# Kubernetes Cost Management: VMSS > Kubernetes Cost Management applied to VMSS in non-production. ZopNight Optimize VMSS on AWS, GCP, and Azure, read-only, production excluded by default. Source: https://zop.dev/solutions/azure-vm-scale-sets/kubernetes-cost-management Published: 2026-07-01 · Author: avinash-gaurav · Tags: zopnight, azure, compute, kubernetes-cost-management --- 123 Kubernetes workload rules across EKS, GKE, and AKS (41 each) cover reliability, security, idle, orphan, and rightsizing. Findings combine with cloud-native node and managed-service recommendations on the same dashboard. Applied to Azure VM Scale Sets, it is one of the most reliable ways to take waste out of non-production without touching how the service runs in production. Auto-scaling VM groups bill around the clock, and kubernetes cost management is about making sure you only pay for the hours and capacity you actually use. ZopNight Optimize this against your measured usage, the same [FinOps](https://zop.dev/learn/finops) discipline that separates it from dashboard-first tools like [CloudHealth](https://zop.dev/compare/cloudhealth-vs-zopnight). ## Why kubernetes cost management matters for VMSS What kubernetes cost management actually buys you: - 41 workload rules each on EKS, GKE, and AKS for 123 total. - Reliability, security, idle, orphan, and rightsizing in one feed. - Cluster, namespace, and workload-type filters. - Rightsizing recommendations honor Autopilot billing model on GKE. For VMSS specifically, the win comes from the gap between how long the resource runs and how little of that time anyone is using it. ## How ZopNight does it Connect a read-only role, let ZopNight discover your VMSS across regions and accounts, and act, scheduling stops and starts on your hours, guided rightsizing for the oversized, idle detection for the forgotten. It ships 490 built-in audit rules across AWS (216), GCP (127), and Azure (147) and 124 of those recommendations are wired to act end to end, 28 one-click and 96 guided. Production is excluded by default and every action is logged. ## How ZopNight schedules VMSS The loop that does this is deliberately mechanical, and it starts read-only. You connect AWS, GCP, and Azure with a read-only role, and ZopNight discovers every VMSS across your regions and accounts. It records a per-action permission verdict for each one, so you can see where it can list a resource but not yet stop it, and you review that inventory, filter it by status or type, and search for the specific resources you care about before anything is scheduled. Scheduling itself is a cron you write once in plain terms, stop at 7 PM, start at 8 AM on weekdays, pinned to your timezone so the jobs fire at local business hours rather than UTC. A weekly 24-hour grid shows the schedule visually so you catch gaps and overlaps before you save, and an estimate of active versus inactive hours appears before you commit. Resources attach individually or bundle into groups like "dev-cluster" or "staging-db" so a whole environment follows one cadence. Actions run in dependency order, so a database comes up before the app server that depends on it. When something needs to stay up, an override forces a VMSS ON or OFF for a defined window, carries a reason so teammates understand why it exists, and expires automatically so nothing is left running by accident. If a start or stop fails, ZopNight retries up to three times and falls back to a dead-letter queue rather than silently dropping the action, and every state change lands in an audit trail that records whether a schedule, an override, or a specific user triggered it. ## Getting started Getting started is intentionally low-stakes: - Connect AWS, GCP, and Azure with a read-only role. Nothing is scheduled or changed at this stage. - Let ZopNight discover your VMSS and review exactly what it found, filtered by account, region, and status. - Create a schedule in your timezone and attach the non-production resources or groups you want it to cover. - Watch the first cycle run, with Slack, Teams, or Google Chat notifications on every start, stop, and failure, then layer in idle cleanup and guided rightsizing. Production stays excluded by default throughout, and because discovery and recommendations are read-only, you can prove the value before you enable a single action. ## Frequently asked questions ### Does kubernetes cost management on VMSS risk production? No. Production is excluded by default; ZopNight acts only on the non-production VMSS resources you choose. ### How fast does it work? Scheduling usually shows results in the first cycle. Connect read-only and enable a schedule; there is no migration and no agent to install.