azure/Deploy to Kubernetes cluster
Deploy to a Kubernetes cluster including, but not limited to Azure Kubernetes Service (AKS) clusters
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Jun 30, 2026
- License
- MIT
Pinned Snippet
uses: azure/k8s-deploy@c7ebd0d5f39477a23f1b5dea0f52e6db04adf28e # v6.0.0tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| namespace | Choose the target Kubernetes namespace. If the namespace is not provided, the commands will automatically use the namespace defined in the manifest files first or otherwise run in the default namespace. | no | "" |
| manifests | Path to the manifest files which will be used for deployment. | yes | — |
| images | Fully qualified resource URL of the image(s) to be used for substitutions on the manifest files Example: contosodemo.azurecr.io/helloworld:test | no | — |
| imagepullsecrets | Name of a docker-registry secret that has already been set up within the cluster. Each of these secret names are added under imagePullSecrets field for the workloads found in the input manifest files | no | — |
| pull-images | Switch whether to pull the images from the registry before deployment to find out Dockerfile's path in order to add it to the annotations | no | true |
| strategy | Deployment strategy to be used. Allowed values are basic, canary and blue-green | yes | basic |
| route-method | Route based on service, ingress or SMI for blue-green strategy | no | service |
| version-switch-buffer | Indicates the buffer time in minutes before the switch is made to the green version (max is 300 min ie. 5hrs) | no | 0 |
| traffic-split-method | Traffic split method to be used. Allowed values are pod and smi | no | pod |
| traffic-split-annotations | Annotations in the form of key/value pair to be added to TrafficSplit. Relevant only if deployement strategy is blue-green or canary | no | — |
| baseline-and-canary-replicas | Baseline and canary replicas count. Valid value between 0 to 100 (inclusive) | no | "" |
| percentage | Percentage of traffic redirect to canary deployment | no | 0 |
| action | deploy, promote, or reject | yes | deploy |
| force | Deploy when a previous deployment already exists. If true then --force argument is added to the apply command | no | false |
| server-side | The apply command runs in the server instead of the client. If true then --server-side argument is added to the apply command. | no | false |
| timeout | Timeout for the rollout status | no | 10m |
| token | Github token | yes | ${{ github.token }} |
| annotate-resources | Annotate the resources. If set to false all annotations are skipped completely. | no | true |
| annotate-namespace | Annotate the target namespace. Ignored when annotate-resources is set to false or no namespace is provided. | no | true |
| private-cluster | True if cluster is AKS private cluster | no | false |
| resource-group | Name of resource group - Only required if using private cluster | no | — |
| name | Name of the private cluster - Only required if using private cluster | no | — |
| skip-tls-verify | True if the insecure-skip-tls-verify option should be used. Input should be 'true' or 'false'. | — | false |
| resource-type | Either Microsoft.ContainerService/managedClusters or Microsoft.ContainerService/fleets'. | no | Microsoft.ContainerService/managedClusters |
Outputs
no outputs