Skip to main content

Update on the Azure Kubernetes Service (AKS) Application Routing add-on and Ingress-NGINX

· 2 min read
Ahmed Sabbour
Principal PM Lead for the Azure Kubernetes Service

The Kubernetes SIG Networkand the Security Response Committee have announced the upcoming retirement of the Ingress NGINX project, with maintenance ending in March 2026.

No immediate action required

Microsoft understands that customers value continuity and clarity around the maintenance and evolution of the components that power their workloads. There is no change or immediate action required today for AKS clusters using the Application Routing add-on with NGINX to manage Ingress NGINX resources. Microsoft will provide official support for Application Routing add-on Ingress NGINX resources through November 2026 inclusive of critical security patches during this period.

We are actively investing in the future of application connectivity in Azure Kubernetes Service (AKS), centered on the Gateway API. This includes support for the Gateway API in the Istio-based service mesh add-on, expanding the Application Routing add-on with a meshless Istio-based ingress gateway, and continuing investment in Application Gateway for Containers.

The future of the Application Routing add-on

Support for a meshless Istio-based ingress using the Gateway API with the Application Routing add-on is planned for the first half of 2026, along with migration guidance documentation. The Kubernetes Gateway API represents the next generation of Kubernetes traffic management, evolving from the Ingress API by offering richer routing capabilities, standardized extensibility, and a more secure, role-oriented design.

Alternative migration paths

Alternatively, existing users of Ingress NGINX, including users who provisioned it through Application Routing add-on, can also migrate to one of the following options:

For further questions, you can reach us on GitHub or create a support case.