2023-11	Fleet Manager GA	D3 Fleet and hybrid	V
2024-02	Managed Istio add-on GA	D4 Networking	C
2024-03	Cost analysis GA	D8 Observability and operations	C
2025-04	Copilot in Azure for AKS GA	D7 AI-assisted operations	M
2025-07	LTS for every version	D1 Versions and lifecycle	C
2025-07	Node auto-provisioning GA	D2 Compute and autoscaling	U
2025-08	AKS Automatic GA	D2 Compute and autoscaling	V
2025-08	AKS-MCP server and agentic CLI previews	D7 AI-assisted operations	M
2025-10	AKS Automatic control-plane fee	D12 Packaging and pricing	P
2026-07	Managed Gateway API GA	D4 Networking	U
2026-08	Node pool rollback GA	D1 Versions and lifecycle	C

Centre of gravity: Versions and lifecycle (3), Networking (3), AI-assisted operations (2)
Driver mix: Vision 13%, Customer need 40%, Market window 13%, Upstream 20%, Portfolio 13%

5. Credibility: 22 / 25

Criterion	Score	Basis
Cadence	5	Weekly dated release notes since 2019, version calendar and release tracker
Roadmap transparency	5	Public roadmap issues with a stated GA ETA and visible edit history
Say-do	3	13 of 21 resolved promises GA within 12 months; only 6 of 12 dated ETAs held; Overlay dual-stack for Windows slipped six times
Velocity	5	Several GA features a month in 2025 and 2026
Lifecycle stability	4	12 months community support, 24 months with paid LTS, rollback; platform-initiated upgrades after a 60-day grace period

Say-do record, 2023 to 2026: Roadmap issues with GA ETAs 2024 to 2026: 12 resolved, 10 GA within 12 months, 6 on the first stated date, 1 dropped (host port), 2 overdue; previews without dates: 3 of 9 GA within 12 months (AKS Automatic 15 months, NAP 19.5, Artifact Streaming 32).

6. Commercial risk: 6.5 / 25 (lower is better)

Criterion	Score	Basis
Price and licence volatility	2.5	Standard tier 2023, LTS meter 2023, AKS Automatic $0.16 control-plane fee 2025-10; unexplained $0.05 Free-tier meter from 2026-10-01
Purchase constraints	0.5	Free control-plane tier, pay as you go
Channel and access	0.5	Self-service, public docs and pricing, worldwide regions
Owner stability	0.5	Microsoft, stable and profitable
Cost of staying supported	2.5	12 months community support; staying longer needs Premium LTS at $0.60 per cluster-hour; platform-initiated upgrades

Security record of the product itself: WireServing (Mandiant, 2024-08-19, fixed by Microsoft); CVE-2026-33105 (2026-04-02) and CVE-2026-56163 (2026-07-23) fully mitigated by Microsoft; CVE-2026-50516 (2026-08-11, NVD). Adjustment capped at minus 1.0.

7. Technical lock-in: 9.5 / 25 (lower is better)

Criterion	Score	Basis
Formats	1.5	Conformant Kubernetes; Automatic and NAP node classes are provider-specific but workloads use standard APIs
Export path	2	Egress waived only when leaving Azure completely; Velero works; Azure Backup restores within Azure
Stack coupling	3	Entra ID, workload identity, Azure CNI, Azure load balancers and Azure storage classes are the default path
Hardware / cloud coupling	1.5	First-party hybrid through AKS on Azure Local and Arc-enabled Kubernetes
Skills and tooling coupling	1.5	kubectl, az CLI, Bicep or Terraform

8. Integrator fit: 17 / 20

Criterion	Score	Basis
Partner programme openness	4	Microsoft AI Cloud Partner Program with a Kubernetes specialisation; partner count not re-verified
Multi-tenancy and self-service	4	Management groups and subscriptions, Fleet Manager, managed namespaces
API and infrastructure-as-code	5	Official azurerm Terraform provider, Bicep and ARM, Cluster API provider for Azure, SDKs
Skills and certification	4	Large Azure practitioner pool and certifications; no AKS-specific certificate

9. AI leverage: 13.5 / 20

Strand	Today	Latest step
AI workload support	3	2026: Artifact Streaming GA 2026-07-17 for large images; DRA still only proposed
AI platform stack	4	2025: KAITO add-on GA (date not confirmed, about 2025) for model inference and fine-tuning
AI-assisted operations	3.5	2025: Copilot in Azure incl. AKS GA 2025-04-06; agentic CLI in preview since 2025-08
Agent openness	3	2025: Official AKS-MCP server in public preview 2025-08-08, read-only by default

AI say-do: 4 items; GPU health GA on its stated date, KAITO GA late, AKS-MCP server and agentic CLI still preview after 14 months; AKS adds KAITO model serving and a portal assistant, the acting agent is not GA.

10. Reading

AKS is building toward hands-off clusters (Automatic, node auto-provisioning) and fleet-level operations. The record shows a very open roadmap with dated ETAs, but many ETAs slip and big previews take more than a year to reach GA, and 2024 to 2026 brought several provider-side security flaws. A buyer gets a free entry tier, deep Azure integration and LTS, with slower version uptake than EKS.

11. Open questions and evidence caveats

Four provider-side flaws disclosed 2024 to 2026 (WireServing, three 2026 AKS CVEs); all fixed by Microsoft, two rated CVSS 10.
Retail prices API lists a $0.05/hr Free-tier meter from 2026-10-01 with no announcement found; check before relying on a free control plane.
Roadmap issues are sometimes closed by a stale bot, so closure is not always GA; GA dates here come from release notes or staff comments.
Platform-wide Azure incidents (2023-01 WAN, 2024-07 and 2025-10 Front Door, 2026-07 West US) affected access to AKS and its dependencies.
KAITO add-on GA date and the LTS GA announcement rest on search snippets; compliance scope not re-verified.