# Provider: aks (appbox)

`when provider=aks`. From `GetAKSAPPBoxTasks`: Guardian → ManagedIdentity →
AKS → NodeRoleAssignment → OIDC → Namespace → exporters → cert-manager/PCA →
TiDBOperator → gateway/proxy → SLI → Dataflow/O11y/RBAC.

Suspect early: Guardian (VPC), AKS cluster, identity/role assignment.