Edit

Share via

Announcing the 3-year retirement of AKS enabled by Azure Arc on Windows Server based platforms

Azure Kubernetes Service enabled by Azure Arc (AKS Arc) is a managed Kubernetes service that you can use to deploy and manage containerized applications on-premises, in datacenters, or at edge locations. It enables you to use familiar tools such as the Azure portal, Azure CLI, Azure Resource Manager, and Bicep and Terraform templates to create and manage your Kubernetes clusters running on different infrastructure platforms. Microsoft continues to focus on delivering consistent user experience for all your AKS Arc clusters. To continue ensuring Azure remains the best possible experience with the highest standards of safety and reliability, we are retiring the current architecture of AKS enabled by Azure Arc on all versions of Windows Server, including AKS Arc on Windows Server 2019 and on Windows Server 2022, in 3 years, on March 27, 2028.

Important

This also implies that AKS enabled by Azure Arc will not be available on Windows Server 2025. Plan your migration to AKS Arc on Azure Local to ensure continued support and updates.

What is AKS enabled by Azure Arc on Azure Local?

AKS enabled by Azure Arc on Azure Local uses Azure Arc to create new Kubernetes clusters on Azure Local directly from Azure. Since clusters are automatically connected to Azure Arc when they're created, you can use your Microsoft Entra ID for connecting to your clusters from anywhere. This ensures your developers and application operators can provision and configure Kubernetes clusters in accordance with company policies.

The following Kubernetes cluster deployment and management capabilities are available:

  • Pricing: AKS Arc is now included in Azure Local pricing, effective January 2025. This means that you only need to pay for Azure Local.
  • Simplified infrastructure deployment on Azure Local. Infrastructure components of AKS Arc like Arc Resource Bridge, Custom Location and the Kubernetes Extension for the AKS Arc operator, are all deployed as part of the Azure Local. The whole lifecycle management of AKS Arc infrastructure follows the same approach as the other components on Azure Local.
  • Cloud-based management: Create and manage Kubernetes clusters on Azure Local with familiar tools such as the Azure portal, Azure CLI, Azure Resource Manager, and Bicep and Terraform templates.
  • Arc Gateway integration: Deploy AKS Arc clusters with pod-level Arc Proxy and communicate with the Arc gateway, reducing the list of outbound URLs to configure in an isolated network environment.
  • Integration with Entra ID and Azure RBAC: Enable Azure RBAC for Kubernetes while creating AKS Arc clusters. Deploy AKS Arc clusters with workload identity enabled and deploy application pods with the workload identity label to access Microsoft Entra ID protected resources, such as Azure Key Vault.
  • Support for NVIDIA T4: Create Linux node pools in new VM sizes with GPU NVIDIA T4.
  • K8s Audit Logs: Export audit logs and other control plane logs to one or more destinations.
  • Improved certificate management: Shut down AKS Arc clusters for up to 7 days without any certificate expiration issues. Automatically repair certificates, managed by cert-tattoo, that expired when the cluster was shut down.

If you're using Azure Kubernetes Service on Windows Server 2019 or Windows Server 2022

The AKS Arc current architecture on Windows Server 2019 and Windows Server 2022 will be retired on March 27, 2028. Starting on March 27 2028, you no longer get support, security and quality updates for your existing AKS Arc clusters. You also won't be able to deploy, upgrade or scale the current architecture of Azure Kubernetes Service on Windows Server 2019 and Windows Server 2022. Between now and March 2028, we will not add support for any new Windows Server SKUs; for example, Windows Server 2025 is not supported on AKS Arc.

If you're using Azure Kubernetes Service on Azure Local, version 22H2

If you're using AKS Arc on Azure Local, version 22H2, be aware that Azure Local version 22H2 reached its end of service on May 31, 2025. As such, you won't receive monthly security and quality updates that provide protection from the latest security threats. To continue receiving updates, we recommend updating to the latest version of Azure Local.

Deploy AKS Arc on Azure Local

AKS Arc deployments on modern Azure Local are now managed entirely through Azure Resource Manager (ARM). This means administrators must use cloud-based tools such as the Azure CLI (az commands), the Azure portal web interface, or Azure Resource Manager templates to perform cluster operations. This architectural shift aligns AKS Arc management with Microsoft's broader cloud-first strategy and ensures consistency across different deployment scenarios, but it requires administrators to adapt their operational procedures and tooling to work with Azure-based management interfaces rather than local ones. This means that local, PowerShell, or Windows Admin Center commands such as Update-AksHciCluster that worked on Windows Server, don't work on Azure Local.

Also, AKS Arc functionality is tightly coupled with having a current, supported version of Azure Local as the underlying infrastructure. This dependency means that organizations cannot simply upgrade AKS Arc independently. They must ensure their Azure Local platform itself is running a supported version to enable proper AKS Arc functionality.

Evaluate if Azure Local is right for you

Compare Windows Server explains key differences between Azure Local and Windows Server and provides guidance on when to use each. Both products are actively supported and maintained by Microsoft. Many organizations choose to deploy both, as they are intended for different and complementary purposes.

Uninstall AKS Arc on Windows Server

Before you move to Azure Local, follow these steps to disconnect AKS Arc workload clusters from Azure Arc and then uninstall AKS Arc:

Deploy a supported version of Azure Local

Deploy Azure Local from Azure portal or an Azure Resource Manager template.

Deploy an AKS cluster on Azure Local

Next steps