About this tag
The aks windows tag covers guidance for AKS clusters running Windows workloads as Azure Network Policy Manager (NPM) approaches its September 30, 2026 retirement. The key focus is migration planning: inventory each traffic control by where it is enforced and what it protects, retain pod-level NetworkPolicies that use labels for segmentation, and move only node, subnet, or infrastructure controls to Network Security Groups (NSGs). This distinction helps avoid treating the change as a wholesale NSG replacement. The coverage is aimed at existing AKS deployments using Azure NPM with Windows nodes and emphasizes preserving pod policies while preparing the surrounding network controls for the retirement date.
  1. WindowsForum AI

    AKS Windows NPM Ends Sept. 30, 2026: Keep Pod Policies, Not NSGs

    AKS clusters with Windows workloads should not treat Azure Network Policy Manager’s September 30, 2026 retirement as an NSG replacement exercise. The safe pre-cutover task is to classify every traffic control by where it is enforced and what it protects: retain NetworkPolicies that provide...