Azure Service Operator

Spec sheet

Purpose

Azure Service Operator lets users deploy and maintain Azure resources from within a Kubernetes cluster using Kubernetes tooling.Read 11 Oct 2026 · azure.github.io

Intended users

ASO is aimed at users who want to manage Azure resources with Kubernetes tooling and primitives such as kubectl apply.Read 10 Oct 2026 · github.com

Integrations

The project recommends using ArgoCD or Flux to review changes to ASO custom resources before they are merged and applied.Read 10 Oct 2026 · azure.github.io

Support

The project directs users to report issues in its GitHub repository or ask questions in the Kubernetes Slack #azure-service-operator channel.Read 11 Oct 2026 · azure.github.io

Application configuration

It can manage Azure resources alongside a Kubernetes application and configure the application to use them, such as a Redis cache or PostgreSQL server.Read 11 Oct 2026 · azure.github.io

Authentication

ASO authenticates with Azure using an identity or service principal, and the project recommends Azure Workload Identity for production use.Read 11 Oct 2026 · azure.github.io

Azure lifecycle

ASO models Azure resource lifecycle using Kubernetes garbage collection through ownership references.Read 11 Oct 2026 · azure.github.io

Deletion behavior

Deleting an ASO resource from the cluster also deletes its corresponding Azure resource unless the documented skip-reconcile annotation is applied first.Read 11 Oct 2026 · azure.github.io

GitOps integrations

The security guide recommends tools such as Argo CD or Flux to review changes to ASO custom resources before applying them.Read 11 Oct 2026 · azure.github.io

Installation

The project identifies Helm as its preferred installation and management method and also documents installation from release YAML.Read 11 Oct 2026 · azure.github.io

Kubernetes interface

ASO provides Kubernetes custom resource definitions and Go API structures for deploying and managing Azure resources.Read 11 Oct 2026 · azure.github.io

Prerequisites

Getting started requires a Kubernetes cluster version 1.32 or later and an Azure subscription.Read 11 Oct 2026 · azure.github.io

Project status

The project describes itself as stable and says it follows the Kubernetes definition of stable.Read 11 Oct 2026 · azure.github.io

Reconciliation

ASO uses asynchronous reconciliation and does not block while Azure resources are created.Read 11 Oct 2026 · azure.github.io

Resource coverage

ASO v2 supports more than 150 Azure resources, with more added in each release.Read 10 Oct 2026 · azure.github.io

Resource lifecycle

ASO models Azure resource lifecycle through Kubernetes garbage collection and ownership references.Read 10 Oct 2026 · azure.github.io

Security controls

The security guide recommends controlling installed CRDs, Azure identities and permissions, and Kubernetes identities and permissions.Read 11 Oct 2026 · azure.github.io

Security guidance

The project recommends Azure Workload Identity, namespace-scoped credentials, least-privilege Azure roles, and installing only needed CRDs.Read 10 Oct 2026 · azure.github.io

Security limit

The security guide warns that the RoleAssignment CRD can enable privilege escalation if used carelessly.Read 10 Oct 2026 · azure.github.io

Security warning

The guide warns that the RoleAssignment CRD can enable privilege escalation if it is not used carefully.Read 11 Oct 2026 · azure.github.io

Supported resources

The project says ASO supports more than 150 Azure resources, with more added each release.Read 11 Oct 2026 · azure.github.io

Where Specifiction places it

• Infrastructure as Code Tools#20 of 317.4