1# AKS - Add-ons
2 
3## Container Monitoring
4 
5```bicep
6addonProfiles: {
7  omsagent: {
8    enabled: true
9    config: {
10      logAnalyticsWorkspaceResourceID: logAnalytics.id
11    }
12  }
13}
14```
15 
16## Azure CNI Networking
17 
18```bicep
19networkProfile: {
20  networkPlugin: 'azure'
21  networkPolicy: 'calico'
22}
23```
24 
25## Azure Key Vault Provider
26 
27```bicep
28addonProfiles: {
29  azureKeyvaultSecretsProvider: {
30    enabled: true
31    config: {
32      enableSecretRotation: 'true'
33    }
34  }
35}
36```
37 
38## Application Gateway Ingress Controller
39 
40```bicep
41addonProfiles: {
42  ingressApplicationGateway: {
43    enabled: true
44    config: {
45      applicationGatewayId: appGateway.id
46    }
47  }
48}
49```
50 
51## Add-ons Summary
52 
53| Add-on | Purpose |
54|--------|---------|
55| omsagent | Container Insights monitoring |
56| azureKeyvaultSecretsProvider | Mount Key Vault secrets as volumes |
57| ingressApplicationGateway | Application Gateway as ingress controller |
58| azurepolicy | Azure Policy for Kubernetes |
59