Does anyone have a suggestion of how to associate an AKS network security group with a subnet with azure native? I have this circular dependency I don’t know how to solve for. 1. Create a virtual network with a subnet 2. Create an AKS cluster setting 

VnetSubnetID

 to the subnet. AKS automatically creates an NSG. 3. Associate the AKS NSG to the vnet’s subnet

we create the nsg with the subnet and then attach the subnet to aks

Good call. I forgot that the nsg is manually created rather than being created by AKS. Clearly, I’ve been staring at this code for too long. 😆

happens to us all 🙃