How do I install the Kars Deployment skill?

Run npx skillmds@latest add azure/kars-deployment in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Kars Deployment safe to use?

This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Kars Deployment?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Kars Deployment free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Kars Deployment?

Azure (@azure) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Kars Deployment by azure — Agent Skill

Name: Kars Deployment
Author: Azure

File contents

Kars Deployment & Infrastructure

Quick Start

# Login to Azure and ACR
az login
az acr login --name karsacr

# Build all images
make build-all  # or manually:
docker build --platform linux/amd64 -f sandbox-images/openclaw/Dockerfile -t karsacr.azurecr.io/openclaw-sandbox:latest .
docker push karsacr.azurecr.io/openclaw-sandbox:latest

# Deploy to AKS
kars up --resource-group <rg> --isolation confidential

Image Registry (ACR: karsacr)

Image	Source	Purpose
`openclaw-sandbox:latest`	`sandbox-images/openclaw/Dockerfile`	Agent container (OpenClaw + Kars mesh plugin)
`kars-inference-router:latest`	`inference-router/Dockerfile`	Per-pod proxy (AOAI, relay/registry, native AGT governance)
`kars-controller:latest`	`controller/Dockerfile`	K8s controller (CRD reconciler)
`agentmesh-relay-agt:latest`	Microsoft AGT AgentMesh image	WebSocket relay server
`agentmesh-registry-agt:latest`	Microsoft AGT AgentMesh image	Agent discovery + prekey storage

AKS Namespaces

Namespace	Purpose
`kars-system`	Controller + CRDs
`agentmesh`	Relay + Registry + PostgreSQL
`kars-foundry-test`	Parent sandbox (persistent)
`kars-<name>`	Spawned sub-agent sandboxes (ephemeral)

Controller

Watches KarsSandbox CRDs in kars-system
Creates namespace, deployment, service, networkpolicy for each sandbox
Defaults: SANDBOX_IMAGE=openclaw-sandbox:latest, INFERENCE_ROUTER_IMAGE=inference-router:latest
DO NOT set image env vars manually — use defaults

AgentMesh Infrastructure

# Deploy Microsoft AGT AgentMesh (relay + registry + postgres)
kubectl apply -f deploy/agentmesh-agt.yaml

# Verify
kubectl get pods -n agentmesh
# Should show: postgres, registry, relay — all Running

Troubleshooting

Pod stuck Pending: Check node pool capacity (kubectl describe pod)
ImagePullBackOff: ACR auth issue (az acr login --name karsacr)
Controller not reconciling: Check CRD (kubectl get karssandbox -A) and controller logs
Relay auth fails: Check the AGT relay token secret and relay logs
Registry 401 on prekey upload: Check AGT registry auth configuration and pod identity
Old image cached on AKS: Use imagePullPolicy: Always for :latest tags

---name: kars-deploymentdescription: Kars deployment and infrastructure skill — how to deploy, build images, manage AKS, and troubleshoot.---# Kars Deployment & Infrastructure## Quick Start```bash# Login to Azure and ACRaz loginaz acr login --name karsacr# Build all imagesmake build-all # or manually:docker build --platform linux/amd64 -f sandbox-images/openclaw/Dockerfile -t karsacr.azurecr.io/openclaw-sandbox:latest .docker push karsacr.azurecr.io/openclaw-sandbox:latest# Deploy to AKSkars up --resource-group <rg> --isolation confidential```## Image Registry (ACR: karsacr)| Image | Source | Purpose ||-------|--------|---------|| `openclaw-sandbox:latest` | `sandbox-images/openclaw/Dockerfile` | Agent container (OpenClaw + Kars mesh plugin) || `kars-inference-router:latest` | `inference-router/Dockerfile` | Per-pod proxy (AOAI, relay/registry, native AGT governance) || `kars-controller:latest` | `controller/Dockerfile` | K8s controller (CRD reconciler) || `agentmesh-relay-agt:latest` | Microsoft AGT AgentMesh image | WebSocket relay server || `agentmesh-registry-agt:latest` | Microsoft AGT AgentMesh image | Agent discovery + prekey storage |## AKS Namespaces| Namespace | Purpose ||-----------|---------|| `kars-system` | Controller + CRDs || `agentmesh` | Relay + Registry + PostgreSQL || `kars-foundry-test` | Parent sandbox (persistent) || `kars-<name>` | Spawned sub-agent sandboxes (ephemeral) |## Controller- Watches `KarsSandbox` CRDs in `kars-system`- Creates namespace, deployment, service, networkpolicy for each sandbox- Defaults: `SANDBOX_IMAGE=openclaw-sandbox:latest`, `INFERENCE_ROUTER_IMAGE=inference-router:latest`- DO NOT set image env vars manually — use defaults## AgentMesh Infrastructure```bash# Deploy Microsoft AGT AgentMesh (relay + registry + postgres)kubectl apply -f deploy/agentmesh-agt.yaml# Verifykubectl get pods -n agentmesh# Should show: postgres, registry, relay — all Running```## Troubleshooting- **Pod stuck Pending**: Check node pool capacity (`kubectl describe pod`)- **ImagePullBackOff**: ACR auth issue (`az acr login --name karsacr`)- **Controller not reconciling**: Check CRD (`kubectl get karssandbox -A`) and controller logs- **Relay auth fails**: Check the AGT relay token secret and relay logs- **Registry 401 on prekey upload**: Check AGT registry auth configuration and pod identity- **Old image cached on AKS**: Use `imagePullPolicy: Always` for `:latest` tags

Frequently asked questions

Kars Deployment