Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Azure Native
  3. API Docs
  4. containerservice
  5. getManagedCluster
This is the latest version of Azure Native. Use the Azure Native v2 docs if using the v2 version of this package.
Azure Native v3.4.0 published on Wednesday, May 7, 2025 by Pulumi
pulumi/pulumi-azure-native

azure-native.containerservice.getManagedCluster

Explore with Pulumi AI

azure-native logo
This is the latest version of Azure Native. Use the Azure Native v2 docs if using the v2 version of this package.
Azure Native v3.4.0 published on Wednesday, May 7, 2025 by Pulumi
pulumi/pulumi-azure-native

    Managed cluster.

    Uses Azure REST API version 2024-10-01.

    Other available API versions: 2019-11-01, 2020-01-01, 2020-02-01, 2020-03-01, 2020-04-01, 2020-06-01, 2020-07-01, 2020-09-01, 2020-11-01, 2020-12-01, 2021-02-01, 2021-03-01, 2021-05-01, 2021-07-01, 2021-08-01, 2021-09-01, 2021-10-01, 2021-11-01-preview, 2022-01-01, 2022-01-02-preview, 2022-02-01, 2022-02-02-preview, 2022-03-01, 2022-03-02-preview, 2022-04-01, 2022-04-02-preview, 2022-05-02-preview, 2022-06-01, 2022-06-02-preview, 2022-07-01, 2022-07-02-preview, 2022-08-02-preview, 2022-08-03-preview, 2022-09-01, 2022-09-02-preview, 2022-10-02-preview, 2022-11-01, 2022-11-02-preview, 2023-01-01, 2023-01-02-preview, 2023-02-01, 2023-02-02-preview, 2023-03-01, 2023-03-02-preview, 2023-04-01, 2023-04-02-preview, 2023-05-01, 2023-05-02-preview, 2023-06-01, 2023-06-02-preview, 2023-07-01, 2023-07-02-preview, 2023-08-01, 2023-08-02-preview, 2023-09-01, 2023-09-02-preview, 2023-10-01, 2023-10-02-preview, 2023-11-01, 2023-11-02-preview, 2024-01-01, 2024-01-02-preview, 2024-02-01, 2024-02-02-preview, 2024-03-02-preview, 2024-04-02-preview, 2024-05-01, 2024-05-02-preview, 2024-06-02-preview, 2024-07-01, 2024-07-02-preview, 2024-08-01, 2024-09-01, 2024-09-02-preview, 2024-10-02-preview, 2025-01-01, 2025-01-02-preview, 2025-02-01, 2025-02-02-preview. These can be accessed by generating a local SDK package using the CLI command pulumi package add azure-native containerservice [ApiVersion]. See the version guide for details.

    Using getManagedCluster

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getManagedCluster(args: GetManagedClusterArgs, opts?: InvokeOptions): Promise<GetManagedClusterResult>
function getManagedClusterOutput(args: GetManagedClusterOutputArgs, opts?: InvokeOptions): Output<GetManagedClusterResult>
    def get_managed_cluster(resource_group_name: Optional[str] = None,
                        resource_name: Optional[str] = None,
                        opts: Optional[InvokeOptions] = None) -> GetManagedClusterResult
def get_managed_cluster_output(resource_group_name: Optional[pulumi.Input[str]] = None,
                        resource_name: Optional[pulumi.Input[str]] = None,
                        opts: Optional[InvokeOptions] = None) -> Output[GetManagedClusterResult]
    func LookupManagedCluster(ctx *Context, args *LookupManagedClusterArgs, opts ...InvokeOption) (*LookupManagedClusterResult, error)
func LookupManagedClusterOutput(ctx *Context, args *LookupManagedClusterOutputArgs, opts ...InvokeOption) LookupManagedClusterResultOutput

    > Note: This function is named LookupManagedCluster in the Go SDK.

    public static class GetManagedCluster 
{
    public static Task<GetManagedClusterResult> InvokeAsync(GetManagedClusterArgs args, InvokeOptions? opts = null)
    public static Output<GetManagedClusterResult> Invoke(GetManagedClusterInvokeArgs args, InvokeOptions? opts = null)
}
    public static CompletableFuture<GetManagedClusterResult> getManagedCluster(GetManagedClusterArgs args, InvokeOptions options)
public static Output<GetManagedClusterResult> getManagedCluster(GetManagedClusterArgs args, InvokeOptions options)

    fn::invoke:
  function: azure-native:containerservice:getManagedCluster
  arguments:
    # arguments dictionary

    The following arguments are supported:

    ResourceGroupName string
    The name of the resource group. The name is case insensitive.
    ResourceName string
    The name of the managed cluster resource.
    ResourceGroupName string
    The name of the resource group. The name is case insensitive.
    ResourceName string
    The name of the managed cluster resource.
    resourceGroupName String
    The name of the resource group. The name is case insensitive.
    resourceName String
    The name of the managed cluster resource.
    resourceGroupName string
    The name of the resource group. The name is case insensitive.
    resourceName string
    The name of the managed cluster resource.
    resource_group_name str
    The name of the resource group. The name is case insensitive.
    resource_name str
    The name of the managed cluster resource.
    resourceGroupName String
    The name of the resource group. The name is case insensitive.
    resourceName String
    The name of the managed cluster resource.

    getManagedCluster Result

    The following output properties are available:

    AzureApiVersion string
    The Azure API version of the resource.
    AzurePortalFQDN string
    The Azure Portal requires certain Cross-Origin Resource Sharing (CORS) headers to be sent in some responses, which Kubernetes APIServer doesn't handle by default. This special FQDN supports CORS, allowing the Azure Portal to function properly.
    CurrentKubernetesVersion string
    If kubernetesVersion was a fully specified version <major.minor.patch>, this field will be exactly equal to it. If kubernetesVersion was <major.minor>, this field will contain the full <major.minor.patch> version being used.
    ETag string
    Unique read-only string used to implement optimistic concurrency. The eTag value will change when the resource is updated. Specify an if-match or if-none-match header with the eTag value for a subsequent request to enable optimistic concurrency per the normal etag convention.
    Fqdn string
    The FQDN of the master pool.
    Id string
    Fully qualified resource ID for the resource. E.g. "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}"
    Location string
    The geo-location where the resource lives
    MaxAgentPools int
    The max number of agent pools for the managed cluster.
    Name string
    The name of the resource
    PowerState Pulumi.AzureNative.ContainerService.Outputs.PowerStateResponse
    The Power State of the cluster.
    PrivateFQDN string
    The FQDN of private cluster.
    ProvisioningState string
    The current provisioning state.
    ResourceUID string
    The resourceUID uniquely identifies ManagedClusters that reuse ARM ResourceIds (i.e: create, delete, create sequence)
    SystemData Pulumi.AzureNative.ContainerService.Outputs.SystemDataResponse
    Azure Resource Manager metadata containing createdBy and modifiedBy information.
    Type string
    The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
    AadProfile Pulumi.AzureNative.ContainerService.Outputs.ManagedClusterAADProfileResponse
    The Azure Active Directory configuration.
    AddonProfiles Dictionary<string, Pulumi.AzureNative.ContainerService.Outputs.ManagedClusterAddonProfileResponse>
    The profile of managed cluster add-on.
    AgentPoolProfiles List<Pulumi.AzureNative.ContainerService.Outputs.ManagedClusterAgentPoolProfileResponse>
    The agent pool properties.
    ApiServerAccessProfile Pulumi.AzureNative.ContainerService.Outputs.ManagedClusterAPIServerAccessProfileResponse
    The access profile for managed cluster API server.
    AutoScalerProfile Pulumi.AzureNative.ContainerService.Outputs.ManagedClusterPropertiesResponseAutoScalerProfile
    Parameters to be applied to the cluster-autoscaler when enabled
    AutoUpgradeProfile Pulumi.AzureNative.ContainerService.Outputs.ManagedClusterAutoUpgradeProfileResponse
    The auto upgrade configuration.
    AzureMonitorProfile Pulumi.AzureNative.ContainerService.Outputs.ManagedClusterAzureMonitorProfileResponse
    Azure Monitor addon profiles for monitoring the managed cluster.
    DisableLocalAccounts bool
    If set to true, getting static credentials will be disabled for this cluster. This must only be used on Managed Clusters that are AAD enabled. For more details see disable local accounts.
    DiskEncryptionSetID string
    This is of the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Compute/diskEncryptionSets/{encryptionSetName}'
    DnsPrefix string
    This cannot be updated once the Managed Cluster has been created.
    EnablePodSecurityPolicy bool
    (DEPRECATED) Whether to enable Kubernetes pod security policy (preview). PodSecurityPolicy was deprecated in Kubernetes v1.21, and removed from Kubernetes in v1.25. Learn more at https://aka.ms/k8s/psp and https://aka.ms/aks/psp.
    EnableRBAC bool
    Whether to enable Kubernetes Role-Based Access Control.
    ExtendedLocation Pulumi.AzureNative.ContainerService.Outputs.ExtendedLocationResponse
    The extended location of the Virtual Machine.
    FqdnSubdomain string
    This cannot be updated once the Managed Cluster has been created.
    HttpProxyConfig Pulumi.AzureNative.ContainerService.Outputs.ManagedClusterHTTPProxyConfigResponse
    Configurations for provisioning the cluster with HTTP proxy servers.
    Identity Pulumi.AzureNative.ContainerService.Outputs.ManagedClusterIdentityResponse
    The identity of the managed cluster, if configured.
    IdentityProfile Dictionary<string, Pulumi.AzureNative.ContainerService.Outputs.UserAssignedIdentityResponse>
    The user identity associated with the managed cluster. This identity will be used by the kubelet. Only one user assigned identity is allowed. The only accepted key is "kubeletidentity", with value of "resourceId": "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}".
    IngressProfile Pulumi.AzureNative.ContainerService.Outputs.ManagedClusterIngressProfileResponse
    Ingress profile for the managed cluster.
    KubernetesVersion string
    Both patch version <major.minor.patch> (e.g. 1.20.13) and <major.minor> (e.g. 1.20) are supported. When <major.minor> is specified, the latest supported GA patch version is chosen automatically. Updating the cluster with the same <major.minor> once it has been created (e.g. 1.14.x -> 1.14) will not trigger an upgrade, even if a newer patch version is available. When you upgrade a supported AKS cluster, Kubernetes minor versions cannot be skipped. All upgrades must be performed sequentially by major version number. For example, upgrades between 1.14.x -> 1.15.x or 1.15.x -> 1.16.x are allowed, however 1.14.x -> 1.16.x is not allowed. See upgrading an AKS cluster for more details.
    LinuxProfile Pulumi.AzureNative.ContainerService.Outputs.ContainerServiceLinuxProfileResponse
    The profile for Linux VMs in the Managed Cluster.
    MetricsProfile Pulumi.AzureNative.ContainerService.Outputs.ManagedClusterMetricsProfileResponse
    Optional cluster metrics configuration.
    NetworkProfile Pulumi.AzureNative.ContainerService.Outputs.ContainerServiceNetworkProfileResponse
    The network configuration profile.
    NodeResourceGroup string
    The name of the resource group containing agent pool nodes.
    NodeResourceGroupProfile Pulumi.AzureNative.ContainerService.Outputs.ManagedClusterNodeResourceGroupProfileResponse
    Profile of the node resource group configuration.
    OidcIssuerProfile Pulumi.AzureNative.ContainerService.Outputs.ManagedClusterOIDCIssuerProfileResponse
    The OIDC issuer profile of the Managed Cluster.
    PodIdentityProfile Pulumi.AzureNative.ContainerService.Outputs.ManagedClusterPodIdentityProfileResponse
    See use AAD pod identity for more details on AAD pod identity integration.
    PrivateLinkResources List<Pulumi.AzureNative.ContainerService.Outputs.PrivateLinkResourceResponse>
    Private link resources associated with the cluster.
    PublicNetworkAccess string
    Allow or deny public network access for AKS
    SecurityProfile Pulumi.AzureNative.ContainerService.Outputs.ManagedClusterSecurityProfileResponse
    Security profile for the managed cluster.
    ServiceMeshProfile Pulumi.AzureNative.ContainerService.Outputs.ServiceMeshProfileResponse
    Service mesh profile for a managed cluster.
    ServicePrincipalProfile Pulumi.AzureNative.ContainerService.Outputs.ManagedClusterServicePrincipalProfileResponse
    Information about a service principal identity for the cluster to use for manipulating Azure APIs.
    Sku Pulumi.AzureNative.ContainerService.Outputs.ManagedClusterSKUResponse
    The managed cluster SKU.
    StorageProfile Pulumi.AzureNative.ContainerService.Outputs.ManagedClusterStorageProfileResponse
    Storage profile for the managed cluster.
    SupportPlan string
    The support plan for the Managed Cluster. If unspecified, the default is 'KubernetesOfficial'.
    Tags Dictionary<string, string>
    Resource tags.
    UpgradeSettings Pulumi.AzureNative.ContainerService.Outputs.ClusterUpgradeSettingsResponse
    Settings for upgrading a cluster.
    WindowsProfile Pulumi.AzureNative.ContainerService.Outputs.ManagedClusterWindowsProfileResponse
    The profile for Windows VMs in the Managed Cluster.
    WorkloadAutoScalerProfile Pulumi.AzureNative.ContainerService.Outputs.ManagedClusterWorkloadAutoScalerProfileResponse
    Workload Auto-scaler profile for the managed cluster.
    AzureApiVersion string
    The Azure API version of the resource.
    AzurePortalFQDN string
    The Azure Portal requires certain Cross-Origin Resource Sharing (CORS) headers to be sent in some responses, which Kubernetes APIServer doesn't handle by default. This special FQDN supports CORS, allowing the Azure Portal to function properly.
    CurrentKubernetesVersion string
    If kubernetesVersion was a fully specified version <major.minor.patch>, this field will be exactly equal to it. If kubernetesVersion was <major.minor>, this field will contain the full <major.minor.patch> version being used.
    ETag string
    Unique read-only string used to implement optimistic concurrency. The eTag value will change when the resource is updated. Specify an if-match or if-none-match header with the eTag value for a subsequent request to enable optimistic concurrency per the normal etag convention.
    Fqdn string
    The FQDN of the master pool.
    Id string
    Fully qualified resource ID for the resource. E.g. "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}"
    Location string
    The geo-location where the resource lives
    MaxAgentPools int
    The max number of agent pools for the managed cluster.
    Name string
    The name of the resource
    PowerState PowerStateResponse
    The Power State of the cluster.
    PrivateFQDN string
    The FQDN of private cluster.
    ProvisioningState string
    The current provisioning state.
    ResourceUID string
    The resourceUID uniquely identifies ManagedClusters that reuse ARM ResourceIds (i.e: create, delete, create sequence)
    SystemData SystemDataResponse
    Azure Resource Manager metadata containing createdBy and modifiedBy information.
    Type string
    The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
    AadProfile ManagedClusterAADProfileResponse
    The Azure Active Directory configuration.
    AddonProfiles map[string]ManagedClusterAddonProfileResponse
    The profile of managed cluster add-on.
    AgentPoolProfiles []ManagedClusterAgentPoolProfileResponse
    The agent pool properties.
    ApiServerAccessProfile ManagedClusterAPIServerAccessProfileResponse
    The access profile for managed cluster API server.
    AutoScalerProfile ManagedClusterPropertiesResponseAutoScalerProfile
    Parameters to be applied to the cluster-autoscaler when enabled
    AutoUpgradeProfile ManagedClusterAutoUpgradeProfileResponse
    The auto upgrade configuration.
    AzureMonitorProfile ManagedClusterAzureMonitorProfileResponse
    Azure Monitor addon profiles for monitoring the managed cluster.
    DisableLocalAccounts bool
    If set to true, getting static credentials will be disabled for this cluster. This must only be used on Managed Clusters that are AAD enabled. For more details see disable local accounts.
    DiskEncryptionSetID string
    This is of the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Compute/diskEncryptionSets/{encryptionSetName}'
    DnsPrefix string
    This cannot be updated once the Managed Cluster has been created.
    EnablePodSecurityPolicy bool
    (DEPRECATED) Whether to enable Kubernetes pod security policy (preview). PodSecurityPolicy was deprecated in Kubernetes v1.21, and removed from Kubernetes in v1.25. Learn more at https://aka.ms/k8s/psp and https://aka.ms/aks/psp.
    EnableRBAC bool
    Whether to enable Kubernetes Role-Based Access Control.
    ExtendedLocation ExtendedLocationResponse
    The extended location of the Virtual Machine.
    FqdnSubdomain string
    This cannot be updated once the Managed Cluster has been created.
    HttpProxyConfig ManagedClusterHTTPProxyConfigResponse
    Configurations for provisioning the cluster with HTTP proxy servers.
    Identity ManagedClusterIdentityResponse
    The identity of the managed cluster, if configured.
    IdentityProfile map[string]UserAssignedIdentityResponse
    The user identity associated with the managed cluster. This identity will be used by the kubelet. Only one user assigned identity is allowed. The only accepted key is "kubeletidentity", with value of "resourceId": "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}".
    IngressProfile ManagedClusterIngressProfileResponse
    Ingress profile for the managed cluster.
    KubernetesVersion string
    Both patch version <major.minor.patch> (e.g. 1.20.13) and <major.minor> (e.g. 1.20) are supported. When <major.minor> is specified, the latest supported GA patch version is chosen automatically. Updating the cluster with the same <major.minor> once it has been created (e.g. 1.14.x -> 1.14) will not trigger an upgrade, even if a newer patch version is available. When you upgrade a supported AKS cluster, Kubernetes minor versions cannot be skipped. All upgrades must be performed sequentially by major version number. For example, upgrades between 1.14.x -> 1.15.x or 1.15.x -> 1.16.x are allowed, however 1.14.x -> 1.16.x is not allowed. See upgrading an AKS cluster for more details.
    LinuxProfile ContainerServiceLinuxProfileResponse
    The profile for Linux VMs in the Managed Cluster.
    MetricsProfile ManagedClusterMetricsProfileResponse
    Optional cluster metrics configuration.
    NetworkProfile ContainerServiceNetworkProfileResponse
    The network configuration profile.
    NodeResourceGroup string
    The name of the resource group containing agent pool nodes.
    NodeResourceGroupProfile ManagedClusterNodeResourceGroupProfileResponse
    Profile of the node resource group configuration.
    OidcIssuerProfile ManagedClusterOIDCIssuerProfileResponse
    The OIDC issuer profile of the Managed Cluster.
    PodIdentityProfile ManagedClusterPodIdentityProfileResponse
    See use AAD pod identity for more details on AAD pod identity integration.
    PrivateLinkResources []PrivateLinkResourceResponse
    Private link resources associated with the cluster.
    PublicNetworkAccess string
    Allow or deny public network access for AKS
    SecurityProfile ManagedClusterSecurityProfileResponse
    Security profile for the managed cluster.
    ServiceMeshProfile ServiceMeshProfileResponse
    Service mesh profile for a managed cluster.
    ServicePrincipalProfile ManagedClusterServicePrincipalProfileResponse
    Information about a service principal identity for the cluster to use for manipulating Azure APIs.
    Sku ManagedClusterSKUResponse
    The managed cluster SKU.
    StorageProfile ManagedClusterStorageProfileResponse
    Storage profile for the managed cluster.
    SupportPlan string
    The support plan for the Managed Cluster. If unspecified, the default is 'KubernetesOfficial'.
    Tags map[string]string
    Resource tags.
    UpgradeSettings ClusterUpgradeSettingsResponse
    Settings for upgrading a cluster.
    WindowsProfile ManagedClusterWindowsProfileResponse
    The profile for Windows VMs in the Managed Cluster.
    WorkloadAutoScalerProfile ManagedClusterWorkloadAutoScalerProfileResponse
    Workload Auto-scaler profile for the managed cluster.
    azureApiVersion String
    The Azure API version of the resource.
    azurePortalFQDN String
    The Azure Portal requires certain Cross-Origin Resource Sharing (CORS) headers to be sent in some responses, which Kubernetes APIServer doesn't handle by default. This special FQDN supports CORS, allowing the Azure Portal to function properly.
    currentKubernetesVersion String
    If kubernetesVersion was a fully specified version <major.minor.patch>, this field will be exactly equal to it. If kubernetesVersion was <major.minor>, this field will contain the full <major.minor.patch> version being used.
    eTag String
    Unique read-only string used to implement optimistic concurrency. The eTag value will change when the resource is updated. Specify an if-match or if-none-match header with the eTag value for a subsequent request to enable optimistic concurrency per the normal etag convention.
    fqdn String
    The FQDN of the master pool.
    id String
    Fully qualified resource ID for the resource. E.g. "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}"
    location String
    The geo-location where the resource lives
    maxAgentPools Integer
    The max number of agent pools for the managed cluster.
    name String
    The name of the resource
    powerState PowerStateResponse
    The Power State of the cluster.
    privateFQDN String
    The FQDN of private cluster.
    provisioningState String
    The current provisioning state.
    resourceUID String
    The resourceUID uniquely identifies ManagedClusters that reuse ARM ResourceIds (i.e: create, delete, create sequence)
    systemData SystemDataResponse
    Azure Resource Manager metadata containing createdBy and modifiedBy information.
    type String
    The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
    aadProfile ManagedClusterAADProfileResponse
    The Azure Active Directory configuration.
    addonProfiles Map<String,ManagedClusterAddonProfileResponse>
    The profile of managed cluster add-on.
    agentPoolProfiles List<ManagedClusterAgentPoolProfileResponse>
    The agent pool properties.
    apiServerAccessProfile ManagedClusterAPIServerAccessProfileResponse
    The access profile for managed cluster API server.
    autoScalerProfile ManagedClusterPropertiesResponseAutoScalerProfile
    Parameters to be applied to the cluster-autoscaler when enabled
    autoUpgradeProfile ManagedClusterAutoUpgradeProfileResponse
    The auto upgrade configuration.
    azureMonitorProfile ManagedClusterAzureMonitorProfileResponse
    Azure Monitor addon profiles for monitoring the managed cluster.
    disableLocalAccounts Boolean
    If set to true, getting static credentials will be disabled for this cluster. This must only be used on Managed Clusters that are AAD enabled. For more details see disable local accounts.
    diskEncryptionSetID String
    This is of the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Compute/diskEncryptionSets/{encryptionSetName}'
    dnsPrefix String
    This cannot be updated once the Managed Cluster has been created.
    enablePodSecurityPolicy Boolean
    (DEPRECATED) Whether to enable Kubernetes pod security policy (preview). PodSecurityPolicy was deprecated in Kubernetes v1.21, and removed from Kubernetes in v1.25. Learn more at https://aka.ms/k8s/psp and https://aka.ms/aks/psp.
    enableRBAC Boolean
    Whether to enable Kubernetes Role-Based Access Control.
    extendedLocation ExtendedLocationResponse
    The extended location of the Virtual Machine.
    fqdnSubdomain String
    This cannot be updated once the Managed Cluster has been created.
    httpProxyConfig ManagedClusterHTTPProxyConfigResponse
    Configurations for provisioning the cluster with HTTP proxy servers.
    identity ManagedClusterIdentityResponse
    The identity of the managed cluster, if configured.
    identityProfile Map<String,UserAssignedIdentityResponse>
    The user identity associated with the managed cluster. This identity will be used by the kubelet. Only one user assigned identity is allowed. The only accepted key is "kubeletidentity", with value of "resourceId": "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}".
    ingressProfile ManagedClusterIngressProfileResponse
    Ingress profile for the managed cluster.
    kubernetesVersion String
    Both patch version <major.minor.patch> (e.g. 1.20.13) and <major.minor> (e.g. 1.20) are supported. When <major.minor> is specified, the latest supported GA patch version is chosen automatically. Updating the cluster with the same <major.minor> once it has been created (e.g. 1.14.x -> 1.14) will not trigger an upgrade, even if a newer patch version is available. When you upgrade a supported AKS cluster, Kubernetes minor versions cannot be skipped. All upgrades must be performed sequentially by major version number. For example, upgrades between 1.14.x -> 1.15.x or 1.15.x -> 1.16.x are allowed, however 1.14.x -> 1.16.x is not allowed. See upgrading an AKS cluster for more details.
    linuxProfile ContainerServiceLinuxProfileResponse
    The profile for Linux VMs in the Managed Cluster.
    metricsProfile ManagedClusterMetricsProfileResponse
    Optional cluster metrics configuration.
    networkProfile ContainerServiceNetworkProfileResponse
    The network configuration profile.
    nodeResourceGroup String
    The name of the resource group containing agent pool nodes.
    nodeResourceGroupProfile ManagedClusterNodeResourceGroupProfileResponse
    Profile of the node resource group configuration.
    oidcIssuerProfile ManagedClusterOIDCIssuerProfileResponse
    The OIDC issuer profile of the Managed Cluster.
    podIdentityProfile ManagedClusterPodIdentityProfileResponse
    See use AAD pod identity for more details on AAD pod identity integration.
    privateLinkResources List<PrivateLinkResourceResponse>
    Private link resources associated with the cluster.
    publicNetworkAccess String
    Allow or deny public network access for AKS
    securityProfile ManagedClusterSecurityProfileResponse
    Security profile for the managed cluster.
    serviceMeshProfile ServiceMeshProfileResponse
    Service mesh profile for a managed cluster.
    servicePrincipalProfile ManagedClusterServicePrincipalProfileResponse
    Information about a service principal identity for the cluster to use for manipulating Azure APIs.
    sku ManagedClusterSKUResponse
    The managed cluster SKU.
    storageProfile ManagedClusterStorageProfileResponse
    Storage profile for the managed cluster.
    supportPlan String
    The support plan for the Managed Cluster. If unspecified, the default is 'KubernetesOfficial'.
    tags Map<String,String>
    Resource tags.
    upgradeSettings ClusterUpgradeSettingsResponse
    Settings for upgrading a cluster.
    windowsProfile ManagedClusterWindowsProfileResponse
    The profile for Windows VMs in the Managed Cluster.
    workloadAutoScalerProfile ManagedClusterWorkloadAutoScalerProfileResponse
    Workload Auto-scaler profile for the managed cluster.
    azureApiVersion string
    The Azure API version of the resource.
    azurePortalFQDN string
    The Azure Portal requires certain Cross-Origin Resource Sharing (CORS) headers to be sent in some responses, which Kubernetes APIServer doesn't handle by default. This special FQDN supports CORS, allowing the Azure Portal to function properly.
    currentKubernetesVersion string
    If kubernetesVersion was a fully specified version <major.minor.patch>, this field will be exactly equal to it. If kubernetesVersion was <major.minor>, this field will contain the full <major.minor.patch> version being used.
    eTag string
    Unique read-only string used to implement optimistic concurrency. The eTag value will change when the resource is updated. Specify an if-match or if-none-match header with the eTag value for a subsequent request to enable optimistic concurrency per the normal etag convention.
    fqdn string
    The FQDN of the master pool.
    id string
    Fully qualified resource ID for the resource. E.g. "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}"
    location string
    The geo-location where the resource lives
    maxAgentPools number
    The max number of agent pools for the managed cluster.
    name string
    The name of the resource
    powerState PowerStateResponse
    The Power State of the cluster.
    privateFQDN string
    The FQDN of private cluster.
    provisioningState string
    The current provisioning state.
    resourceUID string
    The resourceUID uniquely identifies ManagedClusters that reuse ARM ResourceIds (i.e: create, delete, create sequence)
    systemData SystemDataResponse
    Azure Resource Manager metadata containing createdBy and modifiedBy information.
    type string
    The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
    aadProfile ManagedClusterAADProfileResponse
    The Azure Active Directory configuration.
    addonProfiles {[key: string]: ManagedClusterAddonProfileResponse}
    The profile of managed cluster add-on.
    agentPoolProfiles ManagedClusterAgentPoolProfileResponse[]
    The agent pool properties.
    apiServerAccessProfile ManagedClusterAPIServerAccessProfileResponse
    The access profile for managed cluster API server.
    autoScalerProfile ManagedClusterPropertiesResponseAutoScalerProfile
    Parameters to be applied to the cluster-autoscaler when enabled
    autoUpgradeProfile ManagedClusterAutoUpgradeProfileResponse
    The auto upgrade configuration.
    azureMonitorProfile ManagedClusterAzureMonitorProfileResponse
    Azure Monitor addon profiles for monitoring the managed cluster.
    disableLocalAccounts boolean
    If set to true, getting static credentials will be disabled for this cluster. This must only be used on Managed Clusters that are AAD enabled. For more details see disable local accounts.
    diskEncryptionSetID string
    This is of the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Compute/diskEncryptionSets/{encryptionSetName}'
    dnsPrefix string
    This cannot be updated once the Managed Cluster has been created.
    enablePodSecurityPolicy boolean
    (DEPRECATED) Whether to enable Kubernetes pod security policy (preview). PodSecurityPolicy was deprecated in Kubernetes v1.21, and removed from Kubernetes in v1.25. Learn more at https://aka.ms/k8s/psp and https://aka.ms/aks/psp.
    enableRBAC boolean
    Whether to enable Kubernetes Role-Based Access Control.
    extendedLocation ExtendedLocationResponse
    The extended location of the Virtual Machine.
    fqdnSubdomain string
    This cannot be updated once the Managed Cluster has been created.
    httpProxyConfig ManagedClusterHTTPProxyConfigResponse
    Configurations for provisioning the cluster with HTTP proxy servers.
    identity ManagedClusterIdentityResponse
    The identity of the managed cluster, if configured.
    identityProfile {[key: string]: UserAssignedIdentityResponse}
    The user identity associated with the managed cluster. This identity will be used by the kubelet. Only one user assigned identity is allowed. The only accepted key is "kubeletidentity", with value of "resourceId": "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}".
    ingressProfile ManagedClusterIngressProfileResponse
    Ingress profile for the managed cluster.
    kubernetesVersion string
    Both patch version <major.minor.patch> (e.g. 1.20.13) and <major.minor> (e.g. 1.20) are supported. When <major.minor> is specified, the latest supported GA patch version is chosen automatically. Updating the cluster with the same <major.minor> once it has been created (e.g. 1.14.x -> 1.14) will not trigger an upgrade, even if a newer patch version is available. When you upgrade a supported AKS cluster, Kubernetes minor versions cannot be skipped. All upgrades must be performed sequentially by major version number. For example, upgrades between 1.14.x -> 1.15.x or 1.15.x -> 1.16.x are allowed, however 1.14.x -> 1.16.x is not allowed. See upgrading an AKS cluster for more details.
    linuxProfile ContainerServiceLinuxProfileResponse
    The profile for Linux VMs in the Managed Cluster.
    metricsProfile ManagedClusterMetricsProfileResponse
    Optional cluster metrics configuration.
    networkProfile ContainerServiceNetworkProfileResponse
    The network configuration profile.
    nodeResourceGroup string
    The name of the resource group containing agent pool nodes.
    nodeResourceGroupProfile ManagedClusterNodeResourceGroupProfileResponse
    Profile of the node resource group configuration.
    oidcIssuerProfile ManagedClusterOIDCIssuerProfileResponse
    The OIDC issuer profile of the Managed Cluster.
    podIdentityProfile ManagedClusterPodIdentityProfileResponse
    See use AAD pod identity for more details on AAD pod identity integration.
    privateLinkResources PrivateLinkResourceResponse[]
    Private link resources associated with the cluster.
    publicNetworkAccess string
    Allow or deny public network access for AKS
    securityProfile ManagedClusterSecurityProfileResponse
    Security profile for the managed cluster.
    serviceMeshProfile ServiceMeshProfileResponse
    Service mesh profile for a managed cluster.
    servicePrincipalProfile ManagedClusterServicePrincipalProfileResponse
    Information about a service principal identity for the cluster to use for manipulating Azure APIs.
    sku ManagedClusterSKUResponse
    The managed cluster SKU.
    storageProfile ManagedClusterStorageProfileResponse
    Storage profile for the managed cluster.
    supportPlan string
    The support plan for the Managed Cluster. If unspecified, the default is 'KubernetesOfficial'.
    tags {[key: string]: string}
    Resource tags.
    upgradeSettings ClusterUpgradeSettingsResponse
    Settings for upgrading a cluster.
    windowsProfile ManagedClusterWindowsProfileResponse
    The profile for Windows VMs in the Managed Cluster.
    workloadAutoScalerProfile ManagedClusterWorkloadAutoScalerProfileResponse
    Workload Auto-scaler profile for the managed cluster.
    azure_api_version str
    The Azure API version of the resource.
    azure_portal_fqdn str
    The Azure Portal requires certain Cross-Origin Resource Sharing (CORS) headers to be sent in some responses, which Kubernetes APIServer doesn't handle by default. This special FQDN supports CORS, allowing the Azure Portal to function properly.
    current_kubernetes_version str
    If kubernetesVersion was a fully specified version <major.minor.patch>, this field will be exactly equal to it. If kubernetesVersion was <major.minor>, this field will contain the full <major.minor.patch> version being used.
    e_tag str
    Unique read-only string used to implement optimistic concurrency. The eTag value will change when the resource is updated. Specify an if-match or if-none-match header with the eTag value for a subsequent request to enable optimistic concurrency per the normal etag convention.
    fqdn str
    The FQDN of the master pool.
    id str
    Fully qualified resource ID for the resource. E.g. "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}"
    location str
    The geo-location where the resource lives
    max_agent_pools int
    The max number of agent pools for the managed cluster.
    name str
    The name of the resource
    power_state PowerStateResponse
    The Power State of the cluster.
    private_fqdn str
    The FQDN of private cluster.
    provisioning_state str
    The current provisioning state.
    resource_uid str
    The resourceUID uniquely identifies ManagedClusters that reuse ARM ResourceIds (i.e: create, delete, create sequence)
    system_data SystemDataResponse
    Azure Resource Manager metadata containing createdBy and modifiedBy information.
    type str
    The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
    aad_profile ManagedClusterAADProfileResponse
    The Azure Active Directory configuration.
    addon_profiles Mapping[str, ManagedClusterAddonProfileResponse]
    The profile of managed cluster add-on.
    agent_pool_profiles Sequence[ManagedClusterAgentPoolProfileResponse]
    The agent pool properties.
    api_server_access_profile ManagedClusterAPIServerAccessProfileResponse
    The access profile for managed cluster API server.
    auto_scaler_profile ManagedClusterPropertiesResponseAutoScalerProfile
    Parameters to be applied to the cluster-autoscaler when enabled
    auto_upgrade_profile ManagedClusterAutoUpgradeProfileResponse
    The auto upgrade configuration.
    azure_monitor_profile ManagedClusterAzureMonitorProfileResponse
    Azure Monitor addon profiles for monitoring the managed cluster.
    disable_local_accounts bool
    If set to true, getting static credentials will be disabled for this cluster. This must only be used on Managed Clusters that are AAD enabled. For more details see disable local accounts.
    disk_encryption_set_id str
    This is of the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Compute/diskEncryptionSets/{encryptionSetName}'
    dns_prefix str
    This cannot be updated once the Managed Cluster has been created.
    enable_pod_security_policy bool
    (DEPRECATED) Whether to enable Kubernetes pod security policy (preview). PodSecurityPolicy was deprecated in Kubernetes v1.21, and removed from Kubernetes in v1.25. Learn more at https://aka.ms/k8s/psp and https://aka.ms/aks/psp.
    enable_rbac bool
    Whether to enable Kubernetes Role-Based Access Control.
    extended_location ExtendedLocationResponse
    The extended location of the Virtual Machine.
    fqdn_subdomain str
    This cannot be updated once the Managed Cluster has been created.
    http_proxy_config ManagedClusterHTTPProxyConfigResponse
    Configurations for provisioning the cluster with HTTP proxy servers.
    identity ManagedClusterIdentityResponse
    The identity of the managed cluster, if configured.
    identity_profile Mapping[str, UserAssignedIdentityResponse]
    The user identity associated with the managed cluster. This identity will be used by the kubelet. Only one user assigned identity is allowed. The only accepted key is "kubeletidentity", with value of "resourceId": "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}".
    ingress_profile ManagedClusterIngressProfileResponse
    Ingress profile for the managed cluster.
    kubernetes_version str
    Both patch version <major.minor.patch> (e.g. 1.20.13) and <major.minor> (e.g. 1.20) are supported. When <major.minor> is specified, the latest supported GA patch version is chosen automatically. Updating the cluster with the same <major.minor> once it has been created (e.g. 1.14.x -> 1.14) will not trigger an upgrade, even if a newer patch version is available. When you upgrade a supported AKS cluster, Kubernetes minor versions cannot be skipped. All upgrades must be performed sequentially by major version number. For example, upgrades between 1.14.x -> 1.15.x or 1.15.x -> 1.16.x are allowed, however 1.14.x -> 1.16.x is not allowed. See upgrading an AKS cluster for more details.
    linux_profile ContainerServiceLinuxProfileResponse
    The profile for Linux VMs in the Managed Cluster.
    metrics_profile ManagedClusterMetricsProfileResponse
    Optional cluster metrics configuration.
    network_profile ContainerServiceNetworkProfileResponse
    The network configuration profile.
    node_resource_group str
    The name of the resource group containing agent pool nodes.
    node_resource_group_profile ManagedClusterNodeResourceGroupProfileResponse
    Profile of the node resource group configuration.
    oidc_issuer_profile ManagedClusterOIDCIssuerProfileResponse
    The OIDC issuer profile of the Managed Cluster.
    pod_identity_profile ManagedClusterPodIdentityProfileResponse
    See use AAD pod identity for more details on AAD pod identity integration.
    private_link_resources Sequence[PrivateLinkResourceResponse]
    Private link resources associated with the cluster.
    public_network_access str
    Allow or deny public network access for AKS
    security_profile ManagedClusterSecurityProfileResponse
    Security profile for the managed cluster.
    service_mesh_profile ServiceMeshProfileResponse
    Service mesh profile for a managed cluster.
    service_principal_profile ManagedClusterServicePrincipalProfileResponse
    Information about a service principal identity for the cluster to use for manipulating Azure APIs.
    sku ManagedClusterSKUResponse
    The managed cluster SKU.
    storage_profile ManagedClusterStorageProfileResponse
    Storage profile for the managed cluster.
    support_plan str
    The support plan for the Managed Cluster. If unspecified, the default is 'KubernetesOfficial'.
    tags Mapping[str, str]
    Resource tags.
    upgrade_settings ClusterUpgradeSettingsResponse
    Settings for upgrading a cluster.
    windows_profile ManagedClusterWindowsProfileResponse
    The profile for Windows VMs in the Managed Cluster.
    workload_auto_scaler_profile ManagedClusterWorkloadAutoScalerProfileResponse
    Workload Auto-scaler profile for the managed cluster.
    azureApiVersion String
    The Azure API version of the resource.
    azurePortalFQDN String
    The Azure Portal requires certain Cross-Origin Resource Sharing (CORS) headers to be sent in some responses, which Kubernetes APIServer doesn't handle by default. This special FQDN supports CORS, allowing the Azure Portal to function properly.
    currentKubernetesVersion String
    If kubernetesVersion was a fully specified version <major.minor.patch>, this field will be exactly equal to it. If kubernetesVersion was <major.minor>, this field will contain the full <major.minor.patch> version being used.
    eTag String
    Unique read-only string used to implement optimistic concurrency. The eTag value will change when the resource is updated. Specify an if-match or if-none-match header with the eTag value for a subsequent request to enable optimistic concurrency per the normal etag convention.
    fqdn String
    The FQDN of the master pool.
    id String
    Fully qualified resource ID for the resource. E.g. "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}"
    location String
    The geo-location where the resource lives
    maxAgentPools Number
    The max number of agent pools for the managed cluster.
    name String
    The name of the resource
    powerState Property Map
    The Power State of the cluster.
    privateFQDN String
    The FQDN of private cluster.
    provisioningState String
    The current provisioning state.
    resourceUID String
    The resourceUID uniquely identifies ManagedClusters that reuse ARM ResourceIds (i.e: create, delete, create sequence)
    systemData Property Map
    Azure Resource Manager metadata containing createdBy and modifiedBy information.
    type String
    The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
    aadProfile Property Map
    The Azure Active Directory configuration.
    addonProfiles Map<Property Map>
    The profile of managed cluster add-on.
    agentPoolProfiles List<Property Map>
    The agent pool properties.
    apiServerAccessProfile Property Map
    The access profile for managed cluster API server.
    autoScalerProfile Property Map
    Parameters to be applied to the cluster-autoscaler when enabled
    autoUpgradeProfile Property Map
    The auto upgrade configuration.
    azureMonitorProfile Property Map
    Azure Monitor addon profiles for monitoring the managed cluster.
    disableLocalAccounts Boolean
    If set to true, getting static credentials will be disabled for this cluster. This must only be used on Managed Clusters that are AAD enabled. For more details see disable local accounts.
    diskEncryptionSetID String
    This is of the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Compute/diskEncryptionSets/{encryptionSetName}'
    dnsPrefix String
    This cannot be updated once the Managed Cluster has been created.
    enablePodSecurityPolicy Boolean
    (DEPRECATED) Whether to enable Kubernetes pod security policy (preview). PodSecurityPolicy was deprecated in Kubernetes v1.21, and removed from Kubernetes in v1.25. Learn more at https://aka.ms/k8s/psp and https://aka.ms/aks/psp.
    enableRBAC Boolean
    Whether to enable Kubernetes Role-Based Access Control.
    extendedLocation Property Map
    The extended location of the Virtual Machine.
    fqdnSubdomain String
    This cannot be updated once the Managed Cluster has been created.
    httpProxyConfig Property Map
    Configurations for provisioning the cluster with HTTP proxy servers.
    identity Property Map
    The identity of the managed cluster, if configured.
    identityProfile Map<Property Map>
    The user identity associated with the managed cluster. This identity will be used by the kubelet. Only one user assigned identity is allowed. The only accepted key is "kubeletidentity", with value of "resourceId": "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}".
    ingressProfile Property Map
    Ingress profile for the managed cluster.
    kubernetesVersion String
    Both patch version <major.minor.patch> (e.g. 1.20.13) and <major.minor> (e.g. 1.20) are supported. When <major.minor> is specified, the latest supported GA patch version is chosen automatically. Updating the cluster with the same <major.minor> once it has been created (e.g. 1.14.x -> 1.14) will not trigger an upgrade, even if a newer patch version is available. When you upgrade a supported AKS cluster, Kubernetes minor versions cannot be skipped. All upgrades must be performed sequentially by major version number. For example, upgrades between 1.14.x -> 1.15.x or 1.15.x -> 1.16.x are allowed, however 1.14.x -> 1.16.x is not allowed. See upgrading an AKS cluster for more details.
    linuxProfile Property Map
    The profile for Linux VMs in the Managed Cluster.
    metricsProfile Property Map
    Optional cluster metrics configuration.
    networkProfile Property Map
    The network configuration profile.
    nodeResourceGroup String
    The name of the resource group containing agent pool nodes.
    nodeResourceGroupProfile Property Map
    Profile of the node resource group configuration.
    oidcIssuerProfile Property Map
    The OIDC issuer profile of the Managed Cluster.
    podIdentityProfile Property Map
    See use AAD pod identity for more details on AAD pod identity integration.
    privateLinkResources List<Property Map>
    Private link resources associated with the cluster.
    publicNetworkAccess String
    Allow or deny public network access for AKS
    securityProfile Property Map
    Security profile for the managed cluster.
    serviceMeshProfile Property Map
    Service mesh profile for a managed cluster.
    servicePrincipalProfile Property Map
    Information about a service principal identity for the cluster to use for manipulating Azure APIs.
    sku Property Map
    The managed cluster SKU.
    storageProfile Property Map
    Storage profile for the managed cluster.
    supportPlan String
    The support plan for the Managed Cluster. If unspecified, the default is 'KubernetesOfficial'.
    tags Map<String>
    Resource tags.
    upgradeSettings Property Map
    Settings for upgrading a cluster.
    windowsProfile Property Map
    The profile for Windows VMs in the Managed Cluster.
    workloadAutoScalerProfile Property Map
    Workload Auto-scaler profile for the managed cluster.

    Supporting Types

    AdvancedNetworkingObservabilityResponse

    Enabled bool
    Indicates the enablement of Advanced Networking observability functionalities on clusters.
    Enabled bool
    Indicates the enablement of Advanced Networking observability functionalities on clusters.
    enabled Boolean
    Indicates the enablement of Advanced Networking observability functionalities on clusters.
    enabled boolean
    Indicates the enablement of Advanced Networking observability functionalities on clusters.
    enabled bool
    Indicates the enablement of Advanced Networking observability functionalities on clusters.
    enabled Boolean
    Indicates the enablement of Advanced Networking observability functionalities on clusters.

    AdvancedNetworkingResponse

    Enabled bool
    Indicates the enablement of Advanced Networking functionalities of observability and security on AKS clusters. When this is set to true, all observability and security features will be set to enabled unless explicitly disabled. If not specified, the default is false.
    Observability Pulumi.AzureNative.ContainerService.Inputs.AdvancedNetworkingObservabilityResponse
    Observability profile to enable advanced network metrics and flow logs with historical contexts.
    Security Pulumi.AzureNative.ContainerService.Inputs.AdvancedNetworkingSecurityResponse
    Security profile to enable security features on cilium based cluster.
    Enabled bool
    Indicates the enablement of Advanced Networking functionalities of observability and security on AKS clusters. When this is set to true, all observability and security features will be set to enabled unless explicitly disabled. If not specified, the default is false.
    Observability AdvancedNetworkingObservabilityResponse
    Observability profile to enable advanced network metrics and flow logs with historical contexts.
    Security AdvancedNetworkingSecurityResponse
    Security profile to enable security features on cilium based cluster.
    enabled Boolean
    Indicates the enablement of Advanced Networking functionalities of observability and security on AKS clusters. When this is set to true, all observability and security features will be set to enabled unless explicitly disabled. If not specified, the default is false.
    observability AdvancedNetworkingObservabilityResponse
    Observability profile to enable advanced network metrics and flow logs with historical contexts.
    security AdvancedNetworkingSecurityResponse
    Security profile to enable security features on cilium based cluster.
    enabled boolean
    Indicates the enablement of Advanced Networking functionalities of observability and security on AKS clusters. When this is set to true, all observability and security features will be set to enabled unless explicitly disabled. If not specified, the default is false.
    observability AdvancedNetworkingObservabilityResponse
    Observability profile to enable advanced network metrics and flow logs with historical contexts.
    security AdvancedNetworkingSecurityResponse
    Security profile to enable security features on cilium based cluster.
    enabled bool
    Indicates the enablement of Advanced Networking functionalities of observability and security on AKS clusters. When this is set to true, all observability and security features will be set to enabled unless explicitly disabled. If not specified, the default is false.
    observability AdvancedNetworkingObservabilityResponse
    Observability profile to enable advanced network metrics and flow logs with historical contexts.
    security AdvancedNetworkingSecurityResponse
    Security profile to enable security features on cilium based cluster.
    enabled Boolean
    Indicates the enablement of Advanced Networking functionalities of observability and security on AKS clusters. When this is set to true, all observability and security features will be set to enabled unless explicitly disabled. If not specified, the default is false.
    observability Property Map
    Observability profile to enable advanced network metrics and flow logs with historical contexts.
    security Property Map
    Security profile to enable security features on cilium based cluster.

    AdvancedNetworkingSecurityResponse

    Enabled bool
    This feature allows user to configure network policy based on DNS (FQDN) names. It can be enabled only on cilium based clusters. If not specified, the default is false.
    Enabled bool
    This feature allows user to configure network policy based on DNS (FQDN) names. It can be enabled only on cilium based clusters. If not specified, the default is false.
    enabled Boolean
    This feature allows user to configure network policy based on DNS (FQDN) names. It can be enabled only on cilium based clusters. If not specified, the default is false.
    enabled boolean
    This feature allows user to configure network policy based on DNS (FQDN) names. It can be enabled only on cilium based clusters. If not specified, the default is false.
    enabled bool
    This feature allows user to configure network policy based on DNS (FQDN) names. It can be enabled only on cilium based clusters. If not specified, the default is false.
    enabled Boolean
    This feature allows user to configure network policy based on DNS (FQDN) names. It can be enabled only on cilium based clusters. If not specified, the default is false.

    AgentPoolNetworkProfileResponse

    AllowedHostPorts List<Pulumi.AzureNative.ContainerService.Inputs.PortRangeResponse>
    The port ranges that are allowed to access. The specified ranges are allowed to overlap.
    ApplicationSecurityGroups List<string>
    The IDs of the application security groups which agent pool will associate when created.
    NodePublicIPTags List<Pulumi.AzureNative.ContainerService.Inputs.IPTagResponse>
    IPTags of instance-level public IPs.
    AllowedHostPorts []PortRangeResponse
    The port ranges that are allowed to access. The specified ranges are allowed to overlap.
    ApplicationSecurityGroups []string
    The IDs of the application security groups which agent pool will associate when created.
    NodePublicIPTags []IPTagResponse
    IPTags of instance-level public IPs.
    allowedHostPorts List<PortRangeResponse>
    The port ranges that are allowed to access. The specified ranges are allowed to overlap.
    applicationSecurityGroups List<String>
    The IDs of the application security groups which agent pool will associate when created.
    nodePublicIPTags List<IPTagResponse>
    IPTags of instance-level public IPs.
    allowedHostPorts PortRangeResponse[]
    The port ranges that are allowed to access. The specified ranges are allowed to overlap.
    applicationSecurityGroups string[]
    The IDs of the application security groups which agent pool will associate when created.
    nodePublicIPTags IPTagResponse[]
    IPTags of instance-level public IPs.
    allowed_host_ports Sequence[PortRangeResponse]
    The port ranges that are allowed to access. The specified ranges are allowed to overlap.
    application_security_groups Sequence[str]
    The IDs of the application security groups which agent pool will associate when created.
    node_public_ip_tags Sequence[IPTagResponse]
    IPTags of instance-level public IPs.
    allowedHostPorts List<Property Map>
    The port ranges that are allowed to access. The specified ranges are allowed to overlap.
    applicationSecurityGroups List<String>
    The IDs of the application security groups which agent pool will associate when created.
    nodePublicIPTags List<Property Map>
    IPTags of instance-level public IPs.

    AgentPoolSecurityProfileResponse

    EnableSecureBoot bool
    Secure Boot is a feature of Trusted Launch which ensures that only signed operating systems and drivers can boot. For more details, see aka.ms/aks/trustedlaunch. If not specified, the default is false.
    EnableVTPM bool
    vTPM is a Trusted Launch feature for configuring a dedicated secure vault for keys and measurements held locally on the node. For more details, see aka.ms/aks/trustedlaunch. If not specified, the default is false.
    EnableSecureBoot bool
    Secure Boot is a feature of Trusted Launch which ensures that only signed operating systems and drivers can boot. For more details, see aka.ms/aks/trustedlaunch. If not specified, the default is false.
    EnableVTPM bool
    vTPM is a Trusted Launch feature for configuring a dedicated secure vault for keys and measurements held locally on the node. For more details, see aka.ms/aks/trustedlaunch. If not specified, the default is false.
    enableSecureBoot Boolean
    Secure Boot is a feature of Trusted Launch which ensures that only signed operating systems and drivers can boot. For more details, see aka.ms/aks/trustedlaunch. If not specified, the default is false.
    enableVTPM Boolean
    vTPM is a Trusted Launch feature for configuring a dedicated secure vault for keys and measurements held locally on the node. For more details, see aka.ms/aks/trustedlaunch. If not specified, the default is false.
    enableSecureBoot boolean
    Secure Boot is a feature of Trusted Launch which ensures that only signed operating systems and drivers can boot. For more details, see aka.ms/aks/trustedlaunch. If not specified, the default is false.
    enableVTPM boolean
    vTPM is a Trusted Launch feature for configuring a dedicated secure vault for keys and measurements held locally on the node. For more details, see aka.ms/aks/trustedlaunch. If not specified, the default is false.
    enable_secure_boot bool
    Secure Boot is a feature of Trusted Launch which ensures that only signed operating systems and drivers can boot. For more details, see aka.ms/aks/trustedlaunch. If not specified, the default is false.
    enable_vtpm bool
    vTPM is a Trusted Launch feature for configuring a dedicated secure vault for keys and measurements held locally on the node. For more details, see aka.ms/aks/trustedlaunch. If not specified, the default is false.
    enableSecureBoot Boolean
    Secure Boot is a feature of Trusted Launch which ensures that only signed operating systems and drivers can boot. For more details, see aka.ms/aks/trustedlaunch. If not specified, the default is false.
    enableVTPM Boolean
    vTPM is a Trusted Launch feature for configuring a dedicated secure vault for keys and measurements held locally on the node. For more details, see aka.ms/aks/trustedlaunch. If not specified, the default is false.

    AgentPoolUpgradeSettingsResponse

    DrainTimeoutInMinutes int
    The amount of time (in minutes) to wait on eviction of pods and graceful termination per node. This eviction wait time honors waiting on pod disruption budgets. If this time is exceeded, the upgrade fails. If not specified, the default is 30 minutes.
    MaxSurge string
    This can either be set to an integer (e.g. '5') or a percentage (e.g. '50%'). If a percentage is specified, it is the percentage of the total agent pool size at the time of the upgrade. For percentages, fractional nodes are rounded up. If not specified, the default is 10%. For more information, including best practices, see: https://docs.microsoft.com/azure/aks/upgrade-cluster#customize-node-surge-upgrade
    NodeSoakDurationInMinutes int
    The amount of time (in minutes) to wait after draining a node and before reimaging it and moving on to next node. If not specified, the default is 0 minutes.
    DrainTimeoutInMinutes int
    The amount of time (in minutes) to wait on eviction of pods and graceful termination per node. This eviction wait time honors waiting on pod disruption budgets. If this time is exceeded, the upgrade fails. If not specified, the default is 30 minutes.
    MaxSurge string
    This can either be set to an integer (e.g. '5') or a percentage (e.g. '50%'). If a percentage is specified, it is the percentage of the total agent pool size at the time of the upgrade. For percentages, fractional nodes are rounded up. If not specified, the default is 10%. For more information, including best practices, see: https://docs.microsoft.com/azure/aks/upgrade-cluster#customize-node-surge-upgrade
    NodeSoakDurationInMinutes int
    The amount of time (in minutes) to wait after draining a node and before reimaging it and moving on to next node. If not specified, the default is 0 minutes.
    drainTimeoutInMinutes Integer
    The amount of time (in minutes) to wait on eviction of pods and graceful termination per node. This eviction wait time honors waiting on pod disruption budgets. If this time is exceeded, the upgrade fails. If not specified, the default is 30 minutes.
    maxSurge String
    This can either be set to an integer (e.g. '5') or a percentage (e.g. '50%'). If a percentage is specified, it is the percentage of the total agent pool size at the time of the upgrade. For percentages, fractional nodes are rounded up. If not specified, the default is 10%. For more information, including best practices, see: https://docs.microsoft.com/azure/aks/upgrade-cluster#customize-node-surge-upgrade
    nodeSoakDurationInMinutes Integer
    The amount of time (in minutes) to wait after draining a node and before reimaging it and moving on to next node. If not specified, the default is 0 minutes.
    drainTimeoutInMinutes number
    The amount of time (in minutes) to wait on eviction of pods and graceful termination per node. This eviction wait time honors waiting on pod disruption budgets. If this time is exceeded, the upgrade fails. If not specified, the default is 30 minutes.
    maxSurge string
    This can either be set to an integer (e.g. '5') or a percentage (e.g. '50%'). If a percentage is specified, it is the percentage of the total agent pool size at the time of the upgrade. For percentages, fractional nodes are rounded up. If not specified, the default is 10%. For more information, including best practices, see: https://docs.microsoft.com/azure/aks/upgrade-cluster#customize-node-surge-upgrade
    nodeSoakDurationInMinutes number
    The amount of time (in minutes) to wait after draining a node and before reimaging it and moving on to next node. If not specified, the default is 0 minutes.
    drain_timeout_in_minutes int
    The amount of time (in minutes) to wait on eviction of pods and graceful termination per node. This eviction wait time honors waiting on pod disruption budgets. If this time is exceeded, the upgrade fails. If not specified, the default is 30 minutes.
    max_surge str
    This can either be set to an integer (e.g. '5') or a percentage (e.g. '50%'). If a percentage is specified, it is the percentage of the total agent pool size at the time of the upgrade. For percentages, fractional nodes are rounded up. If not specified, the default is 10%. For more information, including best practices, see: https://docs.microsoft.com/azure/aks/upgrade-cluster#customize-node-surge-upgrade
    node_soak_duration_in_minutes int
    The amount of time (in minutes) to wait after draining a node and before reimaging it and moving on to next node. If not specified, the default is 0 minutes.
    drainTimeoutInMinutes Number
    The amount of time (in minutes) to wait on eviction of pods and graceful termination per node. This eviction wait time honors waiting on pod disruption budgets. If this time is exceeded, the upgrade fails. If not specified, the default is 30 minutes.
    maxSurge String
    This can either be set to an integer (e.g. '5') or a percentage (e.g. '50%'). If a percentage is specified, it is the percentage of the total agent pool size at the time of the upgrade. For percentages, fractional nodes are rounded up. If not specified, the default is 10%. For more information, including best practices, see: https://docs.microsoft.com/azure/aks/upgrade-cluster#customize-node-surge-upgrade
    nodeSoakDurationInMinutes Number
    The amount of time (in minutes) to wait after draining a node and before reimaging it and moving on to next node. If not specified, the default is 0 minutes.

    AgentPoolWindowsProfileResponse

    DisableOutboundNat bool
    The default value is false. Outbound NAT can only be disabled if the cluster outboundType is NAT Gateway and the Windows agent pool does not have node public IP enabled.
    DisableOutboundNat bool
    The default value is false. Outbound NAT can only be disabled if the cluster outboundType is NAT Gateway and the Windows agent pool does not have node public IP enabled.
    disableOutboundNat Boolean
    The default value is false. Outbound NAT can only be disabled if the cluster outboundType is NAT Gateway and the Windows agent pool does not have node public IP enabled.
    disableOutboundNat boolean
    The default value is false. Outbound NAT can only be disabled if the cluster outboundType is NAT Gateway and the Windows agent pool does not have node public IP enabled.
    disable_outbound_nat bool
    The default value is false. Outbound NAT can only be disabled if the cluster outboundType is NAT Gateway and the Windows agent pool does not have node public IP enabled.
    disableOutboundNat Boolean
    The default value is false. Outbound NAT can only be disabled if the cluster outboundType is NAT Gateway and the Windows agent pool does not have node public IP enabled.

    AzureKeyVaultKmsResponse

    Enabled bool
    Whether to enable Azure Key Vault key management service. The default is false.
    KeyId string
    Identifier of Azure Key Vault key. See key identifier format for more details. When Azure Key Vault key management service is enabled, this field is required and must be a valid key identifier. When Azure Key Vault key management service is disabled, leave the field empty.
    KeyVaultNetworkAccess string
    Network access of key vault. The possible values are Public and Private. Public means the key vault allows public access from all networks. Private means the key vault disables public access and enables private link. The default value is Public.
    KeyVaultResourceId string
    Resource ID of key vault. When keyVaultNetworkAccess is Private, this field is required and must be a valid resource ID. When keyVaultNetworkAccess is Public, leave the field empty.
    Enabled bool
    Whether to enable Azure Key Vault key management service. The default is false.
    KeyId string
    Identifier of Azure Key Vault key. See key identifier format for more details. When Azure Key Vault key management service is enabled, this field is required and must be a valid key identifier. When Azure Key Vault key management service is disabled, leave the field empty.
    KeyVaultNetworkAccess string
    Network access of key vault. The possible values are Public and Private. Public means the key vault allows public access from all networks. Private means the key vault disables public access and enables private link. The default value is Public.
    KeyVaultResourceId string
    Resource ID of key vault. When keyVaultNetworkAccess is Private, this field is required and must be a valid resource ID. When keyVaultNetworkAccess is Public, leave the field empty.
    enabled Boolean
    Whether to enable Azure Key Vault key management service. The default is false.
    keyId String
    Identifier of Azure Key Vault key. See key identifier format for more details. When Azure Key Vault key management service is enabled, this field is required and must be a valid key identifier. When Azure Key Vault key management service is disabled, leave the field empty.
    keyVaultNetworkAccess String
    Network access of key vault. The possible values are Public and Private. Public means the key vault allows public access from all networks. Private means the key vault disables public access and enables private link. The default value is Public.
    keyVaultResourceId String
    Resource ID of key vault. When keyVaultNetworkAccess is Private, this field is required and must be a valid resource ID. When keyVaultNetworkAccess is Public, leave the field empty.
    enabled boolean
    Whether to enable Azure Key Vault key management service. The default is false.
    keyId string
    Identifier of Azure Key Vault key. See key identifier format for more details. When Azure Key Vault key management service is enabled, this field is required and must be a valid key identifier. When Azure Key Vault key management service is disabled, leave the field empty.
    keyVaultNetworkAccess string
    Network access of key vault. The possible values are Public and Private. Public means the key vault allows public access from all networks. Private means the key vault disables public access and enables private link. The default value is Public.
    keyVaultResourceId string
    Resource ID of key vault. When keyVaultNetworkAccess is Private, this field is required and must be a valid resource ID. When keyVaultNetworkAccess is Public, leave the field empty.
    enabled bool
    Whether to enable Azure Key Vault key management service. The default is false.
    key_id str
    Identifier of Azure Key Vault key. See key identifier format for more details. When Azure Key Vault key management service is enabled, this field is required and must be a valid key identifier. When Azure Key Vault key management service is disabled, leave the field empty.
    key_vault_network_access str
    Network access of key vault. The possible values are Public and Private. Public means the key vault allows public access from all networks. Private means the key vault disables public access and enables private link. The default value is Public.
    key_vault_resource_id str
    Resource ID of key vault. When keyVaultNetworkAccess is Private, this field is required and must be a valid resource ID. When keyVaultNetworkAccess is Public, leave the field empty.
    enabled Boolean
    Whether to enable Azure Key Vault key management service. The default is false.
    keyId String
    Identifier of Azure Key Vault key. See key identifier format for more details. When Azure Key Vault key management service is enabled, this field is required and must be a valid key identifier. When Azure Key Vault key management service is disabled, leave the field empty.
    keyVaultNetworkAccess String
    Network access of key vault. The possible values are Public and Private. Public means the key vault allows public access from all networks. Private means the key vault disables public access and enables private link. The default value is Public.
    keyVaultResourceId String
    Resource ID of key vault. When keyVaultNetworkAccess is Private, this field is required and must be a valid resource ID. When keyVaultNetworkAccess is Public, leave the field empty.

    ClusterUpgradeSettingsResponse

    overrideSettings Property Map
    Settings for overrides.

    ContainerServiceLinuxProfileResponse

    AdminUsername string
    The administrator username to use for Linux VMs.
    Ssh Pulumi.AzureNative.ContainerService.Inputs.ContainerServiceSshConfigurationResponse
    The SSH configuration for Linux-based VMs running on Azure.
    AdminUsername string
    The administrator username to use for Linux VMs.
    Ssh ContainerServiceSshConfigurationResponse
    The SSH configuration for Linux-based VMs running on Azure.
    adminUsername String
    The administrator username to use for Linux VMs.
    ssh ContainerServiceSshConfigurationResponse
    The SSH configuration for Linux-based VMs running on Azure.
    adminUsername string
    The administrator username to use for Linux VMs.
    ssh ContainerServiceSshConfigurationResponse
    The SSH configuration for Linux-based VMs running on Azure.
    admin_username str
    The administrator username to use for Linux VMs.
    ssh ContainerServiceSshConfigurationResponse
    The SSH configuration for Linux-based VMs running on Azure.
    adminUsername String
    The administrator username to use for Linux VMs.
    ssh Property Map
    The SSH configuration for Linux-based VMs running on Azure.

    ContainerServiceNetworkProfileResponse

    AdvancedNetworking Pulumi.AzureNative.ContainerService.Inputs.AdvancedNetworkingResponse
    Advanced Networking profile for enabling observability and security feature suite on a cluster. For more information see aka.ms/aksadvancednetworking.
    DnsServiceIP string
    An IP address assigned to the Kubernetes DNS service. It must be within the Kubernetes service address range specified in serviceCidr.
    IpFamilies List<string>
    IP families are used to determine single-stack or dual-stack clusters. For single-stack, the expected value is IPv4. For dual-stack, the expected values are IPv4 and IPv6.
    LoadBalancerProfile Pulumi.AzureNative.ContainerService.Inputs.ManagedClusterLoadBalancerProfileResponse
    Profile of the cluster load balancer.
    LoadBalancerSku string
    The default is 'standard'. See Azure Load Balancer SKUs for more information about the differences between load balancer SKUs.
    NatGatewayProfile Pulumi.AzureNative.ContainerService.Inputs.ManagedClusterNATGatewayProfileResponse
    Profile of the cluster NAT gateway.
    NetworkDataplane string
    Network dataplane used in the Kubernetes cluster.
    NetworkMode string
    This cannot be specified if networkPlugin is anything other than 'azure'.
    NetworkPlugin string
    Network plugin used for building the Kubernetes network.
    NetworkPluginMode string
    The mode the network plugin should use.
    NetworkPolicy string
    Network policy used for building the Kubernetes network.
    OutboundType string
    This can only be set at cluster creation time and cannot be changed later. For more information see egress outbound type.
    PodCidr string
    A CIDR notation IP range from which to assign pod IPs when kubenet is used.
    PodCidrs List<string>
    One IPv4 CIDR is expected for single-stack networking. Two CIDRs, one for each IP family (IPv4/IPv6), is expected for dual-stack networking.
    ServiceCidr string
    A CIDR notation IP range from which to assign service cluster IPs. It must not overlap with any Subnet IP ranges.
    ServiceCidrs List<string>
    One IPv4 CIDR is expected for single-stack networking. Two CIDRs, one for each IP family (IPv4/IPv6), is expected for dual-stack networking. They must not overlap with any Subnet IP ranges.
    AdvancedNetworking AdvancedNetworkingResponse
    Advanced Networking profile for enabling observability and security feature suite on a cluster. For more information see aka.ms/aksadvancednetworking.
    DnsServiceIP string
    An IP address assigned to the Kubernetes DNS service. It must be within the Kubernetes service address range specified in serviceCidr.
    IpFamilies []string
    IP families are used to determine single-stack or dual-stack clusters. For single-stack, the expected value is IPv4. For dual-stack, the expected values are IPv4 and IPv6.
    LoadBalancerProfile ManagedClusterLoadBalancerProfileResponse
    Profile of the cluster load balancer.
    LoadBalancerSku string
    The default is 'standard'. See Azure Load Balancer SKUs for more information about the differences between load balancer SKUs.
    NatGatewayProfile ManagedClusterNATGatewayProfileResponse
    Profile of the cluster NAT gateway.
    NetworkDataplane string
    Network dataplane used in the Kubernetes cluster.
    NetworkMode string
    This cannot be specified if networkPlugin is anything other than 'azure'.
    NetworkPlugin string
    Network plugin used for building the Kubernetes network.
    NetworkPluginMode string
    The mode the network plugin should use.
    NetworkPolicy string
    Network policy used for building the Kubernetes network.
    OutboundType string
    This can only be set at cluster creation time and cannot be changed later. For more information see egress outbound type.
    PodCidr string
    A CIDR notation IP range from which to assign pod IPs when kubenet is used.
    PodCidrs []string
    One IPv4 CIDR is expected for single-stack networking. Two CIDRs, one for each IP family (IPv4/IPv6), is expected for dual-stack networking.
    ServiceCidr string
    A CIDR notation IP range from which to assign service cluster IPs. It must not overlap with any Subnet IP ranges.
    ServiceCidrs []string
    One IPv4 CIDR is expected for single-stack networking. Two CIDRs, one for each IP family (IPv4/IPv6), is expected for dual-stack networking. They must not overlap with any Subnet IP ranges.
    advancedNetworking AdvancedNetworkingResponse
    Advanced Networking profile for enabling observability and security feature suite on a cluster. For more information see aka.ms/aksadvancednetworking.
    dnsServiceIP String
    An IP address assigned to the Kubernetes DNS service. It must be within the Kubernetes service address range specified in serviceCidr.
    ipFamilies List<String>
    IP families are used to determine single-stack or dual-stack clusters. For single-stack, the expected value is IPv4. For dual-stack, the expected values are IPv4 and IPv6.
    loadBalancerProfile ManagedClusterLoadBalancerProfileResponse
    Profile of the cluster load balancer.
    loadBalancerSku String
    The default is 'standard'. See Azure Load Balancer SKUs for more information about the differences between load balancer SKUs.
    natGatewayProfile ManagedClusterNATGatewayProfileResponse
    Profile of the cluster NAT gateway.
    networkDataplane String
    Network dataplane used in the Kubernetes cluster.
    networkMode String
    This cannot be specified if networkPlugin is anything other than 'azure'.
    networkPlugin String
    Network plugin used for building the Kubernetes network.
    networkPluginMode String
    The mode the network plugin should use.
    networkPolicy String
    Network policy used for building the Kubernetes network.
    outboundType String
    This can only be set at cluster creation time and cannot be changed later. For more information see egress outbound type.
    podCidr String
    A CIDR notation IP range from which to assign pod IPs when kubenet is used.
    podCidrs List<String>
    One IPv4 CIDR is expected for single-stack networking. Two CIDRs, one for each IP family (IPv4/IPv6), is expected for dual-stack networking.
    serviceCidr String
    A CIDR notation IP range from which to assign service cluster IPs. It must not overlap with any Subnet IP ranges.
    serviceCidrs List<String>
    One IPv4 CIDR is expected for single-stack networking. Two CIDRs, one for each IP family (IPv4/IPv6), is expected for dual-stack networking. They must not overlap with any Subnet IP ranges.
    advancedNetworking AdvancedNetworkingResponse
    Advanced Networking profile for enabling observability and security feature suite on a cluster. For more information see aka.ms/aksadvancednetworking.
    dnsServiceIP string
    An IP address assigned to the Kubernetes DNS service. It must be within the Kubernetes service address range specified in serviceCidr.
    ipFamilies string[]
    IP families are used to determine single-stack or dual-stack clusters. For single-stack, the expected value is IPv4. For dual-stack, the expected values are IPv4 and IPv6.
    loadBalancerProfile ManagedClusterLoadBalancerProfileResponse
    Profile of the cluster load balancer.
    loadBalancerSku string
    The default is 'standard'. See Azure Load Balancer SKUs for more information about the differences between load balancer SKUs.
    natGatewayProfile ManagedClusterNATGatewayProfileResponse
    Profile of the cluster NAT gateway.
    networkDataplane string
    Network dataplane used in the Kubernetes cluster.
    networkMode string
    This cannot be specified if networkPlugin is anything other than 'azure'.
    networkPlugin string
    Network plugin used for building the Kubernetes network.
    networkPluginMode string
    The mode the network plugin should use.
    networkPolicy string
    Network policy used for building the Kubernetes network.
    outboundType string
    This can only be set at cluster creation time and cannot be changed later. For more information see egress outbound type.
    podCidr string
    A CIDR notation IP range from which to assign pod IPs when kubenet is used.
    podCidrs string[]
    One IPv4 CIDR is expected for single-stack networking. Two CIDRs, one for each IP family (IPv4/IPv6), is expected for dual-stack networking.
    serviceCidr string
    A CIDR notation IP range from which to assign service cluster IPs. It must not overlap with any Subnet IP ranges.
    serviceCidrs string[]
    One IPv4 CIDR is expected for single-stack networking. Two CIDRs, one for each IP family (IPv4/IPv6), is expected for dual-stack networking. They must not overlap with any Subnet IP ranges.
    advanced_networking AdvancedNetworkingResponse
    Advanced Networking profile for enabling observability and security feature suite on a cluster. For more information see aka.ms/aksadvancednetworking.
    dns_service_ip str
    An IP address assigned to the Kubernetes DNS service. It must be within the Kubernetes service address range specified in serviceCidr.
    ip_families Sequence[str]
    IP families are used to determine single-stack or dual-stack clusters. For single-stack, the expected value is IPv4. For dual-stack, the expected values are IPv4 and IPv6.
    load_balancer_profile ManagedClusterLoadBalancerProfileResponse
    Profile of the cluster load balancer.
    load_balancer_sku str
    The default is 'standard'. See Azure Load Balancer SKUs for more information about the differences between load balancer SKUs.
    nat_gateway_profile ManagedClusterNATGatewayProfileResponse
    Profile of the cluster NAT gateway.
    network_dataplane str
    Network dataplane used in the Kubernetes cluster.
    network_mode str
    This cannot be specified if networkPlugin is anything other than 'azure'.
    network_plugin str
    Network plugin used for building the Kubernetes network.
    network_plugin_mode str
    The mode the network plugin should use.
    network_policy str
    Network policy used for building the Kubernetes network.
    outbound_type str
    This can only be set at cluster creation time and cannot be changed later. For more information see egress outbound type.
    pod_cidr str
    A CIDR notation IP range from which to assign pod IPs when kubenet is used.
    pod_cidrs Sequence[str]
    One IPv4 CIDR is expected for single-stack networking. Two CIDRs, one for each IP family (IPv4/IPv6), is expected for dual-stack networking.
    service_cidr str
    A CIDR notation IP range from which to assign service cluster IPs. It must not overlap with any Subnet IP ranges.
    service_cidrs Sequence[str]
    One IPv4 CIDR is expected for single-stack networking. Two CIDRs, one for each IP family (IPv4/IPv6), is expected for dual-stack networking. They must not overlap with any Subnet IP ranges.
    advancedNetworking Property Map
    Advanced Networking profile for enabling observability and security feature suite on a cluster. For more information see aka.ms/aksadvancednetworking.
    dnsServiceIP String
    An IP address assigned to the Kubernetes DNS service. It must be within the Kubernetes service address range specified in serviceCidr.
    ipFamilies List<String>
    IP families are used to determine single-stack or dual-stack clusters. For single-stack, the expected value is IPv4. For dual-stack, the expected values are IPv4 and IPv6.
    loadBalancerProfile Property Map
    Profile of the cluster load balancer.
    loadBalancerSku String
    The default is 'standard'. See Azure Load Balancer SKUs for more information about the differences between load balancer SKUs.
    natGatewayProfile Property Map
    Profile of the cluster NAT gateway.
    networkDataplane String
    Network dataplane used in the Kubernetes cluster.
    networkMode String
    This cannot be specified if networkPlugin is anything other than 'azure'.
    networkPlugin String
    Network plugin used for building the Kubernetes network.
    networkPluginMode String
    The mode the network plugin should use.
    networkPolicy String
    Network policy used for building the Kubernetes network.
    outboundType String
    This can only be set at cluster creation time and cannot be changed later. For more information see egress outbound type.
    podCidr String
    A CIDR notation IP range from which to assign pod IPs when kubenet is used.
    podCidrs List<String>
    One IPv4 CIDR is expected for single-stack networking. Two CIDRs, one for each IP family (IPv4/IPv6), is expected for dual-stack networking.
    serviceCidr String
    A CIDR notation IP range from which to assign service cluster IPs. It must not overlap with any Subnet IP ranges.
    serviceCidrs List<String>
    One IPv4 CIDR is expected for single-stack networking. Two CIDRs, one for each IP family (IPv4/IPv6), is expected for dual-stack networking. They must not overlap with any Subnet IP ranges.

    ContainerServiceSshConfigurationResponse

    PublicKeys List<Pulumi.AzureNative.ContainerService.Inputs.ContainerServiceSshPublicKeyResponse>
    The list of SSH public keys used to authenticate with Linux-based VMs. A maximum of 1 key may be specified.
    PublicKeys []ContainerServiceSshPublicKeyResponse
    The list of SSH public keys used to authenticate with Linux-based VMs. A maximum of 1 key may be specified.
    publicKeys List<ContainerServiceSshPublicKeyResponse>
    The list of SSH public keys used to authenticate with Linux-based VMs. A maximum of 1 key may be specified.
    publicKeys ContainerServiceSshPublicKeyResponse[]
    The list of SSH public keys used to authenticate with Linux-based VMs. A maximum of 1 key may be specified.
    public_keys Sequence[ContainerServiceSshPublicKeyResponse]
    The list of SSH public keys used to authenticate with Linux-based VMs. A maximum of 1 key may be specified.
    publicKeys List<Property Map>
    The list of SSH public keys used to authenticate with Linux-based VMs. A maximum of 1 key may be specified.

    ContainerServiceSshPublicKeyResponse

    KeyData string
    Certificate public key used to authenticate with VMs through SSH. The certificate must be in PEM format with or without headers.
    KeyData string
    Certificate public key used to authenticate with VMs through SSH. The certificate must be in PEM format with or without headers.
    keyData String
    Certificate public key used to authenticate with VMs through SSH. The certificate must be in PEM format with or without headers.
    keyData string
    Certificate public key used to authenticate with VMs through SSH. The certificate must be in PEM format with or without headers.
    key_data str
    Certificate public key used to authenticate with VMs through SSH. The certificate must be in PEM format with or without headers.
    keyData String
    Certificate public key used to authenticate with VMs through SSH. The certificate must be in PEM format with or without headers.

    CreationDataResponse

    SourceResourceId string
    This is the ARM ID of the source object to be used to create the target object.
    SourceResourceId string
    This is the ARM ID of the source object to be used to create the target object.
    sourceResourceId String
    This is the ARM ID of the source object to be used to create the target object.
    sourceResourceId string
    This is the ARM ID of the source object to be used to create the target object.
    source_resource_id str
    This is the ARM ID of the source object to be used to create the target object.
    sourceResourceId String
    This is the ARM ID of the source object to be used to create the target object.

    DelegatedResourceResponse

    Location string
    The source resource location - internal use only.
    ReferralResource string
    The delegation id of the referral delegation (optional) - internal use only.
    ResourceId string
    The ARM resource id of the delegated resource - internal use only.
    TenantId string
    The tenant id of the delegated resource - internal use only.
    Location string
    The source resource location - internal use only.
    ReferralResource string
    The delegation id of the referral delegation (optional) - internal use only.
    ResourceId string
    The ARM resource id of the delegated resource - internal use only.
    TenantId string
    The tenant id of the delegated resource - internal use only.
    location String
    The source resource location - internal use only.
    referralResource String
    The delegation id of the referral delegation (optional) - internal use only.
    resourceId String
    The ARM resource id of the delegated resource - internal use only.
    tenantId String
    The tenant id of the delegated resource - internal use only.
    location string
    The source resource location - internal use only.
    referralResource string
    The delegation id of the referral delegation (optional) - internal use only.
    resourceId string
    The ARM resource id of the delegated resource - internal use only.
    tenantId string
    The tenant id of the delegated resource - internal use only.
    location str
    The source resource location - internal use only.
    referral_resource str
    The delegation id of the referral delegation (optional) - internal use only.
    resource_id str
    The ARM resource id of the delegated resource - internal use only.
    tenant_id str
    The tenant id of the delegated resource - internal use only.
    location String
    The source resource location - internal use only.
    referralResource String
    The delegation id of the referral delegation (optional) - internal use only.
    resourceId String
    The ARM resource id of the delegated resource - internal use only.
    tenantId String
    The tenant id of the delegated resource - internal use only.

    ExtendedLocationResponse

    Name string
    The name of the extended location.
    Type string
    The type of the extended location.
    Name string
    The name of the extended location.
    Type string
    The type of the extended location.
    name String
    The name of the extended location.
    type String
    The type of the extended location.
    name string
    The name of the extended location.
    type string
    The type of the extended location.
    name str
    The name of the extended location.
    type str
    The type of the extended location.
    name String
    The name of the extended location.
    type String
    The type of the extended location.

    IPTagResponse

    IpTagType string
    The IP tag type. Example: RoutingPreference.
    Tag string
    The value of the IP tag associated with the public IP. Example: Internet.
    IpTagType string
    The IP tag type. Example: RoutingPreference.
    Tag string
    The value of the IP tag associated with the public IP. Example: Internet.
    ipTagType String
    The IP tag type. Example: RoutingPreference.
    tag String
    The value of the IP tag associated with the public IP. Example: Internet.
    ipTagType string
    The IP tag type. Example: RoutingPreference.
    tag string
    The value of the IP tag associated with the public IP. Example: Internet.
    ip_tag_type str
    The IP tag type. Example: RoutingPreference.
    tag str
    The value of the IP tag associated with the public IP. Example: Internet.
    ipTagType String
    The IP tag type. Example: RoutingPreference.
    tag String
    The value of the IP tag associated with the public IP. Example: Internet.

    IstioCertificateAuthorityResponse

    Plugin IstioPluginCertificateAuthorityResponse
    Plugin certificates information for Service Mesh.
    plugin IstioPluginCertificateAuthorityResponse
    Plugin certificates information for Service Mesh.
    plugin IstioPluginCertificateAuthorityResponse
    Plugin certificates information for Service Mesh.
    plugin IstioPluginCertificateAuthorityResponse
    Plugin certificates information for Service Mesh.
    plugin Property Map
    Plugin certificates information for Service Mesh.

    IstioComponentsResponse

    egressGateways List<Property Map>
    Istio egress gateways.
    ingressGateways List<Property Map>
    Istio ingress gateways.

    IstioEgressGatewayResponse

    Enabled bool
    Whether to enable the egress gateway.
    Enabled bool
    Whether to enable the egress gateway.
    enabled Boolean
    Whether to enable the egress gateway.
    enabled boolean
    Whether to enable the egress gateway.
    enabled bool
    Whether to enable the egress gateway.
    enabled Boolean
    Whether to enable the egress gateway.

    IstioIngressGatewayResponse

    Enabled bool
    Whether to enable the ingress gateway.
    Mode string
    Mode of an ingress gateway.
    Enabled bool
    Whether to enable the ingress gateway.
    Mode string
    Mode of an ingress gateway.
    enabled Boolean
    Whether to enable the ingress gateway.
    mode String
    Mode of an ingress gateway.
    enabled boolean
    Whether to enable the ingress gateway.
    mode string
    Mode of an ingress gateway.
    enabled bool
    Whether to enable the ingress gateway.
    mode str
    Mode of an ingress gateway.
    enabled Boolean
    Whether to enable the ingress gateway.
    mode String
    Mode of an ingress gateway.

    IstioPluginCertificateAuthorityResponse

    CertChainObjectName string
    Certificate chain object name in Azure Key Vault.
    CertObjectName string
    Intermediate certificate object name in Azure Key Vault.
    KeyObjectName string
    Intermediate certificate private key object name in Azure Key Vault.
    KeyVaultId string
    The resource ID of the Key Vault.
    RootCertObjectName string
    Root certificate object name in Azure Key Vault.
    CertChainObjectName string
    Certificate chain object name in Azure Key Vault.
    CertObjectName string
    Intermediate certificate object name in Azure Key Vault.
    KeyObjectName string
    Intermediate certificate private key object name in Azure Key Vault.
    KeyVaultId string
    The resource ID of the Key Vault.
    RootCertObjectName string
    Root certificate object name in Azure Key Vault.
    certChainObjectName String
    Certificate chain object name in Azure Key Vault.
    certObjectName String
    Intermediate certificate object name in Azure Key Vault.
    keyObjectName String
    Intermediate certificate private key object name in Azure Key Vault.
    keyVaultId String
    The resource ID of the Key Vault.
    rootCertObjectName String
    Root certificate object name in Azure Key Vault.
    certChainObjectName string
    Certificate chain object name in Azure Key Vault.
    certObjectName string
    Intermediate certificate object name in Azure Key Vault.
    keyObjectName string
    Intermediate certificate private key object name in Azure Key Vault.
    keyVaultId string
    The resource ID of the Key Vault.
    rootCertObjectName string
    Root certificate object name in Azure Key Vault.
    cert_chain_object_name str
    Certificate chain object name in Azure Key Vault.
    cert_object_name str
    Intermediate certificate object name in Azure Key Vault.
    key_object_name str
    Intermediate certificate private key object name in Azure Key Vault.
    key_vault_id str
    The resource ID of the Key Vault.
    root_cert_object_name str
    Root certificate object name in Azure Key Vault.
    certChainObjectName String
    Certificate chain object name in Azure Key Vault.
    certObjectName String
    Intermediate certificate object name in Azure Key Vault.
    keyObjectName String
    Intermediate certificate private key object name in Azure Key Vault.
    keyVaultId String
    The resource ID of the Key Vault.
    rootCertObjectName String
    Root certificate object name in Azure Key Vault.

    IstioServiceMeshResponse

    CertificateAuthority Pulumi.AzureNative.ContainerService.Inputs.IstioCertificateAuthorityResponse
    Istio Service Mesh Certificate Authority (CA) configuration. For now, we only support plugin certificates as described here https://aka.ms/asm-plugin-ca
    Components Pulumi.AzureNative.ContainerService.Inputs.IstioComponentsResponse
    Istio components configuration.
    Revisions List<string>
    The list of revisions of the Istio control plane. When an upgrade is not in progress, this holds one value. When canary upgrade is in progress, this can only hold two consecutive values. For more information, see: https://learn.microsoft.com/en-us/azure/aks/istio-upgrade
    CertificateAuthority IstioCertificateAuthorityResponse
    Istio Service Mesh Certificate Authority (CA) configuration. For now, we only support plugin certificates as described here https://aka.ms/asm-plugin-ca
    Components IstioComponentsResponse
    Istio components configuration.
    Revisions []string
    The list of revisions of the Istio control plane. When an upgrade is not in progress, this holds one value. When canary upgrade is in progress, this can only hold two consecutive values. For more information, see: https://learn.microsoft.com/en-us/azure/aks/istio-upgrade
    certificateAuthority IstioCertificateAuthorityResponse
    Istio Service Mesh Certificate Authority (CA) configuration. For now, we only support plugin certificates as described here https://aka.ms/asm-plugin-ca
    components IstioComponentsResponse
    Istio components configuration.
    revisions List<String>
    The list of revisions of the Istio control plane. When an upgrade is not in progress, this holds one value. When canary upgrade is in progress, this can only hold two consecutive values. For more information, see: https://learn.microsoft.com/en-us/azure/aks/istio-upgrade
    certificateAuthority IstioCertificateAuthorityResponse
    Istio Service Mesh Certificate Authority (CA) configuration. For now, we only support plugin certificates as described here https://aka.ms/asm-plugin-ca
    components IstioComponentsResponse
    Istio components configuration.
    revisions string[]
    The list of revisions of the Istio control plane. When an upgrade is not in progress, this holds one value. When canary upgrade is in progress, this can only hold two consecutive values. For more information, see: https://learn.microsoft.com/en-us/azure/aks/istio-upgrade
    certificate_authority IstioCertificateAuthorityResponse
    Istio Service Mesh Certificate Authority (CA) configuration. For now, we only support plugin certificates as described here https://aka.ms/asm-plugin-ca
    components IstioComponentsResponse
    Istio components configuration.
    revisions Sequence[str]
    The list of revisions of the Istio control plane. When an upgrade is not in progress, this holds one value. When canary upgrade is in progress, this can only hold two consecutive values. For more information, see: https://learn.microsoft.com/en-us/azure/aks/istio-upgrade
    certificateAuthority Property Map
    Istio Service Mesh Certificate Authority (CA) configuration. For now, we only support plugin certificates as described here https://aka.ms/asm-plugin-ca
    components Property Map
    Istio components configuration.
    revisions List<String>
    The list of revisions of the Istio control plane. When an upgrade is not in progress, this holds one value. When canary upgrade is in progress, this can only hold two consecutive values. For more information, see: https://learn.microsoft.com/en-us/azure/aks/istio-upgrade

    KubeletConfigResponse

    AllowedUnsafeSysctls List<string>
    Allowed list of unsafe sysctls or unsafe sysctl patterns (ending in *).
    ContainerLogMaxFiles int
    The maximum number of container log files that can be present for a container. The number must be ≥ 2.
    ContainerLogMaxSizeMB int
    The maximum size (e.g. 10Mi) of container log file before it is rotated.
    CpuCfsQuota bool
    The default is true.
    CpuCfsQuotaPeriod string
    The default is '100ms.' Valid values are a sequence of decimal numbers with an optional fraction and a unit suffix. For example: '300ms', '2h45m'. Supported units are 'ns', 'us', 'ms', 's', 'm', and 'h'.
    CpuManagerPolicy string
    The default is 'none'. See Kubernetes CPU management policies for more information. Allowed values are 'none' and 'static'.
    FailSwapOn bool
    If set to true it will make the Kubelet fail to start if swap is enabled on the node.
    ImageGcHighThreshold int
    To disable image garbage collection, set to 100. The default is 85%
    ImageGcLowThreshold int
    This cannot be set higher than imageGcHighThreshold. The default is 80%
    PodMaxPids int
    The maximum number of processes per pod.
    TopologyManagerPolicy string
    For more information see Kubernetes Topology Manager. The default is 'none'. Allowed values are 'none', 'best-effort', 'restricted', and 'single-numa-node'.
    AllowedUnsafeSysctls []string
    Allowed list of unsafe sysctls or unsafe sysctl patterns (ending in *).
    ContainerLogMaxFiles int
    The maximum number of container log files that can be present for a container. The number must be ≥ 2.
    ContainerLogMaxSizeMB int
    The maximum size (e.g. 10Mi) of container log file before it is rotated.
    CpuCfsQuota bool
    The default is true.
    CpuCfsQuotaPeriod string
    The default is '100ms.' Valid values are a sequence of decimal numbers with an optional fraction and a unit suffix. For example: '300ms', '2h45m'. Supported units are 'ns', 'us', 'ms', 's', 'm', and 'h'.
    CpuManagerPolicy string
    The default is 'none'. See Kubernetes CPU management policies for more information. Allowed values are 'none' and 'static'.
    FailSwapOn bool
    If set to true it will make the Kubelet fail to start if swap is enabled on the node.
    ImageGcHighThreshold int
    To disable image garbage collection, set to 100. The default is 85%
    ImageGcLowThreshold int
    This cannot be set higher than imageGcHighThreshold. The default is 80%
    PodMaxPids int
    The maximum number of processes per pod.
    TopologyManagerPolicy string
    For more information see Kubernetes Topology Manager. The default is 'none'. Allowed values are 'none', 'best-effort', 'restricted', and 'single-numa-node'.
    allowedUnsafeSysctls List<String>
    Allowed list of unsafe sysctls or unsafe sysctl patterns (ending in *).
    containerLogMaxFiles Integer
    The maximum number of container log files that can be present for a container. The number must be ≥ 2.
    containerLogMaxSizeMB Integer
    The maximum size (e.g. 10Mi) of container log file before it is rotated.
    cpuCfsQuota Boolean
    The default is true.
    cpuCfsQuotaPeriod String
    The default is '100ms.' Valid values are a sequence of decimal numbers with an optional fraction and a unit suffix. For example: '300ms', '2h45m'. Supported units are 'ns', 'us', 'ms', 's', 'm', and 'h'.
    cpuManagerPolicy String
    The default is 'none'. See Kubernetes CPU management policies for more information. Allowed values are 'none' and 'static'.
    failSwapOn Boolean
    If set to true it will make the Kubelet fail to start if swap is enabled on the node.
    imageGcHighThreshold Integer
    To disable image garbage collection, set to 100. The default is 85%
    imageGcLowThreshold Integer
    This cannot be set higher than imageGcHighThreshold. The default is 80%
    podMaxPids Integer
    The maximum number of processes per pod.
    topologyManagerPolicy String
    For more information see Kubernetes Topology Manager. The default is 'none'. Allowed values are 'none', 'best-effort', 'restricted', and 'single-numa-node'.
    allowedUnsafeSysctls string[]
    Allowed list of unsafe sysctls or unsafe sysctl patterns (ending in *).
    containerLogMaxFiles number
    The maximum number of container log files that can be present for a container. The number must be ≥ 2.
    containerLogMaxSizeMB number
    The maximum size (e.g. 10Mi) of container log file before it is rotated.
    cpuCfsQuota boolean
    The default is true.
    cpuCfsQuotaPeriod string
    The default is '100ms.' Valid values are a sequence of decimal numbers with an optional fraction and a unit suffix. For example: '300ms', '2h45m'. Supported units are 'ns', 'us', 'ms', 's', 'm', and 'h'.
    cpuManagerPolicy string
    The default is 'none'. See Kubernetes CPU management policies for more information. Allowed values are 'none' and 'static'.
    failSwapOn boolean
    If set to true it will make the Kubelet fail to start if swap is enabled on the node.
    imageGcHighThreshold number
    To disable image garbage collection, set to 100. The default is 85%
    imageGcLowThreshold number
    This cannot be set higher than imageGcHighThreshold. The default is 80%
    podMaxPids number
    The maximum number of processes per pod.
    topologyManagerPolicy string
    For more information see Kubernetes Topology Manager. The default is 'none'. Allowed values are 'none', 'best-effort', 'restricted', and 'single-numa-node'.
    allowed_unsafe_sysctls Sequence[str]
    Allowed list of unsafe sysctls or unsafe sysctl patterns (ending in *).
    container_log_max_files int
    The maximum number of container log files that can be present for a container. The number must be ≥ 2.
    container_log_max_size_mb int
    The maximum size (e.g. 10Mi) of container log file before it is rotated.
    cpu_cfs_quota bool
    The default is true.
    cpu_cfs_quota_period str
    The default is '100ms.' Valid values are a sequence of decimal numbers with an optional fraction and a unit suffix. For example: '300ms', '2h45m'. Supported units are 'ns', 'us', 'ms', 's', 'm', and 'h'.
    cpu_manager_policy str
    The default is 'none'. See Kubernetes CPU management policies for more information. Allowed values are 'none' and 'static'.
    fail_swap_on bool
    If set to true it will make the Kubelet fail to start if swap is enabled on the node.
    image_gc_high_threshold int
    To disable image garbage collection, set to 100. The default is 85%
    image_gc_low_threshold int
    This cannot be set higher than imageGcHighThreshold. The default is 80%
    pod_max_pids int
    The maximum number of processes per pod.
    topology_manager_policy str
    For more information see Kubernetes Topology Manager. The default is 'none'. Allowed values are 'none', 'best-effort', 'restricted', and 'single-numa-node'.
    allowedUnsafeSysctls List<String>
    Allowed list of unsafe sysctls or unsafe sysctl patterns (ending in *).
    containerLogMaxFiles Number
    The maximum number of container log files that can be present for a container. The number must be ≥ 2.
    containerLogMaxSizeMB Number
    The maximum size (e.g. 10Mi) of container log file before it is rotated.
    cpuCfsQuota Boolean
    The default is true.
    cpuCfsQuotaPeriod String
    The default is '100ms.' Valid values are a sequence of decimal numbers with an optional fraction and a unit suffix. For example: '300ms', '2h45m'. Supported units are 'ns', 'us', 'ms', 's', 'm', and 'h'.
    cpuManagerPolicy String
    The default is 'none'. See Kubernetes CPU management policies for more information. Allowed values are 'none' and 'static'.
    failSwapOn Boolean
    If set to true it will make the Kubelet fail to start if swap is enabled on the node.
    imageGcHighThreshold Number
    To disable image garbage collection, set to 100. The default is 85%
    imageGcLowThreshold Number
    This cannot be set higher than imageGcHighThreshold. The default is 80%
    podMaxPids Number
    The maximum number of processes per pod.
    topologyManagerPolicy String
    For more information see Kubernetes Topology Manager. The default is 'none'. Allowed values are 'none', 'best-effort', 'restricted', and 'single-numa-node'.

    LinuxOSConfigResponse

    SwapFileSizeMB int
    The size in MB of a swap file that will be created on each node.
    Sysctls Pulumi.AzureNative.ContainerService.Inputs.SysctlConfigResponse
    Sysctl settings for Linux agent nodes.
    TransparentHugePageDefrag string
    Valid values are 'always', 'defer', 'defer+madvise', 'madvise' and 'never'. The default is 'madvise'. For more information see Transparent Hugepages.
    TransparentHugePageEnabled string
    Valid values are 'always', 'madvise', and 'never'. The default is 'always'. For more information see Transparent Hugepages.
    SwapFileSizeMB int
    The size in MB of a swap file that will be created on each node.
    Sysctls SysctlConfigResponse
    Sysctl settings for Linux agent nodes.
    TransparentHugePageDefrag string
    Valid values are 'always', 'defer', 'defer+madvise', 'madvise' and 'never'. The default is 'madvise'. For more information see Transparent Hugepages.
    TransparentHugePageEnabled string
    Valid values are 'always', 'madvise', and 'never'. The default is 'always'. For more information see Transparent Hugepages.
    swapFileSizeMB Integer
    The size in MB of a swap file that will be created on each node.
    sysctls SysctlConfigResponse
    Sysctl settings for Linux agent nodes.
    transparentHugePageDefrag String
    Valid values are 'always', 'defer', 'defer+madvise', 'madvise' and 'never'. The default is 'madvise'. For more information see Transparent Hugepages.
    transparentHugePageEnabled String
    Valid values are 'always', 'madvise', and 'never'. The default is 'always'. For more information see Transparent Hugepages.
    swapFileSizeMB number
    The size in MB of a swap file that will be created on each node.
    sysctls SysctlConfigResponse
    Sysctl settings for Linux agent nodes.
    transparentHugePageDefrag string
    Valid values are 'always', 'defer', 'defer+madvise', 'madvise' and 'never'. The default is 'madvise'. For more information see Transparent Hugepages.
    transparentHugePageEnabled string
    Valid values are 'always', 'madvise', and 'never'. The default is 'always'. For more information see Transparent Hugepages.
    swap_file_size_mb int
    The size in MB of a swap file that will be created on each node.
    sysctls SysctlConfigResponse
    Sysctl settings for Linux agent nodes.
    transparent_huge_page_defrag str
    Valid values are 'always', 'defer', 'defer+madvise', 'madvise' and 'never'. The default is 'madvise'. For more information see Transparent Hugepages.
    transparent_huge_page_enabled str
    Valid values are 'always', 'madvise', and 'never'. The default is 'always'. For more information see Transparent Hugepages.
    swapFileSizeMB Number
    The size in MB of a swap file that will be created on each node.
    sysctls Property Map
    Sysctl settings for Linux agent nodes.
    transparentHugePageDefrag String
    Valid values are 'always', 'defer', 'defer+madvise', 'madvise' and 'never'. The default is 'madvise'. For more information see Transparent Hugepages.
    transparentHugePageEnabled String
    Valid values are 'always', 'madvise', and 'never'. The default is 'always'. For more information see Transparent Hugepages.

    ManagedClusterAADProfileResponse

    AdminGroupObjectIDs List<string>
    The list of AAD group object IDs that will have admin role of the cluster.
    ClientAppID string
    (DEPRECATED) The client AAD application ID. Learn more at https://aka.ms/aks/aad-legacy.
    EnableAzureRBAC bool
    Whether to enable Azure RBAC for Kubernetes authorization.
    Managed bool
    Whether to enable managed AAD.
    ServerAppID string
    (DEPRECATED) The server AAD application ID. Learn more at https://aka.ms/aks/aad-legacy.
    ServerAppSecret string
    (DEPRECATED) The server AAD application secret. Learn more at https://aka.ms/aks/aad-legacy.
    TenantID string
    The AAD tenant ID to use for authentication. If not specified, will use the tenant of the deployment subscription.
    AdminGroupObjectIDs []string
    The list of AAD group object IDs that will have admin role of the cluster.
    ClientAppID string
    (DEPRECATED) The client AAD application ID. Learn more at https://aka.ms/aks/aad-legacy.
    EnableAzureRBAC bool
    Whether to enable Azure RBAC for Kubernetes authorization.
    Managed bool
    Whether to enable managed AAD.
    ServerAppID string
    (DEPRECATED) The server AAD application ID. Learn more at https://aka.ms/aks/aad-legacy.
    ServerAppSecret string
    (DEPRECATED) The server AAD application secret. Learn more at https://aka.ms/aks/aad-legacy.
    TenantID string
    The AAD tenant ID to use for authentication. If not specified, will use the tenant of the deployment subscription.
    adminGroupObjectIDs List<String>
    The list of AAD group object IDs that will have admin role of the cluster.
    clientAppID String
    (DEPRECATED) The client AAD application ID. Learn more at https://aka.ms/aks/aad-legacy.
    enableAzureRBAC Boolean
    Whether to enable Azure RBAC for Kubernetes authorization.
    managed Boolean
    Whether to enable managed AAD.
    serverAppID String
    (DEPRECATED) The server AAD application ID. Learn more at https://aka.ms/aks/aad-legacy.
    serverAppSecret String
    (DEPRECATED) The server AAD application secret. Learn more at https://aka.ms/aks/aad-legacy.
    tenantID String
    The AAD tenant ID to use for authentication. If not specified, will use the tenant of the deployment subscription.
    adminGroupObjectIDs string[]
    The list of AAD group object IDs that will have admin role of the cluster.
    clientAppID string
    (DEPRECATED) The client AAD application ID. Learn more at https://aka.ms/aks/aad-legacy.
    enableAzureRBAC boolean
    Whether to enable Azure RBAC for Kubernetes authorization.
    managed boolean
    Whether to enable managed AAD.
    serverAppID string
    (DEPRECATED) The server AAD application ID. Learn more at https://aka.ms/aks/aad-legacy.
    serverAppSecret string
    (DEPRECATED) The server AAD application secret. Learn more at https://aka.ms/aks/aad-legacy.
    tenantID string
    The AAD tenant ID to use for authentication. If not specified, will use the tenant of the deployment subscription.
    admin_group_object_ids Sequence[str]
    The list of AAD group object IDs that will have admin role of the cluster.
    client_app_id str
    (DEPRECATED) The client AAD application ID. Learn more at https://aka.ms/aks/aad-legacy.
    enable_azure_rbac bool
    Whether to enable Azure RBAC for Kubernetes authorization.
    managed bool
    Whether to enable managed AAD.
    server_app_id str
    (DEPRECATED) The server AAD application ID. Learn more at https://aka.ms/aks/aad-legacy.
    server_app_secret str
    (DEPRECATED) The server AAD application secret. Learn more at https://aka.ms/aks/aad-legacy.
    tenant_id str
    The AAD tenant ID to use for authentication. If not specified, will use the tenant of the deployment subscription.
    adminGroupObjectIDs List<String>
    The list of AAD group object IDs that will have admin role of the cluster.
    clientAppID String
    (DEPRECATED) The client AAD application ID. Learn more at https://aka.ms/aks/aad-legacy.
    enableAzureRBAC Boolean
    Whether to enable Azure RBAC for Kubernetes authorization.
    managed Boolean
    Whether to enable managed AAD.
    serverAppID String
    (DEPRECATED) The server AAD application ID. Learn more at https://aka.ms/aks/aad-legacy.
    serverAppSecret String
    (DEPRECATED) The server AAD application secret. Learn more at https://aka.ms/aks/aad-legacy.
    tenantID String
    The AAD tenant ID to use for authentication. If not specified, will use the tenant of the deployment subscription.

    ManagedClusterAPIServerAccessProfileResponse

    AuthorizedIPRanges List<string>
    IP ranges are specified in CIDR format, e.g. 137.117.106.88/29. This feature is not compatible with clusters that use Public IP Per Node, or clusters that are using a Basic Load Balancer. For more information see API server authorized IP ranges.
    DisableRunCommand bool
    Whether to disable run command for the cluster or not.
    EnablePrivateCluster bool
    For more details, see Creating a private AKS cluster.
    EnablePrivateClusterPublicFQDN bool
    Whether to create additional public FQDN for private cluster or not.
    PrivateDNSZone string
    The default is System. For more details see configure private DNS zone. Allowed values are 'system' and 'none'.
    AuthorizedIPRanges []string
    IP ranges are specified in CIDR format, e.g. 137.117.106.88/29. This feature is not compatible with clusters that use Public IP Per Node, or clusters that are using a Basic Load Balancer. For more information see API server authorized IP ranges.
    DisableRunCommand bool
    Whether to disable run command for the cluster or not.
    EnablePrivateCluster bool
    For more details, see Creating a private AKS cluster.
    EnablePrivateClusterPublicFQDN bool
    Whether to create additional public FQDN for private cluster or not.
    PrivateDNSZone string
    The default is System. For more details see configure private DNS zone. Allowed values are 'system' and 'none'.
    authorizedIPRanges List<String>
    IP ranges are specified in CIDR format, e.g. 137.117.106.88/29. This feature is not compatible with clusters that use Public IP Per Node, or clusters that are using a Basic Load Balancer. For more information see API server authorized IP ranges.
    disableRunCommand Boolean
    Whether to disable run command for the cluster or not.
    enablePrivateCluster Boolean
    For more details, see Creating a private AKS cluster.
    enablePrivateClusterPublicFQDN Boolean
    Whether to create additional public FQDN for private cluster or not.
    privateDNSZone String
    The default is System. For more details see configure private DNS zone. Allowed values are 'system' and 'none'.
    authorizedIPRanges string[]
    IP ranges are specified in CIDR format, e.g. 137.117.106.88/29. This feature is not compatible with clusters that use Public IP Per Node, or clusters that are using a Basic Load Balancer. For more information see API server authorized IP ranges.
    disableRunCommand boolean
    Whether to disable run command for the cluster or not.
    enablePrivateCluster boolean
    For more details, see Creating a private AKS cluster.
    enablePrivateClusterPublicFQDN boolean
    Whether to create additional public FQDN for private cluster or not.
    privateDNSZone string
    The default is System. For more details see configure private DNS zone. Allowed values are 'system' and 'none'.
    authorized_ip_ranges Sequence[str]
    IP ranges are specified in CIDR format, e.g. 137.117.106.88/29. This feature is not compatible with clusters that use Public IP Per Node, or clusters that are using a Basic Load Balancer. For more information see API server authorized IP ranges.
    disable_run_command bool
    Whether to disable run command for the cluster or not.
    enable_private_cluster bool
    For more details, see Creating a private AKS cluster.
    enable_private_cluster_public_fqdn bool
    Whether to create additional public FQDN for private cluster or not.
    private_dns_zone str
    The default is System. For more details see configure private DNS zone. Allowed values are 'system' and 'none'.
    authorizedIPRanges List<String>
    IP ranges are specified in CIDR format, e.g. 137.117.106.88/29. This feature is not compatible with clusters that use Public IP Per Node, or clusters that are using a Basic Load Balancer. For more information see API server authorized IP ranges.
    disableRunCommand Boolean
    Whether to disable run command for the cluster or not.
    enablePrivateCluster Boolean
    For more details, see Creating a private AKS cluster.
    enablePrivateClusterPublicFQDN Boolean
    Whether to create additional public FQDN for private cluster or not.
    privateDNSZone String
    The default is System. For more details see configure private DNS zone. Allowed values are 'system' and 'none'.

    ManagedClusterAddonProfileResponse

    Enabled bool
    Whether the add-on is enabled or not.
    Identity Pulumi.AzureNative.ContainerService.Inputs.ManagedClusterAddonProfileResponseIdentity
    Information of user assigned identity used by this add-on.
    Config Dictionary<string, string>
    Key-value pairs for configuring an add-on.
    Enabled bool
    Whether the add-on is enabled or not.
    Identity ManagedClusterAddonProfileResponseIdentity
    Information of user assigned identity used by this add-on.
    Config map[string]string
    Key-value pairs for configuring an add-on.
    enabled Boolean
    Whether the add-on is enabled or not.
    identity ManagedClusterAddonProfileResponseIdentity
    Information of user assigned identity used by this add-on.
    config Map<String,String>
    Key-value pairs for configuring an add-on.
    enabled boolean
    Whether the add-on is enabled or not.
    identity ManagedClusterAddonProfileResponseIdentity
    Information of user assigned identity used by this add-on.
    config {[key: string]: string}
    Key-value pairs for configuring an add-on.
    enabled bool
    Whether the add-on is enabled or not.
    identity ManagedClusterAddonProfileResponseIdentity
    Information of user assigned identity used by this add-on.
    config Mapping[str, str]
    Key-value pairs for configuring an add-on.
    enabled Boolean
    Whether the add-on is enabled or not.
    identity Property Map
    Information of user assigned identity used by this add-on.
    config Map<String>
    Key-value pairs for configuring an add-on.

    ManagedClusterAddonProfileResponseIdentity

    ClientId string
    The client ID of the user assigned identity.
    ObjectId string
    The object ID of the user assigned identity.
    ResourceId string
    The resource ID of the user assigned identity.
    ClientId string
    The client ID of the user assigned identity.
    ObjectId string
    The object ID of the user assigned identity.
    ResourceId string
    The resource ID of the user assigned identity.
    clientId String
    The client ID of the user assigned identity.
    objectId String
    The object ID of the user assigned identity.
    resourceId String
    The resource ID of the user assigned identity.
    clientId string
    The client ID of the user assigned identity.
    objectId string
    The object ID of the user assigned identity.
    resourceId string
    The resource ID of the user assigned identity.
    client_id str
    The client ID of the user assigned identity.
    object_id str
    The object ID of the user assigned identity.
    resource_id str
    The resource ID of the user assigned identity.
    clientId String
    The client ID of the user assigned identity.
    objectId String
    The object ID of the user assigned identity.
    resourceId String
    The resource ID of the user assigned identity.

    ManagedClusterAgentPoolProfileResponse

    CurrentOrchestratorVersion string
    If orchestratorVersion is a fully specified version <major.minor.patch>, this field will be exactly equal to it. If orchestratorVersion is <major.minor>, this field will contain the full <major.minor.patch> version being used.
    ETag string
    Unique read-only string used to implement optimistic concurrency. The eTag value will change when the resource is updated. Specify an if-match or if-none-match header with the eTag value for a subsequent request to enable optimistic concurrency per the normal etag convention.
    Name string
    Windows agent pool names must be 6 characters or less.
    NodeImageVersion string
    The version of node image
    ProvisioningState string
    The current deployment or provisioning state.
    AvailabilityZones List<string>
    The list of Availability zones to use for nodes. This can only be specified if the AgentPoolType property is 'VirtualMachineScaleSets'.
    CapacityReservationGroupID string
    AKS will associate the specified agent pool with the Capacity Reservation Group.
    Count int
    Number of agents (VMs) to host docker containers. Allowed values must be in the range of 0 to 1000 (inclusive) for user pools and in the range of 1 to 1000 (inclusive) for system pools. The default value is 1.
    CreationData Pulumi.AzureNative.ContainerService.Inputs.CreationDataResponse
    CreationData to be used to specify the source Snapshot ID if the node pool will be created/upgraded using a snapshot.
    EnableAutoScaling bool
    Whether to enable auto-scaler
    EnableEncryptionAtHost bool
    This is only supported on certain VM sizes and in certain Azure regions. For more information, see: https://docs.microsoft.com/azure/aks/enable-host-encryption
    EnableFIPS bool
    See Add a FIPS-enabled node pool for more details.
    EnableNodePublicIP bool
    Some scenarios may require nodes in a node pool to receive their own dedicated public IP addresses. A common scenario is for gaming workloads, where a console needs to make a direct connection to a cloud virtual machine to minimize hops. For more information see assigning a public IP per node. The default is false.
    EnableUltraSSD bool
    Whether to enable UltraSSD
    GpuInstanceProfile string
    GPUInstanceProfile to be used to specify GPU MIG instance profile for supported GPU VM SKU.
    HostGroupID string
    This is of the form: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Compute/hostGroups/{hostGroupName}. For more information see Azure dedicated hosts.
    KubeletConfig Pulumi.AzureNative.ContainerService.Inputs.KubeletConfigResponse
    The Kubelet configuration on the agent pool nodes.
    KubeletDiskType string
    Determines the placement of emptyDir volumes, container runtime data root, and Kubelet ephemeral storage.
    LinuxOSConfig Pulumi.AzureNative.ContainerService.Inputs.LinuxOSConfigResponse
    The OS configuration of Linux agent nodes.
    MaxCount int
    The maximum number of nodes for auto-scaling
    MaxPods int
    The maximum number of pods that can run on a node.
    MessageOfTheDay string
    A base64-encoded string which will be written to /etc/motd after decoding. This allows customization of the message of the day for Linux nodes. It must not be specified for Windows nodes. It must be a static string (i.e., will be printed raw and not be executed as a script).
    MinCount int
    The minimum number of nodes for auto-scaling
    Mode string
    A cluster must have at least one 'System' Agent Pool at all times. For additional information on agent pool restrictions and best practices, see: https://docs.microsoft.com/azure/aks/use-system-pools
    NetworkProfile Pulumi.AzureNative.ContainerService.Inputs.AgentPoolNetworkProfileResponse
    Network-related settings of an agent pool.
    NodeLabels Dictionary<string, string>
    The node labels to be persisted across all nodes in agent pool.
    NodePublicIPPrefixID string
    This is of the form: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/publicIPPrefixes/{publicIPPrefixName}
    NodeTaints List<string>
    The taints added to new nodes during node pool create and scale. For example, key=value:NoSchedule.
    OrchestratorVersion string
    Both patch version <major.minor.patch> (e.g. 1.20.13) and <major.minor> (e.g. 1.20) are supported. When <major.minor> is specified, the latest supported GA patch version is chosen automatically. Updating the cluster with the same <major.minor> once it has been created (e.g. 1.14.x -> 1.14) will not trigger an upgrade, even if a newer patch version is available. As a best practice, you should upgrade all node pools in an AKS cluster to the same Kubernetes version. The node pool version must have the same major version as the control plane. The node pool minor version must be within two minor versions of the control plane version. The node pool version cannot be greater than the control plane version. For more information see upgrading a node pool.
    OsDiskSizeGB int
    OS Disk Size in GB to be used to specify the disk size for every machine in the master/agent pool. If you specify 0, it will apply the default osDisk size according to the vmSize specified.
    OsDiskType string
    The default is 'Ephemeral' if the VM supports it and has a cache disk larger than the requested OSDiskSizeGB. Otherwise, defaults to 'Managed'. May not be changed after creation. For more information see Ephemeral OS.
    OsSKU string
    Specifies the OS SKU used by the agent pool. The default is Ubuntu if OSType is Linux. The default is Windows2019 when Kubernetes <= 1.24 or Windows2022 when Kubernetes >= 1.25 if OSType is Windows.
    OsType string
    The operating system type. The default is Linux.
    PodSubnetID string
    If omitted, pod IPs are statically assigned on the node subnet (see vnetSubnetID for more details). This is of the form: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/virtualNetworks/{virtualNetworkName}/subnets/{subnetName}
    PowerState Pulumi.AzureNative.ContainerService.Inputs.PowerStateResponse
    When an Agent Pool is first created it is initially Running. The Agent Pool can be stopped by setting this field to Stopped. A stopped Agent Pool stops all of its VMs and does not accrue billing charges. An Agent Pool can only be stopped if it is Running and provisioning state is Succeeded
    ProximityPlacementGroupID string
    The ID for Proximity Placement Group.
    ScaleDownMode string
    This also effects the cluster autoscaler behavior. If not specified, it defaults to Delete.
    ScaleSetEvictionPolicy string
    This cannot be specified unless the scaleSetPriority is 'Spot'. If not specified, the default is 'Delete'.
    ScaleSetPriority string
    The Virtual Machine Scale Set priority. If not specified, the default is 'Regular'.
    SecurityProfile Pulumi.AzureNative.ContainerService.Inputs.AgentPoolSecurityProfileResponse
    The security settings of an agent pool.
    SpotMaxPrice double
    Possible values are any decimal value greater than zero or -1 which indicates the willingness to pay any on-demand price. For more details on spot pricing, see spot VMs pricing
    Tags Dictionary<string, string>
    The tags to be persisted on the agent pool virtual machine scale set.
    Type string
    The type of Agent Pool.
    UpgradeSettings Pulumi.AzureNative.ContainerService.Inputs.AgentPoolUpgradeSettingsResponse
    Settings for upgrading the agentpool
    VmSize string
    VM size availability varies by region. If a node contains insufficient compute resources (memory, cpu, etc) pods might fail to run correctly. If this field is not specified, AKS will attempt to find an appropriate VM SKU for your pool, based on quota and capacity. For more details on restricted VM sizes, see: https://docs.microsoft.com/azure/aks/quotas-skus-regions
    VnetSubnetID string
    If this is not specified, a VNET and subnet will be generated and used. If no podSubnetID is specified, this applies to nodes and pods, otherwise it applies to just nodes. This is of the form: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/virtualNetworks/{virtualNetworkName}/subnets/{subnetName}
    WindowsProfile Pulumi.AzureNative.ContainerService.Inputs.AgentPoolWindowsProfileResponse
    The Windows agent pool's specific profile.
    WorkloadRuntime string
    Determines the type of workload a node can run.
    CurrentOrchestratorVersion string
    If orchestratorVersion is a fully specified version <major.minor.patch>, this field will be exactly equal to it. If orchestratorVersion is <major.minor>, this field will contain the full <major.minor.patch> version being used.
    ETag string
    Unique read-only string used to implement optimistic concurrency. The eTag value will change when the resource is updated. Specify an if-match or if-none-match header with the eTag value for a subsequent request to enable optimistic concurrency per the normal etag convention.
    Name string
    Windows agent pool names must be 6 characters or less.
    NodeImageVersion string
    The version of node image
    ProvisioningState string
    The current deployment or provisioning state.
    AvailabilityZones []string
    The list of Availability zones to use for nodes. This can only be specified if the AgentPoolType property is 'VirtualMachineScaleSets'.
    CapacityReservationGroupID string
    AKS will associate the specified agent pool with the Capacity Reservation Group.
    Count int
    Number of agents (VMs) to host docker containers. Allowed values must be in the range of 0 to 1000 (inclusive) for user pools and in the range of 1 to 1000 (inclusive) for system pools. The default value is 1.
    CreationData CreationDataResponse
    CreationData to be used to specify the source Snapshot ID if the node pool will be created/upgraded using a snapshot.
    EnableAutoScaling bool
    Whether to enable auto-scaler
    EnableEncryptionAtHost bool
    This is only supported on certain VM sizes and in certain Azure regions. For more information, see: https://docs.microsoft.com/azure/aks/enable-host-encryption
    EnableFIPS bool
    See Add a FIPS-enabled node pool for more details.
    EnableNodePublicIP bool
    Some scenarios may require nodes in a node pool to receive their own dedicated public IP addresses. A common scenario is for gaming workloads, where a console needs to make a direct connection to a cloud virtual machine to minimize hops. For more information see assigning a public IP per node. The default is false.
    EnableUltraSSD bool
    Whether to enable UltraSSD
    GpuInstanceProfile string
    GPUInstanceProfile to be used to specify GPU MIG instance profile for supported GPU VM SKU.
    HostGroupID string
    This is of the form: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Compute/hostGroups/{hostGroupName}. For more information see Azure dedicated hosts.
    KubeletConfig KubeletConfigResponse
    The Kubelet configuration on the agent pool nodes.
    KubeletDiskType string
    Determines the placement of emptyDir volumes, container runtime data root, and Kubelet ephemeral storage.
    LinuxOSConfig LinuxOSConfigResponse
    The OS configuration of Linux agent nodes.
    MaxCount int
    The maximum number of nodes for auto-scaling
    MaxPods int
    The maximum number of pods that can run on a node.
    MessageOfTheDay string
    A base64-encoded string which will be written to /etc/motd after decoding. This allows customization of the message of the day for Linux nodes. It must not be specified for Windows nodes. It must be a static string (i.e., will be printed raw and not be executed as a script).
    MinCount int
    The minimum number of nodes for auto-scaling
    Mode string
    A cluster must have at least one 'System' Agent Pool at all times. For additional information on agent pool restrictions and best practices, see: https://docs.microsoft.com/azure/aks/use-system-pools
    NetworkProfile AgentPoolNetworkProfileResponse
    Network-related settings of an agent pool.
    NodeLabels map[string]string
    The node labels to be persisted across all nodes in agent pool.
    NodePublicIPPrefixID string
    This is of the form: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/publicIPPrefixes/{publicIPPrefixName}
    NodeTaints []string
    The taints added to new nodes during node pool create and scale. For example, key=value:NoSchedule.
    OrchestratorVersion string
    Both patch version <major.minor.patch> (e.g. 1.20.13) and <major.minor> (e.g. 1.20) are supported. When <major.minor> is specified, the latest supported GA patch version is chosen automatically. Updating the cluster with the same <major.minor> once it has been created (e.g. 1.14.x -> 1.14) will not trigger an upgrade, even if a newer patch version is available. As a best practice, you should upgrade all node pools in an AKS cluster to the same Kubernetes version. The node pool version must have the same major version as the control plane. The node pool minor version must be within two minor versions of the control plane version. The node pool version cannot be greater than the control plane version. For more information see upgrading a node pool.
    OsDiskSizeGB int
    OS Disk Size in GB to be used to specify the disk size for every machine in the master/agent pool. If you specify 0, it will apply the default osDisk size according to the vmSize specified.
    OsDiskType string
    The default is 'Ephemeral' if the VM supports it and has a cache disk larger than the requested OSDiskSizeGB. Otherwise, defaults to 'Managed'. May not be changed after creation. For more information see Ephemeral OS.
    OsSKU string
    Specifies the OS SKU used by the agent pool. The default is Ubuntu if OSType is Linux. The default is Windows2019 when Kubernetes <= 1.24 or Windows2022 when Kubernetes >= 1.25 if OSType is Windows.
    OsType string
    The operating system type. The default is Linux.
    PodSubnetID string
    If omitted, pod IPs are statically assigned on the node subnet (see vnetSubnetID for more details). This is of the form: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/virtualNetworks/{virtualNetworkName}/subnets/{subnetName}
    PowerState PowerStateResponse
    When an Agent Pool is first created it is initially Running. The Agent Pool can be stopped by setting this field to Stopped. A stopped Agent Pool stops all of its VMs and does not accrue billing charges. An Agent Pool can only be stopped if it is Running and provisioning state is Succeeded
    ProximityPlacementGroupID string
    The ID for Proximity Placement Group.
    ScaleDownMode string
    This also effects the cluster autoscaler behavior. If not specified, it defaults to Delete.
    ScaleSetEvictionPolicy string
    This cannot be specified unless the scaleSetPriority is 'Spot'. If not specified, the default is 'Delete'.
    ScaleSetPriority string
    The Virtual Machine Scale Set priority. If not specified, the default is 'Regular'.
    SecurityProfile AgentPoolSecurityProfileResponse
    The security settings of an agent pool.
    SpotMaxPrice float64
    Possible values are any decimal value greater than zero or -1 which indicates the willingness to pay any on-demand price. For more details on spot pricing, see spot VMs pricing
    Tags map[string]string
    The tags to be persisted on the agent pool virtual machine scale set.
    Type string
    The type of Agent Pool.
    UpgradeSettings AgentPoolUpgradeSettingsResponse
    Settings for upgrading the agentpool
    VmSize string
    VM size availability varies by region. If a node contains insufficient compute resources (memory, cpu, etc) pods might fail to run correctly. If this field is not specified, AKS will attempt to find an appropriate VM SKU for your pool, based on quota and capacity. For more details on restricted VM sizes, see: https://docs.microsoft.com/azure/aks/quotas-skus-regions
    VnetSubnetID string
    If this is not specified, a VNET and subnet will be generated and used. If no podSubnetID is specified, this applies to nodes and pods, otherwise it applies to just nodes. This is of the form: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/virtualNetworks/{virtualNetworkName}/subnets/{subnetName}
    WindowsProfile AgentPoolWindowsProfileResponse
    The Windows agent pool's specific profile.
    WorkloadRuntime string
    Determines the type of workload a node can run.
    currentOrchestratorVersion String
    If orchestratorVersion is a fully specified version <major.minor.patch>, this field will be exactly equal to it. If orchestratorVersion is <major.minor>, this field will contain the full <major.minor.patch> version being used.
    eTag String
    Unique read-only string used to implement optimistic concurrency. The eTag value will change when the resource is updated. Specify an if-match or if-none-match header with the eTag value for a subsequent request to enable optimistic concurrency per the normal etag convention.
    name String
    Windows agent pool names must be 6 characters or less.
    nodeImageVersion String
    The version of node image
    provisioningState String
    The current deployment or provisioning state.
    availabilityZones List<String>
    The list of Availability zones to use for nodes. This can only be specified if the AgentPoolType property is 'VirtualMachineScaleSets'.
    capacityReservationGroupID String
    AKS will associate the specified agent pool with the Capacity Reservation Group.
    count Integer
    Number of agents (VMs) to host docker containers. Allowed values must be in the range of 0 to 1000 (inclusive) for user pools and in the range of 1 to 1000 (inclusive) for system pools. The default value is 1.
    creationData CreationDataResponse
    CreationData to be used to specify the source Snapshot ID if the node pool will be created/upgraded using a snapshot.
    enableAutoScaling Boolean
    Whether to enable auto-scaler
    enableEncryptionAtHost Boolean
    This is only supported on certain VM sizes and in certain Azure regions. For more information, see: https://docs.microsoft.com/azure/aks/enable-host-encryption
    enableFIPS Boolean
    See Add a FIPS-enabled node pool for more details.
    enableNodePublicIP Boolean
    Some scenarios may require nodes in a node pool to receive their own dedicated public IP addresses. A common scenario is for gaming workloads, where a console needs to make a direct connection to a cloud virtual machine to minimize hops. For more information see assigning a public IP per node. The default is false.
    enableUltraSSD Boolean
    Whether to enable UltraSSD
    gpuInstanceProfile String
    GPUInstanceProfile to be used to specify GPU MIG instance profile for supported GPU VM SKU.
    hostGroupID String
    This is of the form: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Compute/hostGroups/{hostGroupName}. For more information see Azure dedicated hosts.
    kubeletConfig KubeletConfigResponse
    The Kubelet configuration on the agent pool nodes.
    kubeletDiskType String
    Determines the placement of emptyDir volumes, container runtime data root, and Kubelet ephemeral storage.
    linuxOSConfig LinuxOSConfigResponse
    The OS configuration of Linux agent nodes.
    maxCount Integer
    The maximum number of nodes for auto-scaling
    maxPods Integer
    The maximum number of pods that can run on a node.
    messageOfTheDay String
    A base64-encoded string which will be written to /etc/motd after decoding. This allows customization of the message of the day for Linux nodes. It must not be specified for Windows nodes. It must be a static string (i.e., will be printed raw and not be executed as a script).
    minCount Integer
    The minimum number of nodes for auto-scaling
    mode String
    A cluster must have at least one 'System' Agent Pool at all times. For additional information on agent pool restrictions and best practices, see: https://docs.microsoft.com/azure/aks/use-system-pools
    networkProfile AgentPoolNetworkProfileResponse
    Network-related settings of an agent pool.
    nodeLabels Map<String,String>
    The node labels to be persisted across all nodes in agent pool.
    nodePublicIPPrefixID String
    This is of the form: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/publicIPPrefixes/{publicIPPrefixName}
    nodeTaints List<String>
    The taints added to new nodes during node pool create and scale. For example, key=value:NoSchedule.
    orchestratorVersion String
    Both patch version <major.minor.patch> (e.g. 1.20.13) and <major.minor> (e.g. 1.20) are supported. When <major.minor> is specified, the latest supported GA patch version is chosen automatically. Updating the cluster with the same <major.minor> once it has been created (e.g. 1.14.x -> 1.14) will not trigger an upgrade, even if a newer patch version is available. As a best practice, you should upgrade all node pools in an AKS cluster to the same Kubernetes version. The node pool version must have the same major version as the control plane. The node pool minor version must be within two minor versions of the control plane version. The node pool version cannot be greater than the control plane version. For more information see upgrading a node pool.
    osDiskSizeGB Integer
    OS Disk Size in GB to be used to specify the disk size for every machine in the master/agent pool. If you specify 0, it will apply the default osDisk size according to the vmSize specified.
    osDiskType String
    The default is 'Ephemeral' if the VM supports it and has a cache disk larger than the requested OSDiskSizeGB. Otherwise, defaults to 'Managed'. May not be changed after creation. For more information see Ephemeral OS.
    osSKU String
    Specifies the OS SKU used by the agent pool. The default is Ubuntu if OSType is Linux. The default is Windows2019 when Kubernetes <= 1.24 or Windows2022 when Kubernetes >= 1.25 if OSType is Windows.
    osType String
    The operating system type. The default is Linux.
    podSubnetID String
    If omitted, pod IPs are statically assigned on the node subnet (see vnetSubnetID for more details). This is of the form: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/virtualNetworks/{virtualNetworkName}/subnets/{subnetName}
    powerState PowerStateResponse
    When an Agent Pool is first created it is initially Running. The Agent Pool can be stopped by setting this field to Stopped. A stopped Agent Pool stops all of its VMs and does not accrue billing charges. An Agent Pool can only be stopped if it is Running and provisioning state is Succeeded
    proximityPlacementGroupID String
    The ID for Proximity Placement Group.
    scaleDownMode String
    This also effects the cluster autoscaler behavior. If not specified, it defaults to Delete.
    scaleSetEvictionPolicy String
    This cannot be specified unless the scaleSetPriority is 'Spot'. If not specified, the default is 'Delete'.
    scaleSetPriority String
    The Virtual Machine Scale Set priority. If not specified, the default is 'Regular'.
    securityProfile AgentPoolSecurityProfileResponse
    The security settings of an agent pool.
    spotMaxPrice Double
    Possible values are any decimal value greater than zero or -1 which indicates the willingness to pay any on-demand price. For more details on spot pricing, see spot VMs pricing
    tags Map<String,String>
    The tags to be persisted on the agent pool virtual machine scale set.
    type String
    The type of Agent Pool.
    upgradeSettings AgentPoolUpgradeSettingsResponse
    Settings for upgrading the agentpool
    vmSize String
    VM size availability varies by region. If a node contains insufficient compute resources (memory, cpu, etc) pods might fail to run correctly. If this field is not specified, AKS will attempt to find an appropriate VM SKU for your pool, based on quota and capacity. For more details on restricted VM sizes, see: https://docs.microsoft.com/azure/aks/quotas-skus-regions
    vnetSubnetID String
    If this is not specified, a VNET and subnet will be generated and used. If no podSubnetID is specified, this applies to nodes and pods, otherwise it applies to just nodes. This is of the form: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/virtualNetworks/{virtualNetworkName}/subnets/{subnetName}
    windowsProfile AgentPoolWindowsProfileResponse
    The Windows agent pool's specific profile.
    workloadRuntime String
    Determines the type of workload a node can run.
    currentOrchestratorVersion string
    If orchestratorVersion is a fully specified version <major.minor.patch>, this field will be exactly equal to it. If orchestratorVersion is <major.minor>, this field will contain the full <major.minor.patch> version being used.
    eTag string
    Unique read-only string used to implement optimistic concurrency. The eTag value will change when the resource is updated. Specify an if-match or if-none-match header with the eTag value for a subsequent request to enable optimistic concurrency per the normal etag convention.
    name string
    Windows agent pool names must be 6 characters or less.
    nodeImageVersion string
    The version of node image
    provisioningState string
    The current deployment or provisioning state.
    availabilityZones string[]
    The list of Availability zones to use for nodes. This can only be specified if the AgentPoolType property is 'VirtualMachineScaleSets'.
    capacityReservationGroupID string
    AKS will associate the specified agent pool with the Capacity Reservation Group.
    count number
    Number of agents (VMs) to host docker containers. Allowed values must be in the range of 0 to 1000 (inclusive) for user pools and in the range of 1 to 1000 (inclusive) for system pools. The default value is 1.
    creationData CreationDataResponse
    CreationData to be used to specify the source Snapshot ID if the node pool will be created/upgraded using a snapshot.
    enableAutoScaling boolean
    Whether to enable auto-scaler
    enableEncryptionAtHost boolean
    This is only supported on certain VM sizes and in certain Azure regions. For more information, see: https://docs.microsoft.com/azure/aks/enable-host-encryption
    enableFIPS boolean
    See Add a FIPS-enabled node pool for more details.
    enableNodePublicIP boolean
    Some scenarios may require nodes in a node pool to receive their own dedicated public IP addresses. A common scenario is for gaming workloads, where a console needs to make a direct connection to a cloud virtual machine to minimize hops. For more information see assigning a public IP per node. The default is false.
    enableUltraSSD boolean
    Whether to enable UltraSSD
    gpuInstanceProfile string
    GPUInstanceProfile to be used to specify GPU MIG instance profile for supported GPU VM SKU.
    hostGroupID string
    This is of the form: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Compute/hostGroups/{hostGroupName}. For more information see Azure dedicated hosts.
    kubeletConfig KubeletConfigResponse
    The Kubelet configuration on the agent pool nodes.
    kubeletDiskType string
    Determines the placement of emptyDir volumes, container runtime data root, and Kubelet ephemeral storage.
    linuxOSConfig LinuxOSConfigResponse
    The OS configuration of Linux agent nodes.
    maxCount number
    The maximum number of nodes for auto-scaling
    maxPods number
    The maximum number of pods that can run on a node.
    messageOfTheDay string
    A base64-encoded string which will be written to /etc/motd after decoding. This allows customization of the message of the day for Linux nodes. It must not be specified for Windows nodes. It must be a static string (i.e., will be printed raw and not be executed as a script).
    minCount number
    The minimum number of nodes for auto-scaling
    mode string
    A cluster must have at least one 'System' Agent Pool at all times. For additional information on agent pool restrictions and best practices, see: https://docs.microsoft.com/azure/aks/use-system-pools
    networkProfile AgentPoolNetworkProfileResponse
    Network-related settings of an agent pool.
    nodeLabels {[key: string]: string}
    The node labels to be persisted across all nodes in agent pool.
    nodePublicIPPrefixID string
    This is of the form: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/publicIPPrefixes/{publicIPPrefixName}
    nodeTaints string[]
    The taints added to new nodes during node pool create and scale. For example, key=value:NoSchedule.
    orchestratorVersion string
    Both patch version <major.minor.patch> (e.g. 1.20.13) and <major.minor> (e.g. 1.20) are supported. When <major.minor> is specified, the latest supported GA patch version is chosen automatically. Updating the cluster with the same <major.minor> once it has been created (e.g. 1.14.x -> 1.14) will not trigger an upgrade, even if a newer patch version is available. As a best practice, you should upgrade all node pools in an AKS cluster to the same Kubernetes version. The node pool version must have the same major version as the control plane. The node pool minor version must be within two minor versions of the control plane version. The node pool version cannot be greater than the control plane version. For more information see upgrading a node pool.
    osDiskSizeGB number
    OS Disk Size in GB to be used to specify the disk size for every machine in the master/agent pool. If you specify 0, it will apply the default osDisk size according to the vmSize specified.
    osDiskType string
    The default is 'Ephemeral' if the VM supports it and has a cache disk larger than the requested OSDiskSizeGB. Otherwise, defaults to 'Managed'. May not be changed after creation. For more information see Ephemeral OS.
    osSKU string
    Specifies the OS SKU used by the agent pool. The default is Ubuntu if OSType is Linux. The default is Windows2019 when Kubernetes <= 1.24 or Windows2022 when Kubernetes >= 1.25 if OSType is Windows.
    osType string
    The operating system type. The default is Linux.
    podSubnetID string
    If omitted, pod IPs are statically assigned on the node subnet (see vnetSubnetID for more details). This is of the form: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/virtualNetworks/{virtualNetworkName}/subnets/{subnetName}
    powerState PowerStateResponse
    When an Agent Pool is first created it is initially Running. The Agent Pool can be stopped by setting this field to Stopped. A stopped Agent Pool stops all of its VMs and does not accrue billing charges. An Agent Pool can only be stopped if it is Running and provisioning state is Succeeded
    proximityPlacementGroupID string
    The ID for Proximity Placement Group.
    scaleDownMode string
    This also effects the cluster autoscaler behavior. If not specified, it defaults to Delete.
    scaleSetEvictionPolicy string
    This cannot be specified unless the scaleSetPriority is 'Spot'. If not specified, the default is 'Delete'.
    scaleSetPriority string
    The Virtual Machine Scale Set priority. If not specified, the default is 'Regular'.
    securityProfile AgentPoolSecurityProfileResponse
    The security settings of an agent pool.
    spotMaxPrice number
    Possible values are any decimal value greater than zero or -1 which indicates the willingness to pay any on-demand price. For more details on spot pricing, see spot VMs pricing
    tags {[key: string]: string}
    The tags to be persisted on the agent pool virtual machine scale set.
    type string
    The type of Agent Pool.
    upgradeSettings AgentPoolUpgradeSettingsResponse
    Settings for upgrading the agentpool
    vmSize string
    VM size availability varies by region. If a node contains insufficient compute resources (memory, cpu, etc) pods might fail to run correctly. If this field is not specified, AKS will attempt to find an appropriate VM SKU for your pool, based on quota and capacity. For more details on restricted VM sizes, see: https://docs.microsoft.com/azure/aks/quotas-skus-regions
    vnetSubnetID string
    If this is not specified, a VNET and subnet will be generated and used. If no podSubnetID is specified, this applies to nodes and pods, otherwise it applies to just nodes. This is of the form: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/virtualNetworks/{virtualNetworkName}/subnets/{subnetName}
    windowsProfile AgentPoolWindowsProfileResponse
    The Windows agent pool's specific profile.
    workloadRuntime string
    Determines the type of workload a node can run.
    current_orchestrator_version str
    If orchestratorVersion is a fully specified version <major.minor.patch>, this field will be exactly equal to it. If orchestratorVersion is <major.minor>, this field will contain the full <major.minor.patch> version being used.
    e_tag str
    Unique read-only string used to implement optimistic concurrency. The eTag value will change when the resource is updated. Specify an if-match or if-none-match header with the eTag value for a subsequent request to enable optimistic concurrency per the normal etag convention.
    name str
    Windows agent pool names must be 6 characters or less.
    node_image_version str
    The version of node image
    provisioning_state str
    The current deployment or provisioning state.
    availability_zones Sequence[str]
    The list of Availability zones to use for nodes. This can only be specified if the AgentPoolType property is 'VirtualMachineScaleSets'.
    capacity_reservation_group_id str
    AKS will associate the specified agent pool with the Capacity Reservation Group.
    count int
    Number of agents (VMs) to host docker containers. Allowed values must be in the range of 0 to 1000 (inclusive) for user pools and in the range of 1 to 1000 (inclusive) for system pools. The default value is 1.
    creation_data CreationDataResponse
    CreationData to be used to specify the source Snapshot ID if the node pool will be created/upgraded using a snapshot.
    enable_auto_scaling bool
    Whether to enable auto-scaler
    enable_encryption_at_host bool
    This is only supported on certain VM sizes and in certain Azure regions. For more information, see: https://docs.microsoft.com/azure/aks/enable-host-encryption
    enable_fips bool
    See Add a FIPS-enabled node pool for more details.
    enable_node_public_ip bool
    Some scenarios may require nodes in a node pool to receive their own dedicated public IP addresses. A common scenario is for gaming workloads, where a console needs to make a direct connection to a cloud virtual machine to minimize hops. For more information see assigning a public IP per node. The default is false.
    enable_ultra_ssd bool
    Whether to enable UltraSSD
    gpu_instance_profile str
    GPUInstanceProfile to be used to specify GPU MIG instance profile for supported GPU VM SKU.
    host_group_id str
    This is of the form: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Compute/hostGroups/{hostGroupName}. For more information see Azure dedicated hosts.
    kubelet_config KubeletConfigResponse
    The Kubelet configuration on the agent pool nodes.
    kubelet_disk_type str
    Determines the placement of emptyDir volumes, container runtime data root, and Kubelet ephemeral storage.
    linux_os_config LinuxOSConfigResponse
    The OS configuration of Linux agent nodes.
    max_count int
    The maximum number of nodes for auto-scaling
    max_pods int
    The maximum number of pods that can run on a node.
    message_of_the_day str
    A base64-encoded string which will be written to /etc/motd after decoding. This allows customization of the message of the day for Linux nodes. It must not be specified for Windows nodes. It must be a static string (i.e., will be printed raw and not be executed as a script).
    min_count int
    The minimum number of nodes for auto-scaling
    mode str
    A cluster must have at least one 'System' Agent Pool at all times. For additional information on agent pool restrictions and best practices, see: https://docs.microsoft.com/azure/aks/use-system-pools
    network_profile AgentPoolNetworkProfileResponse
    Network-related settings of an agent pool.
    node_labels Mapping[str, str]
    The node labels to be persisted across all nodes in agent pool.
    node_public_ip_prefix_id str
    This is of the form: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/publicIPPrefixes/{publicIPPrefixName}
    node_taints Sequence[str]
    The taints added to new nodes during node pool create and scale. For example, key=value:NoSchedule.
    orchestrator_version str
    Both patch version <major.minor.patch> (e.g. 1.20.13) and <major.minor> (e.g. 1.20) are supported. When <major.minor> is specified, the latest supported GA patch version is chosen automatically. Updating the cluster with the same <major.minor> once it has been created (e.g. 1.14.x -> 1.14) will not trigger an upgrade, even if a newer patch version is available. As a best practice, you should upgrade all node pools in an AKS cluster to the same Kubernetes version. The node pool version must have the same major version as the control plane. The node pool minor version must be within two minor versions of the control plane version. The node pool version cannot be greater than the control plane version. For more information see upgrading a node pool.
    os_disk_size_gb int
    OS Disk Size in GB to be used to specify the disk size for every machine in the master/agent pool. If you specify 0, it will apply the default osDisk size according to the vmSize specified.
    os_disk_type str
    The default is 'Ephemeral' if the VM supports it and has a cache disk larger than the requested OSDiskSizeGB. Otherwise, defaults to 'Managed'. May not be changed after creation. For more information see Ephemeral OS.
    os_sku str
    Specifies the OS SKU used by the agent pool. The default is Ubuntu if OSType is Linux. The default is Windows2019 when Kubernetes <= 1.24 or Windows2022 when Kubernetes >= 1.25 if OSType is Windows.
    os_type str
    The operating system type. The default is Linux.
    pod_subnet_id str
    If omitted, pod IPs are statically assigned on the node subnet (see vnetSubnetID for more details). This is of the form: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/virtualNetworks/{virtualNetworkName}/subnets/{subnetName}
    power_state PowerStateResponse
    When an Agent Pool is first created it is initially Running. The Agent Pool can be stopped by setting this field to Stopped. A stopped Agent Pool stops all of its VMs and does not accrue billing charges. An Agent Pool can only be stopped if it is Running and provisioning state is Succeeded
    proximity_placement_group_id str
    The ID for Proximity Placement Group.
    scale_down_mode str
    This also effects the cluster autoscaler behavior. If not specified, it defaults to Delete.
    scale_set_eviction_policy str
    This cannot be specified unless the scaleSetPriority is 'Spot'. If not specified, the default is 'Delete'.
    scale_set_priority str
    The Virtual Machine Scale Set priority. If not specified, the default is 'Regular'.
    security_profile AgentPoolSecurityProfileResponse
    The security settings of an agent pool.
    spot_max_price float
    Possible values are any decimal value greater than zero or -1 which indicates the willingness to pay any on-demand price. For more details on spot pricing, see spot VMs pricing
    tags Mapping[str, str]
    The tags to be persisted on the agent pool virtual machine scale set.
    type str
    The type of Agent Pool.
    upgrade_settings AgentPoolUpgradeSettingsResponse
    Settings for upgrading the agentpool
    vm_size str
    VM size availability varies by region. If a node contains insufficient compute resources (memory, cpu, etc) pods might fail to run correctly. If this field is not specified, AKS will attempt to find an appropriate VM SKU for your pool, based on quota and capacity. For more details on restricted VM sizes, see: https://docs.microsoft.com/azure/aks/quotas-skus-regions
    vnet_subnet_id str
    If this is not specified, a VNET and subnet will be generated and used. If no podSubnetID is specified, this applies to nodes and pods, otherwise it applies to just nodes. This is of the form: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/virtualNetworks/{virtualNetworkName}/subnets/{subnetName}
    windows_profile AgentPoolWindowsProfileResponse
    The Windows agent pool's specific profile.
    workload_runtime str
    Determines the type of workload a node can run.
    currentOrchestratorVersion String
    If orchestratorVersion is a fully specified version <major.minor.patch>, this field will be exactly equal to it. If orchestratorVersion is <major.minor>, this field will contain the full <major.minor.patch> version being used.
    eTag String
    Unique read-only string used to implement optimistic concurrency. The eTag value will change when the resource is updated. Specify an if-match or if-none-match header with the eTag value for a subsequent request to enable optimistic concurrency per the normal etag convention.
    name String
    Windows agent pool names must be 6 characters or less.
    nodeImageVersion String
    The version of node image
    provisioningState String
    The current deployment or provisioning state.
    availabilityZones List<String>
    The list of Availability zones to use for nodes. This can only be specified if the AgentPoolType property is 'VirtualMachineScaleSets'.
    capacityReservationGroupID String
    AKS will associate the specified agent pool with the Capacity Reservation Group.
    count Number
    Number of agents (VMs) to host docker containers. Allowed values must be in the range of 0 to 1000 (inclusive) for user pools and in the range of 1 to 1000 (inclusive) for system pools. The default value is 1.
    creationData Property Map
    CreationData to be used to specify the source Snapshot ID if the node pool will be created/upgraded using a snapshot.
    enableAutoScaling Boolean
    Whether to enable auto-scaler
    enableEncryptionAtHost Boolean
    This is only supported on certain VM sizes and in certain Azure regions. For more information, see: https://docs.microsoft.com/azure/aks/enable-host-encryption
    enableFIPS Boolean
    See Add a FIPS-enabled node pool for more details.
    enableNodePublicIP Boolean
    Some scenarios may require nodes in a node pool to receive their own dedicated public IP addresses. A common scenario is for gaming workloads, where a console needs to make a direct connection to a cloud virtual machine to minimize hops. For more information see assigning a public IP per node. The default is false.
    enableUltraSSD Boolean
    Whether to enable UltraSSD
    gpuInstanceProfile String
    GPUInstanceProfile to be used to specify GPU MIG instance profile for supported GPU VM SKU.
    hostGroupID String
    This is of the form: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Compute/hostGroups/{hostGroupName}. For more information see Azure dedicated hosts.
    kubeletConfig Property Map
    The Kubelet configuration on the agent pool nodes.
    kubeletDiskType String
    Determines the placement of emptyDir volumes, container runtime data root, and Kubelet ephemeral storage.
    linuxOSConfig Property Map
    The OS configuration of Linux agent nodes.
    maxCount Number
    The maximum number of nodes for auto-scaling
    maxPods Number
    The maximum number of pods that can run on a node.
    messageOfTheDay String
    A base64-encoded string which will be written to /etc/motd after decoding. This allows customization of the message of the day for Linux nodes. It must not be specified for Windows nodes. It must be a static string (i.e., will be printed raw and not be executed as a script).
    minCount Number
    The minimum number of nodes for auto-scaling
    mode String
    A cluster must have at least one 'System' Agent Pool at all times. For additional information on agent pool restrictions and best practices, see: https://docs.microsoft.com/azure/aks/use-system-pools
    networkProfile Property Map
    Network-related settings of an agent pool.
    nodeLabels Map<String>
    The node labels to be persisted across all nodes in agent pool.
    nodePublicIPPrefixID String
    This is of the form: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/publicIPPrefixes/{publicIPPrefixName}
    nodeTaints List<String>
    The taints added to new nodes during node pool create and scale. For example, key=value:NoSchedule.
    orchestratorVersion String
    Both patch version <major.minor.patch> (e.g. 1.20.13) and <major.minor> (e.g. 1.20) are supported. When <major.minor> is specified, the latest supported GA patch version is chosen automatically. Updating the cluster with the same <major.minor> once it has been created (e.g. 1.14.x -> 1.14) will not trigger an upgrade, even if a newer patch version is available. As a best practice, you should upgrade all node pools in an AKS cluster to the same Kubernetes version. The node pool version must have the same major version as the control plane. The node pool minor version must be within two minor versions of the control plane version. The node pool version cannot be greater than the control plane version. For more information see upgrading a node pool.
    osDiskSizeGB Number
    OS Disk Size in GB to be used to specify the disk size for every machine in the master/agent pool. If you specify 0, it will apply the default osDisk size according to the vmSize specified.
    osDiskType String
    The default is 'Ephemeral' if the VM supports it and has a cache disk larger than the requested OSDiskSizeGB. Otherwise, defaults to 'Managed'. May not be changed after creation. For more information see Ephemeral OS.
    osSKU String
    Specifies the OS SKU used by the agent pool. The default is Ubuntu if OSType is Linux. The default is Windows2019 when Kubernetes <= 1.24 or Windows2022 when Kubernetes >= 1.25 if OSType is Windows.
    osType String
    The operating system type. The default is Linux.
    podSubnetID String
    If omitted, pod IPs are statically assigned on the node subnet (see vnetSubnetID for more details). This is of the form: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/virtualNetworks/{virtualNetworkName}/subnets/{subnetName}
    powerState Property Map
    When an Agent Pool is first created it is initially Running. The Agent Pool can be stopped by setting this field to Stopped. A stopped Agent Pool stops all of its VMs and does not accrue billing charges. An Agent Pool can only be stopped if it is Running and provisioning state is Succeeded
    proximityPlacementGroupID String
    The ID for Proximity Placement Group.
    scaleDownMode String
    This also effects the cluster autoscaler behavior. If not specified, it defaults to Delete.
    scaleSetEvictionPolicy String
    This cannot be specified unless the scaleSetPriority is 'Spot'. If not specified, the default is 'Delete'.
    scaleSetPriority String
    The Virtual Machine Scale Set priority. If not specified, the default is 'Regular'.
    securityProfile Property Map
    The security settings of an agent pool.
    spotMaxPrice Number
    Possible values are any decimal value greater than zero or -1 which indicates the willingness to pay any on-demand price. For more details on spot pricing, see spot VMs pricing
    tags Map<String>
    The tags to be persisted on the agent pool virtual machine scale set.
    type String
    The type of Agent Pool.
    upgradeSettings Property Map
    Settings for upgrading the agentpool
    vmSize String
    VM size availability varies by region. If a node contains insufficient compute resources (memory, cpu, etc) pods might fail to run correctly. If this field is not specified, AKS will attempt to find an appropriate VM SKU for your pool, based on quota and capacity. For more details on restricted VM sizes, see: https://docs.microsoft.com/azure/aks/quotas-skus-regions
    vnetSubnetID String
    If this is not specified, a VNET and subnet will be generated and used. If no podSubnetID is specified, this applies to nodes and pods, otherwise it applies to just nodes. This is of the form: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/virtualNetworks/{virtualNetworkName}/subnets/{subnetName}
    windowsProfile Property Map
    The Windows agent pool's specific profile.
    workloadRuntime String
    Determines the type of workload a node can run.

    ManagedClusterAutoUpgradeProfileResponse

    NodeOSUpgradeChannel string
    Manner in which the OS on your nodes is updated. The default is NodeImage.
    UpgradeChannel string
    For more information see setting the AKS cluster auto-upgrade channel.
    NodeOSUpgradeChannel string
    Manner in which the OS on your nodes is updated. The default is NodeImage.
    UpgradeChannel string
    For more information see setting the AKS cluster auto-upgrade channel.
    nodeOSUpgradeChannel String
    Manner in which the OS on your nodes is updated. The default is NodeImage.
    upgradeChannel String
    For more information see setting the AKS cluster auto-upgrade channel.
    nodeOSUpgradeChannel string
    Manner in which the OS on your nodes is updated. The default is NodeImage.
    upgradeChannel string
    For more information see setting the AKS cluster auto-upgrade channel.
    node_os_upgrade_channel str
    Manner in which the OS on your nodes is updated. The default is NodeImage.
    upgrade_channel str
    For more information see setting the AKS cluster auto-upgrade channel.
    nodeOSUpgradeChannel String
    Manner in which the OS on your nodes is updated. The default is NodeImage.
    upgradeChannel String
    For more information see setting the AKS cluster auto-upgrade channel.

    ManagedClusterAzureMonitorProfileKubeStateMetricsResponse

    MetricAnnotationsAllowList string
    Comma-separated list of Kubernetes annotation keys that will be used in the resource's labels metric (Example: 'namespaces=[kubernetes.io/team,...],pods=[kubernetes.io/team],...'). By default the metric contains only resource name and namespace labels.
    MetricLabelsAllowlist string
    Comma-separated list of additional Kubernetes label keys that will be used in the resource's labels metric (Example: 'namespaces=[k8s-label-1,k8s-label-n,...],pods=[app],...'). By default the metric contains only resource name and namespace labels.
    MetricAnnotationsAllowList string
    Comma-separated list of Kubernetes annotation keys that will be used in the resource's labels metric (Example: 'namespaces=[kubernetes.io/team,...],pods=[kubernetes.io/team],...'). By default the metric contains only resource name and namespace labels.
    MetricLabelsAllowlist string
    Comma-separated list of additional Kubernetes label keys that will be used in the resource's labels metric (Example: 'namespaces=[k8s-label-1,k8s-label-n,...],pods=[app],...'). By default the metric contains only resource name and namespace labels.
    metricAnnotationsAllowList String
    Comma-separated list of Kubernetes annotation keys that will be used in the resource's labels metric (Example: 'namespaces=[kubernetes.io/team,...],pods=[kubernetes.io/team],...'). By default the metric contains only resource name and namespace labels.
    metricLabelsAllowlist String
    Comma-separated list of additional Kubernetes label keys that will be used in the resource's labels metric (Example: 'namespaces=[k8s-label-1,k8s-label-n,...],pods=[app],...'). By default the metric contains only resource name and namespace labels.
    metricAnnotationsAllowList string
    Comma-separated list of Kubernetes annotation keys that will be used in the resource's labels metric (Example: 'namespaces=[kubernetes.io/team,...],pods=[kubernetes.io/team],...'). By default the metric contains only resource name and namespace labels.
    metricLabelsAllowlist string
    Comma-separated list of additional Kubernetes label keys that will be used in the resource's labels metric (Example: 'namespaces=[k8s-label-1,k8s-label-n,...],pods=[app],...'). By default the metric contains only resource name and namespace labels.
    metric_annotations_allow_list str
    Comma-separated list of Kubernetes annotation keys that will be used in the resource's labels metric (Example: 'namespaces=[kubernetes.io/team,...],pods=[kubernetes.io/team],...'). By default the metric contains only resource name and namespace labels.
    metric_labels_allowlist str
    Comma-separated list of additional Kubernetes label keys that will be used in the resource's labels metric (Example: 'namespaces=[k8s-label-1,k8s-label-n,...],pods=[app],...'). By default the metric contains only resource name and namespace labels.
    metricAnnotationsAllowList String
    Comma-separated list of Kubernetes annotation keys that will be used in the resource's labels metric (Example: 'namespaces=[kubernetes.io/team,...],pods=[kubernetes.io/team],...'). By default the metric contains only resource name and namespace labels.
    metricLabelsAllowlist String
    Comma-separated list of additional Kubernetes label keys that will be used in the resource's labels metric (Example: 'namespaces=[k8s-label-1,k8s-label-n,...],pods=[app],...'). By default the metric contains only resource name and namespace labels.

    ManagedClusterAzureMonitorProfileMetricsResponse

    Enabled bool
    Whether to enable or disable the Azure Managed Prometheus addon for Prometheus monitoring. See aka.ms/AzureManagedPrometheus-aks-enable for details on enabling and disabling.
    KubeStateMetrics Pulumi.AzureNative.ContainerService.Inputs.ManagedClusterAzureMonitorProfileKubeStateMetricsResponse
    Kube State Metrics profile for the Azure Managed Prometheus addon. These optional settings are for the kube-state-metrics pod that is deployed with the addon. See aka.ms/AzureManagedPrometheus-optional-parameters for details.
    Enabled bool
    Whether to enable or disable the Azure Managed Prometheus addon for Prometheus monitoring. See aka.ms/AzureManagedPrometheus-aks-enable for details on enabling and disabling.
    KubeStateMetrics ManagedClusterAzureMonitorProfileKubeStateMetricsResponse
    Kube State Metrics profile for the Azure Managed Prometheus addon. These optional settings are for the kube-state-metrics pod that is deployed with the addon. See aka.ms/AzureManagedPrometheus-optional-parameters for details.
    enabled Boolean
    Whether to enable or disable the Azure Managed Prometheus addon for Prometheus monitoring. See aka.ms/AzureManagedPrometheus-aks-enable for details on enabling and disabling.
    kubeStateMetrics ManagedClusterAzureMonitorProfileKubeStateMetricsResponse
    Kube State Metrics profile for the Azure Managed Prometheus addon. These optional settings are for the kube-state-metrics pod that is deployed with the addon. See aka.ms/AzureManagedPrometheus-optional-parameters for details.
    enabled boolean
    Whether to enable or disable the Azure Managed Prometheus addon for Prometheus monitoring. See aka.ms/AzureManagedPrometheus-aks-enable for details on enabling and disabling.
    kubeStateMetrics ManagedClusterAzureMonitorProfileKubeStateMetricsResponse
    Kube State Metrics profile for the Azure Managed Prometheus addon. These optional settings are for the kube-state-metrics pod that is deployed with the addon. See aka.ms/AzureManagedPrometheus-optional-parameters for details.
    enabled bool
    Whether to enable or disable the Azure Managed Prometheus addon for Prometheus monitoring. See aka.ms/AzureManagedPrometheus-aks-enable for details on enabling and disabling.
    kube_state_metrics ManagedClusterAzureMonitorProfileKubeStateMetricsResponse
    Kube State Metrics profile for the Azure Managed Prometheus addon. These optional settings are for the kube-state-metrics pod that is deployed with the addon. See aka.ms/AzureManagedPrometheus-optional-parameters for details.
    enabled Boolean
    Whether to enable or disable the Azure Managed Prometheus addon for Prometheus monitoring. See aka.ms/AzureManagedPrometheus-aks-enable for details on enabling and disabling.
    kubeStateMetrics Property Map
    Kube State Metrics profile for the Azure Managed Prometheus addon. These optional settings are for the kube-state-metrics pod that is deployed with the addon. See aka.ms/AzureManagedPrometheus-optional-parameters for details.

    ManagedClusterAzureMonitorProfileResponse

    Metrics Pulumi.AzureNative.ContainerService.Inputs.ManagedClusterAzureMonitorProfileMetricsResponse
    Metrics profile for the Azure Monitor managed service for Prometheus addon. Collect out-of-the-box Kubernetes infrastructure metrics to send to an Azure Monitor Workspace and configure additional scraping for custom targets. See aka.ms/AzureManagedPrometheus for an overview.
    Metrics ManagedClusterAzureMonitorProfileMetricsResponse
    Metrics profile for the Azure Monitor managed service for Prometheus addon. Collect out-of-the-box Kubernetes infrastructure metrics to send to an Azure Monitor Workspace and configure additional scraping for custom targets. See aka.ms/AzureManagedPrometheus for an overview.
    metrics ManagedClusterAzureMonitorProfileMetricsResponse
    Metrics profile for the Azure Monitor managed service for Prometheus addon. Collect out-of-the-box Kubernetes infrastructure metrics to send to an Azure Monitor Workspace and configure additional scraping for custom targets. See aka.ms/AzureManagedPrometheus for an overview.
    metrics ManagedClusterAzureMonitorProfileMetricsResponse
    Metrics profile for the Azure Monitor managed service for Prometheus addon. Collect out-of-the-box Kubernetes infrastructure metrics to send to an Azure Monitor Workspace and configure additional scraping for custom targets. See aka.ms/AzureManagedPrometheus for an overview.
    metrics ManagedClusterAzureMonitorProfileMetricsResponse
    Metrics profile for the Azure Monitor managed service for Prometheus addon. Collect out-of-the-box Kubernetes infrastructure metrics to send to an Azure Monitor Workspace and configure additional scraping for custom targets. See aka.ms/AzureManagedPrometheus for an overview.
    metrics Property Map
    Metrics profile for the Azure Monitor managed service for Prometheus addon. Collect out-of-the-box Kubernetes infrastructure metrics to send to an Azure Monitor Workspace and configure additional scraping for custom targets. See aka.ms/AzureManagedPrometheus for an overview.

    ManagedClusterCostAnalysisResponse

    Enabled bool
    The Managed Cluster sku.tier must be set to 'Standard' or 'Premium' to enable this feature. Enabling this will add Kubernetes Namespace and Deployment details to the Cost Analysis views in the Azure portal. If not specified, the default is false. For more information see aka.ms/aks/docs/cost-analysis.
    Enabled bool
    The Managed Cluster sku.tier must be set to 'Standard' or 'Premium' to enable this feature. Enabling this will add Kubernetes Namespace and Deployment details to the Cost Analysis views in the Azure portal. If not specified, the default is false. For more information see aka.ms/aks/docs/cost-analysis.
    enabled Boolean
    The Managed Cluster sku.tier must be set to 'Standard' or 'Premium' to enable this feature. Enabling this will add Kubernetes Namespace and Deployment details to the Cost Analysis views in the Azure portal. If not specified, the default is false. For more information see aka.ms/aks/docs/cost-analysis.
    enabled boolean
    The Managed Cluster sku.tier must be set to 'Standard' or 'Premium' to enable this feature. Enabling this will add Kubernetes Namespace and Deployment details to the Cost Analysis views in the Azure portal. If not specified, the default is false. For more information see aka.ms/aks/docs/cost-analysis.
    enabled bool
    The Managed Cluster sku.tier must be set to 'Standard' or 'Premium' to enable this feature. Enabling this will add Kubernetes Namespace and Deployment details to the Cost Analysis views in the Azure portal. If not specified, the default is false. For more information see aka.ms/aks/docs/cost-analysis.
    enabled Boolean
    The Managed Cluster sku.tier must be set to 'Standard' or 'Premium' to enable this feature. Enabling this will add Kubernetes Namespace and Deployment details to the Cost Analysis views in the Azure portal. If not specified, the default is false. For more information see aka.ms/aks/docs/cost-analysis.

    ManagedClusterHTTPProxyConfigResponse

    HttpProxy string
    The HTTP proxy server endpoint to use.
    HttpsProxy string
    The HTTPS proxy server endpoint to use.
    NoProxy List<string>
    The endpoints that should not go through proxy.
    TrustedCa string
    Alternative CA cert to use for connecting to proxy servers.
    HttpProxy string
    The HTTP proxy server endpoint to use.
    HttpsProxy string
    The HTTPS proxy server endpoint to use.
    NoProxy []string
    The endpoints that should not go through proxy.
    TrustedCa string
    Alternative CA cert to use for connecting to proxy servers.
    httpProxy String
    The HTTP proxy server endpoint to use.
    httpsProxy String
    The HTTPS proxy server endpoint to use.
    noProxy List<String>
    The endpoints that should not go through proxy.
    trustedCa String
    Alternative CA cert to use for connecting to proxy servers.
    httpProxy string
    The HTTP proxy server endpoint to use.
    httpsProxy string
    The HTTPS proxy server endpoint to use.
    noProxy string[]
    The endpoints that should not go through proxy.
    trustedCa string
    Alternative CA cert to use for connecting to proxy servers.
    http_proxy str
    The HTTP proxy server endpoint to use.
    https_proxy str
    The HTTPS proxy server endpoint to use.
    no_proxy Sequence[str]
    The endpoints that should not go through proxy.
    trusted_ca str
    Alternative CA cert to use for connecting to proxy servers.
    httpProxy String
    The HTTP proxy server endpoint to use.
    httpsProxy String
    The HTTPS proxy server endpoint to use.
    noProxy List<String>
    The endpoints that should not go through proxy.
    trustedCa String
    Alternative CA cert to use for connecting to proxy servers.

    ManagedClusterIdentityResponse

    PrincipalId string
    The principal id of the system assigned identity which is used by master components.
    TenantId string
    The tenant id of the system assigned identity which is used by master components.
    DelegatedResources Dictionary<string, Pulumi.AzureNative.ContainerService.Inputs.DelegatedResourceResponse>
    The delegated identity resources assigned to this managed cluster. This can only be set by another Azure Resource Provider, and managed cluster only accept one delegated identity resource. Internal use only.
    Type string
    For more information see use managed identities in AKS.
    UserAssignedIdentities Dictionary<string, Pulumi.AzureNative.ContainerService.Inputs.ManagedClusterIdentityResponseUserAssignedIdentities>
    The keys must be ARM resource IDs in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'.
    PrincipalId string
    The principal id of the system assigned identity which is used by master components.
    TenantId string
    The tenant id of the system assigned identity which is used by master components.
    DelegatedResources map[string]DelegatedResourceResponse
    The delegated identity resources assigned to this managed cluster. This can only be set by another Azure Resource Provider, and managed cluster only accept one delegated identity resource. Internal use only.
    Type string
    For more information see use managed identities in AKS.
    UserAssignedIdentities map[string]ManagedClusterIdentityResponseUserAssignedIdentities
    The keys must be ARM resource IDs in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'.
    principalId String
    The principal id of the system assigned identity which is used by master components.
    tenantId String
    The tenant id of the system assigned identity which is used by master components.
    delegatedResources Map<String,DelegatedResourceResponse>
    The delegated identity resources assigned to this managed cluster. This can only be set by another Azure Resource Provider, and managed cluster only accept one delegated identity resource. Internal use only.
    type String
    For more information see use managed identities in AKS.
    userAssignedIdentities Map<String,ManagedClusterIdentityResponseUserAssignedIdentities>
    The keys must be ARM resource IDs in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'.
    principalId string
    The principal id of the system assigned identity which is used by master components.
    tenantId string
    The tenant id of the system assigned identity which is used by master components.
    delegatedResources {[key: string]: DelegatedResourceResponse}
    The delegated identity resources assigned to this managed cluster. This can only be set by another Azure Resource Provider, and managed cluster only accept one delegated identity resource. Internal use only.
    type string
    For more information see use managed identities in AKS.
    userAssignedIdentities {[key: string]: ManagedClusterIdentityResponseUserAssignedIdentities}
    The keys must be ARM resource IDs in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'.
    principal_id str
    The principal id of the system assigned identity which is used by master components.
    tenant_id str
    The tenant id of the system assigned identity which is used by master components.
    delegated_resources Mapping[str, DelegatedResourceResponse]
    The delegated identity resources assigned to this managed cluster. This can only be set by another Azure Resource Provider, and managed cluster only accept one delegated identity resource. Internal use only.
    type str
    For more information see use managed identities in AKS.
    user_assigned_identities Mapping[str, ManagedClusterIdentityResponseUserAssignedIdentities]
    The keys must be ARM resource IDs in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'.
    principalId String
    The principal id of the system assigned identity which is used by master components.
    tenantId String
    The tenant id of the system assigned identity which is used by master components.
    delegatedResources Map<Property Map>
    The delegated identity resources assigned to this managed cluster. This can only be set by another Azure Resource Provider, and managed cluster only accept one delegated identity resource. Internal use only.
    type String
    For more information see use managed identities in AKS.
    userAssignedIdentities Map<Property Map>
    The keys must be ARM resource IDs in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'.

    ManagedClusterIdentityResponseUserAssignedIdentities

    ClientId string
    The client id of user assigned identity.
    PrincipalId string
    The principal id of user assigned identity.
    ClientId string
    The client id of user assigned identity.
    PrincipalId string
    The principal id of user assigned identity.
    clientId String
    The client id of user assigned identity.
    principalId String
    The principal id of user assigned identity.
    clientId string
    The client id of user assigned identity.
    principalId string
    The principal id of user assigned identity.
    client_id str
    The client id of user assigned identity.
    principal_id str
    The principal id of user assigned identity.
    clientId String
    The client id of user assigned identity.
    principalId String
    The principal id of user assigned identity.

    ManagedClusterIngressProfileResponse

    WebAppRouting Pulumi.AzureNative.ContainerService.Inputs.ManagedClusterIngressProfileWebAppRoutingResponse
    App Routing settings for the ingress profile. You can find an overview and onboarding guide for this feature at https://learn.microsoft.com/en-us/azure/aks/app-routing?tabs=default%2Cdeploy-app-default.
    WebAppRouting ManagedClusterIngressProfileWebAppRoutingResponse
    App Routing settings for the ingress profile. You can find an overview and onboarding guide for this feature at https://learn.microsoft.com/en-us/azure/aks/app-routing?tabs=default%2Cdeploy-app-default.
    webAppRouting ManagedClusterIngressProfileWebAppRoutingResponse
    App Routing settings for the ingress profile. You can find an overview and onboarding guide for this feature at https://learn.microsoft.com/en-us/azure/aks/app-routing?tabs=default%2Cdeploy-app-default.
    webAppRouting ManagedClusterIngressProfileWebAppRoutingResponse
    App Routing settings for the ingress profile. You can find an overview and onboarding guide for this feature at https://learn.microsoft.com/en-us/azure/aks/app-routing?tabs=default%2Cdeploy-app-default.
    web_app_routing ManagedClusterIngressProfileWebAppRoutingResponse
    App Routing settings for the ingress profile. You can find an overview and onboarding guide for this feature at https://learn.microsoft.com/en-us/azure/aks/app-routing?tabs=default%2Cdeploy-app-default.
    webAppRouting Property Map
    App Routing settings for the ingress profile. You can find an overview and onboarding guide for this feature at https://learn.microsoft.com/en-us/azure/aks/app-routing?tabs=default%2Cdeploy-app-default.

    ManagedClusterIngressProfileWebAppRoutingResponse

    Identity Pulumi.AzureNative.ContainerService.Inputs.UserAssignedIdentityResponse
    Managed identity of the Application Routing add-on. This is the identity that should be granted permissions, for example, to manage the associated Azure DNS resource and get certificates from Azure Key Vault. See this overview of the add-on for more instructions.
    DnsZoneResourceIds List<string>
    Resource IDs of the DNS zones to be associated with the Application Routing add-on. Used only when Application Routing add-on is enabled. Public and private DNS zones can be in different resource groups, but all public DNS zones must be in the same resource group and all private DNS zones must be in the same resource group.
    Enabled bool
    Whether to enable the Application Routing add-on.
    Identity UserAssignedIdentityResponse
    Managed identity of the Application Routing add-on. This is the identity that should be granted permissions, for example, to manage the associated Azure DNS resource and get certificates from Azure Key Vault. See this overview of the add-on for more instructions.
    DnsZoneResourceIds []string
    Resource IDs of the DNS zones to be associated with the Application Routing add-on. Used only when Application Routing add-on is enabled. Public and private DNS zones can be in different resource groups, but all public DNS zones must be in the same resource group and all private DNS zones must be in the same resource group.
    Enabled bool
    Whether to enable the Application Routing add-on.
    identity UserAssignedIdentityResponse
    Managed identity of the Application Routing add-on. This is the identity that should be granted permissions, for example, to manage the associated Azure DNS resource and get certificates from Azure Key Vault. See this overview of the add-on for more instructions.
    dnsZoneResourceIds List<String>
    Resource IDs of the DNS zones to be associated with the Application Routing add-on. Used only when Application Routing add-on is enabled. Public and private DNS zones can be in different resource groups, but all public DNS zones must be in the same resource group and all private DNS zones must be in the same resource group.
    enabled Boolean
    Whether to enable the Application Routing add-on.
    identity UserAssignedIdentityResponse
    Managed identity of the Application Routing add-on. This is the identity that should be granted permissions, for example, to manage the associated Azure DNS resource and get certificates from Azure Key Vault. See this overview of the add-on for more instructions.
    dnsZoneResourceIds string[]
    Resource IDs of the DNS zones to be associated with the Application Routing add-on. Used only when Application Routing add-on is enabled. Public and private DNS zones can be in different resource groups, but all public DNS zones must be in the same resource group and all private DNS zones must be in the same resource group.
    enabled boolean
    Whether to enable the Application Routing add-on.
    identity UserAssignedIdentityResponse
    Managed identity of the Application Routing add-on. This is the identity that should be granted permissions, for example, to manage the associated Azure DNS resource and get certificates from Azure Key Vault. See this overview of the add-on for more instructions.
    dns_zone_resource_ids Sequence[str]
    Resource IDs of the DNS zones to be associated with the Application Routing add-on. Used only when Application Routing add-on is enabled. Public and private DNS zones can be in different resource groups, but all public DNS zones must be in the same resource group and all private DNS zones must be in the same resource group.
    enabled bool
    Whether to enable the Application Routing add-on.
    identity Property Map
    Managed identity of the Application Routing add-on. This is the identity that should be granted permissions, for example, to manage the associated Azure DNS resource and get certificates from Azure Key Vault. See this overview of the add-on for more instructions.
    dnsZoneResourceIds List<String>
    Resource IDs of the DNS zones to be associated with the Application Routing add-on. Used only when Application Routing add-on is enabled. Public and private DNS zones can be in different resource groups, but all public DNS zones must be in the same resource group and all private DNS zones must be in the same resource group.
    enabled Boolean
    Whether to enable the Application Routing add-on.

    ManagedClusterLoadBalancerProfileResponse

    AllocatedOutboundPorts int
    The desired number of allocated SNAT ports per VM. Allowed values are in the range of 0 to 64000 (inclusive). The default value is 0 which results in Azure dynamically allocating ports.
    BackendPoolType string
    The type of the managed inbound Load Balancer BackendPool.
    EffectiveOutboundIPs List<Pulumi.AzureNative.ContainerService.Inputs.ResourceReferenceResponse>
    The effective outbound IP resources of the cluster load balancer.
    EnableMultipleStandardLoadBalancers bool
    Enable multiple standard load balancers per AKS cluster or not.
    IdleTimeoutInMinutes int
    Desired outbound flow idle timeout in minutes. Allowed values are in the range of 4 to 120 (inclusive). The default value is 30 minutes.
    ManagedOutboundIPs Pulumi.AzureNative.ContainerService.Inputs.ManagedClusterLoadBalancerProfileResponseManagedOutboundIPs
    Desired managed outbound IPs for the cluster load balancer.
    OutboundIPPrefixes Pulumi.AzureNative.ContainerService.Inputs.ManagedClusterLoadBalancerProfileResponseOutboundIPPrefixes
    Desired outbound IP Prefix resources for the cluster load balancer.
    OutboundIPs Pulumi.AzureNative.ContainerService.Inputs.ManagedClusterLoadBalancerProfileResponseOutboundIPs
    Desired outbound IP resources for the cluster load balancer.
    AllocatedOutboundPorts int
    The desired number of allocated SNAT ports per VM. Allowed values are in the range of 0 to 64000 (inclusive). The default value is 0 which results in Azure dynamically allocating ports.
    BackendPoolType string
    The type of the managed inbound Load Balancer BackendPool.
    EffectiveOutboundIPs []ResourceReferenceResponse
    The effective outbound IP resources of the cluster load balancer.
    EnableMultipleStandardLoadBalancers bool
    Enable multiple standard load balancers per AKS cluster or not.
    IdleTimeoutInMinutes int
    Desired outbound flow idle timeout in minutes. Allowed values are in the range of 4 to 120 (inclusive). The default value is 30 minutes.
    ManagedOutboundIPs ManagedClusterLoadBalancerProfileResponseManagedOutboundIPs
    Desired managed outbound IPs for the cluster load balancer.
    OutboundIPPrefixes ManagedClusterLoadBalancerProfileResponseOutboundIPPrefixes
    Desired outbound IP Prefix resources for the cluster load balancer.
    OutboundIPs ManagedClusterLoadBalancerProfileResponseOutboundIPs
    Desired outbound IP resources for the cluster load balancer.
    allocatedOutboundPorts Integer
    The desired number of allocated SNAT ports per VM. Allowed values are in the range of 0 to 64000 (inclusive). The default value is 0 which results in Azure dynamically allocating ports.
    backendPoolType String
    The type of the managed inbound Load Balancer BackendPool.
    effectiveOutboundIPs List<ResourceReferenceResponse>
    The effective outbound IP resources of the cluster load balancer.
    enableMultipleStandardLoadBalancers Boolean
    Enable multiple standard load balancers per AKS cluster or not.
    idleTimeoutInMinutes Integer
    Desired outbound flow idle timeout in minutes. Allowed values are in the range of 4 to 120 (inclusive). The default value is 30 minutes.
    managedOutboundIPs ManagedClusterLoadBalancerProfileResponseManagedOutboundIPs
    Desired managed outbound IPs for the cluster load balancer.
    outboundIPPrefixes ManagedClusterLoadBalancerProfileResponseOutboundIPPrefixes
    Desired outbound IP Prefix resources for the cluster load balancer.
    outboundIPs ManagedClusterLoadBalancerProfileResponseOutboundIPs
    Desired outbound IP resources for the cluster load balancer.
    allocatedOutboundPorts number
    The desired number of allocated SNAT ports per VM. Allowed values are in the range of 0 to 64000 (inclusive). The default value is 0 which results in Azure dynamically allocating ports.
    backendPoolType string
    The type of the managed inbound Load Balancer BackendPool.
    effectiveOutboundIPs ResourceReferenceResponse[]
    The effective outbound IP resources of the cluster load balancer.
    enableMultipleStandardLoadBalancers boolean
    Enable multiple standard load balancers per AKS cluster or not.
    idleTimeoutInMinutes number
    Desired outbound flow idle timeout in minutes. Allowed values are in the range of 4 to 120 (inclusive). The default value is 30 minutes.
    managedOutboundIPs ManagedClusterLoadBalancerProfileResponseManagedOutboundIPs
    Desired managed outbound IPs for the cluster load balancer.
    outboundIPPrefixes ManagedClusterLoadBalancerProfileResponseOutboundIPPrefixes
    Desired outbound IP Prefix resources for the cluster load balancer.
    outboundIPs ManagedClusterLoadBalancerProfileResponseOutboundIPs
    Desired outbound IP resources for the cluster load balancer.
    allocated_outbound_ports int
    The desired number of allocated SNAT ports per VM. Allowed values are in the range of 0 to 64000 (inclusive). The default value is 0 which results in Azure dynamically allocating ports.
    backend_pool_type str
    The type of the managed inbound Load Balancer BackendPool.
    effective_outbound_ips Sequence[ResourceReferenceResponse]
    The effective outbound IP resources of the cluster load balancer.
    enable_multiple_standard_load_balancers bool
    Enable multiple standard load balancers per AKS cluster or not.
    idle_timeout_in_minutes int
    Desired outbound flow idle timeout in minutes. Allowed values are in the range of 4 to 120 (inclusive). The default value is 30 minutes.
    managed_outbound_ips ManagedClusterLoadBalancerProfileResponseManagedOutboundIPs
    Desired managed outbound IPs for the cluster load balancer.
    outbound_ip_prefixes ManagedClusterLoadBalancerProfileResponseOutboundIPPrefixes
    Desired outbound IP Prefix resources for the cluster load balancer.
    outbound_ips ManagedClusterLoadBalancerProfileResponseOutboundIPs
    Desired outbound IP resources for the cluster load balancer.
    allocatedOutboundPorts Number
    The desired number of allocated SNAT ports per VM. Allowed values are in the range of 0 to 64000 (inclusive). The default value is 0 which results in Azure dynamically allocating ports.
    backendPoolType String
    The type of the managed inbound Load Balancer BackendPool.
    effectiveOutboundIPs List<Property Map>
    The effective outbound IP resources of the cluster load balancer.
    enableMultipleStandardLoadBalancers Boolean
    Enable multiple standard load balancers per AKS cluster or not.
    idleTimeoutInMinutes Number
    Desired outbound flow idle timeout in minutes. Allowed values are in the range of 4 to 120 (inclusive). The default value is 30 minutes.
    managedOutboundIPs Property Map
    Desired managed outbound IPs for the cluster load balancer.
    outboundIPPrefixes Property Map
    Desired outbound IP Prefix resources for the cluster load balancer.
    outboundIPs Property Map
    Desired outbound IP resources for the cluster load balancer.

    ManagedClusterLoadBalancerProfileResponseManagedOutboundIPs

    Count int
    The desired number of IPv4 outbound IPs created/managed by Azure for the cluster load balancer. Allowed values must be in the range of 1 to 100 (inclusive). The default value is 1.
    CountIPv6 int
    The desired number of IPv6 outbound IPs created/managed by Azure for the cluster load balancer. Allowed values must be in the range of 1 to 100 (inclusive). The default value is 0 for single-stack and 1 for dual-stack.
    Count int
    The desired number of IPv4 outbound IPs created/managed by Azure for the cluster load balancer. Allowed values must be in the range of 1 to 100 (inclusive). The default value is 1.
    CountIPv6 int
    The desired number of IPv6 outbound IPs created/managed by Azure for the cluster load balancer. Allowed values must be in the range of 1 to 100 (inclusive). The default value is 0 for single-stack and 1 for dual-stack.
    count Integer
    The desired number of IPv4 outbound IPs created/managed by Azure for the cluster load balancer. Allowed values must be in the range of 1 to 100 (inclusive). The default value is 1.
    countIPv6 Integer
    The desired number of IPv6 outbound IPs created/managed by Azure for the cluster load balancer. Allowed values must be in the range of 1 to 100 (inclusive). The default value is 0 for single-stack and 1 for dual-stack.
    count number
    The desired number of IPv4 outbound IPs created/managed by Azure for the cluster load balancer. Allowed values must be in the range of 1 to 100 (inclusive). The default value is 1.
    countIPv6 number
    The desired number of IPv6 outbound IPs created/managed by Azure for the cluster load balancer. Allowed values must be in the range of 1 to 100 (inclusive). The default value is 0 for single-stack and 1 for dual-stack.
    count int
    The desired number of IPv4 outbound IPs created/managed by Azure for the cluster load balancer. Allowed values must be in the range of 1 to 100 (inclusive). The default value is 1.
    count_i_pv6 int
    The desired number of IPv6 outbound IPs created/managed by Azure for the cluster load balancer. Allowed values must be in the range of 1 to 100 (inclusive). The default value is 0 for single-stack and 1 for dual-stack.
    count Number
    The desired number of IPv4 outbound IPs created/managed by Azure for the cluster load balancer. Allowed values must be in the range of 1 to 100 (inclusive). The default value is 1.
    countIPv6 Number
    The desired number of IPv6 outbound IPs created/managed by Azure for the cluster load balancer. Allowed values must be in the range of 1 to 100 (inclusive). The default value is 0 for single-stack and 1 for dual-stack.

    ManagedClusterLoadBalancerProfileResponseOutboundIPPrefixes

    PublicIPPrefixes []ResourceReferenceResponse
    A list of public IP prefix resources.
    publicIPPrefixes List<ResourceReferenceResponse>
    A list of public IP prefix resources.
    publicIPPrefixes ResourceReferenceResponse[]
    A list of public IP prefix resources.
    public_ip_prefixes Sequence[ResourceReferenceResponse]
    A list of public IP prefix resources.
    publicIPPrefixes List<Property Map>
    A list of public IP prefix resources.

    ManagedClusterLoadBalancerProfileResponseOutboundIPs

    PublicIPs []ResourceReferenceResponse
    A list of public IP resources.
    publicIPs List<ResourceReferenceResponse>
    A list of public IP resources.
    publicIPs ResourceReferenceResponse[]
    A list of public IP resources.
    public_ips Sequence[ResourceReferenceResponse]
    A list of public IP resources.
    publicIPs List<Property Map>
    A list of public IP resources.

    ManagedClusterManagedOutboundIPProfileResponse

    Count int
    The desired number of outbound IPs created/managed by Azure. Allowed values must be in the range of 1 to 16 (inclusive). The default value is 1.
    Count int
    The desired number of outbound IPs created/managed by Azure. Allowed values must be in the range of 1 to 16 (inclusive). The default value is 1.
    count Integer
    The desired number of outbound IPs created/managed by Azure. Allowed values must be in the range of 1 to 16 (inclusive). The default value is 1.
    count number
    The desired number of outbound IPs created/managed by Azure. Allowed values must be in the range of 1 to 16 (inclusive). The default value is 1.
    count int
    The desired number of outbound IPs created/managed by Azure. Allowed values must be in the range of 1 to 16 (inclusive). The default value is 1.
    count Number
    The desired number of outbound IPs created/managed by Azure. Allowed values must be in the range of 1 to 16 (inclusive). The default value is 1.

    ManagedClusterMetricsProfileResponse

    CostAnalysis ManagedClusterCostAnalysisResponse
    The cost analysis configuration for the cluster
    costAnalysis ManagedClusterCostAnalysisResponse
    The cost analysis configuration for the cluster
    costAnalysis ManagedClusterCostAnalysisResponse
    The cost analysis configuration for the cluster
    cost_analysis ManagedClusterCostAnalysisResponse
    The cost analysis configuration for the cluster
    costAnalysis Property Map
    The cost analysis configuration for the cluster

    ManagedClusterNATGatewayProfileResponse

    EffectiveOutboundIPs List<Pulumi.AzureNative.ContainerService.Inputs.ResourceReferenceResponse>
    The effective outbound IP resources of the cluster NAT gateway.
    IdleTimeoutInMinutes int
    Desired outbound flow idle timeout in minutes. Allowed values are in the range of 4 to 120 (inclusive). The default value is 4 minutes.
    ManagedOutboundIPProfile Pulumi.AzureNative.ContainerService.Inputs.ManagedClusterManagedOutboundIPProfileResponse
    Profile of the managed outbound IP resources of the cluster NAT gateway.
    EffectiveOutboundIPs []ResourceReferenceResponse
    The effective outbound IP resources of the cluster NAT gateway.
    IdleTimeoutInMinutes int
    Desired outbound flow idle timeout in minutes. Allowed values are in the range of 4 to 120 (inclusive). The default value is 4 minutes.
    ManagedOutboundIPProfile ManagedClusterManagedOutboundIPProfileResponse
    Profile of the managed outbound IP resources of the cluster NAT gateway.
    effectiveOutboundIPs List<ResourceReferenceResponse>
    The effective outbound IP resources of the cluster NAT gateway.
    idleTimeoutInMinutes Integer
    Desired outbound flow idle timeout in minutes. Allowed values are in the range of 4 to 120 (inclusive). The default value is 4 minutes.
    managedOutboundIPProfile ManagedClusterManagedOutboundIPProfileResponse
    Profile of the managed outbound IP resources of the cluster NAT gateway.
    effectiveOutboundIPs ResourceReferenceResponse[]
    The effective outbound IP resources of the cluster NAT gateway.
    idleTimeoutInMinutes number
    Desired outbound flow idle timeout in minutes. Allowed values are in the range of 4 to 120 (inclusive). The default value is 4 minutes.
    managedOutboundIPProfile ManagedClusterManagedOutboundIPProfileResponse
    Profile of the managed outbound IP resources of the cluster NAT gateway.
    effective_outbound_ips Sequence[ResourceReferenceResponse]
    The effective outbound IP resources of the cluster NAT gateway.
    idle_timeout_in_minutes int
    Desired outbound flow idle timeout in minutes. Allowed values are in the range of 4 to 120 (inclusive). The default value is 4 minutes.
    managed_outbound_ip_profile ManagedClusterManagedOutboundIPProfileResponse
    Profile of the managed outbound IP resources of the cluster NAT gateway.
    effectiveOutboundIPs List<Property Map>
    The effective outbound IP resources of the cluster NAT gateway.
    idleTimeoutInMinutes Number
    Desired outbound flow idle timeout in minutes. Allowed values are in the range of 4 to 120 (inclusive). The default value is 4 minutes.
    managedOutboundIPProfile Property Map
    Profile of the managed outbound IP resources of the cluster NAT gateway.

    ManagedClusterNodeResourceGroupProfileResponse

    RestrictionLevel string
    The restriction level applied to the cluster's node resource group. If not specified, the default is 'Unrestricted'
    RestrictionLevel string
    The restriction level applied to the cluster's node resource group. If not specified, the default is 'Unrestricted'
    restrictionLevel String
    The restriction level applied to the cluster's node resource group. If not specified, the default is 'Unrestricted'
    restrictionLevel string
    The restriction level applied to the cluster's node resource group. If not specified, the default is 'Unrestricted'
    restriction_level str
    The restriction level applied to the cluster's node resource group. If not specified, the default is 'Unrestricted'
    restrictionLevel String
    The restriction level applied to the cluster's node resource group. If not specified, the default is 'Unrestricted'

    ManagedClusterOIDCIssuerProfileResponse

    IssuerURL string
    The OIDC issuer url of the Managed Cluster.
    Enabled bool
    Whether the OIDC issuer is enabled.
    IssuerURL string
    The OIDC issuer url of the Managed Cluster.
    Enabled bool
    Whether the OIDC issuer is enabled.
    issuerURL String
    The OIDC issuer url of the Managed Cluster.
    enabled Boolean
    Whether the OIDC issuer is enabled.
    issuerURL string
    The OIDC issuer url of the Managed Cluster.
    enabled boolean
    Whether the OIDC issuer is enabled.
    issuer_url str
    The OIDC issuer url of the Managed Cluster.
    enabled bool
    Whether the OIDC issuer is enabled.
    issuerURL String
    The OIDC issuer url of the Managed Cluster.
    enabled Boolean
    Whether the OIDC issuer is enabled.

    ManagedClusterPodIdentityExceptionResponse

    Name string
    The name of the pod identity exception.
    Namespace string
    The namespace of the pod identity exception.
    PodLabels Dictionary<string, string>
    The pod labels to match.
    Name string
    The name of the pod identity exception.
    Namespace string
    The namespace of the pod identity exception.
    PodLabels map[string]string
    The pod labels to match.
    name String
    The name of the pod identity exception.
    namespace String
    The namespace of the pod identity exception.
    podLabels Map<String,String>
    The pod labels to match.
    name string
    The name of the pod identity exception.
    namespace string
    The namespace of the pod identity exception.
    podLabels {[key: string]: string}
    The pod labels to match.
    name str
    The name of the pod identity exception.
    namespace str
    The namespace of the pod identity exception.
    pod_labels Mapping[str, str]
    The pod labels to match.
    name String
    The name of the pod identity exception.
    namespace String
    The namespace of the pod identity exception.
    podLabels Map<String>
    The pod labels to match.

    ManagedClusterPodIdentityProfileResponse

    AllowNetworkPluginKubenet bool
    Running in Kubenet is disabled by default due to the security related nature of AAD Pod Identity and the risks of IP spoofing. See using Kubenet network plugin with AAD Pod Identity for more information.
    Enabled bool
    Whether the pod identity addon is enabled.
    UserAssignedIdentities List<Pulumi.AzureNative.ContainerService.Inputs.ManagedClusterPodIdentityResponse>
    The pod identities to use in the cluster.
    UserAssignedIdentityExceptions List<Pulumi.AzureNative.ContainerService.Inputs.ManagedClusterPodIdentityExceptionResponse>
    The pod identity exceptions to allow.
    AllowNetworkPluginKubenet bool
    Running in Kubenet is disabled by default due to the security related nature of AAD Pod Identity and the risks of IP spoofing. See using Kubenet network plugin with AAD Pod Identity for more information.
    Enabled bool
    Whether the pod identity addon is enabled.
    UserAssignedIdentities []ManagedClusterPodIdentityResponse
    The pod identities to use in the cluster.
    UserAssignedIdentityExceptions []ManagedClusterPodIdentityExceptionResponse
    The pod identity exceptions to allow.
    allowNetworkPluginKubenet Boolean
    Running in Kubenet is disabled by default due to the security related nature of AAD Pod Identity and the risks of IP spoofing. See using Kubenet network plugin with AAD Pod Identity for more information.
    enabled Boolean
    Whether the pod identity addon is enabled.
    userAssignedIdentities List<ManagedClusterPodIdentityResponse>
    The pod identities to use in the cluster.
    userAssignedIdentityExceptions List<ManagedClusterPodIdentityExceptionResponse>
    The pod identity exceptions to allow.
    allowNetworkPluginKubenet boolean
    Running in Kubenet is disabled by default due to the security related nature of AAD Pod Identity and the risks of IP spoofing. See using Kubenet network plugin with AAD Pod Identity for more information.
    enabled boolean
    Whether the pod identity addon is enabled.
    userAssignedIdentities ManagedClusterPodIdentityResponse[]
    The pod identities to use in the cluster.
    userAssignedIdentityExceptions ManagedClusterPodIdentityExceptionResponse[]
    The pod identity exceptions to allow.
    allow_network_plugin_kubenet bool
    Running in Kubenet is disabled by default due to the security related nature of AAD Pod Identity and the risks of IP spoofing. See using Kubenet network plugin with AAD Pod Identity for more information.
    enabled bool
    Whether the pod identity addon is enabled.
    user_assigned_identities Sequence[ManagedClusterPodIdentityResponse]
    The pod identities to use in the cluster.
    user_assigned_identity_exceptions Sequence[ManagedClusterPodIdentityExceptionResponse]
    The pod identity exceptions to allow.
    allowNetworkPluginKubenet Boolean
    Running in Kubenet is disabled by default due to the security related nature of AAD Pod Identity and the risks of IP spoofing. See using Kubenet network plugin with AAD Pod Identity for more information.
    enabled Boolean
    Whether the pod identity addon is enabled.
    userAssignedIdentities List<Property Map>
    The pod identities to use in the cluster.
    userAssignedIdentityExceptions List<Property Map>
    The pod identity exceptions to allow.

    ManagedClusterPodIdentityProvisioningErrorBodyResponse

    Code string
    An identifier for the error. Codes are invariant and are intended to be consumed programmatically.
    Details List<Pulumi.AzureNative.ContainerService.Inputs.ManagedClusterPodIdentityProvisioningErrorBodyResponse>
    A list of additional details about the error.
    Message string
    A message describing the error, intended to be suitable for display in a user interface.
    Target string
    The target of the particular error. For example, the name of the property in error.
    Code string
    An identifier for the error. Codes are invariant and are intended to be consumed programmatically.
    Details []ManagedClusterPodIdentityProvisioningErrorBodyResponse
    A list of additional details about the error.
    Message string
    A message describing the error, intended to be suitable for display in a user interface.
    Target string
    The target of the particular error. For example, the name of the property in error.
    code String
    An identifier for the error. Codes are invariant and are intended to be consumed programmatically.
    details List<ManagedClusterPodIdentityProvisioningErrorBodyResponse>
    A list of additional details about the error.
    message String
    A message describing the error, intended to be suitable for display in a user interface.
    target String
    The target of the particular error. For example, the name of the property in error.
    code string
    An identifier for the error. Codes are invariant and are intended to be consumed programmatically.
    details ManagedClusterPodIdentityProvisioningErrorBodyResponse[]
    A list of additional details about the error.
    message string
    A message describing the error, intended to be suitable for display in a user interface.
    target string
    The target of the particular error. For example, the name of the property in error.
    code str
    An identifier for the error. Codes are invariant and are intended to be consumed programmatically.
    details Sequence[ManagedClusterPodIdentityProvisioningErrorBodyResponse]
    A list of additional details about the error.
    message str
    A message describing the error, intended to be suitable for display in a user interface.
    target str
    The target of the particular error. For example, the name of the property in error.
    code String
    An identifier for the error. Codes are invariant and are intended to be consumed programmatically.
    details List<Property Map>
    A list of additional details about the error.
    message String
    A message describing the error, intended to be suitable for display in a user interface.
    target String
    The target of the particular error. For example, the name of the property in error.

    ManagedClusterPodIdentityProvisioningErrorResponse

    error Property Map
    Details about the error.

    ManagedClusterPodIdentityResponse

    Identity Pulumi.AzureNative.ContainerService.Inputs.UserAssignedIdentityResponse
    The user assigned identity details.
    Name string
    The name of the pod identity.
    Namespace string
    The namespace of the pod identity.
    ProvisioningInfo Pulumi.AzureNative.ContainerService.Inputs.ManagedClusterPodIdentityResponseProvisioningInfo
    ProvisioningState string
    The current provisioning state of the pod identity.
    BindingSelector string
    The binding selector to use for the AzureIdentityBinding resource.
    Identity UserAssignedIdentityResponse
    The user assigned identity details.
    Name string
    The name of the pod identity.
    Namespace string
    The namespace of the pod identity.
    ProvisioningInfo ManagedClusterPodIdentityResponseProvisioningInfo
    ProvisioningState string
    The current provisioning state of the pod identity.
    BindingSelector string
    The binding selector to use for the AzureIdentityBinding resource.
    identity UserAssignedIdentityResponse
    The user assigned identity details.
    name String
    The name of the pod identity.
    namespace String
    The namespace of the pod identity.
    provisioningInfo ManagedClusterPodIdentityResponseProvisioningInfo
    provisioningState String
    The current provisioning state of the pod identity.
    bindingSelector String
    The binding selector to use for the AzureIdentityBinding resource.
    identity UserAssignedIdentityResponse
    The user assigned identity details.
    name string
    The name of the pod identity.
    namespace string
    The namespace of the pod identity.
    provisioningInfo ManagedClusterPodIdentityResponseProvisioningInfo
    provisioningState string
    The current provisioning state of the pod identity.
    bindingSelector string
    The binding selector to use for the AzureIdentityBinding resource.
    identity UserAssignedIdentityResponse
    The user assigned identity details.
    name str
    The name of the pod identity.
    namespace str
    The namespace of the pod identity.
    provisioning_info ManagedClusterPodIdentityResponseProvisioningInfo
    provisioning_state str
    The current provisioning state of the pod identity.
    binding_selector str
    The binding selector to use for the AzureIdentityBinding resource.
    identity Property Map
    The user assigned identity details.
    name String
    The name of the pod identity.
    namespace String
    The namespace of the pod identity.
    provisioningInfo Property Map
    provisioningState String
    The current provisioning state of the pod identity.
    bindingSelector String
    The binding selector to use for the AzureIdentityBinding resource.

    ManagedClusterPodIdentityResponseProvisioningInfo

    Error ManagedClusterPodIdentityProvisioningErrorResponse
    Pod identity assignment error (if any).
    error ManagedClusterPodIdentityProvisioningErrorResponse
    Pod identity assignment error (if any).
    error ManagedClusterPodIdentityProvisioningErrorResponse
    Pod identity assignment error (if any).
    error ManagedClusterPodIdentityProvisioningErrorResponse
    Pod identity assignment error (if any).
    error Property Map
    Pod identity assignment error (if any).

    ManagedClusterPropertiesResponseAutoScalerProfile

    BalanceSimilarNodeGroups string
    Valid values are 'true' and 'false'
    DaemonsetEvictionForEmptyNodes bool
    If set to true, all daemonset pods on empty nodes will be evicted before deletion of the node. If the daemonset pod cannot be evicted another node will be chosen for scaling. If set to false, the node will be deleted without ensuring that daemonset pods are deleted or evicted.
    DaemonsetEvictionForOccupiedNodes bool
    If set to true, all daemonset pods on occupied nodes will be evicted before deletion of the node. If the daemonset pod cannot be evicted another node will be chosen for scaling. If set to false, the node will be deleted without ensuring that daemonset pods are deleted or evicted.
    Expander string
    If not specified, the default is 'random'. See expanders for more information.
    IgnoreDaemonsetsUtilization bool
    If set to true, the resources used by daemonset will be taken into account when making scaling down decisions.
    MaxEmptyBulkDelete string
    The default is 10.
    MaxGracefulTerminationSec string
    The default is 600.
    MaxNodeProvisionTime string
    The default is '15m'. Values must be an integer followed by an 'm'. No unit of time other than minutes (m) is supported.
    MaxTotalUnreadyPercentage string
    The default is 45. The maximum is 100 and the minimum is 0.
    NewPodScaleUpDelay string
    For scenarios like burst/batch scale where you don't want CA to act before the kubernetes scheduler could schedule all the pods, you can tell CA to ignore unscheduled pods before they're a certain age. The default is '0s'. Values must be an integer followed by a unit ('s' for seconds, 'm' for minutes, 'h' for hours, etc).
    OkTotalUnreadyCount string
    This must be an integer. The default is 3.
    ScaleDownDelayAfterAdd string
    The default is '10m'. Values must be an integer followed by an 'm'. No unit of time other than minutes (m) is supported.
    ScaleDownDelayAfterDelete string
    The default is the scan-interval. Values must be an integer followed by an 'm'. No unit of time other than minutes (m) is supported.
    ScaleDownDelayAfterFailure string
    The default is '3m'. Values must be an integer followed by an 'm'. No unit of time other than minutes (m) is supported.
    ScaleDownUnneededTime string
    The default is '10m'. Values must be an integer followed by an 'm'. No unit of time other than minutes (m) is supported.
    ScaleDownUnreadyTime string
    The default is '20m'. Values must be an integer followed by an 'm'. No unit of time other than minutes (m) is supported.
    ScaleDownUtilizationThreshold string
    The default is '0.5'.
    ScanInterval string
    The default is '10'. Values must be an integer number of seconds.
    SkipNodesWithLocalStorage string
    The default is true.
    SkipNodesWithSystemPods string
    The default is true.
    BalanceSimilarNodeGroups string
    Valid values are 'true' and 'false'
    DaemonsetEvictionForEmptyNodes bool
    If set to true, all daemonset pods on empty nodes will be evicted before deletion of the node. If the daemonset pod cannot be evicted another node will be chosen for scaling. If set to false, the node will be deleted without ensuring that daemonset pods are deleted or evicted.
    DaemonsetEvictionForOccupiedNodes bool
    If set to true, all daemonset pods on occupied nodes will be evicted before deletion of the node. If the daemonset pod cannot be evicted another node will be chosen for scaling. If set to false, the node will be deleted without ensuring that daemonset pods are deleted or evicted.
    Expander string
    If not specified, the default is 'random'. See expanders for more information.
    IgnoreDaemonsetsUtilization bool
    If set to true, the resources used by daemonset will be taken into account when making scaling down decisions.
    MaxEmptyBulkDelete string
    The default is 10.
    MaxGracefulTerminationSec string
    The default is 600.
    MaxNodeProvisionTime string
    The default is '15m'. Values must be an integer followed by an 'm'. No unit of time other than minutes (m) is supported.
    MaxTotalUnreadyPercentage string
    The default is 45. The maximum is 100 and the minimum is 0.
    NewPodScaleUpDelay string
    For scenarios like burst/batch scale where you don't want CA to act before the kubernetes scheduler could schedule all the pods, you can tell CA to ignore unscheduled pods before they're a certain age. The default is '0s'. Values must be an integer followed by a unit ('s' for seconds, 'm' for minutes, 'h' for hours, etc).
    OkTotalUnreadyCount string
    This must be an integer. The default is 3.
    ScaleDownDelayAfterAdd string
    The default is '10m'. Values must be an integer followed by an 'm'. No unit of time other than minutes (m) is supported.
    ScaleDownDelayAfterDelete string
    The default is the scan-interval. Values must be an integer followed by an 'm'. No unit of time other than minutes (m) is supported.
    ScaleDownDelayAfterFailure string
    The default is '3m'. Values must be an integer followed by an 'm'. No unit of time other than minutes (m) is supported.
    ScaleDownUnneededTime string
    The default is '10m'. Values must be an integer followed by an 'm'. No unit of time other than minutes (m) is supported.
    ScaleDownUnreadyTime string
    The default is '20m'. Values must be an integer followed by an 'm'. No unit of time other than minutes (m) is supported.
    ScaleDownUtilizationThreshold string
    The default is '0.5'.
    ScanInterval string
    The default is '10'. Values must be an integer number of seconds.
    SkipNodesWithLocalStorage string
    The default is true.
    SkipNodesWithSystemPods string
    The default is true.
    balanceSimilarNodeGroups String
    Valid values are 'true' and 'false'
    daemonsetEvictionForEmptyNodes Boolean
    If set to true, all daemonset pods on empty nodes will be evicted before deletion of the node. If the daemonset pod cannot be evicted another node will be chosen for scaling. If set to false, the node will be deleted without ensuring that daemonset pods are deleted or evicted.
    daemonsetEvictionForOccupiedNodes Boolean
    If set to true, all daemonset pods on occupied nodes will be evicted before deletion of the node. If the daemonset pod cannot be evicted another node will be chosen for scaling. If set to false, the node will be deleted without ensuring that daemonset pods are deleted or evicted.
    expander String
    If not specified, the default is 'random'. See expanders for more information.
    ignoreDaemonsetsUtilization Boolean
    If set to true, the resources used by daemonset will be taken into account when making scaling down decisions.
    maxEmptyBulkDelete String
    The default is 10.
    maxGracefulTerminationSec String
    The default is 600.
    maxNodeProvisionTime String
    The default is '15m'. Values must be an integer followed by an 'm'. No unit of time other than minutes (m) is supported.
    maxTotalUnreadyPercentage String
    The default is 45. The maximum is 100 and the minimum is 0.
    newPodScaleUpDelay String
    For scenarios like burst/batch scale where you don't want CA to act before the kubernetes scheduler could schedule all the pods, you can tell CA to ignore unscheduled pods before they're a certain age. The default is '0s'. Values must be an integer followed by a unit ('s' for seconds, 'm' for minutes, 'h' for hours, etc).
    okTotalUnreadyCount String
    This must be an integer. The default is 3.
    scaleDownDelayAfterAdd String
    The default is '10m'. Values must be an integer followed by an 'm'. No unit of time other than minutes (m) is supported.
    scaleDownDelayAfterDelete String
    The default is the scan-interval. Values must be an integer followed by an 'm'. No unit of time other than minutes (m) is supported.
    scaleDownDelayAfterFailure String
    The default is '3m'. Values must be an integer followed by an 'm'. No unit of time other than minutes (m) is supported.
    scaleDownUnneededTime String
    The default is '10m'. Values must be an integer followed by an 'm'. No unit of time other than minutes (m) is supported.
    scaleDownUnreadyTime String
    The default is '20m'. Values must be an integer followed by an 'm'. No unit of time other than minutes (m) is supported.
    scaleDownUtilizationThreshold String
    The default is '0.5'.
    scanInterval String
    The default is '10'. Values must be an integer number of seconds.
    skipNodesWithLocalStorage String
    The default is true.
    skipNodesWithSystemPods String
    The default is true.
    balanceSimilarNodeGroups string
    Valid values are 'true' and 'false'
    daemonsetEvictionForEmptyNodes boolean
    If set to true, all daemonset pods on empty nodes will be evicted before deletion of the node. If the daemonset pod cannot be evicted another node will be chosen for scaling. If set to false, the node will be deleted without ensuring that daemonset pods are deleted or evicted.
    daemonsetEvictionForOccupiedNodes boolean
    If set to true, all daemonset pods on occupied nodes will be evicted before deletion of the node. If the daemonset pod cannot be evicted another node will be chosen for scaling. If set to false, the node will be deleted without ensuring that daemonset pods are deleted or evicted.
    expander string
    If not specified, the default is 'random'. See expanders for more information.
    ignoreDaemonsetsUtilization boolean
    If set to true, the resources used by daemonset will be taken into account when making scaling down decisions.
    maxEmptyBulkDelete string
    The default is 10.
    maxGracefulTerminationSec string
    The default is 600.
    maxNodeProvisionTime string
    The default is '15m'. Values must be an integer followed by an 'm'. No unit of time other than minutes (m) is supported.
    maxTotalUnreadyPercentage string
    The default is 45. The maximum is 100 and the minimum is 0.
    newPodScaleUpDelay string
    For scenarios like burst/batch scale where you don't want CA to act before the kubernetes scheduler could schedule all the pods, you can tell CA to ignore unscheduled pods before they're a certain age. The default is '0s'. Values must be an integer followed by a unit ('s' for seconds, 'm' for minutes, 'h' for hours, etc).
    okTotalUnreadyCount string
    This must be an integer. The default is 3.
    scaleDownDelayAfterAdd string
    The default is '10m'. Values must be an integer followed by an 'm'. No unit of time other than minutes (m) is supported.
    scaleDownDelayAfterDelete string
    The default is the scan-interval. Values must be an integer followed by an 'm'. No unit of time other than minutes (m) is supported.
    scaleDownDelayAfterFailure string
    The default is '3m'. Values must be an integer followed by an 'm'. No unit of time other than minutes (m) is supported.
    scaleDownUnneededTime string
    The default is '10m'. Values must be an integer followed by an 'm'. No unit of time other than minutes (m) is supported.
    scaleDownUnreadyTime string
    The default is '20m'. Values must be an integer followed by an 'm'. No unit of time other than minutes (m) is supported.
    scaleDownUtilizationThreshold string
    The default is '0.5'.
    scanInterval string
    The default is '10'. Values must be an integer number of seconds.
    skipNodesWithLocalStorage string
    The default is true.
    skipNodesWithSystemPods string
    The default is true.
    balance_similar_node_groups str
    Valid values are 'true' and 'false'
    daemonset_eviction_for_empty_nodes bool
    If set to true, all daemonset pods on empty nodes will be evicted before deletion of the node. If the daemonset pod cannot be evicted another node will be chosen for scaling. If set to false, the node will be deleted without ensuring that daemonset pods are deleted or evicted.
    daemonset_eviction_for_occupied_nodes bool
    If set to true, all daemonset pods on occupied nodes will be evicted before deletion of the node. If the daemonset pod cannot be evicted another node will be chosen for scaling. If set to false, the node will be deleted without ensuring that daemonset pods are deleted or evicted.
    expander str
    If not specified, the default is 'random'. See expanders for more information.
    ignore_daemonsets_utilization bool
    If set to true, the resources used by daemonset will be taken into account when making scaling down decisions.
    max_empty_bulk_delete str
    The default is 10.
    max_graceful_termination_sec str
    The default is 600.
    max_node_provision_time str
    The default is '15m'. Values must be an integer followed by an 'm'. No unit of time other than minutes (m) is supported.
    max_total_unready_percentage str
    The default is 45. The maximum is 100 and the minimum is 0.
    new_pod_scale_up_delay str
    For scenarios like burst/batch scale where you don't want CA to act before the kubernetes scheduler could schedule all the pods, you can tell CA to ignore unscheduled pods before they're a certain age. The default is '0s'. Values must be an integer followed by a unit ('s' for seconds, 'm' for minutes, 'h' for hours, etc).
    ok_total_unready_count str
    This must be an integer. The default is 3.
    scale_down_delay_after_add str
    The default is '10m'. Values must be an integer followed by an 'm'. No unit of time other than minutes (m) is supported.
    scale_down_delay_after_delete str
    The default is the scan-interval. Values must be an integer followed by an 'm'. No unit of time other than minutes (m) is supported.
    scale_down_delay_after_failure str
    The default is '3m'. Values must be an integer followed by an 'm'. No unit of time other than minutes (m) is supported.
    scale_down_unneeded_time str
    The default is '10m'. Values must be an integer followed by an 'm'. No unit of time other than minutes (m) is supported.
    scale_down_unready_time str
    The default is '20m'. Values must be an integer followed by an 'm'. No unit of time other than minutes (m) is supported.
    scale_down_utilization_threshold str
    The default is '0.5'.
    scan_interval str
    The default is '10'. Values must be an integer number of seconds.
    skip_nodes_with_local_storage str
    The default is true.
    skip_nodes_with_system_pods str
    The default is true.
    balanceSimilarNodeGroups String
    Valid values are 'true' and 'false'
    daemonsetEvictionForEmptyNodes Boolean
    If set to true, all daemonset pods on empty nodes will be evicted before deletion of the node. If the daemonset pod cannot be evicted another node will be chosen for scaling. If set to false, the node will be deleted without ensuring that daemonset pods are deleted or evicted.
    daemonsetEvictionForOccupiedNodes Boolean
    If set to true, all daemonset pods on occupied nodes will be evicted before deletion of the node. If the daemonset pod cannot be evicted another node will be chosen for scaling. If set to false, the node will be deleted without ensuring that daemonset pods are deleted or evicted.
    expander String
    If not specified, the default is 'random'. See expanders for more information.
    ignoreDaemonsetsUtilization Boolean
    If set to true, the resources used by daemonset will be taken into account when making scaling down decisions.
    maxEmptyBulkDelete String
    The default is 10.
    maxGracefulTerminationSec String
    The default is 600.
    maxNodeProvisionTime String
    The default is '15m'. Values must be an integer followed by an 'm'. No unit of time other than minutes (m) is supported.
    maxTotalUnreadyPercentage String
    The default is 45. The maximum is 100 and the minimum is 0.
    newPodScaleUpDelay String
    For scenarios like burst/batch scale where you don't want CA to act before the kubernetes scheduler could schedule all the pods, you can tell CA to ignore unscheduled pods before they're a certain age. The default is '0s'. Values must be an integer followed by a unit ('s' for seconds, 'm' for minutes, 'h' for hours, etc).
    okTotalUnreadyCount String
    This must be an integer. The default is 3.
    scaleDownDelayAfterAdd String
    The default is '10m'. Values must be an integer followed by an 'm'. No unit of time other than minutes (m) is supported.
    scaleDownDelayAfterDelete String
    The default is the scan-interval. Values must be an integer followed by an 'm'. No unit of time other than minutes (m) is supported.
    scaleDownDelayAfterFailure String
    The default is '3m'. Values must be an integer followed by an 'm'. No unit of time other than minutes (m) is supported.
    scaleDownUnneededTime String
    The default is '10m'. Values must be an integer followed by an 'm'. No unit of time other than minutes (m) is supported.
    scaleDownUnreadyTime String
    The default is '20m'. Values must be an integer followed by an 'm'. No unit of time other than minutes (m) is supported.
    scaleDownUtilizationThreshold String
    The default is '0.5'.
    scanInterval String
    The default is '10'. Values must be an integer number of seconds.
    skipNodesWithLocalStorage String
    The default is true.
    skipNodesWithSystemPods String
    The default is true.

    ManagedClusterSKUResponse

    Name string
    The name of a managed cluster SKU.
    Tier string
    If not specified, the default is 'Free'. See AKS Pricing Tier for more details.
    Name string
    The name of a managed cluster SKU.
    Tier string
    If not specified, the default is 'Free'. See AKS Pricing Tier for more details.
    name String
    The name of a managed cluster SKU.
    tier String
    If not specified, the default is 'Free'. See AKS Pricing Tier for more details.
    name string
    The name of a managed cluster SKU.
    tier string
    If not specified, the default is 'Free'. See AKS Pricing Tier for more details.
    name str
    The name of a managed cluster SKU.
    tier str
    If not specified, the default is 'Free'. See AKS Pricing Tier for more details.
    name String
    The name of a managed cluster SKU.
    tier String
    If not specified, the default is 'Free'. See AKS Pricing Tier for more details.

    ManagedClusterSecurityProfileDefenderResponse

    LogAnalyticsWorkspaceResourceId string
    Resource ID of the Log Analytics workspace to be associated with Microsoft Defender. When Microsoft Defender is enabled, this field is required and must be a valid workspace resource ID. When Microsoft Defender is disabled, leave the field empty.
    SecurityMonitoring Pulumi.AzureNative.ContainerService.Inputs.ManagedClusterSecurityProfileDefenderSecurityMonitoringResponse
    Microsoft Defender threat detection for Cloud settings for the security profile.
    LogAnalyticsWorkspaceResourceId string
    Resource ID of the Log Analytics workspace to be associated with Microsoft Defender. When Microsoft Defender is enabled, this field is required and must be a valid workspace resource ID. When Microsoft Defender is disabled, leave the field empty.
    SecurityMonitoring ManagedClusterSecurityProfileDefenderSecurityMonitoringResponse
    Microsoft Defender threat detection for Cloud settings for the security profile.
    logAnalyticsWorkspaceResourceId String
    Resource ID of the Log Analytics workspace to be associated with Microsoft Defender. When Microsoft Defender is enabled, this field is required and must be a valid workspace resource ID. When Microsoft Defender is disabled, leave the field empty.
    securityMonitoring ManagedClusterSecurityProfileDefenderSecurityMonitoringResponse
    Microsoft Defender threat detection for Cloud settings for the security profile.
    logAnalyticsWorkspaceResourceId string
    Resource ID of the Log Analytics workspace to be associated with Microsoft Defender. When Microsoft Defender is enabled, this field is required and must be a valid workspace resource ID. When Microsoft Defender is disabled, leave the field empty.
    securityMonitoring ManagedClusterSecurityProfileDefenderSecurityMonitoringResponse
    Microsoft Defender threat detection for Cloud settings for the security profile.
    log_analytics_workspace_resource_id str
    Resource ID of the Log Analytics workspace to be associated with Microsoft Defender. When Microsoft Defender is enabled, this field is required and must be a valid workspace resource ID. When Microsoft Defender is disabled, leave the field empty.
    security_monitoring ManagedClusterSecurityProfileDefenderSecurityMonitoringResponse
    Microsoft Defender threat detection for Cloud settings for the security profile.
    logAnalyticsWorkspaceResourceId String
    Resource ID of the Log Analytics workspace to be associated with Microsoft Defender. When Microsoft Defender is enabled, this field is required and must be a valid workspace resource ID. When Microsoft Defender is disabled, leave the field empty.
    securityMonitoring Property Map
    Microsoft Defender threat detection for Cloud settings for the security profile.

    ManagedClusterSecurityProfileDefenderSecurityMonitoringResponse

    Enabled bool
    Whether to enable Defender threat detection
    Enabled bool
    Whether to enable Defender threat detection
    enabled Boolean
    Whether to enable Defender threat detection
    enabled boolean
    Whether to enable Defender threat detection
    enabled bool
    Whether to enable Defender threat detection
    enabled Boolean
    Whether to enable Defender threat detection

    ManagedClusterSecurityProfileImageCleanerResponse

    Enabled bool
    Whether to enable Image Cleaner on AKS cluster.
    IntervalHours int
    Image Cleaner scanning interval in hours.
    Enabled bool
    Whether to enable Image Cleaner on AKS cluster.
    IntervalHours int
    Image Cleaner scanning interval in hours.
    enabled Boolean
    Whether to enable Image Cleaner on AKS cluster.
    intervalHours Integer
    Image Cleaner scanning interval in hours.
    enabled boolean
    Whether to enable Image Cleaner on AKS cluster.
    intervalHours number
    Image Cleaner scanning interval in hours.
    enabled bool
    Whether to enable Image Cleaner on AKS cluster.
    interval_hours int
    Image Cleaner scanning interval in hours.
    enabled Boolean
    Whether to enable Image Cleaner on AKS cluster.
    intervalHours Number
    Image Cleaner scanning interval in hours.

    ManagedClusterSecurityProfileResponse

    AzureKeyVaultKms Pulumi.AzureNative.ContainerService.Inputs.AzureKeyVaultKmsResponse
    Azure Key Vault key management service settings for the security profile.
    Defender Pulumi.AzureNative.ContainerService.Inputs.ManagedClusterSecurityProfileDefenderResponse
    Microsoft Defender settings for the security profile.
    ImageCleaner Pulumi.AzureNative.ContainerService.Inputs.ManagedClusterSecurityProfileImageCleanerResponse
    Image Cleaner settings for the security profile.
    WorkloadIdentity Pulumi.AzureNative.ContainerService.Inputs.ManagedClusterSecurityProfileWorkloadIdentityResponse
    Workload identity settings for the security profile. Workload identity enables Kubernetes applications to access Azure cloud resources securely with Azure AD. See https://aka.ms/aks/wi for more details.
    AzureKeyVaultKms AzureKeyVaultKmsResponse
    Azure Key Vault key management service settings for the security profile.
    Defender ManagedClusterSecurityProfileDefenderResponse
    Microsoft Defender settings for the security profile.
    ImageCleaner ManagedClusterSecurityProfileImageCleanerResponse
    Image Cleaner settings for the security profile.
    WorkloadIdentity ManagedClusterSecurityProfileWorkloadIdentityResponse
    Workload identity settings for the security profile. Workload identity enables Kubernetes applications to access Azure cloud resources securely with Azure AD. See https://aka.ms/aks/wi for more details.
    azureKeyVaultKms AzureKeyVaultKmsResponse
    Azure Key Vault key management service settings for the security profile.
    defender ManagedClusterSecurityProfileDefenderResponse
    Microsoft Defender settings for the security profile.
    imageCleaner ManagedClusterSecurityProfileImageCleanerResponse
    Image Cleaner settings for the security profile.
    workloadIdentity ManagedClusterSecurityProfileWorkloadIdentityResponse
    Workload identity settings for the security profile. Workload identity enables Kubernetes applications to access Azure cloud resources securely with Azure AD. See https://aka.ms/aks/wi for more details.
    azureKeyVaultKms AzureKeyVaultKmsResponse
    Azure Key Vault key management service settings for the security profile.
    defender ManagedClusterSecurityProfileDefenderResponse
    Microsoft Defender settings for the security profile.
    imageCleaner ManagedClusterSecurityProfileImageCleanerResponse
    Image Cleaner settings for the security profile.
    workloadIdentity ManagedClusterSecurityProfileWorkloadIdentityResponse
    Workload identity settings for the security profile. Workload identity enables Kubernetes applications to access Azure cloud resources securely with Azure AD. See https://aka.ms/aks/wi for more details.
    azure_key_vault_kms AzureKeyVaultKmsResponse
    Azure Key Vault key management service settings for the security profile.
    defender ManagedClusterSecurityProfileDefenderResponse
    Microsoft Defender settings for the security profile.
    image_cleaner ManagedClusterSecurityProfileImageCleanerResponse
    Image Cleaner settings for the security profile.
    workload_identity ManagedClusterSecurityProfileWorkloadIdentityResponse
    Workload identity settings for the security profile. Workload identity enables Kubernetes applications to access Azure cloud resources securely with Azure AD. See https://aka.ms/aks/wi for more details.
    azureKeyVaultKms Property Map
    Azure Key Vault key management service settings for the security profile.
    defender Property Map
    Microsoft Defender settings for the security profile.
    imageCleaner Property Map
    Image Cleaner settings for the security profile.
    workloadIdentity Property Map
    Workload identity settings for the security profile. Workload identity enables Kubernetes applications to access Azure cloud resources securely with Azure AD. See https://aka.ms/aks/wi for more details.

    ManagedClusterSecurityProfileWorkloadIdentityResponse

    Enabled bool
    Whether to enable workload identity.
    Enabled bool
    Whether to enable workload identity.
    enabled Boolean
    Whether to enable workload identity.
    enabled boolean
    Whether to enable workload identity.
    enabled bool
    Whether to enable workload identity.
    enabled Boolean
    Whether to enable workload identity.

    ManagedClusterServicePrincipalProfileResponse

    ClientId string
    The ID for the service principal.
    Secret string
    The secret password associated with the service principal in plain text.
    ClientId string
    The ID for the service principal.
    Secret string
    The secret password associated with the service principal in plain text.
    clientId String
    The ID for the service principal.
    secret String
    The secret password associated with the service principal in plain text.
    clientId string
    The ID for the service principal.
    secret string
    The secret password associated with the service principal in plain text.
    client_id str
    The ID for the service principal.
    secret str
    The secret password associated with the service principal in plain text.
    clientId String
    The ID for the service principal.
    secret String
    The secret password associated with the service principal in plain text.

    ManagedClusterStorageProfileBlobCSIDriverResponse

    Enabled bool
    Whether to enable AzureBlob CSI Driver. The default value is false.
    Enabled bool
    Whether to enable AzureBlob CSI Driver. The default value is false.
    enabled Boolean
    Whether to enable AzureBlob CSI Driver. The default value is false.
    enabled boolean
    Whether to enable AzureBlob CSI Driver. The default value is false.
    enabled bool
    Whether to enable AzureBlob CSI Driver. The default value is false.
    enabled Boolean
    Whether to enable AzureBlob CSI Driver. The default value is false.

    ManagedClusterStorageProfileDiskCSIDriverResponse

    Enabled bool
    Whether to enable AzureDisk CSI Driver. The default value is true.
    Enabled bool
    Whether to enable AzureDisk CSI Driver. The default value is true.
    enabled Boolean
    Whether to enable AzureDisk CSI Driver. The default value is true.
    enabled boolean
    Whether to enable AzureDisk CSI Driver. The default value is true.
    enabled bool
    Whether to enable AzureDisk CSI Driver. The default value is true.
    enabled Boolean
    Whether to enable AzureDisk CSI Driver. The default value is true.

    ManagedClusterStorageProfileFileCSIDriverResponse

    Enabled bool
    Whether to enable AzureFile CSI Driver. The default value is true.
    Enabled bool
    Whether to enable AzureFile CSI Driver. The default value is true.
    enabled Boolean
    Whether to enable AzureFile CSI Driver. The default value is true.
    enabled boolean
    Whether to enable AzureFile CSI Driver. The default value is true.
    enabled bool
    Whether to enable AzureFile CSI Driver. The default value is true.
    enabled Boolean
    Whether to enable AzureFile CSI Driver. The default value is true.

    ManagedClusterStorageProfileResponse

    BlobCSIDriver ManagedClusterStorageProfileBlobCSIDriverResponse
    AzureBlob CSI Driver settings for the storage profile.
    DiskCSIDriver ManagedClusterStorageProfileDiskCSIDriverResponse
    AzureDisk CSI Driver settings for the storage profile.
    FileCSIDriver ManagedClusterStorageProfileFileCSIDriverResponse
    AzureFile CSI Driver settings for the storage profile.
    SnapshotController ManagedClusterStorageProfileSnapshotControllerResponse
    Snapshot Controller settings for the storage profile.
    blobCSIDriver ManagedClusterStorageProfileBlobCSIDriverResponse
    AzureBlob CSI Driver settings for the storage profile.
    diskCSIDriver ManagedClusterStorageProfileDiskCSIDriverResponse
    AzureDisk CSI Driver settings for the storage profile.
    fileCSIDriver ManagedClusterStorageProfileFileCSIDriverResponse
    AzureFile CSI Driver settings for the storage profile.
    snapshotController ManagedClusterStorageProfileSnapshotControllerResponse
    Snapshot Controller settings for the storage profile.
    blobCSIDriver ManagedClusterStorageProfileBlobCSIDriverResponse
    AzureBlob CSI Driver settings for the storage profile.
    diskCSIDriver ManagedClusterStorageProfileDiskCSIDriverResponse
    AzureDisk CSI Driver settings for the storage profile.
    fileCSIDriver ManagedClusterStorageProfileFileCSIDriverResponse
    AzureFile CSI Driver settings for the storage profile.
    snapshotController ManagedClusterStorageProfileSnapshotControllerResponse
    Snapshot Controller settings for the storage profile.
    blob_csi_driver ManagedClusterStorageProfileBlobCSIDriverResponse
    AzureBlob CSI Driver settings for the storage profile.
    disk_csi_driver ManagedClusterStorageProfileDiskCSIDriverResponse
    AzureDisk CSI Driver settings for the storage profile.
    file_csi_driver ManagedClusterStorageProfileFileCSIDriverResponse
    AzureFile CSI Driver settings for the storage profile.
    snapshot_controller ManagedClusterStorageProfileSnapshotControllerResponse
    Snapshot Controller settings for the storage profile.
    blobCSIDriver Property Map
    AzureBlob CSI Driver settings for the storage profile.
    diskCSIDriver Property Map
    AzureDisk CSI Driver settings for the storage profile.
    fileCSIDriver Property Map
    AzureFile CSI Driver settings for the storage profile.
    snapshotController Property Map
    Snapshot Controller settings for the storage profile.

    ManagedClusterStorageProfileSnapshotControllerResponse

    Enabled bool
    Whether to enable Snapshot Controller. The default value is true.
    Enabled bool
    Whether to enable Snapshot Controller. The default value is true.
    enabled Boolean
    Whether to enable Snapshot Controller. The default value is true.
    enabled boolean
    Whether to enable Snapshot Controller. The default value is true.
    enabled bool
    Whether to enable Snapshot Controller. The default value is true.
    enabled Boolean
    Whether to enable Snapshot Controller. The default value is true.

    ManagedClusterWindowsProfileResponse

    AdminUsername string
    Specifies the name of the administrator account. Restriction: Cannot end in "." Disallowed values: "administrator", "admin", "user", "user1", "test", "user2", "test1", "user3", "admin1", "1", "123", "a", "actuser", "adm", "admin2", "aspnet", "backup", "console", "david", "guest", "john", "owner", "root", "server", "sql", "support", "support_388945a0", "sys", "test2", "test3", "user4", "user5". Minimum-length: 1 character Max-length: 20 characters
    AdminPassword string
    Specifies the password of the administrator account. Minimum-length: 8 characters Max-length: 123 characters Complexity requirements: 3 out of 4 conditions below need to be fulfilled Has lower characters Has upper characters Has a digit Has a special character (Regex match [\W_]) **Disallowed values:** "abc@123", "P@$$w0rd", "P@ssw0rd", "P@ssword123", "Pa$$word", "pass@word1", "Password!", "Password1", "Password22", "iloveyou!"
    EnableCSIProxy bool
    For more details on CSI proxy, see the CSI proxy GitHub repo.
    GmsaProfile Pulumi.AzureNative.ContainerService.Inputs.WindowsGmsaProfileResponse
    The Windows gMSA Profile in the Managed Cluster.
    LicenseType string
    The license type to use for Windows VMs. See Azure Hybrid User Benefits for more details.
    AdminUsername string
    Specifies the name of the administrator account. Restriction: Cannot end in "." Disallowed values: "administrator", "admin", "user", "user1", "test", "user2", "test1", "user3", "admin1", "1", "123", "a", "actuser", "adm", "admin2", "aspnet", "backup", "console", "david", "guest", "john", "owner", "root", "server", "sql", "support", "support_388945a0", "sys", "test2", "test3", "user4", "user5". Minimum-length: 1 character Max-length: 20 characters
    AdminPassword string
    Specifies the password of the administrator account. Minimum-length: 8 characters Max-length: 123 characters Complexity requirements: 3 out of 4 conditions below need to be fulfilled Has lower characters Has upper characters Has a digit Has a special character (Regex match [\W_]) **Disallowed values:** "abc@123", "P@$$w0rd", "P@ssw0rd", "P@ssword123", "Pa$$word", "pass@word1", "Password!", "Password1", "Password22", "iloveyou!"
    EnableCSIProxy bool
    For more details on CSI proxy, see the CSI proxy GitHub repo.
    GmsaProfile WindowsGmsaProfileResponse
    The Windows gMSA Profile in the Managed Cluster.
    LicenseType string
    The license type to use for Windows VMs. See Azure Hybrid User Benefits for more details.
    adminUsername String
    Specifies the name of the administrator account. Restriction: Cannot end in "." Disallowed values: "administrator", "admin", "user", "user1", "test", "user2", "test1", "user3", "admin1", "1", "123", "a", "actuser", "adm", "admin2", "aspnet", "backup", "console", "david", "guest", "john", "owner", "root", "server", "sql", "support", "support_388945a0", "sys", "test2", "test3", "user4", "user5". Minimum-length: 1 character Max-length: 20 characters
    adminPassword String
    Specifies the password of the administrator account. Minimum-length: 8 characters Max-length: 123 characters Complexity requirements: 3 out of 4 conditions below need to be fulfilled Has lower characters Has upper characters Has a digit Has a special character (Regex match [\W_]) **Disallowed values:** "abc@123", "P@$$w0rd", "P@ssw0rd", "P@ssword123", "Pa$$word", "pass@word1", "Password!", "Password1", "Password22", "iloveyou!"
    enableCSIProxy Boolean
    For more details on CSI proxy, see the CSI proxy GitHub repo.
    gmsaProfile WindowsGmsaProfileResponse
    The Windows gMSA Profile in the Managed Cluster.
    licenseType String
    The license type to use for Windows VMs. See Azure Hybrid User Benefits for more details.
    adminUsername string
    Specifies the name of the administrator account. Restriction: Cannot end in "." Disallowed values: "administrator", "admin", "user", "user1", "test", "user2", "test1", "user3", "admin1", "1", "123", "a", "actuser", "adm", "admin2", "aspnet", "backup", "console", "david", "guest", "john", "owner", "root", "server", "sql", "support", "support_388945a0", "sys", "test2", "test3", "user4", "user5". Minimum-length: 1 character Max-length: 20 characters
    adminPassword string
    Specifies the password of the administrator account. Minimum-length: 8 characters Max-length: 123 characters Complexity requirements: 3 out of 4 conditions below need to be fulfilled Has lower characters Has upper characters Has a digit Has a special character (Regex match [\W_]) **Disallowed values:** "abc@123", "P@$$w0rd", "P@ssw0rd", "P@ssword123", "Pa$$word", "pass@word1", "Password!", "Password1", "Password22", "iloveyou!"
    enableCSIProxy boolean
    For more details on CSI proxy, see the CSI proxy GitHub repo.
    gmsaProfile WindowsGmsaProfileResponse
    The Windows gMSA Profile in the Managed Cluster.
    licenseType string
    The license type to use for Windows VMs. See Azure Hybrid User Benefits for more details.
    admin_username str
    Specifies the name of the administrator account. Restriction: Cannot end in "." Disallowed values: "administrator", "admin", "user", "user1", "test", "user2", "test1", "user3", "admin1", "1", "123", "a", "actuser", "adm", "admin2", "aspnet", "backup", "console", "david", "guest", "john", "owner", "root", "server", "sql", "support", "support_388945a0", "sys", "test2", "test3", "user4", "user5". Minimum-length: 1 character Max-length: 20 characters
    admin_password str
    Specifies the password of the administrator account. Minimum-length: 8 characters Max-length: 123 characters Complexity requirements: 3 out of 4 conditions below need to be fulfilled Has lower characters Has upper characters Has a digit Has a special character (Regex match [\W_]) **Disallowed values:** "abc@123", "P@$$w0rd", "P@ssw0rd", "P@ssword123", "Pa$$word", "pass@word1", "Password!", "Password1", "Password22", "iloveyou!"
    enable_csi_proxy bool
    For more details on CSI proxy, see the CSI proxy GitHub repo.
    gmsa_profile WindowsGmsaProfileResponse
    The Windows gMSA Profile in the Managed Cluster.
    license_type str
    The license type to use for Windows VMs. See Azure Hybrid User Benefits for more details.
    adminUsername String
    Specifies the name of the administrator account. Restriction: Cannot end in "." Disallowed values: "administrator", "admin", "user", "user1", "test", "user2", "test1", "user3", "admin1", "1", "123", "a", "actuser", "adm", "admin2", "aspnet", "backup", "console", "david", "guest", "john", "owner", "root", "server", "sql", "support", "support_388945a0", "sys", "test2", "test3", "user4", "user5". Minimum-length: 1 character Max-length: 20 characters
    adminPassword String
    Specifies the password of the administrator account. Minimum-length: 8 characters Max-length: 123 characters Complexity requirements: 3 out of 4 conditions below need to be fulfilled Has lower characters Has upper characters Has a digit Has a special character (Regex match [\W_]) **Disallowed values:** "abc@123", "P@$$w0rd", "P@ssw0rd", "P@ssword123", "Pa$$word", "pass@word1", "Password!", "Password1", "Password22", "iloveyou!"
    enableCSIProxy Boolean
    For more details on CSI proxy, see the CSI proxy GitHub repo.
    gmsaProfile Property Map
    The Windows gMSA Profile in the Managed Cluster.
    licenseType String
    The license type to use for Windows VMs. See Azure Hybrid User Benefits for more details.

    ManagedClusterWorkloadAutoScalerProfileKedaResponse

    Enabled bool
    Whether to enable KEDA.
    Enabled bool
    Whether to enable KEDA.
    enabled Boolean
    Whether to enable KEDA.
    enabled boolean
    Whether to enable KEDA.
    enabled bool
    Whether to enable KEDA.
    enabled Boolean
    Whether to enable KEDA.

    ManagedClusterWorkloadAutoScalerProfileResponse

    Keda Pulumi.AzureNative.ContainerService.Inputs.ManagedClusterWorkloadAutoScalerProfileKedaResponse
    KEDA (Kubernetes Event-driven Autoscaling) settings for the workload auto-scaler profile.
    VerticalPodAutoscaler Pulumi.AzureNative.ContainerService.Inputs.ManagedClusterWorkloadAutoScalerProfileVerticalPodAutoscalerResponse
    VPA (Vertical Pod Autoscaler) settings for the workload auto-scaler profile.
    Keda ManagedClusterWorkloadAutoScalerProfileKedaResponse
    KEDA (Kubernetes Event-driven Autoscaling) settings for the workload auto-scaler profile.
    VerticalPodAutoscaler ManagedClusterWorkloadAutoScalerProfileVerticalPodAutoscalerResponse
    VPA (Vertical Pod Autoscaler) settings for the workload auto-scaler profile.
    keda ManagedClusterWorkloadAutoScalerProfileKedaResponse
    KEDA (Kubernetes Event-driven Autoscaling) settings for the workload auto-scaler profile.
    verticalPodAutoscaler ManagedClusterWorkloadAutoScalerProfileVerticalPodAutoscalerResponse
    VPA (Vertical Pod Autoscaler) settings for the workload auto-scaler profile.
    keda ManagedClusterWorkloadAutoScalerProfileKedaResponse
    KEDA (Kubernetes Event-driven Autoscaling) settings for the workload auto-scaler profile.
    verticalPodAutoscaler ManagedClusterWorkloadAutoScalerProfileVerticalPodAutoscalerResponse
    VPA (Vertical Pod Autoscaler) settings for the workload auto-scaler profile.
    keda ManagedClusterWorkloadAutoScalerProfileKedaResponse
    KEDA (Kubernetes Event-driven Autoscaling) settings for the workload auto-scaler profile.
    vertical_pod_autoscaler ManagedClusterWorkloadAutoScalerProfileVerticalPodAutoscalerResponse
    VPA (Vertical Pod Autoscaler) settings for the workload auto-scaler profile.
    keda Property Map
    KEDA (Kubernetes Event-driven Autoscaling) settings for the workload auto-scaler profile.
    verticalPodAutoscaler Property Map
    VPA (Vertical Pod Autoscaler) settings for the workload auto-scaler profile.

    ManagedClusterWorkloadAutoScalerProfileVerticalPodAutoscalerResponse

    Enabled bool
    Whether to enable VPA. Default value is false.
    Enabled bool
    Whether to enable VPA. Default value is false.
    enabled Boolean
    Whether to enable VPA. Default value is false.
    enabled boolean
    Whether to enable VPA. Default value is false.
    enabled bool
    Whether to enable VPA. Default value is false.
    enabled Boolean
    Whether to enable VPA. Default value is false.

    PortRangeResponse

    PortEnd int
    The maximum port that is included in the range. It should be ranged from 1 to 65535, and be greater than or equal to portStart.
    PortStart int
    The minimum port that is included in the range. It should be ranged from 1 to 65535, and be less than or equal to portEnd.
    Protocol string
    The network protocol of the port.
    PortEnd int
    The maximum port that is included in the range. It should be ranged from 1 to 65535, and be greater than or equal to portStart.
    PortStart int
    The minimum port that is included in the range. It should be ranged from 1 to 65535, and be less than or equal to portEnd.
    Protocol string
    The network protocol of the port.
    portEnd Integer
    The maximum port that is included in the range. It should be ranged from 1 to 65535, and be greater than or equal to portStart.
    portStart Integer
    The minimum port that is included in the range. It should be ranged from 1 to 65535, and be less than or equal to portEnd.
    protocol String
    The network protocol of the port.
    portEnd number
    The maximum port that is included in the range. It should be ranged from 1 to 65535, and be greater than or equal to portStart.
    portStart number
    The minimum port that is included in the range. It should be ranged from 1 to 65535, and be less than or equal to portEnd.
    protocol string
    The network protocol of the port.
    port_end int
    The maximum port that is included in the range. It should be ranged from 1 to 65535, and be greater than or equal to portStart.
    port_start int
    The minimum port that is included in the range. It should be ranged from 1 to 65535, and be less than or equal to portEnd.
    protocol str
    The network protocol of the port.
    portEnd Number
    The maximum port that is included in the range. It should be ranged from 1 to 65535, and be greater than or equal to portStart.
    portStart Number
    The minimum port that is included in the range. It should be ranged from 1 to 65535, and be less than or equal to portEnd.
    protocol String
    The network protocol of the port.

    PowerStateResponse

    Code string
    Tells whether the cluster is Running or Stopped
    Code string
    Tells whether the cluster is Running or Stopped
    code String
    Tells whether the cluster is Running or Stopped
    code string
    Tells whether the cluster is Running or Stopped
    code str
    Tells whether the cluster is Running or Stopped
    code String
    Tells whether the cluster is Running or Stopped

    PrivateLinkResourceResponse

    PrivateLinkServiceID string
    The private link service ID of the resource, this field is exposed only to NRP internally.
    GroupId string
    The group ID of the resource.
    Id string
    The ID of the private link resource.
    Name string
    The name of the private link resource.
    RequiredMembers List<string>
    The RequiredMembers of the resource
    Type string
    The resource type.
    PrivateLinkServiceID string
    The private link service ID of the resource, this field is exposed only to NRP internally.
    GroupId string
    The group ID of the resource.
    Id string
    The ID of the private link resource.
    Name string
    The name of the private link resource.
    RequiredMembers []string
    The RequiredMembers of the resource
    Type string
    The resource type.
    privateLinkServiceID String
    The private link service ID of the resource, this field is exposed only to NRP internally.
    groupId String
    The group ID of the resource.
    id String
    The ID of the private link resource.
    name String
    The name of the private link resource.
    requiredMembers List<String>
    The RequiredMembers of the resource
    type String
    The resource type.
    privateLinkServiceID string
    The private link service ID of the resource, this field is exposed only to NRP internally.
    groupId string
    The group ID of the resource.
    id string
    The ID of the private link resource.
    name string
    The name of the private link resource.
    requiredMembers string[]
    The RequiredMembers of the resource
    type string
    The resource type.
    private_link_service_id str
    The private link service ID of the resource, this field is exposed only to NRP internally.
    group_id str
    The group ID of the resource.
    id str
    The ID of the private link resource.
    name str
    The name of the private link resource.
    required_members Sequence[str]
    The RequiredMembers of the resource
    type str
    The resource type.
    privateLinkServiceID String
    The private link service ID of the resource, this field is exposed only to NRP internally.
    groupId String
    The group ID of the resource.
    id String
    The ID of the private link resource.
    name String
    The name of the private link resource.
    requiredMembers List<String>
    The RequiredMembers of the resource
    type String
    The resource type.

    ResourceReferenceResponse

    Id string
    The fully qualified Azure resource id.
    Id string
    The fully qualified Azure resource id.
    id String
    The fully qualified Azure resource id.
    id string
    The fully qualified Azure resource id.
    id str
    The fully qualified Azure resource id.
    id String
    The fully qualified Azure resource id.

    ServiceMeshProfileResponse

    Mode string
    Mode of the service mesh.
    Istio Pulumi.AzureNative.ContainerService.Inputs.IstioServiceMeshResponse
    Istio service mesh configuration.
    Mode string
    Mode of the service mesh.
    Istio IstioServiceMeshResponse
    Istio service mesh configuration.
    mode String
    Mode of the service mesh.
    istio IstioServiceMeshResponse
    Istio service mesh configuration.
    mode string
    Mode of the service mesh.
    istio IstioServiceMeshResponse
    Istio service mesh configuration.
    mode str
    Mode of the service mesh.
    istio IstioServiceMeshResponse
    Istio service mesh configuration.
    mode String
    Mode of the service mesh.
    istio Property Map
    Istio service mesh configuration.

    SysctlConfigResponse

    FsAioMaxNr int
    Sysctl setting fs.aio-max-nr.
    FsFileMax int
    Sysctl setting fs.file-max.
    FsInotifyMaxUserWatches int
    Sysctl setting fs.inotify.max_user_watches.
    FsNrOpen int
    Sysctl setting fs.nr_open.
    KernelThreadsMax int
    Sysctl setting kernel.threads-max.
    NetCoreNetdevMaxBacklog int
    Sysctl setting net.core.netdev_max_backlog.
    NetCoreOptmemMax int
    Sysctl setting net.core.optmem_max.
    NetCoreRmemDefault int
    Sysctl setting net.core.rmem_default.
    NetCoreRmemMax int
    Sysctl setting net.core.rmem_max.
    NetCoreSomaxconn int
    Sysctl setting net.core.somaxconn.
    NetCoreWmemDefault int
    Sysctl setting net.core.wmem_default.
    NetCoreWmemMax int
    Sysctl setting net.core.wmem_max.
    NetIpv4IpLocalPortRange string
    Sysctl setting net.ipv4.ip_local_port_range.
    NetIpv4NeighDefaultGcThresh1 int
    Sysctl setting net.ipv4.neigh.default.gc_thresh1.
    NetIpv4NeighDefaultGcThresh2 int
    Sysctl setting net.ipv4.neigh.default.gc_thresh2.
    NetIpv4NeighDefaultGcThresh3 int
    Sysctl setting net.ipv4.neigh.default.gc_thresh3.
    NetIpv4TcpFinTimeout int
    Sysctl setting net.ipv4.tcp_fin_timeout.
    NetIpv4TcpKeepaliveProbes int
    Sysctl setting net.ipv4.tcp_keepalive_probes.
    NetIpv4TcpKeepaliveTime int
    Sysctl setting net.ipv4.tcp_keepalive_time.
    NetIpv4TcpMaxSynBacklog int
    Sysctl setting net.ipv4.tcp_max_syn_backlog.
    NetIpv4TcpMaxTwBuckets int
    Sysctl setting net.ipv4.tcp_max_tw_buckets.
    NetIpv4TcpTwReuse bool
    Sysctl setting net.ipv4.tcp_tw_reuse.
    NetIpv4TcpkeepaliveIntvl int
    Sysctl setting net.ipv4.tcp_keepalive_intvl.
    NetNetfilterNfConntrackBuckets int
    Sysctl setting net.netfilter.nf_conntrack_buckets.
    NetNetfilterNfConntrackMax int
    Sysctl setting net.netfilter.nf_conntrack_max.
    VmMaxMapCount int
    Sysctl setting vm.max_map_count.
    VmSwappiness int
    Sysctl setting vm.swappiness.
    VmVfsCachePressure int
    Sysctl setting vm.vfs_cache_pressure.
    FsAioMaxNr int
    Sysctl setting fs.aio-max-nr.
    FsFileMax int
    Sysctl setting fs.file-max.
    FsInotifyMaxUserWatches int
    Sysctl setting fs.inotify.max_user_watches.
    FsNrOpen int
    Sysctl setting fs.nr_open.
    KernelThreadsMax int
    Sysctl setting kernel.threads-max.
    NetCoreNetdevMaxBacklog int
    Sysctl setting net.core.netdev_max_backlog.
    NetCoreOptmemMax int
    Sysctl setting net.core.optmem_max.
    NetCoreRmemDefault int
    Sysctl setting net.core.rmem_default.
    NetCoreRmemMax int
    Sysctl setting net.core.rmem_max.
    NetCoreSomaxconn int
    Sysctl setting net.core.somaxconn.
    NetCoreWmemDefault int
    Sysctl setting net.core.wmem_default.
    NetCoreWmemMax int
    Sysctl setting net.core.wmem_max.
    NetIpv4IpLocalPortRange string
    Sysctl setting net.ipv4.ip_local_port_range.
    NetIpv4NeighDefaultGcThresh1 int
    Sysctl setting net.ipv4.neigh.default.gc_thresh1.
    NetIpv4NeighDefaultGcThresh2 int
    Sysctl setting net.ipv4.neigh.default.gc_thresh2.
    NetIpv4NeighDefaultGcThresh3 int
    Sysctl setting net.ipv4.neigh.default.gc_thresh3.
    NetIpv4TcpFinTimeout int
    Sysctl setting net.ipv4.tcp_fin_timeout.
    NetIpv4TcpKeepaliveProbes int
    Sysctl setting net.ipv4.tcp_keepalive_probes.
    NetIpv4TcpKeepaliveTime int
    Sysctl setting net.ipv4.tcp_keepalive_time.
    NetIpv4TcpMaxSynBacklog int
    Sysctl setting net.ipv4.tcp_max_syn_backlog.
    NetIpv4TcpMaxTwBuckets int
    Sysctl setting net.ipv4.tcp_max_tw_buckets.
    NetIpv4TcpTwReuse bool
    Sysctl setting net.ipv4.tcp_tw_reuse.
    NetIpv4TcpkeepaliveIntvl int
    Sysctl setting net.ipv4.tcp_keepalive_intvl.
    NetNetfilterNfConntrackBuckets int
    Sysctl setting net.netfilter.nf_conntrack_buckets.
    NetNetfilterNfConntrackMax int
    Sysctl setting net.netfilter.nf_conntrack_max.
    VmMaxMapCount int
    Sysctl setting vm.max_map_count.
    VmSwappiness int
    Sysctl setting vm.swappiness.
    VmVfsCachePressure int
    Sysctl setting vm.vfs_cache_pressure.
    fsAioMaxNr Integer
    Sysctl setting fs.aio-max-nr.
    fsFileMax Integer
    Sysctl setting fs.file-max.
    fsInotifyMaxUserWatches Integer
    Sysctl setting fs.inotify.max_user_watches.
    fsNrOpen Integer
    Sysctl setting fs.nr_open.
    kernelThreadsMax Integer
    Sysctl setting kernel.threads-max.
    netCoreNetdevMaxBacklog Integer
    Sysctl setting net.core.netdev_max_backlog.
    netCoreOptmemMax Integer
    Sysctl setting net.core.optmem_max.
    netCoreRmemDefault Integer
    Sysctl setting net.core.rmem_default.
    netCoreRmemMax Integer
    Sysctl setting net.core.rmem_max.
    netCoreSomaxconn Integer
    Sysctl setting net.core.somaxconn.
    netCoreWmemDefault Integer
    Sysctl setting net.core.wmem_default.
    netCoreWmemMax Integer
    Sysctl setting net.core.wmem_max.
    netIpv4IpLocalPortRange String
    Sysctl setting net.ipv4.ip_local_port_range.
    netIpv4NeighDefaultGcThresh1 Integer
    Sysctl setting net.ipv4.neigh.default.gc_thresh1.
    netIpv4NeighDefaultGcThresh2 Integer
    Sysctl setting net.ipv4.neigh.default.gc_thresh2.
    netIpv4NeighDefaultGcThresh3 Integer
    Sysctl setting net.ipv4.neigh.default.gc_thresh3.
    netIpv4TcpFinTimeout Integer
    Sysctl setting net.ipv4.tcp_fin_timeout.
    netIpv4TcpKeepaliveProbes Integer
    Sysctl setting net.ipv4.tcp_keepalive_probes.
    netIpv4TcpKeepaliveTime Integer
    Sysctl setting net.ipv4.tcp_keepalive_time.
    netIpv4TcpMaxSynBacklog Integer
    Sysctl setting net.ipv4.tcp_max_syn_backlog.
    netIpv4TcpMaxTwBuckets Integer
    Sysctl setting net.ipv4.tcp_max_tw_buckets.
    netIpv4TcpTwReuse Boolean
    Sysctl setting net.ipv4.tcp_tw_reuse.
    netIpv4TcpkeepaliveIntvl Integer
    Sysctl setting net.ipv4.tcp_keepalive_intvl.
    netNetfilterNfConntrackBuckets Integer
    Sysctl setting net.netfilter.nf_conntrack_buckets.
    netNetfilterNfConntrackMax Integer
    Sysctl setting net.netfilter.nf_conntrack_max.
    vmMaxMapCount Integer
    Sysctl setting vm.max_map_count.
    vmSwappiness Integer
    Sysctl setting vm.swappiness.
    vmVfsCachePressure Integer
    Sysctl setting vm.vfs_cache_pressure.
    fsAioMaxNr number
    Sysctl setting fs.aio-max-nr.
    fsFileMax number
    Sysctl setting fs.file-max.
    fsInotifyMaxUserWatches number
    Sysctl setting fs.inotify.max_user_watches.
    fsNrOpen number
    Sysctl setting fs.nr_open.
    kernelThreadsMax number
    Sysctl setting kernel.threads-max.
    netCoreNetdevMaxBacklog number
    Sysctl setting net.core.netdev_max_backlog.
    netCoreOptmemMax number
    Sysctl setting net.core.optmem_max.
    netCoreRmemDefault number
    Sysctl setting net.core.rmem_default.
    netCoreRmemMax number
    Sysctl setting net.core.rmem_max.
    netCoreSomaxconn number
    Sysctl setting net.core.somaxconn.
    netCoreWmemDefault number
    Sysctl setting net.core.wmem_default.
    netCoreWmemMax number
    Sysctl setting net.core.wmem_max.
    netIpv4IpLocalPortRange string
    Sysctl setting net.ipv4.ip_local_port_range.
    netIpv4NeighDefaultGcThresh1 number
    Sysctl setting net.ipv4.neigh.default.gc_thresh1.
    netIpv4NeighDefaultGcThresh2 number
    Sysctl setting net.ipv4.neigh.default.gc_thresh2.
    netIpv4NeighDefaultGcThresh3 number
    Sysctl setting net.ipv4.neigh.default.gc_thresh3.
    netIpv4TcpFinTimeout number
    Sysctl setting net.ipv4.tcp_fin_timeout.
    netIpv4TcpKeepaliveProbes number
    Sysctl setting net.ipv4.tcp_keepalive_probes.
    netIpv4TcpKeepaliveTime number
    Sysctl setting net.ipv4.tcp_keepalive_time.
    netIpv4TcpMaxSynBacklog number
    Sysctl setting net.ipv4.tcp_max_syn_backlog.
    netIpv4TcpMaxTwBuckets number
    Sysctl setting net.ipv4.tcp_max_tw_buckets.
    netIpv4TcpTwReuse boolean
    Sysctl setting net.ipv4.tcp_tw_reuse.
    netIpv4TcpkeepaliveIntvl number
    Sysctl setting net.ipv4.tcp_keepalive_intvl.
    netNetfilterNfConntrackBuckets number
    Sysctl setting net.netfilter.nf_conntrack_buckets.
    netNetfilterNfConntrackMax number
    Sysctl setting net.netfilter.nf_conntrack_max.
    vmMaxMapCount number
    Sysctl setting vm.max_map_count.
    vmSwappiness number
    Sysctl setting vm.swappiness.
    vmVfsCachePressure number
    Sysctl setting vm.vfs_cache_pressure.
    fs_aio_max_nr int
    Sysctl setting fs.aio-max-nr.
    fs_file_max int
    Sysctl setting fs.file-max.
    fs_inotify_max_user_watches int
    Sysctl setting fs.inotify.max_user_watches.
    fs_nr_open int
    Sysctl setting fs.nr_open.
    kernel_threads_max int
    Sysctl setting kernel.threads-max.
    net_core_netdev_max_backlog int
    Sysctl setting net.core.netdev_max_backlog.
    net_core_optmem_max int
    Sysctl setting net.core.optmem_max.
    net_core_rmem_default int
    Sysctl setting net.core.rmem_default.
    net_core_rmem_max int
    Sysctl setting net.core.rmem_max.
    net_core_somaxconn int
    Sysctl setting net.core.somaxconn.
    net_core_wmem_default int
    Sysctl setting net.core.wmem_default.
    net_core_wmem_max int
    Sysctl setting net.core.wmem_max.
    net_ipv4_ip_local_port_range str
    Sysctl setting net.ipv4.ip_local_port_range.
    net_ipv4_neigh_default_gc_thresh1 int
    Sysctl setting net.ipv4.neigh.default.gc_thresh1.
    net_ipv4_neigh_default_gc_thresh2 int
    Sysctl setting net.ipv4.neigh.default.gc_thresh2.
    net_ipv4_neigh_default_gc_thresh3 int
    Sysctl setting net.ipv4.neigh.default.gc_thresh3.
    net_ipv4_tcp_fin_timeout int
    Sysctl setting net.ipv4.tcp_fin_timeout.
    net_ipv4_tcp_keepalive_probes int
    Sysctl setting net.ipv4.tcp_keepalive_probes.
    net_ipv4_tcp_keepalive_time int
    Sysctl setting net.ipv4.tcp_keepalive_time.
    net_ipv4_tcp_max_syn_backlog int
    Sysctl setting net.ipv4.tcp_max_syn_backlog.
    net_ipv4_tcp_max_tw_buckets int
    Sysctl setting net.ipv4.tcp_max_tw_buckets.
    net_ipv4_tcp_tw_reuse bool
    Sysctl setting net.ipv4.tcp_tw_reuse.
    net_ipv4_tcpkeepalive_intvl int
    Sysctl setting net.ipv4.tcp_keepalive_intvl.
    net_netfilter_nf_conntrack_buckets int
    Sysctl setting net.netfilter.nf_conntrack_buckets.
    net_netfilter_nf_conntrack_max int
    Sysctl setting net.netfilter.nf_conntrack_max.
    vm_max_map_count int
    Sysctl setting vm.max_map_count.
    vm_swappiness int
    Sysctl setting vm.swappiness.
    vm_vfs_cache_pressure int
    Sysctl setting vm.vfs_cache_pressure.
    fsAioMaxNr Number
    Sysctl setting fs.aio-max-nr.
    fsFileMax Number
    Sysctl setting fs.file-max.
    fsInotifyMaxUserWatches Number
    Sysctl setting fs.inotify.max_user_watches.
    fsNrOpen Number
    Sysctl setting fs.nr_open.
    kernelThreadsMax Number
    Sysctl setting kernel.threads-max.
    netCoreNetdevMaxBacklog Number
    Sysctl setting net.core.netdev_max_backlog.
    netCoreOptmemMax Number
    Sysctl setting net.core.optmem_max.
    netCoreRmemDefault Number
    Sysctl setting net.core.rmem_default.
    netCoreRmemMax Number
    Sysctl setting net.core.rmem_max.
    netCoreSomaxconn Number
    Sysctl setting net.core.somaxconn.
    netCoreWmemDefault Number
    Sysctl setting net.core.wmem_default.
    netCoreWmemMax Number
    Sysctl setting net.core.wmem_max.
    netIpv4IpLocalPortRange String
    Sysctl setting net.ipv4.ip_local_port_range.
    netIpv4NeighDefaultGcThresh1 Number
    Sysctl setting net.ipv4.neigh.default.gc_thresh1.
    netIpv4NeighDefaultGcThresh2 Number
    Sysctl setting net.ipv4.neigh.default.gc_thresh2.
    netIpv4NeighDefaultGcThresh3 Number
    Sysctl setting net.ipv4.neigh.default.gc_thresh3.
    netIpv4TcpFinTimeout Number
    Sysctl setting net.ipv4.tcp_fin_timeout.
    netIpv4TcpKeepaliveProbes Number
    Sysctl setting net.ipv4.tcp_keepalive_probes.
    netIpv4TcpKeepaliveTime Number
    Sysctl setting net.ipv4.tcp_keepalive_time.
    netIpv4TcpMaxSynBacklog Number
    Sysctl setting net.ipv4.tcp_max_syn_backlog.
    netIpv4TcpMaxTwBuckets Number
    Sysctl setting net.ipv4.tcp_max_tw_buckets.
    netIpv4TcpTwReuse Boolean
    Sysctl setting net.ipv4.tcp_tw_reuse.
    netIpv4TcpkeepaliveIntvl Number
    Sysctl setting net.ipv4.tcp_keepalive_intvl.
    netNetfilterNfConntrackBuckets Number
    Sysctl setting net.netfilter.nf_conntrack_buckets.
    netNetfilterNfConntrackMax Number
    Sysctl setting net.netfilter.nf_conntrack_max.
    vmMaxMapCount Number
    Sysctl setting vm.max_map_count.
    vmSwappiness Number
    Sysctl setting vm.swappiness.
    vmVfsCachePressure Number
    Sysctl setting vm.vfs_cache_pressure.

    SystemDataResponse

    CreatedAt string
    The timestamp of resource creation (UTC).
    CreatedBy string
    The identity that created the resource.
    CreatedByType string
    The type of identity that created the resource.
    LastModifiedAt string
    The timestamp of resource last modification (UTC)
    LastModifiedBy string
    The identity that last modified the resource.
    LastModifiedByType string
    The type of identity that last modified the resource.
    CreatedAt string
    The timestamp of resource creation (UTC).
    CreatedBy string
    The identity that created the resource.
    CreatedByType string
    The type of identity that created the resource.
    LastModifiedAt string
    The timestamp of resource last modification (UTC)
    LastModifiedBy string
    The identity that last modified the resource.
    LastModifiedByType string
    The type of identity that last modified the resource.
    createdAt String
    The timestamp of resource creation (UTC).
    createdBy String
    The identity that created the resource.
    createdByType String
    The type of identity that created the resource.
    lastModifiedAt String
    The timestamp of resource last modification (UTC)
    lastModifiedBy String
    The identity that last modified the resource.
    lastModifiedByType String
    The type of identity that last modified the resource.
    createdAt string
    The timestamp of resource creation (UTC).
    createdBy string
    The identity that created the resource.
    createdByType string
    The type of identity that created the resource.
    lastModifiedAt string
    The timestamp of resource last modification (UTC)
    lastModifiedBy string
    The identity that last modified the resource.
    lastModifiedByType string
    The type of identity that last modified the resource.
    created_at str
    The timestamp of resource creation (UTC).
    created_by str
    The identity that created the resource.
    created_by_type str
    The type of identity that created the resource.
    last_modified_at str
    The timestamp of resource last modification (UTC)
    last_modified_by str
    The identity that last modified the resource.
    last_modified_by_type str
    The type of identity that last modified the resource.
    createdAt String
    The timestamp of resource creation (UTC).
    createdBy String
    The identity that created the resource.
    createdByType String
    The type of identity that created the resource.
    lastModifiedAt String
    The timestamp of resource last modification (UTC)
    lastModifiedBy String
    The identity that last modified the resource.
    lastModifiedByType String
    The type of identity that last modified the resource.

    UpgradeOverrideSettingsResponse

    ForceUpgrade bool
    Whether to force upgrade the cluster. Note that this option instructs upgrade operation to bypass upgrade protections such as checking for deprecated API usage. Enable this option only with caution.
    Until string
    Until when the overrides are effective. Note that this only matches the start time of an upgrade, and the effectiveness won't change once an upgrade starts even if the until expires as upgrade proceeds. This field is not set by default. It must be set for the overrides to take effect.
    ForceUpgrade bool
    Whether to force upgrade the cluster. Note that this option instructs upgrade operation to bypass upgrade protections such as checking for deprecated API usage. Enable this option only with caution.
    Until string
    Until when the overrides are effective. Note that this only matches the start time of an upgrade, and the effectiveness won't change once an upgrade starts even if the until expires as upgrade proceeds. This field is not set by default. It must be set for the overrides to take effect.
    forceUpgrade Boolean
    Whether to force upgrade the cluster. Note that this option instructs upgrade operation to bypass upgrade protections such as checking for deprecated API usage. Enable this option only with caution.
    until String
    Until when the overrides are effective. Note that this only matches the start time of an upgrade, and the effectiveness won't change once an upgrade starts even if the until expires as upgrade proceeds. This field is not set by default. It must be set for the overrides to take effect.
    forceUpgrade boolean
    Whether to force upgrade the cluster. Note that this option instructs upgrade operation to bypass upgrade protections such as checking for deprecated API usage. Enable this option only with caution.
    until string
    Until when the overrides are effective. Note that this only matches the start time of an upgrade, and the effectiveness won't change once an upgrade starts even if the until expires as upgrade proceeds. This field is not set by default. It must be set for the overrides to take effect.
    force_upgrade bool
    Whether to force upgrade the cluster. Note that this option instructs upgrade operation to bypass upgrade protections such as checking for deprecated API usage. Enable this option only with caution.
    until str
    Until when the overrides are effective. Note that this only matches the start time of an upgrade, and the effectiveness won't change once an upgrade starts even if the until expires as upgrade proceeds. This field is not set by default. It must be set for the overrides to take effect.
    forceUpgrade Boolean
    Whether to force upgrade the cluster. Note that this option instructs upgrade operation to bypass upgrade protections such as checking for deprecated API usage. Enable this option only with caution.
    until String
    Until when the overrides are effective. Note that this only matches the start time of an upgrade, and the effectiveness won't change once an upgrade starts even if the until expires as upgrade proceeds. This field is not set by default. It must be set for the overrides to take effect.

    UserAssignedIdentityResponse

    ClientId string
    The client ID of the user assigned identity.
    ObjectId string
    The object ID of the user assigned identity.
    PrincipalId string
    The principal ID of the assigned identity.
    ResourceId string
    The resource ID of the user assigned identity.
    ClientId string
    The client ID of the user assigned identity.
    ObjectId string
    The object ID of the user assigned identity.
    PrincipalId string
    The principal ID of the assigned identity.
    ResourceId string
    The resource ID of the user assigned identity.
    clientId String
    The client ID of the user assigned identity.
    objectId String
    The object ID of the user assigned identity.
    principalId String
    The principal ID of the assigned identity.
    resourceId String
    The resource ID of the user assigned identity.
    clientId string
    The client ID of the user assigned identity.
    objectId string
    The object ID of the user assigned identity.
    principalId string
    The principal ID of the assigned identity.
    resourceId string
    The resource ID of the user assigned identity.
    client_id str
    The client ID of the user assigned identity.
    object_id str
    The object ID of the user assigned identity.
    principal_id str
    The principal ID of the assigned identity.
    resource_id str
    The resource ID of the user assigned identity.
    clientId String
    The client ID of the user assigned identity.
    objectId String
    The object ID of the user assigned identity.
    principalId String
    The principal ID of the assigned identity.
    resourceId String
    The resource ID of the user assigned identity.

    WindowsGmsaProfileResponse

    DnsServer string
    Specifies the DNS server for Windows gMSA. Set it to empty if you have configured the DNS server in the vnet which is used to create the managed cluster.
    Enabled bool
    Specifies whether to enable Windows gMSA in the managed cluster.
    RootDomainName string
    Specifies the root domain name for Windows gMSA. Set it to empty if you have configured the DNS server in the vnet which is used to create the managed cluster.
    DnsServer string
    Specifies the DNS server for Windows gMSA. Set it to empty if you have configured the DNS server in the vnet which is used to create the managed cluster.
    Enabled bool
    Specifies whether to enable Windows gMSA in the managed cluster.
    RootDomainName string
    Specifies the root domain name for Windows gMSA. Set it to empty if you have configured the DNS server in the vnet which is used to create the managed cluster.
    dnsServer String
    Specifies the DNS server for Windows gMSA. Set it to empty if you have configured the DNS server in the vnet which is used to create the managed cluster.
    enabled Boolean
    Specifies whether to enable Windows gMSA in the managed cluster.
    rootDomainName String
    Specifies the root domain name for Windows gMSA. Set it to empty if you have configured the DNS server in the vnet which is used to create the managed cluster.
    dnsServer string
    Specifies the DNS server for Windows gMSA. Set it to empty if you have configured the DNS server in the vnet which is used to create the managed cluster.
    enabled boolean
    Specifies whether to enable Windows gMSA in the managed cluster.
    rootDomainName string
    Specifies the root domain name for Windows gMSA. Set it to empty if you have configured the DNS server in the vnet which is used to create the managed cluster.
    dns_server str
    Specifies the DNS server for Windows gMSA. Set it to empty if you have configured the DNS server in the vnet which is used to create the managed cluster.
    enabled bool
    Specifies whether to enable Windows gMSA in the managed cluster.
    root_domain_name str
    Specifies the root domain name for Windows gMSA. Set it to empty if you have configured the DNS server in the vnet which is used to create the managed cluster.
    dnsServer String
    Specifies the DNS server for Windows gMSA. Set it to empty if you have configured the DNS server in the vnet which is used to create the managed cluster.
    enabled Boolean
    Specifies whether to enable Windows gMSA in the managed cluster.
    rootDomainName String
    Specifies the root domain name for Windows gMSA. Set it to empty if you have configured the DNS server in the vnet which is used to create the managed cluster.

    Package Details

    Repository
    Azure Native pulumi/pulumi-azure-native
    License
    Apache-2.0
    azure-native logo
    This is the latest version of Azure Native. Use the Azure Native v2 docs if using the v2 version of this package.
    Azure Native v3.4.0 published on Wednesday, May 7, 2025 by Pulumi
    pulumi/pulumi-azure-native