How should Azure Kubernetes Service be designed for production in Microsoft Azure?

Use managed identities, workload identity, private clusters where appropriate, network policies, resource requests and limits, autoscaling, Pod Disruption Budgets, observability, and controlled upgrades.