Merging changes synced from https://github.com/MicrosoftDocs/SupportArticles-docs-pr (branch live)

Author: Learn Build Service GitHub App

support/azure/azure-kubernetes/extensions/avoid-running-as-root-in-containers.md

@@ -4,7 +4,7 @@ description: This article discusses how to run as a nonroot user in containers b
 ms.date: 04/15/2024
 ms.reviewer: chiragpa, andbar, haitch, v-leedennis
 ms.service: azure-kubernetes-service
-ms.custom: sap:Create, Upgrade, Scale and Delete operations (cluster or nodepool)
+ms.custom: sap:Extensions, Policies and Add-Ons
 ---
 # Security best practice: Don't run as root in containers
 

support/azure/azure-kubernetes/extensions/custom-policy-prevents-aks-upgrade.md

@@ -8,6 +8,7 @@ editor: v-jsitser
 ms.reviewer: cssakscic, v-rekhanain, v-leedennis
 ms.service: azure-kubernetes-service
 ms.topic: troubleshooting-problem-resolution
+ms.custom: sap:Extensions, Policies and Add-Ons
 #Customer intent: As an Azure Kubernetes user, I want to troubleshoot why a Kubernetes upgrade fails when I'm using an Azure custom policy so that I can use the Azure Policy Add-on for an upgraded Azure Kubernetes Service cluster successfully.
 ---
 # AKS upgrade fails when using an Azure custom policy

support/azure/azure-kubernetes/extensions/istio-add-on-general-troubleshooting.md

@@ -8,6 +8,7 @@ editor: v-jsitser
 ms.reviewer: fuyuanbie, shasb, kochhars, ddama, v-leedennis
 ms.service: azure-kubernetes-service
 ms.topic: troubleshooting-general
+ms.custom: sap:Extensions, Policies and Add-Ons
 #Customer intent: As an Azure Kubernetes user, I want to do general troubleshooting on the Istio add-on so that I can use the Istio service mesh successfully.
 ---
 # General troubleshooting of the Istio service mesh add-on

support/azure/azure-kubernetes/extensions/istio-add-on-ingress-gateway.md

@@ -8,6 +8,7 @@ editor: v-jsitser
 ms.reviewer: fuyuanbie, shasb, kochhars, ddama, v-leedennis
 ms.service: azure-kubernetes-service
 ms.topic: troubleshooting-general
+ms.custom: sap:Extensions, Policies and Add-Ons
 #Customer intent: As an Azure Kubernetes user, I want to troubleshoot the ingress gateway of the Istio add-on so that I can use the Istio service mesh successfully.
 ---
 # Istio service mesh add-on ingress gateway troubleshooting

support/azure/azure-kubernetes/extensions/istio-add-on-meshconfig.md

@@ -8,6 +8,7 @@ editor: v-jsitser
 ms.reviewer: fuyuanbie, shasb, kochhars, ddama, v-leedennis
 ms.service: azure-kubernetes-service
 ms.topic: troubleshooting-general
+ms.custom: sap:Extensions, Policies and Add-Ons
 #Customer intent: As an Azure Kubernetes user, I want to troubleshoot the global mesh configuration (MeshConfig) of the Istio add-on so that I can use the Istio service mesh successfully.
 ---
 # Istio service mesh add-on MeshConfig troubleshooting

support/azure/azure-kubernetes/extensions/istio-add-on-minor-revision-upgrade.md

@@ -7,6 +7,7 @@ ms.author: kochhars
 editor: v-jsitser
 ms.reviewer: fuyuanbie, shasb, nshankar, ddama, v-leedennis
 ms.service: azure-kubernetes-service
+ms.custom: sap:Extensions, Policies and Add-Ons
 #Customer intent: As an Azure Kubernetes user, I want to troubleshoot minor revision upgrades of the Istio add-on so that I can use the Istio service mesh successfully.
 ---
 # Istio service mesh add-on minor revision upgrade troubleshooting

support/azure/azure-kubernetes/extensions/istio-add-on-plug-in-ca-certificate.md

@@ -7,6 +7,7 @@ ms.author: ddama
 editor: v-jsitser
 ms.reviewer: fuyuanbie, shasb, kochhars, nshankar, v-leedennis
 ms.service: azure-kubernetes-service
+ms.custom: sap:Extensions, Policies and Add-Ons
 #Customer intent: As an Azure Kubernetes user, I want to troubleshoot plug-in CA certificates in the Istio add-on so that I can use the Istio service mesh successfully.
 ---
 # Istio service mesh add-on plug-in CA certificate troubleshooting

support/azure/azure-kubernetes/extensions/pods-created-user-namespaces.md

@@ -8,6 +8,7 @@ editor: v-jsitser
 ms.reviewer: cssakscic, v-rekhanain, v-leedennis
 ms.service: azure-kubernetes-service
 ms.topic: troubleshooting-problem-resolution
+ms.custom: sap:Extensions, Policies and Add-Ons
 #Customer intent: As an Azure Kubernetes user, I want to learn why pods can be created in user namespaces so that I can be assured that there isn't a security risk to my Azure Kubernetes Service (AKS) cluster.
 ---
 # Pods are created in the user namespaces

support/azure/azure-kubernetes/extensions/retain-privileged-mode-add-capabilities.md

@@ -8,6 +8,7 @@ editor: v-jsitser
 ms.reviewer: cssakscic, v-rekhanain, v-leedennis
 ms.service: azure-kubernetes-service
 ms.topic: how-to
+ms.custom: sap:Extensions, Policies and Add-Ons
 #Customer intent: As an Azure Kubernetes user, I want to learn how to retain privileged mode while I add capabilities so that I increase security when I use the Azure Policy Add-on for Azure Kubernetes Service.
 ---
 # Retain privileged mode while adding capabilities

support/azure/azure-kubernetes/extensions/troubleshoot-azure-policy-add-on-aks.md

@@ -8,7 +8,7 @@ editor: v-jsitser
 ms.reviewer: cssakscic, v-rekhanain, v-leedennis
 ms.service: azure-kubernetes-service
 ms.topic: overview
-ms.custom: sap:Azure policy add-on
+ms.custom: sap:Extensions, Policies and Add-Ons
 #Customer intent: As an Azure Kubernetes user, I want to see what troubleshooting articles are available for the Azure Policy Add-on so that I fix various Azure Policy Add-on issues.
 ---
 # Troubleshoot the Azure Policy Add-on for Azure Kubernetes Service (AKS)