We recommend using Azure Native.
Viewing docs for Azure v4.42.0 (Older version)
published on Monday, Mar 9, 2026 by Pulumi
published on Monday, Mar 9, 2026 by Pulumi
We recommend using Azure Native.
Viewing docs for Azure v4.42.0 (Older version)
published on Monday, Mar 9, 2026 by Pulumi
published on Monday, Mar 9, 2026 by Pulumi
Manages a Managed Kubernetes Cluster (also known as AKS / Azure Kubernetes Service)
Example Usage
This example provisions a basic Managed Kubernetes Cluster.
using Pulumi;
using Azure = Pulumi.Azure;
class MyStack : Stack
{
public MyStack()
{
var exampleResourceGroup = new Azure.Core.ResourceGroup("exampleResourceGroup", new Azure.Core.ResourceGroupArgs
{
Location = "West Europe",
});
var exampleKubernetesCluster = new Azure.ContainerService.KubernetesCluster("exampleKubernetesCluster", new Azure.ContainerService.KubernetesClusterArgs
{
Location = exampleResourceGroup.Location,
ResourceGroupName = exampleResourceGroup.Name,
DnsPrefix = "exampleaks1",
DefaultNodePool = new Azure.ContainerService.Inputs.KubernetesClusterDefaultNodePoolArgs
{
Name = "default",
NodeCount = 1,
VmSize = "Standard_D2_v2",
},
Identity = new Azure.ContainerService.Inputs.KubernetesClusterIdentityArgs
{
Type = "SystemAssigned",
},
Tags =
{
{ "Environment", "Production" },
},
});
this.ClientCertificate = exampleKubernetesCluster.KubeConfigs.Apply(kubeConfigs => kubeConfigs[0].ClientCertificate);
this.KubeConfig = exampleKubernetesCluster.KubeConfigRaw;
}
[Output("clientCertificate")]
public Output<string> ClientCertificate { get; set; }
[Output("kubeConfig")]
public Output<string> KubeConfig { get; set; }
}
package main
import (
"github.com/pulumi/pulumi-azure/sdk/v4/go/azure/containerservice"
"github.com/pulumi/pulumi-azure/sdk/v4/go/azure/core"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
exampleResourceGroup, err := core.NewResourceGroup(ctx, "exampleResourceGroup", &core.ResourceGroupArgs{
Location: pulumi.String("West Europe"),
})
if err != nil {
return err
}
exampleKubernetesCluster, err := containerservice.NewKubernetesCluster(ctx, "exampleKubernetesCluster", &containerservice.KubernetesClusterArgs{
Location: exampleResourceGroup.Location,
ResourceGroupName: exampleResourceGroup.Name,
DnsPrefix: pulumi.String("exampleaks1"),
DefaultNodePool: &containerservice.KubernetesClusterDefaultNodePoolArgs{
Name: pulumi.String("default"),
NodeCount: pulumi.Int(1),
VmSize: pulumi.String("Standard_D2_v2"),
},
Identity: &containerservice.KubernetesClusterIdentityArgs{
Type: pulumi.String("SystemAssigned"),
},
Tags: pulumi.StringMap{
"Environment": pulumi.String("Production"),
},
})
if err != nil {
return err
}
ctx.Export("clientCertificate", exampleKubernetesCluster.KubeConfigs.ApplyT(func(kubeConfigs []containerservice.KubernetesClusterKubeConfig) (string, error) {
return kubeConfigs[0].ClientCertificate, nil
}).(pulumi.StringOutput))
ctx.Export("kubeConfig", exampleKubernetesCluster.KubeConfigRaw)
return nil
})
}
Example coming soon!
import * as pulumi from "@pulumi/pulumi";
import * as azure from "@pulumi/azure";
const exampleResourceGroup = new azure.core.ResourceGroup("exampleResourceGroup", {location: "West Europe"});
const exampleKubernetesCluster = new azure.containerservice.KubernetesCluster("exampleKubernetesCluster", {
location: exampleResourceGroup.location,
resourceGroupName: exampleResourceGroup.name,
dnsPrefix: "exampleaks1",
defaultNodePool: {
name: "default",
nodeCount: 1,
vmSize: "Standard_D2_v2",
},
identity: {
type: "SystemAssigned",
},
tags: {
Environment: "Production",
},
});
export const clientCertificate = exampleKubernetesCluster.kubeConfigs.apply(kubeConfigs => kubeConfigs[0].clientCertificate);
export const kubeConfig = exampleKubernetesCluster.kubeConfigRaw;
import pulumi
import pulumi_azure as azure
example_resource_group = azure.core.ResourceGroup("exampleResourceGroup", location="West Europe")
example_kubernetes_cluster = azure.containerservice.KubernetesCluster("exampleKubernetesCluster",
location=example_resource_group.location,
resource_group_name=example_resource_group.name,
dns_prefix="exampleaks1",
default_node_pool=azure.containerservice.KubernetesClusterDefaultNodePoolArgs(
name="default",
node_count=1,
vm_size="Standard_D2_v2",
),
identity=azure.containerservice.KubernetesClusterIdentityArgs(
type="SystemAssigned",
),
tags={
"Environment": "Production",
})
pulumi.export("clientCertificate", example_kubernetes_cluster.kube_configs[0].client_certificate)
pulumi.export("kubeConfig", example_kubernetes_cluster.kube_config_raw)
Example coming soon!
Create KubernetesCluster Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new KubernetesCluster(name: string, args: KubernetesClusterArgs, opts?: CustomResourceOptions);@overload
def KubernetesCluster(resource_name: str,
args: KubernetesClusterArgs,
opts: Optional[ResourceOptions] = None)
@overload
def KubernetesCluster(resource_name: str,
opts: Optional[ResourceOptions] = None,
default_node_pool: Optional[KubernetesClusterDefaultNodePoolArgs] = None,
resource_group_name: Optional[str] = None,
local_account_disabled: Optional[bool] = None,
location: Optional[str] = None,
automatic_channel_upgrade: Optional[str] = None,
azure_active_directory_role_based_access_control: Optional[KubernetesClusterAzureActiveDirectoryRoleBasedAccessControlArgs] = None,
azure_policy_enabled: Optional[bool] = None,
api_server_authorized_ip_ranges: Optional[Sequence[str]] = None,
disk_encryption_set_id: Optional[str] = None,
dns_prefix: Optional[str] = None,
dns_prefix_private_cluster: Optional[str] = None,
maintenance_window: Optional[KubernetesClusterMaintenanceWindowArgs] = None,
http_application_routing_enabled: Optional[bool] = None,
http_proxy_config: Optional[KubernetesClusterHttpProxyConfigArgs] = None,
identity: Optional[KubernetesClusterIdentityArgs] = None,
ingress_application_gateway: Optional[KubernetesClusterIngressApplicationGatewayArgs] = None,
key_vault_secrets_provider: Optional[KubernetesClusterKeyVaultSecretsProviderArgs] = None,
kubelet_identities: Optional[Sequence[KubernetesClusterKubeletIdentityArgs]] = None,
kubernetes_version: Optional[str] = None,
linux_profile: Optional[KubernetesClusterLinuxProfileArgs] = None,
auto_scaler_profile: Optional[KubernetesClusterAutoScalerProfileArgs] = None,
aci_connector_linux: Optional[KubernetesClusterAciConnectorLinuxArgs] = None,
enable_pod_security_policy: Optional[bool] = None,
name: Optional[str] = None,
network_profile: Optional[KubernetesClusterNetworkProfileArgs] = None,
node_resource_group: Optional[str] = None,
oms_agent: Optional[KubernetesClusterOmsAgentArgs] = None,
open_service_mesh_enabled: Optional[bool] = None,
private_cluster_enabled: Optional[bool] = None,
private_cluster_public_fqdn_enabled: Optional[bool] = None,
private_dns_zone_id: Optional[str] = None,
private_link_enabled: Optional[bool] = None,
public_network_access_enabled: Optional[bool] = None,
addon_profile: Optional[KubernetesClusterAddonProfileArgs] = None,
role_based_access_control: Optional[KubernetesClusterRoleBasedAccessControlArgs] = None,
role_based_access_control_enabled: Optional[bool] = None,
service_principal: Optional[KubernetesClusterServicePrincipalArgs] = None,
sku_tier: Optional[str] = None,
tags: Optional[Mapping[str, str]] = None,
windows_profile: Optional[KubernetesClusterWindowsProfileArgs] = None)func NewKubernetesCluster(ctx *Context, name string, args KubernetesClusterArgs, opts ...ResourceOption) (*KubernetesCluster, error)public KubernetesCluster(string name, KubernetesClusterArgs args, CustomResourceOptions? opts = null)
public KubernetesCluster(String name, KubernetesClusterArgs args)
public KubernetesCluster(String name, KubernetesClusterArgs args, CustomResourceOptions options)
type: azure:containerservice:KubernetesCluster
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args KubernetesClusterArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args KubernetesClusterArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args KubernetesClusterArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args KubernetesClusterArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args KubernetesClusterArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var kubernetesClusterResource = new Azure.ContainerService.KubernetesCluster("kubernetesClusterResource", new()
{
DefaultNodePool = new Azure.ContainerService.Inputs.KubernetesClusterDefaultNodePoolArgs
{
Name = "string",
VmSize = "string",
NodePublicIpPrefixId = "string",
UpgradeSettings = new Azure.ContainerService.Inputs.KubernetesClusterDefaultNodePoolUpgradeSettingsArgs
{
MaxSurge = "string",
},
FipsEnabled = false,
KubeletConfig = new Azure.ContainerService.Inputs.KubernetesClusterDefaultNodePoolKubeletConfigArgs
{
AllowedUnsafeSysctls = new[]
{
"string",
},
ContainerLogMaxLine = 0,
ContainerLogMaxSizeMb = 0,
CpuCfsQuotaEnabled = false,
CpuCfsQuotaPeriod = "string",
CpuManagerPolicy = "string",
ImageGcHighThreshold = 0,
ImageGcLowThreshold = 0,
PodMaxPid = 0,
TopologyManagerPolicy = "string",
},
KubeletDiskType = "string",
LinuxOsConfig = new Azure.ContainerService.Inputs.KubernetesClusterDefaultNodePoolLinuxOsConfigArgs
{
SwapFileSizeMb = 0,
SysctlConfig = new Azure.ContainerService.Inputs.KubernetesClusterDefaultNodePoolLinuxOsConfigSysctlConfigArgs
{
FsAioMaxNr = 0,
FsFileMax = 0,
FsInotifyMaxUserWatches = 0,
FsNrOpen = 0,
KernelThreadsMax = 0,
NetCoreNetdevMaxBacklog = 0,
NetCoreOptmemMax = 0,
NetCoreRmemDefault = 0,
NetCoreRmemMax = 0,
NetCoreSomaxconn = 0,
NetCoreWmemDefault = 0,
NetCoreWmemMax = 0,
NetIpv4IpLocalPortRangeMax = 0,
NetIpv4IpLocalPortRangeMin = 0,
NetIpv4NeighDefaultGcThresh1 = 0,
NetIpv4NeighDefaultGcThresh2 = 0,
NetIpv4NeighDefaultGcThresh3 = 0,
NetIpv4TcpFinTimeout = 0,
NetIpv4TcpKeepaliveIntvl = 0,
NetIpv4TcpKeepaliveProbes = 0,
NetIpv4TcpKeepaliveTime = 0,
NetIpv4TcpMaxSynBacklog = 0,
NetIpv4TcpMaxTwBuckets = 0,
NetIpv4TcpTwReuse = false,
NetNetfilterNfConntrackBuckets = 0,
NetNetfilterNfConntrackMax = 0,
VmMaxMapCount = 0,
VmSwappiness = 0,
VmVfsCachePressure = 0,
},
TransparentHugePageDefrag = "string",
TransparentHugePageEnabled = "string",
},
MaxCount = 0,
MaxPods = 0,
MinCount = 0,
EnableHostEncryption = false,
NodeCount = 0,
OnlyCriticalAddonsEnabled = false,
EnableNodePublicIp = false,
AvailabilityZones = new[]
{
"string",
},
NodeLabels =
{
{ "string", "string" },
},
OrchestratorVersion = "string",
OsDiskSizeGb = 0,
OsDiskType = "string",
OsSku = "string",
PodSubnetId = "string",
ProximityPlacementGroupId = "string",
Tags =
{
{ "string", "string" },
},
Type = "string",
UltraSsdEnabled = false,
NodeTaints = new[]
{
"string",
},
EnableAutoScaling = false,
VnetSubnetId = "string",
},
ResourceGroupName = "string",
LocalAccountDisabled = false,
Location = "string",
AutomaticChannelUpgrade = "string",
AzureActiveDirectoryRoleBasedAccessControl = new Azure.ContainerService.Inputs.KubernetesClusterAzureActiveDirectoryRoleBasedAccessControlArgs
{
AdminGroupObjectIds = new[]
{
"string",
},
AzureRbacEnabled = false,
ClientAppId = "string",
Managed = false,
ServerAppId = "string",
ServerAppSecret = "string",
TenantId = "string",
},
AzurePolicyEnabled = false,
ApiServerAuthorizedIpRanges = new[]
{
"string",
},
DiskEncryptionSetId = "string",
DnsPrefix = "string",
DnsPrefixPrivateCluster = "string",
MaintenanceWindow = new Azure.ContainerService.Inputs.KubernetesClusterMaintenanceWindowArgs
{
Alloweds = new[]
{
new Azure.ContainerService.Inputs.KubernetesClusterMaintenanceWindowAllowedArgs
{
Day = "string",
Hours = new[]
{
0,
},
},
},
NotAlloweds = new[]
{
new Azure.ContainerService.Inputs.KubernetesClusterMaintenanceWindowNotAllowedArgs
{
End = "string",
Start = "string",
},
},
},
HttpApplicationRoutingEnabled = false,
HttpProxyConfig = new Azure.ContainerService.Inputs.KubernetesClusterHttpProxyConfigArgs
{
HttpProxy = "string",
HttpsProxy = "string",
NoProxies = new[]
{
"string",
},
TrustedCa = "string",
},
Identity = new Azure.ContainerService.Inputs.KubernetesClusterIdentityArgs
{
Type = "string",
PrincipalId = "string",
TenantId = "string",
UserAssignedIdentityId = "string",
},
IngressApplicationGateway = new Azure.ContainerService.Inputs.KubernetesClusterIngressApplicationGatewayArgs
{
EffectiveGatewayId = "string",
GatewayId = "string",
GatewayName = "string",
IngressApplicationGatewayIdentities = new[]
{
new Azure.ContainerService.Inputs.KubernetesClusterIngressApplicationGatewayIngressApplicationGatewayIdentityArgs
{
ClientId = "string",
ObjectId = "string",
UserAssignedIdentityId = "string",
},
},
SubnetCidr = "string",
SubnetId = "string",
},
KeyVaultSecretsProvider = new Azure.ContainerService.Inputs.KubernetesClusterKeyVaultSecretsProviderArgs
{
SecretIdentities = new[]
{
new Azure.ContainerService.Inputs.KubernetesClusterKeyVaultSecretsProviderSecretIdentityArgs
{
ClientId = "string",
ObjectId = "string",
UserAssignedIdentityId = "string",
},
},
SecretRotationEnabled = false,
SecretRotationInterval = "string",
},
KubeletIdentities = new[]
{
new Azure.ContainerService.Inputs.KubernetesClusterKubeletIdentityArgs
{
ClientId = "string",
ObjectId = "string",
UserAssignedIdentityId = "string",
},
},
KubernetesVersion = "string",
LinuxProfile = new Azure.ContainerService.Inputs.KubernetesClusterLinuxProfileArgs
{
AdminUsername = "string",
SshKey = new Azure.ContainerService.Inputs.KubernetesClusterLinuxProfileSshKeyArgs
{
KeyData = "string",
},
},
AutoScalerProfile = new Azure.ContainerService.Inputs.KubernetesClusterAutoScalerProfileArgs
{
BalanceSimilarNodeGroups = false,
EmptyBulkDeleteMax = "string",
Expander = "string",
MaxGracefulTerminationSec = "string",
MaxNodeProvisioningTime = "string",
MaxUnreadyNodes = 0,
MaxUnreadyPercentage = 0,
NewPodScaleUpDelay = "string",
ScaleDownDelayAfterAdd = "string",
ScaleDownDelayAfterDelete = "string",
ScaleDownDelayAfterFailure = "string",
ScaleDownUnneeded = "string",
ScaleDownUnready = "string",
ScaleDownUtilizationThreshold = "string",
ScanInterval = "string",
SkipNodesWithLocalStorage = false,
SkipNodesWithSystemPods = false,
},
AciConnectorLinux = new Azure.ContainerService.Inputs.KubernetesClusterAciConnectorLinuxArgs
{
SubnetName = "string",
},
EnablePodSecurityPolicy = false,
Name = "string",
NetworkProfile = new Azure.ContainerService.Inputs.KubernetesClusterNetworkProfileArgs
{
NetworkPlugin = "string",
DnsServiceIp = "string",
DockerBridgeCidr = "string",
LoadBalancerProfile = new Azure.ContainerService.Inputs.KubernetesClusterNetworkProfileLoadBalancerProfileArgs
{
EffectiveOutboundIps = new[]
{
"string",
},
IdleTimeoutInMinutes = 0,
ManagedOutboundIpCount = 0,
OutboundIpAddressIds = new[]
{
"string",
},
OutboundIpPrefixIds = new[]
{
"string",
},
OutboundPortsAllocated = 0,
},
LoadBalancerSku = "string",
NatGatewayProfile = new Azure.ContainerService.Inputs.KubernetesClusterNetworkProfileNatGatewayProfileArgs
{
EffectiveOutboundIps = new[]
{
"string",
},
IdleTimeoutInMinutes = 0,
ManagedOutboundIpCount = 0,
},
NetworkMode = "string",
NetworkPolicy = "string",
OutboundType = "string",
PodCidr = "string",
ServiceCidr = "string",
},
NodeResourceGroup = "string",
OmsAgent = new Azure.ContainerService.Inputs.KubernetesClusterOmsAgentArgs
{
LogAnalyticsWorkspaceId = "string",
OmsAgentIdentities = new[]
{
new Azure.ContainerService.Inputs.KubernetesClusterOmsAgentOmsAgentIdentityArgs
{
ClientId = "string",
ObjectId = "string",
UserAssignedIdentityId = "string",
},
},
},
OpenServiceMeshEnabled = false,
PrivateClusterEnabled = false,
PrivateClusterPublicFqdnEnabled = false,
PrivateDnsZoneId = "string",
PublicNetworkAccessEnabled = false,
RoleBasedAccessControlEnabled = false,
ServicePrincipal = new Azure.ContainerService.Inputs.KubernetesClusterServicePrincipalArgs
{
ClientId = "string",
ClientSecret = "string",
},
SkuTier = "string",
Tags =
{
{ "string", "string" },
},
WindowsProfile = new Azure.ContainerService.Inputs.KubernetesClusterWindowsProfileArgs
{
AdminUsername = "string",
AdminPassword = "string",
License = "string",
},
});
example, err := containerservice.NewKubernetesCluster(ctx, "kubernetesClusterResource", &containerservice.KubernetesClusterArgs{
DefaultNodePool: &containerservice.KubernetesClusterDefaultNodePoolArgs{
Name: pulumi.String("string"),
VmSize: pulumi.String("string"),
NodePublicIpPrefixId: pulumi.String("string"),
UpgradeSettings: &containerservice.KubernetesClusterDefaultNodePoolUpgradeSettingsArgs{
MaxSurge: pulumi.String("string"),
},
FipsEnabled: pulumi.Bool(false),
KubeletConfig: &containerservice.KubernetesClusterDefaultNodePoolKubeletConfigArgs{
AllowedUnsafeSysctls: pulumi.StringArray{
pulumi.String("string"),
},
ContainerLogMaxLine: pulumi.Int(0),
ContainerLogMaxSizeMb: pulumi.Int(0),
CpuCfsQuotaEnabled: pulumi.Bool(false),
CpuCfsQuotaPeriod: pulumi.String("string"),
CpuManagerPolicy: pulumi.String("string"),
ImageGcHighThreshold: pulumi.Int(0),
ImageGcLowThreshold: pulumi.Int(0),
PodMaxPid: pulumi.Int(0),
TopologyManagerPolicy: pulumi.String("string"),
},
KubeletDiskType: pulumi.String("string"),
LinuxOsConfig: &containerservice.KubernetesClusterDefaultNodePoolLinuxOsConfigArgs{
SwapFileSizeMb: pulumi.Int(0),
SysctlConfig: &containerservice.KubernetesClusterDefaultNodePoolLinuxOsConfigSysctlConfigArgs{
FsAioMaxNr: pulumi.Int(0),
FsFileMax: pulumi.Int(0),
FsInotifyMaxUserWatches: pulumi.Int(0),
FsNrOpen: pulumi.Int(0),
KernelThreadsMax: pulumi.Int(0),
NetCoreNetdevMaxBacklog: pulumi.Int(0),
NetCoreOptmemMax: pulumi.Int(0),
NetCoreRmemDefault: pulumi.Int(0),
NetCoreRmemMax: pulumi.Int(0),
NetCoreSomaxconn: pulumi.Int(0),
NetCoreWmemDefault: pulumi.Int(0),
NetCoreWmemMax: pulumi.Int(0),
NetIpv4IpLocalPortRangeMax: pulumi.Int(0),
NetIpv4IpLocalPortRangeMin: pulumi.Int(0),
NetIpv4NeighDefaultGcThresh1: pulumi.Int(0),
NetIpv4NeighDefaultGcThresh2: pulumi.Int(0),
NetIpv4NeighDefaultGcThresh3: pulumi.Int(0),
NetIpv4TcpFinTimeout: pulumi.Int(0),
NetIpv4TcpKeepaliveIntvl: pulumi.Int(0),
NetIpv4TcpKeepaliveProbes: pulumi.Int(0),
NetIpv4TcpKeepaliveTime: pulumi.Int(0),
NetIpv4TcpMaxSynBacklog: pulumi.Int(0),
NetIpv4TcpMaxTwBuckets: pulumi.Int(0),
NetIpv4TcpTwReuse: pulumi.Bool(false),
NetNetfilterNfConntrackBuckets: pulumi.Int(0),
NetNetfilterNfConntrackMax: pulumi.Int(0),
VmMaxMapCount: pulumi.Int(0),
VmSwappiness: pulumi.Int(0),
VmVfsCachePressure: pulumi.Int(0),
},
TransparentHugePageDefrag: pulumi.String("string"),
TransparentHugePageEnabled: pulumi.String("string"),
},
MaxCount: pulumi.Int(0),
MaxPods: pulumi.Int(0),
MinCount: pulumi.Int(0),
EnableHostEncryption: pulumi.Bool(false),
NodeCount: pulumi.Int(0),
OnlyCriticalAddonsEnabled: pulumi.Bool(false),
EnableNodePublicIp: pulumi.Bool(false),
AvailabilityZones: pulumi.StringArray{
pulumi.String("string"),
},
NodeLabels: pulumi.StringMap{
"string": pulumi.String("string"),
},
OrchestratorVersion: pulumi.String("string"),
OsDiskSizeGb: pulumi.Int(0),
OsDiskType: pulumi.String("string"),
OsSku: pulumi.String("string"),
PodSubnetId: pulumi.String("string"),
ProximityPlacementGroupId: pulumi.String("string"),
Tags: pulumi.StringMap{
"string": pulumi.String("string"),
},
Type: pulumi.String("string"),
UltraSsdEnabled: pulumi.Bool(false),
NodeTaints: pulumi.StringArray{
pulumi.String("string"),
},
EnableAutoScaling: pulumi.Bool(false),
VnetSubnetId: pulumi.String("string"),
},
ResourceGroupName: pulumi.String("string"),
LocalAccountDisabled: pulumi.Bool(false),
Location: pulumi.String("string"),
AutomaticChannelUpgrade: pulumi.String("string"),
AzureActiveDirectoryRoleBasedAccessControl: &containerservice.KubernetesClusterAzureActiveDirectoryRoleBasedAccessControlArgs{
AdminGroupObjectIds: pulumi.StringArray{
pulumi.String("string"),
},
AzureRbacEnabled: pulumi.Bool(false),
ClientAppId: pulumi.String("string"),
Managed: pulumi.Bool(false),
ServerAppId: pulumi.String("string"),
ServerAppSecret: pulumi.String("string"),
TenantId: pulumi.String("string"),
},
AzurePolicyEnabled: pulumi.Bool(false),
ApiServerAuthorizedIpRanges: pulumi.StringArray{
pulumi.String("string"),
},
DiskEncryptionSetId: pulumi.String("string"),
DnsPrefix: pulumi.String("string"),
DnsPrefixPrivateCluster: pulumi.String("string"),
MaintenanceWindow: &containerservice.KubernetesClusterMaintenanceWindowArgs{
Alloweds: containerservice.KubernetesClusterMaintenanceWindowAllowedArray{
&containerservice.KubernetesClusterMaintenanceWindowAllowedArgs{
Day: pulumi.String("string"),
Hours: pulumi.IntArray{
pulumi.Int(0),
},
},
},
NotAlloweds: containerservice.KubernetesClusterMaintenanceWindowNotAllowedArray{
&containerservice.KubernetesClusterMaintenanceWindowNotAllowedArgs{
End: pulumi.String("string"),
Start: pulumi.String("string"),
},
},
},
HttpApplicationRoutingEnabled: pulumi.Bool(false),
HttpProxyConfig: &containerservice.KubernetesClusterHttpProxyConfigArgs{
HttpProxy: pulumi.String("string"),
HttpsProxy: pulumi.String("string"),
NoProxies: pulumi.StringArray{
pulumi.String("string"),
},
TrustedCa: pulumi.String("string"),
},
Identity: &containerservice.KubernetesClusterIdentityArgs{
Type: pulumi.String("string"),
PrincipalId: pulumi.String("string"),
TenantId: pulumi.String("string"),
UserAssignedIdentityId: pulumi.String("string"),
},
IngressApplicationGateway: &containerservice.KubernetesClusterIngressApplicationGatewayArgs{
EffectiveGatewayId: pulumi.String("string"),
GatewayId: pulumi.String("string"),
GatewayName: pulumi.String("string"),
IngressApplicationGatewayIdentities: containerservice.KubernetesClusterIngressApplicationGatewayIngressApplicationGatewayIdentityArray{
&containerservice.KubernetesClusterIngressApplicationGatewayIngressApplicationGatewayIdentityArgs{
ClientId: pulumi.String("string"),
ObjectId: pulumi.String("string"),
UserAssignedIdentityId: pulumi.String("string"),
},
},
SubnetCidr: pulumi.String("string"),
SubnetId: pulumi.String("string"),
},
KeyVaultSecretsProvider: &containerservice.KubernetesClusterKeyVaultSecretsProviderArgs{
SecretIdentities: containerservice.KubernetesClusterKeyVaultSecretsProviderSecretIdentityArray{
&containerservice.KubernetesClusterKeyVaultSecretsProviderSecretIdentityArgs{
ClientId: pulumi.String("string"),
ObjectId: pulumi.String("string"),
UserAssignedIdentityId: pulumi.String("string"),
},
},
SecretRotationEnabled: pulumi.Bool(false),
SecretRotationInterval: pulumi.String("string"),
},
KubeletIdentities: containerservice.KubernetesClusterKubeletIdentityArray{
&containerservice.KubernetesClusterKubeletIdentityArgs{
ClientId: pulumi.String("string"),
ObjectId: pulumi.String("string"),
UserAssignedIdentityId: pulumi.String("string"),
},
},
KubernetesVersion: pulumi.String("string"),
LinuxProfile: &containerservice.KubernetesClusterLinuxProfileArgs{
AdminUsername: pulumi.String("string"),
SshKey: &containerservice.KubernetesClusterLinuxProfileSshKeyArgs{
KeyData: pulumi.String("string"),
},
},
AutoScalerProfile: &containerservice.KubernetesClusterAutoScalerProfileArgs{
BalanceSimilarNodeGroups: pulumi.Bool(false),
EmptyBulkDeleteMax: pulumi.String("string"),
Expander: pulumi.String("string"),
MaxGracefulTerminationSec: pulumi.String("string"),
MaxNodeProvisioningTime: pulumi.String("string"),
MaxUnreadyNodes: pulumi.Int(0),
MaxUnreadyPercentage: pulumi.Float64(0),
NewPodScaleUpDelay: pulumi.String("string"),
ScaleDownDelayAfterAdd: pulumi.String("string"),
ScaleDownDelayAfterDelete: pulumi.String("string"),
ScaleDownDelayAfterFailure: pulumi.String("string"),
ScaleDownUnneeded: pulumi.String("string"),
ScaleDownUnready: pulumi.String("string"),
ScaleDownUtilizationThreshold: pulumi.String("string"),
ScanInterval: pulumi.String("string"),
SkipNodesWithLocalStorage: pulumi.Bool(false),
SkipNodesWithSystemPods: pulumi.Bool(false),
},
AciConnectorLinux: &containerservice.KubernetesClusterAciConnectorLinuxArgs{
SubnetName: pulumi.String("string"),
},
EnablePodSecurityPolicy: pulumi.Bool(false),
Name: pulumi.String("string"),
NetworkProfile: &containerservice.KubernetesClusterNetworkProfileArgs{
NetworkPlugin: pulumi.String("string"),
DnsServiceIp: pulumi.String("string"),
DockerBridgeCidr: pulumi.String("string"),
LoadBalancerProfile: &containerservice.KubernetesClusterNetworkProfileLoadBalancerProfileArgs{
EffectiveOutboundIps: pulumi.StringArray{
pulumi.String("string"),
},
IdleTimeoutInMinutes: pulumi.Int(0),
ManagedOutboundIpCount: pulumi.Int(0),
OutboundIpAddressIds: pulumi.StringArray{
pulumi.String("string"),
},
OutboundIpPrefixIds: pulumi.StringArray{
pulumi.String("string"),
},
OutboundPortsAllocated: pulumi.Int(0),
},
LoadBalancerSku: pulumi.String("string"),
NatGatewayProfile: &containerservice.KubernetesClusterNetworkProfileNatGatewayProfileArgs{
EffectiveOutboundIps: pulumi.StringArray{
pulumi.String("string"),
},
IdleTimeoutInMinutes: pulumi.Int(0),
ManagedOutboundIpCount: pulumi.Int(0),
},
NetworkMode: pulumi.String("string"),
NetworkPolicy: pulumi.String("string"),
OutboundType: pulumi.String("string"),
PodCidr: pulumi.String("string"),
ServiceCidr: pulumi.String("string"),
},
NodeResourceGroup: pulumi.String("string"),
OmsAgent: &containerservice.KubernetesClusterOmsAgentArgs{
LogAnalyticsWorkspaceId: pulumi.String("string"),
OmsAgentIdentities: containerservice.KubernetesClusterOmsAgentOmsAgentIdentityArray{
&containerservice.KubernetesClusterOmsAgentOmsAgentIdentityArgs{
ClientId: pulumi.String("string"),
ObjectId: pulumi.String("string"),
UserAssignedIdentityId: pulumi.String("string"),
},
},
},
OpenServiceMeshEnabled: pulumi.Bool(false),
PrivateClusterEnabled: pulumi.Bool(false),
PrivateClusterPublicFqdnEnabled: pulumi.Bool(false),
PrivateDnsZoneId: pulumi.String("string"),
PublicNetworkAccessEnabled: pulumi.Bool(false),
RoleBasedAccessControlEnabled: pulumi.Bool(false),
ServicePrincipal: &containerservice.KubernetesClusterServicePrincipalArgs{
ClientId: pulumi.String("string"),
ClientSecret: pulumi.String("string"),
},
SkuTier: pulumi.String("string"),
Tags: pulumi.StringMap{
"string": pulumi.String("string"),
},
WindowsProfile: &containerservice.KubernetesClusterWindowsProfileArgs{
AdminUsername: pulumi.String("string"),
AdminPassword: pulumi.String("string"),
License: pulumi.String("string"),
},
})
var kubernetesClusterResource = new KubernetesCluster("kubernetesClusterResource", KubernetesClusterArgs.builder()
.defaultNodePool(KubernetesClusterDefaultNodePoolArgs.builder()
.name("string")
.vmSize("string")
.nodePublicIpPrefixId("string")
.upgradeSettings(KubernetesClusterDefaultNodePoolUpgradeSettingsArgs.builder()
.maxSurge("string")
.build())
.fipsEnabled(false)
.kubeletConfig(KubernetesClusterDefaultNodePoolKubeletConfigArgs.builder()
.allowedUnsafeSysctls("string")
.containerLogMaxLine(0)
.containerLogMaxSizeMb(0)
.cpuCfsQuotaEnabled(false)
.cpuCfsQuotaPeriod("string")
.cpuManagerPolicy("string")
.imageGcHighThreshold(0)
.imageGcLowThreshold(0)
.podMaxPid(0)
.topologyManagerPolicy("string")
.build())
.kubeletDiskType("string")
.linuxOsConfig(KubernetesClusterDefaultNodePoolLinuxOsConfigArgs.builder()
.swapFileSizeMb(0)
.sysctlConfig(KubernetesClusterDefaultNodePoolLinuxOsConfigSysctlConfigArgs.builder()
.fsAioMaxNr(0)
.fsFileMax(0)
.fsInotifyMaxUserWatches(0)
.fsNrOpen(0)
.kernelThreadsMax(0)
.netCoreNetdevMaxBacklog(0)
.netCoreOptmemMax(0)
.netCoreRmemDefault(0)
.netCoreRmemMax(0)
.netCoreSomaxconn(0)
.netCoreWmemDefault(0)
.netCoreWmemMax(0)
.netIpv4IpLocalPortRangeMax(0)
.netIpv4IpLocalPortRangeMin(0)
.netIpv4NeighDefaultGcThresh1(0)
.netIpv4NeighDefaultGcThresh2(0)
.netIpv4NeighDefaultGcThresh3(0)
.netIpv4TcpFinTimeout(0)
.netIpv4TcpKeepaliveIntvl(0)
.netIpv4TcpKeepaliveProbes(0)
.netIpv4TcpKeepaliveTime(0)
.netIpv4TcpMaxSynBacklog(0)
.netIpv4TcpMaxTwBuckets(0)
.netIpv4TcpTwReuse(false)
.netNetfilterNfConntrackBuckets(0)
.netNetfilterNfConntrackMax(0)
.vmMaxMapCount(0)
.vmSwappiness(0)
.vmVfsCachePressure(0)
.build())
.transparentHugePageDefrag("string")
.transparentHugePageEnabled("string")
.build())
.maxCount(0)
.maxPods(0)
.minCount(0)
.enableHostEncryption(false)
.nodeCount(0)
.onlyCriticalAddonsEnabled(false)
.enableNodePublicIp(false)
.availabilityZones("string")
.nodeLabels(Map.of("string", "string"))
.orchestratorVersion("string")
.osDiskSizeGb(0)
.osDiskType("string")
.osSku("string")
.podSubnetId("string")
.proximityPlacementGroupId("string")
.tags(Map.of("string", "string"))
.type("string")
.ultraSsdEnabled(false)
.nodeTaints("string")
.enableAutoScaling(false)
.vnetSubnetId("string")
.build())
.resourceGroupName("string")
.localAccountDisabled(false)
.location("string")
.automaticChannelUpgrade("string")
.azureActiveDirectoryRoleBasedAccessControl(KubernetesClusterAzureActiveDirectoryRoleBasedAccessControlArgs.builder()
.adminGroupObjectIds("string")
.azureRbacEnabled(false)
.clientAppId("string")
.managed(false)
.serverAppId("string")
.serverAppSecret("string")
.tenantId("string")
.build())
.azurePolicyEnabled(false)
.apiServerAuthorizedIpRanges("string")
.diskEncryptionSetId("string")
.dnsPrefix("string")
.dnsPrefixPrivateCluster("string")
.maintenanceWindow(KubernetesClusterMaintenanceWindowArgs.builder()
.alloweds(KubernetesClusterMaintenanceWindowAllowedArgs.builder()
.day("string")
.hours(0)
.build())
.notAlloweds(KubernetesClusterMaintenanceWindowNotAllowedArgs.builder()
.end("string")
.start("string")
.build())
.build())
.httpApplicationRoutingEnabled(false)
.httpProxyConfig(KubernetesClusterHttpProxyConfigArgs.builder()
.httpProxy("string")
.httpsProxy("string")
.noProxies("string")
.trustedCa("string")
.build())
.identity(KubernetesClusterIdentityArgs.builder()
.type("string")
.principalId("string")
.tenantId("string")
.userAssignedIdentityId("string")
.build())
.ingressApplicationGateway(KubernetesClusterIngressApplicationGatewayArgs.builder()
.effectiveGatewayId("string")
.gatewayId("string")
.gatewayName("string")
.ingressApplicationGatewayIdentities(KubernetesClusterIngressApplicationGatewayIngressApplicationGatewayIdentityArgs.builder()
.clientId("string")
.objectId("string")
.userAssignedIdentityId("string")
.build())
.subnetCidr("string")
.subnetId("string")
.build())
.keyVaultSecretsProvider(KubernetesClusterKeyVaultSecretsProviderArgs.builder()
.secretIdentities(KubernetesClusterKeyVaultSecretsProviderSecretIdentityArgs.builder()
.clientId("string")
.objectId("string")
.userAssignedIdentityId("string")
.build())
.secretRotationEnabled(false)
.secretRotationInterval("string")
.build())
.kubeletIdentities(KubernetesClusterKubeletIdentityArgs.builder()
.clientId("string")
.objectId("string")
.userAssignedIdentityId("string")
.build())
.kubernetesVersion("string")
.linuxProfile(KubernetesClusterLinuxProfileArgs.builder()
.adminUsername("string")
.sshKey(KubernetesClusterLinuxProfileSshKeyArgs.builder()
.keyData("string")
.build())
.build())
.autoScalerProfile(KubernetesClusterAutoScalerProfileArgs.builder()
.balanceSimilarNodeGroups(false)
.emptyBulkDeleteMax("string")
.expander("string")
.maxGracefulTerminationSec("string")
.maxNodeProvisioningTime("string")
.maxUnreadyNodes(0)
.maxUnreadyPercentage(0.0)
.newPodScaleUpDelay("string")
.scaleDownDelayAfterAdd("string")
.scaleDownDelayAfterDelete("string")
.scaleDownDelayAfterFailure("string")
.scaleDownUnneeded("string")
.scaleDownUnready("string")
.scaleDownUtilizationThreshold("string")
.scanInterval("string")
.skipNodesWithLocalStorage(false)
.skipNodesWithSystemPods(false)
.build())
.aciConnectorLinux(KubernetesClusterAciConnectorLinuxArgs.builder()
.subnetName("string")
.build())
.enablePodSecurityPolicy(false)
.name("string")
.networkProfile(KubernetesClusterNetworkProfileArgs.builder()
.networkPlugin("string")
.dnsServiceIp("string")
.dockerBridgeCidr("string")
.loadBalancerProfile(KubernetesClusterNetworkProfileLoadBalancerProfileArgs.builder()
.effectiveOutboundIps("string")
.idleTimeoutInMinutes(0)
.managedOutboundIpCount(0)
.outboundIpAddressIds("string")
.outboundIpPrefixIds("string")
.outboundPortsAllocated(0)
.build())
.loadBalancerSku("string")
.natGatewayProfile(KubernetesClusterNetworkProfileNatGatewayProfileArgs.builder()
.effectiveOutboundIps("string")
.idleTimeoutInMinutes(0)
.managedOutboundIpCount(0)
.build())
.networkMode("string")
.networkPolicy("string")
.outboundType("string")
.podCidr("string")
.serviceCidr("string")
.build())
.nodeResourceGroup("string")
.omsAgent(KubernetesClusterOmsAgentArgs.builder()
.logAnalyticsWorkspaceId("string")
.omsAgentIdentities(KubernetesClusterOmsAgentOmsAgentIdentityArgs.builder()
.clientId("string")
.objectId("string")
.userAssignedIdentityId("string")
.build())
.build())
.openServiceMeshEnabled(false)
.privateClusterEnabled(false)
.privateClusterPublicFqdnEnabled(false)
.privateDnsZoneId("string")
.publicNetworkAccessEnabled(false)
.roleBasedAccessControlEnabled(false)
.servicePrincipal(KubernetesClusterServicePrincipalArgs.builder()
.clientId("string")
.clientSecret("string")
.build())
.skuTier("string")
.tags(Map.of("string", "string"))
.windowsProfile(KubernetesClusterWindowsProfileArgs.builder()
.adminUsername("string")
.adminPassword("string")
.license("string")
.build())
.build());
kubernetes_cluster_resource = azure.containerservice.KubernetesCluster("kubernetesClusterResource",
default_node_pool={
"name": "string",
"vm_size": "string",
"node_public_ip_prefix_id": "string",
"upgrade_settings": {
"max_surge": "string",
},
"fips_enabled": False,
"kubelet_config": {
"allowed_unsafe_sysctls": ["string"],
"container_log_max_line": 0,
"container_log_max_size_mb": 0,
"cpu_cfs_quota_enabled": False,
"cpu_cfs_quota_period": "string",
"cpu_manager_policy": "string",
"image_gc_high_threshold": 0,
"image_gc_low_threshold": 0,
"pod_max_pid": 0,
"topology_manager_policy": "string",
},
"kubelet_disk_type": "string",
"linux_os_config": {
"swap_file_size_mb": 0,
"sysctl_config": {
"fs_aio_max_nr": 0,
"fs_file_max": 0,
"fs_inotify_max_user_watches": 0,
"fs_nr_open": 0,
"kernel_threads_max": 0,
"net_core_netdev_max_backlog": 0,
"net_core_optmem_max": 0,
"net_core_rmem_default": 0,
"net_core_rmem_max": 0,
"net_core_somaxconn": 0,
"net_core_wmem_default": 0,
"net_core_wmem_max": 0,
"net_ipv4_ip_local_port_range_max": 0,
"net_ipv4_ip_local_port_range_min": 0,
"net_ipv4_neigh_default_gc_thresh1": 0,
"net_ipv4_neigh_default_gc_thresh2": 0,
"net_ipv4_neigh_default_gc_thresh3": 0,
"net_ipv4_tcp_fin_timeout": 0,
"net_ipv4_tcp_keepalive_intvl": 0,
"net_ipv4_tcp_keepalive_probes": 0,
"net_ipv4_tcp_keepalive_time": 0,
"net_ipv4_tcp_max_syn_backlog": 0,
"net_ipv4_tcp_max_tw_buckets": 0,
"net_ipv4_tcp_tw_reuse": False,
"net_netfilter_nf_conntrack_buckets": 0,
"net_netfilter_nf_conntrack_max": 0,
"vm_max_map_count": 0,
"vm_swappiness": 0,
"vm_vfs_cache_pressure": 0,
},
"transparent_huge_page_defrag": "string",
"transparent_huge_page_enabled": "string",
},
"max_count": 0,
"max_pods": 0,
"min_count": 0,
"enable_host_encryption": False,
"node_count": 0,
"only_critical_addons_enabled": False,
"enable_node_public_ip": False,
"availability_zones": ["string"],
"node_labels": {
"string": "string",
},
"orchestrator_version": "string",
"os_disk_size_gb": 0,
"os_disk_type": "string",
"os_sku": "string",
"pod_subnet_id": "string",
"proximity_placement_group_id": "string",
"tags": {
"string": "string",
},
"type": "string",
"ultra_ssd_enabled": False,
"node_taints": ["string"],
"enable_auto_scaling": False,
"vnet_subnet_id": "string",
},
resource_group_name="string",
local_account_disabled=False,
location="string",
automatic_channel_upgrade="string",
azure_active_directory_role_based_access_control={
"admin_group_object_ids": ["string"],
"azure_rbac_enabled": False,
"client_app_id": "string",
"managed": False,
"server_app_id": "string",
"server_app_secret": "string",
"tenant_id": "string",
},
azure_policy_enabled=False,
api_server_authorized_ip_ranges=["string"],
disk_encryption_set_id="string",
dns_prefix="string",
dns_prefix_private_cluster="string",
maintenance_window={
"alloweds": [{
"day": "string",
"hours": [0],
}],
"not_alloweds": [{
"end": "string",
"start": "string",
}],
},
http_application_routing_enabled=False,
http_proxy_config={
"http_proxy": "string",
"https_proxy": "string",
"no_proxies": ["string"],
"trusted_ca": "string",
},
identity={
"type": "string",
"principal_id": "string",
"tenant_id": "string",
"user_assigned_identity_id": "string",
},
ingress_application_gateway={
"effective_gateway_id": "string",
"gateway_id": "string",
"gateway_name": "string",
"ingress_application_gateway_identities": [{
"client_id": "string",
"object_id": "string",
"user_assigned_identity_id": "string",
}],
"subnet_cidr": "string",
"subnet_id": "string",
},
key_vault_secrets_provider={
"secret_identities": [{
"client_id": "string",
"object_id": "string",
"user_assigned_identity_id": "string",
}],
"secret_rotation_enabled": False,
"secret_rotation_interval": "string",
},
kubelet_identities=[{
"client_id": "string",
"object_id": "string",
"user_assigned_identity_id": "string",
}],
kubernetes_version="string",
linux_profile={
"admin_username": "string",
"ssh_key": {
"key_data": "string",
},
},
auto_scaler_profile={
"balance_similar_node_groups": False,
"empty_bulk_delete_max": "string",
"expander": "string",
"max_graceful_termination_sec": "string",
"max_node_provisioning_time": "string",
"max_unready_nodes": 0,
"max_unready_percentage": 0,
"new_pod_scale_up_delay": "string",
"scale_down_delay_after_add": "string",
"scale_down_delay_after_delete": "string",
"scale_down_delay_after_failure": "string",
"scale_down_unneeded": "string",
"scale_down_unready": "string",
"scale_down_utilization_threshold": "string",
"scan_interval": "string",
"skip_nodes_with_local_storage": False,
"skip_nodes_with_system_pods": False,
},
aci_connector_linux={
"subnet_name": "string",
},
enable_pod_security_policy=False,
name="string",
network_profile={
"network_plugin": "string",
"dns_service_ip": "string",
"docker_bridge_cidr": "string",
"load_balancer_profile": {
"effective_outbound_ips": ["string"],
"idle_timeout_in_minutes": 0,
"managed_outbound_ip_count": 0,
"outbound_ip_address_ids": ["string"],
"outbound_ip_prefix_ids": ["string"],
"outbound_ports_allocated": 0,
},
"load_balancer_sku": "string",
"nat_gateway_profile": {
"effective_outbound_ips": ["string"],
"idle_timeout_in_minutes": 0,
"managed_outbound_ip_count": 0,
},
"network_mode": "string",
"network_policy": "string",
"outbound_type": "string",
"pod_cidr": "string",
"service_cidr": "string",
},
node_resource_group="string",
oms_agent={
"log_analytics_workspace_id": "string",
"oms_agent_identities": [{
"client_id": "string",
"object_id": "string",
"user_assigned_identity_id": "string",
}],
},
open_service_mesh_enabled=False,
private_cluster_enabled=False,
private_cluster_public_fqdn_enabled=False,
private_dns_zone_id="string",
public_network_access_enabled=False,
role_based_access_control_enabled=False,
service_principal={
"client_id": "string",
"client_secret": "string",
},
sku_tier="string",
tags={
"string": "string",
},
windows_profile={
"admin_username": "string",
"admin_password": "string",
"license": "string",
})
const kubernetesClusterResource = new azure.containerservice.KubernetesCluster("kubernetesClusterResource", {
defaultNodePool: {
name: "string",
vmSize: "string",
nodePublicIpPrefixId: "string",
upgradeSettings: {
maxSurge: "string",
},
fipsEnabled: false,
kubeletConfig: {
allowedUnsafeSysctls: ["string"],
containerLogMaxLine: 0,
containerLogMaxSizeMb: 0,
cpuCfsQuotaEnabled: false,
cpuCfsQuotaPeriod: "string",
cpuManagerPolicy: "string",
imageGcHighThreshold: 0,
imageGcLowThreshold: 0,
podMaxPid: 0,
topologyManagerPolicy: "string",
},
kubeletDiskType: "string",
linuxOsConfig: {
swapFileSizeMb: 0,
sysctlConfig: {
fsAioMaxNr: 0,
fsFileMax: 0,
fsInotifyMaxUserWatches: 0,
fsNrOpen: 0,
kernelThreadsMax: 0,
netCoreNetdevMaxBacklog: 0,
netCoreOptmemMax: 0,
netCoreRmemDefault: 0,
netCoreRmemMax: 0,
netCoreSomaxconn: 0,
netCoreWmemDefault: 0,
netCoreWmemMax: 0,
netIpv4IpLocalPortRangeMax: 0,
netIpv4IpLocalPortRangeMin: 0,
netIpv4NeighDefaultGcThresh1: 0,
netIpv4NeighDefaultGcThresh2: 0,
netIpv4NeighDefaultGcThresh3: 0,
netIpv4TcpFinTimeout: 0,
netIpv4TcpKeepaliveIntvl: 0,
netIpv4TcpKeepaliveProbes: 0,
netIpv4TcpKeepaliveTime: 0,
netIpv4TcpMaxSynBacklog: 0,
netIpv4TcpMaxTwBuckets: 0,
netIpv4TcpTwReuse: false,
netNetfilterNfConntrackBuckets: 0,
netNetfilterNfConntrackMax: 0,
vmMaxMapCount: 0,
vmSwappiness: 0,
vmVfsCachePressure: 0,
},
transparentHugePageDefrag: "string",
transparentHugePageEnabled: "string",
},
maxCount: 0,
maxPods: 0,
minCount: 0,
enableHostEncryption: false,
nodeCount: 0,
onlyCriticalAddonsEnabled: false,
enableNodePublicIp: false,
availabilityZones: ["string"],
nodeLabels: {
string: "string",
},
orchestratorVersion: "string",
osDiskSizeGb: 0,
osDiskType: "string",
osSku: "string",
podSubnetId: "string",
proximityPlacementGroupId: "string",
tags: {
string: "string",
},
type: "string",
ultraSsdEnabled: false,
nodeTaints: ["string"],
enableAutoScaling: false,
vnetSubnetId: "string",
},
resourceGroupName: "string",
localAccountDisabled: false,
location: "string",
automaticChannelUpgrade: "string",
azureActiveDirectoryRoleBasedAccessControl: {
adminGroupObjectIds: ["string"],
azureRbacEnabled: false,
clientAppId: "string",
managed: false,
serverAppId: "string",
serverAppSecret: "string",
tenantId: "string",
},
azurePolicyEnabled: false,
apiServerAuthorizedIpRanges: ["string"],
diskEncryptionSetId: "string",
dnsPrefix: "string",
dnsPrefixPrivateCluster: "string",
maintenanceWindow: {
alloweds: [{
day: "string",
hours: [0],
}],
notAlloweds: [{
end: "string",
start: "string",
}],
},
httpApplicationRoutingEnabled: false,
httpProxyConfig: {
httpProxy: "string",
httpsProxy: "string",
noProxies: ["string"],
trustedCa: "string",
},
identity: {
type: "string",
principalId: "string",
tenantId: "string",
userAssignedIdentityId: "string",
},
ingressApplicationGateway: {
effectiveGatewayId: "string",
gatewayId: "string",
gatewayName: "string",
ingressApplicationGatewayIdentities: [{
clientId: "string",
objectId: "string",
userAssignedIdentityId: "string",
}],
subnetCidr: "string",
subnetId: "string",
},
keyVaultSecretsProvider: {
secretIdentities: [{
clientId: "string",
objectId: "string",
userAssignedIdentityId: "string",
}],
secretRotationEnabled: false,
secretRotationInterval: "string",
},
kubeletIdentities: [{
clientId: "string",
objectId: "string",
userAssignedIdentityId: "string",
}],
kubernetesVersion: "string",
linuxProfile: {
adminUsername: "string",
sshKey: {
keyData: "string",
},
},
autoScalerProfile: {
balanceSimilarNodeGroups: false,
emptyBulkDeleteMax: "string",
expander: "string",
maxGracefulTerminationSec: "string",
maxNodeProvisioningTime: "string",
maxUnreadyNodes: 0,
maxUnreadyPercentage: 0,
newPodScaleUpDelay: "string",
scaleDownDelayAfterAdd: "string",
scaleDownDelayAfterDelete: "string",
scaleDownDelayAfterFailure: "string",
scaleDownUnneeded: "string",
scaleDownUnready: "string",
scaleDownUtilizationThreshold: "string",
scanInterval: "string",
skipNodesWithLocalStorage: false,
skipNodesWithSystemPods: false,
},
aciConnectorLinux: {
subnetName: "string",
},
enablePodSecurityPolicy: false,
name: "string",
networkProfile: {
networkPlugin: "string",
dnsServiceIp: "string",
dockerBridgeCidr: "string",
loadBalancerProfile: {
effectiveOutboundIps: ["string"],
idleTimeoutInMinutes: 0,
managedOutboundIpCount: 0,
outboundIpAddressIds: ["string"],
outboundIpPrefixIds: ["string"],
outboundPortsAllocated: 0,
},
loadBalancerSku: "string",
natGatewayProfile: {
effectiveOutboundIps: ["string"],
idleTimeoutInMinutes: 0,
managedOutboundIpCount: 0,
},
networkMode: "string",
networkPolicy: "string",
outboundType: "string",
podCidr: "string",
serviceCidr: "string",
},
nodeResourceGroup: "string",
omsAgent: {
logAnalyticsWorkspaceId: "string",
omsAgentIdentities: [{
clientId: "string",
objectId: "string",
userAssignedIdentityId: "string",
}],
},
openServiceMeshEnabled: false,
privateClusterEnabled: false,
privateClusterPublicFqdnEnabled: false,
privateDnsZoneId: "string",
publicNetworkAccessEnabled: false,
roleBasedAccessControlEnabled: false,
servicePrincipal: {
clientId: "string",
clientSecret: "string",
},
skuTier: "string",
tags: {
string: "string",
},
windowsProfile: {
adminUsername: "string",
adminPassword: "string",
license: "string",
},
});
type: azure:containerservice:KubernetesCluster
properties:
aciConnectorLinux:
subnetName: string
apiServerAuthorizedIpRanges:
- string
autoScalerProfile:
balanceSimilarNodeGroups: false
emptyBulkDeleteMax: string
expander: string
maxGracefulTerminationSec: string
maxNodeProvisioningTime: string
maxUnreadyNodes: 0
maxUnreadyPercentage: 0
newPodScaleUpDelay: string
scaleDownDelayAfterAdd: string
scaleDownDelayAfterDelete: string
scaleDownDelayAfterFailure: string
scaleDownUnneeded: string
scaleDownUnready: string
scaleDownUtilizationThreshold: string
scanInterval: string
skipNodesWithLocalStorage: false
skipNodesWithSystemPods: false
automaticChannelUpgrade: string
azureActiveDirectoryRoleBasedAccessControl:
adminGroupObjectIds:
- string
azureRbacEnabled: false
clientAppId: string
managed: false
serverAppId: string
serverAppSecret: string
tenantId: string
azurePolicyEnabled: false
defaultNodePool:
availabilityZones:
- string
enableAutoScaling: false
enableHostEncryption: false
enableNodePublicIp: false
fipsEnabled: false
kubeletConfig:
allowedUnsafeSysctls:
- string
containerLogMaxLine: 0
containerLogMaxSizeMb: 0
cpuCfsQuotaEnabled: false
cpuCfsQuotaPeriod: string
cpuManagerPolicy: string
imageGcHighThreshold: 0
imageGcLowThreshold: 0
podMaxPid: 0
topologyManagerPolicy: string
kubeletDiskType: string
linuxOsConfig:
swapFileSizeMb: 0
sysctlConfig:
fsAioMaxNr: 0
fsFileMax: 0
fsInotifyMaxUserWatches: 0
fsNrOpen: 0
kernelThreadsMax: 0
netCoreNetdevMaxBacklog: 0
netCoreOptmemMax: 0
netCoreRmemDefault: 0
netCoreRmemMax: 0
netCoreSomaxconn: 0
netCoreWmemDefault: 0
netCoreWmemMax: 0
netIpv4IpLocalPortRangeMax: 0
netIpv4IpLocalPortRangeMin: 0
netIpv4NeighDefaultGcThresh1: 0
netIpv4NeighDefaultGcThresh2: 0
netIpv4NeighDefaultGcThresh3: 0
netIpv4TcpFinTimeout: 0
netIpv4TcpKeepaliveIntvl: 0
netIpv4TcpKeepaliveProbes: 0
netIpv4TcpKeepaliveTime: 0
netIpv4TcpMaxSynBacklog: 0
netIpv4TcpMaxTwBuckets: 0
netIpv4TcpTwReuse: false
netNetfilterNfConntrackBuckets: 0
netNetfilterNfConntrackMax: 0
vmMaxMapCount: 0
vmSwappiness: 0
vmVfsCachePressure: 0
transparentHugePageDefrag: string
transparentHugePageEnabled: string
maxCount: 0
maxPods: 0
minCount: 0
name: string
nodeCount: 0
nodeLabels:
string: string
nodePublicIpPrefixId: string
nodeTaints:
- string
onlyCriticalAddonsEnabled: false
orchestratorVersion: string
osDiskSizeGb: 0
osDiskType: string
osSku: string
podSubnetId: string
proximityPlacementGroupId: string
tags:
string: string
type: string
ultraSsdEnabled: false
upgradeSettings:
maxSurge: string
vmSize: string
vnetSubnetId: string
diskEncryptionSetId: string
dnsPrefix: string
dnsPrefixPrivateCluster: string
enablePodSecurityPolicy: false
httpApplicationRoutingEnabled: false
httpProxyConfig:
httpProxy: string
httpsProxy: string
noProxies:
- string
trustedCa: string
identity:
principalId: string
tenantId: string
type: string
userAssignedIdentityId: string
ingressApplicationGateway:
effectiveGatewayId: string
gatewayId: string
gatewayName: string
ingressApplicationGatewayIdentities:
- clientId: string
objectId: string
userAssignedIdentityId: string
subnetCidr: string
subnetId: string
keyVaultSecretsProvider:
secretIdentities:
- clientId: string
objectId: string
userAssignedIdentityId: string
secretRotationEnabled: false
secretRotationInterval: string
kubeletIdentities:
- clientId: string
objectId: string
userAssignedIdentityId: string
kubernetesVersion: string
linuxProfile:
adminUsername: string
sshKey:
keyData: string
localAccountDisabled: false
location: string
maintenanceWindow:
alloweds:
- day: string
hours:
- 0
notAlloweds:
- end: string
start: string
name: string
networkProfile:
dnsServiceIp: string
dockerBridgeCidr: string
loadBalancerProfile:
effectiveOutboundIps:
- string
idleTimeoutInMinutes: 0
managedOutboundIpCount: 0
outboundIpAddressIds:
- string
outboundIpPrefixIds:
- string
outboundPortsAllocated: 0
loadBalancerSku: string
natGatewayProfile:
effectiveOutboundIps:
- string
idleTimeoutInMinutes: 0
managedOutboundIpCount: 0
networkMode: string
networkPlugin: string
networkPolicy: string
outboundType: string
podCidr: string
serviceCidr: string
nodeResourceGroup: string
omsAgent:
logAnalyticsWorkspaceId: string
omsAgentIdentities:
- clientId: string
objectId: string
userAssignedIdentityId: string
openServiceMeshEnabled: false
privateClusterEnabled: false
privateClusterPublicFqdnEnabled: false
privateDnsZoneId: string
publicNetworkAccessEnabled: false
resourceGroupName: string
roleBasedAccessControlEnabled: false
servicePrincipal:
clientId: string
clientSecret: string
skuTier: string
tags:
string: string
windowsProfile:
adminPassword: string
adminUsername: string
license: string
KubernetesCluster Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The KubernetesCluster resource accepts the following input properties:
- Default
Node KubernetesPool Cluster Default Node Pool - A
default_node_poolblock as defined below. - Resource
Group stringName - Specifies the Resource Group where the Managed Kubernetes Cluster should exist. Changing this forces a new resource to be created.
- Aci
Connector KubernetesLinux Cluster Aci Connector Linux - A
aci_connector_linuxblock as defined below. For more details, please visit Create and configure an AKS cluster to use virtual nodes. - Addon
Profile KubernetesCluster Addon Profile - An
addon_profileblock as defined below. - List<string>
- The IP ranges to allow for incoming traffic to the server nodes.
- Auto
Scaler KubernetesProfile Cluster Auto Scaler Profile - A
auto_scaler_profileblock as defined below. - Automatic
Channel stringUpgrade - The upgrade channel for this Kubernetes Cluster. Possible values are
patch,rapid,node-imageandstable. Omitting this field sets this value tonone. - Azure
Active KubernetesDirectory Role Based Access Control Cluster Azure Active Directory Role Based Access Control - A
azure_active_directory_role_based_access_controlblock as defined below.
- A
- Azure
Policy boolEnabled - Should the Azure Policy Add-On be enabled? For more details please visit Understand Azure Policy for Azure Kubernetes Service
- Disk
Encryption stringSet Id - The ID of the Disk Encryption Set which should be used for the Nodes and Volumes. More information can be found in the documentation.
- Dns
Prefix string - DNS prefix specified when creating the managed cluster. Changing this forces a new resource to be created.
- Dns
Prefix stringPrivate Cluster - Specifies the DNS prefix to use with private clusters. Changing this forces a new resource to be created.
- Enable
Pod boolSecurity Policy - Http
Application boolRouting Enabled - Should HTTP Application Routing be enabled?
- Http
Proxy KubernetesConfig Cluster Http Proxy Config - A
http_proxy_configblock as defined below. - Identity
Kubernetes
Cluster Identity - An
identityblock as defined below. One of eitheridentityorservice_principalmust be specified. - Ingress
Application KubernetesGateway Cluster Ingress Application Gateway - A
ingress_application_gatewayblock as defined below. - Key
Vault KubernetesSecrets Provider Cluster Key Vault Secrets Provider - A
key_vault_secrets_providerblock as defined below. For more details, please visit Azure Keyvault Secrets Provider for AKS. - Kubelet
Identities List<KubernetesCluster Kubelet Identity> - A
kubelet_identityblock as defined below. Changing this forces a new resource to be created. - Kubernetes
Version string - Version of Kubernetes specified when creating the AKS managed cluster. If not specified, the latest recommended version will be used at provisioning time (but won't auto-upgrade).
- Linux
Profile KubernetesCluster Linux Profile - A
linux_profileblock as defined below. - Local
Account boolDisabled - If
truelocal accounts will be disabled. Defaults tofalse. See the documentation for more information.
- If
- Location string
- The location where the Managed Kubernetes Cluster should be created. Changing this forces a new resource to be created.
- Maintenance
Window KubernetesCluster Maintenance Window - A
maintenance_windowblock as defined below. - Name string
- The name of the Managed Kubernetes Cluster to create. Changing this forces a new resource to be created.
- Network
Profile KubernetesCluster Network Profile - A
network_profileblock as defined below. - Node
Resource stringGroup - The name of the Resource Group where the Kubernetes Nodes should exist. Changing this forces a new resource to be created.
- Oms
Agent KubernetesCluster Oms Agent - A
oms_agentblock as defined below. - Open
Service boolMesh Enabled - Is Open Service Mesh enabled? For more details, please visit Open Service Mesh for AKS.
- Private
Cluster boolEnabled - Should this Kubernetes Cluster have its API server only exposed on internal IP addresses? This provides a Private IP Address for the Kubernetes API on the Virtual Network where the Kubernetes Cluster is located. Defaults to
false. Changing this forces a new resource to be created. - Private
Cluster boolPublic Fqdn Enabled - Specifies whether a Public FQDN for this Private Cluster should be added. Defaults to
false. - Private
Dns stringZone Id - Either the ID of Private DNS Zone which should be delegated to this Cluster,
Systemto have AKS manage this orNone. In case ofNoneyou will need to bring your own DNS server and set up resolving, otherwise cluster will have issues after provisioning. Changing this forces a new resource to be created. - Private
Link boolEnabled - Public
Network boolAccess Enabled - Role
Based KubernetesAccess Control Cluster Role Based Access Control - Role
Based boolAccess Control Enabled - Whether Role Based Access Control for the Kubernetes Cluster should be enabled. Defaults to
true. Changing this forces a new resource to be created. - Service
Principal KubernetesCluster Service Principal - A
service_principalblock as documented below. One of eitheridentityorservice_principalmust be specified. - Sku
Tier string - The SKU Tier that should be used for this Kubernetes Cluster. Possible values are
FreeandPaid(which includes the Uptime SLA). Defaults toFree. - Dictionary<string, string>
- A mapping of tags to assign to the resource.
- Windows
Profile KubernetesCluster Windows Profile - A
windows_profileblock as defined below.
- Default
Node KubernetesPool Cluster Default Node Pool Args - A
default_node_poolblock as defined below. - Resource
Group stringName - Specifies the Resource Group where the Managed Kubernetes Cluster should exist. Changing this forces a new resource to be created.
- Aci
Connector KubernetesLinux Cluster Aci Connector Linux Args - A
aci_connector_linuxblock as defined below. For more details, please visit Create and configure an AKS cluster to use virtual nodes. - Addon
Profile KubernetesCluster Addon Profile Args - An
addon_profileblock as defined below. - []string
- The IP ranges to allow for incoming traffic to the server nodes.
- Auto
Scaler KubernetesProfile Cluster Auto Scaler Profile Args - A
auto_scaler_profileblock as defined below. - Automatic
Channel stringUpgrade - The upgrade channel for this Kubernetes Cluster. Possible values are
patch,rapid,node-imageandstable. Omitting this field sets this value tonone. - Azure
Active KubernetesDirectory Role Based Access Control Cluster Azure Active Directory Role Based Access Control Args - A
azure_active_directory_role_based_access_controlblock as defined below.
- A
- Azure
Policy boolEnabled - Should the Azure Policy Add-On be enabled? For more details please visit Understand Azure Policy for Azure Kubernetes Service
- Disk
Encryption stringSet Id - The ID of the Disk Encryption Set which should be used for the Nodes and Volumes. More information can be found in the documentation.
- Dns
Prefix string - DNS prefix specified when creating the managed cluster. Changing this forces a new resource to be created.
- Dns
Prefix stringPrivate Cluster - Specifies the DNS prefix to use with private clusters. Changing this forces a new resource to be created.
- Enable
Pod boolSecurity Policy - Http
Application boolRouting Enabled - Should HTTP Application Routing be enabled?
- Http
Proxy KubernetesConfig Cluster Http Proxy Config Args - A
http_proxy_configblock as defined below. - Identity
Kubernetes
Cluster Identity Args - An
identityblock as defined below. One of eitheridentityorservice_principalmust be specified. - Ingress
Application KubernetesGateway Cluster Ingress Application Gateway Args - A
ingress_application_gatewayblock as defined below. - Key
Vault KubernetesSecrets Provider Cluster Key Vault Secrets Provider Args - A
key_vault_secrets_providerblock as defined below. For more details, please visit Azure Keyvault Secrets Provider for AKS. - Kubelet
Identities []KubernetesCluster Kubelet Identity Args - A
kubelet_identityblock as defined below. Changing this forces a new resource to be created. - Kubernetes
Version string - Version of Kubernetes specified when creating the AKS managed cluster. If not specified, the latest recommended version will be used at provisioning time (but won't auto-upgrade).
- Linux
Profile KubernetesCluster Linux Profile Args - A
linux_profileblock as defined below. - Local
Account boolDisabled - If
truelocal accounts will be disabled. Defaults tofalse. See the documentation for more information.
- If
- Location string
- The location where the Managed Kubernetes Cluster should be created. Changing this forces a new resource to be created.
- Maintenance
Window KubernetesCluster Maintenance Window Args - A
maintenance_windowblock as defined below. - Name string
- The name of the Managed Kubernetes Cluster to create. Changing this forces a new resource to be created.
- Network
Profile KubernetesCluster Network Profile Args - A
network_profileblock as defined below. - Node
Resource stringGroup - The name of the Resource Group where the Kubernetes Nodes should exist. Changing this forces a new resource to be created.
- Oms
Agent KubernetesCluster Oms Agent Args - A
oms_agentblock as defined below. - Open
Service boolMesh Enabled - Is Open Service Mesh enabled? For more details, please visit Open Service Mesh for AKS.
- Private
Cluster boolEnabled - Should this Kubernetes Cluster have its API server only exposed on internal IP addresses? This provides a Private IP Address for the Kubernetes API on the Virtual Network where the Kubernetes Cluster is located. Defaults to
false. Changing this forces a new resource to be created. - Private
Cluster boolPublic Fqdn Enabled - Specifies whether a Public FQDN for this Private Cluster should be added. Defaults to
false. - Private
Dns stringZone Id - Either the ID of Private DNS Zone which should be delegated to this Cluster,
Systemto have AKS manage this orNone. In case ofNoneyou will need to bring your own DNS server and set up resolving, otherwise cluster will have issues after provisioning. Changing this forces a new resource to be created. - Private
Link boolEnabled - Public
Network boolAccess Enabled - Role
Based KubernetesAccess Control Cluster Role Based Access Control Args - Role
Based boolAccess Control Enabled - Whether Role Based Access Control for the Kubernetes Cluster should be enabled. Defaults to
true. Changing this forces a new resource to be created. - Service
Principal KubernetesCluster Service Principal Args - A
service_principalblock as documented below. One of eitheridentityorservice_principalmust be specified. - Sku
Tier string - The SKU Tier that should be used for this Kubernetes Cluster. Possible values are
FreeandPaid(which includes the Uptime SLA). Defaults toFree. - map[string]string
- A mapping of tags to assign to the resource.
- Windows
Profile KubernetesCluster Windows Profile Args - A
windows_profileblock as defined below.
- default
Node KubernetesPool Cluster Default Node Pool - A
default_node_poolblock as defined below. - resource
Group StringName - Specifies the Resource Group where the Managed Kubernetes Cluster should exist. Changing this forces a new resource to be created.
- aci
Connector KubernetesLinux Cluster Aci Connector Linux - A
aci_connector_linuxblock as defined below. For more details, please visit Create and configure an AKS cluster to use virtual nodes. - addon
Profile KubernetesCluster Addon Profile - An
addon_profileblock as defined below. - List<String>
- The IP ranges to allow for incoming traffic to the server nodes.
- auto
Scaler KubernetesProfile Cluster Auto Scaler Profile - A
auto_scaler_profileblock as defined below. - automatic
Channel StringUpgrade - The upgrade channel for this Kubernetes Cluster. Possible values are
patch,rapid,node-imageandstable. Omitting this field sets this value tonone. - azure
Active KubernetesDirectory Role Based Access Control Cluster Azure Active Directory Role Based Access Control - A
azure_active_directory_role_based_access_controlblock as defined below.
- A
- azure
Policy BooleanEnabled - Should the Azure Policy Add-On be enabled? For more details please visit Understand Azure Policy for Azure Kubernetes Service
- disk
Encryption StringSet Id - The ID of the Disk Encryption Set which should be used for the Nodes and Volumes. More information can be found in the documentation.
- dns
Prefix String - DNS prefix specified when creating the managed cluster. Changing this forces a new resource to be created.
- dns
Prefix StringPrivate Cluster - Specifies the DNS prefix to use with private clusters. Changing this forces a new resource to be created.
- enable
Pod BooleanSecurity Policy - http
Application BooleanRouting Enabled - Should HTTP Application Routing be enabled?
- http
Proxy KubernetesConfig Cluster Http Proxy Config - A
http_proxy_configblock as defined below. - identity
Kubernetes
Cluster Identity - An
identityblock as defined below. One of eitheridentityorservice_principalmust be specified. - ingress
Application KubernetesGateway Cluster Ingress Application Gateway - A
ingress_application_gatewayblock as defined below. - key
Vault KubernetesSecrets Provider Cluster Key Vault Secrets Provider - A
key_vault_secrets_providerblock as defined below. For more details, please visit Azure Keyvault Secrets Provider for AKS. - kubelet
Identities List<KubernetesCluster Kubelet Identity> - A
kubelet_identityblock as defined below. Changing this forces a new resource to be created. - kubernetes
Version String - Version of Kubernetes specified when creating the AKS managed cluster. If not specified, the latest recommended version will be used at provisioning time (but won't auto-upgrade).
- linux
Profile KubernetesCluster Linux Profile - A
linux_profileblock as defined below. - local
Account BooleanDisabled - If
truelocal accounts will be disabled. Defaults tofalse. See the documentation for more information.
- If
- location String
- The location where the Managed Kubernetes Cluster should be created. Changing this forces a new resource to be created.
- maintenance
Window KubernetesCluster Maintenance Window - A
maintenance_windowblock as defined below. - name String
- The name of the Managed Kubernetes Cluster to create. Changing this forces a new resource to be created.
- network
Profile KubernetesCluster Network Profile - A
network_profileblock as defined below. - node
Resource StringGroup - The name of the Resource Group where the Kubernetes Nodes should exist. Changing this forces a new resource to be created.
- oms
Agent KubernetesCluster Oms Agent - A
oms_agentblock as defined below. - open
Service BooleanMesh Enabled - Is Open Service Mesh enabled? For more details, please visit Open Service Mesh for AKS.
- private
Cluster BooleanEnabled - Should this Kubernetes Cluster have its API server only exposed on internal IP addresses? This provides a Private IP Address for the Kubernetes API on the Virtual Network where the Kubernetes Cluster is located. Defaults to
false. Changing this forces a new resource to be created. - private
Cluster BooleanPublic Fqdn Enabled - Specifies whether a Public FQDN for this Private Cluster should be added. Defaults to
false. - private
Dns StringZone Id - Either the ID of Private DNS Zone which should be delegated to this Cluster,
Systemto have AKS manage this orNone. In case ofNoneyou will need to bring your own DNS server and set up resolving, otherwise cluster will have issues after provisioning. Changing this forces a new resource to be created. - private
Link BooleanEnabled - public
Network BooleanAccess Enabled - role
Based KubernetesAccess Control Cluster Role Based Access Control - role
Based BooleanAccess Control Enabled - Whether Role Based Access Control for the Kubernetes Cluster should be enabled. Defaults to
true. Changing this forces a new resource to be created. - service
Principal KubernetesCluster Service Principal - A
service_principalblock as documented below. One of eitheridentityorservice_principalmust be specified. - sku
Tier String - The SKU Tier that should be used for this Kubernetes Cluster. Possible values are
FreeandPaid(which includes the Uptime SLA). Defaults toFree. - Map<String,String>
- A mapping of tags to assign to the resource.
- windows
Profile KubernetesCluster Windows Profile - A
windows_profileblock as defined below.
- default
Node KubernetesPool Cluster Default Node Pool - A
default_node_poolblock as defined below. - resource
Group stringName - Specifies the Resource Group where the Managed Kubernetes Cluster should exist. Changing this forces a new resource to be created.
- aci
Connector KubernetesLinux Cluster Aci Connector Linux - A
aci_connector_linuxblock as defined below. For more details, please visit Create and configure an AKS cluster to use virtual nodes. - addon
Profile KubernetesCluster Addon Profile - An
addon_profileblock as defined below. - string[]
- The IP ranges to allow for incoming traffic to the server nodes.
- auto
Scaler KubernetesProfile Cluster Auto Scaler Profile - A
auto_scaler_profileblock as defined below. - automatic
Channel stringUpgrade - The upgrade channel for this Kubernetes Cluster. Possible values are
patch,rapid,node-imageandstable. Omitting this field sets this value tonone. - azure
Active KubernetesDirectory Role Based Access Control Cluster Azure Active Directory Role Based Access Control - A
azure_active_directory_role_based_access_controlblock as defined below.
- A
- azure
Policy booleanEnabled - Should the Azure Policy Add-On be enabled? For more details please visit Understand Azure Policy for Azure Kubernetes Service
- disk
Encryption stringSet Id - The ID of the Disk Encryption Set which should be used for the Nodes and Volumes. More information can be found in the documentation.
- dns
Prefix string - DNS prefix specified when creating the managed cluster. Changing this forces a new resource to be created.
- dns
Prefix stringPrivate Cluster - Specifies the DNS prefix to use with private clusters. Changing this forces a new resource to be created.
- enable
Pod booleanSecurity Policy - http
Application booleanRouting Enabled - Should HTTP Application Routing be enabled?
- http
Proxy KubernetesConfig Cluster Http Proxy Config - A
http_proxy_configblock as defined below. - identity
Kubernetes
Cluster Identity - An
identityblock as defined below. One of eitheridentityorservice_principalmust be specified. - ingress
Application KubernetesGateway Cluster Ingress Application Gateway - A
ingress_application_gatewayblock as defined below. - key
Vault KubernetesSecrets Provider Cluster Key Vault Secrets Provider - A
key_vault_secrets_providerblock as defined below. For more details, please visit Azure Keyvault Secrets Provider for AKS. - kubelet
Identities KubernetesCluster Kubelet Identity[] - A
kubelet_identityblock as defined below. Changing this forces a new resource to be created. - kubernetes
Version string - Version of Kubernetes specified when creating the AKS managed cluster. If not specified, the latest recommended version will be used at provisioning time (but won't auto-upgrade).
- linux
Profile KubernetesCluster Linux Profile - A
linux_profileblock as defined below. - local
Account booleanDisabled - If
truelocal accounts will be disabled. Defaults tofalse. See the documentation for more information.
- If
- location string
- The location where the Managed Kubernetes Cluster should be created. Changing this forces a new resource to be created.
- maintenance
Window KubernetesCluster Maintenance Window - A
maintenance_windowblock as defined below. - name string
- The name of the Managed Kubernetes Cluster to create. Changing this forces a new resource to be created.
- network
Profile KubernetesCluster Network Profile - A
network_profileblock as defined below. - node
Resource stringGroup - The name of the Resource Group where the Kubernetes Nodes should exist. Changing this forces a new resource to be created.
- oms
Agent KubernetesCluster Oms Agent - A
oms_agentblock as defined below. - open
Service booleanMesh Enabled - Is Open Service Mesh enabled? For more details, please visit Open Service Mesh for AKS.
- private
Cluster booleanEnabled - Should this Kubernetes Cluster have its API server only exposed on internal IP addresses? This provides a Private IP Address for the Kubernetes API on the Virtual Network where the Kubernetes Cluster is located. Defaults to
false. Changing this forces a new resource to be created. - private
Cluster booleanPublic Fqdn Enabled - Specifies whether a Public FQDN for this Private Cluster should be added. Defaults to
false. - private
Dns stringZone Id - Either the ID of Private DNS Zone which should be delegated to this Cluster,
Systemto have AKS manage this orNone. In case ofNoneyou will need to bring your own DNS server and set up resolving, otherwise cluster will have issues after provisioning. Changing this forces a new resource to be created. - private
Link booleanEnabled - public
Network booleanAccess Enabled - role
Based KubernetesAccess Control Cluster Role Based Access Control - role
Based booleanAccess Control Enabled - Whether Role Based Access Control for the Kubernetes Cluster should be enabled. Defaults to
true. Changing this forces a new resource to be created. - service
Principal KubernetesCluster Service Principal - A
service_principalblock as documented below. One of eitheridentityorservice_principalmust be specified. - sku
Tier string - The SKU Tier that should be used for this Kubernetes Cluster. Possible values are
FreeandPaid(which includes the Uptime SLA). Defaults toFree. - {[key: string]: string}
- A mapping of tags to assign to the resource.
- windows
Profile KubernetesCluster Windows Profile - A
windows_profileblock as defined below.
- default_
node_ Kubernetespool Cluster Default Node Pool Args - A
default_node_poolblock as defined below. - resource_
group_ strname - Specifies the Resource Group where the Managed Kubernetes Cluster should exist. Changing this forces a new resource to be created.
- aci_
connector_ Kuberneteslinux Cluster Aci Connector Linux Args - A
aci_connector_linuxblock as defined below. For more details, please visit Create and configure an AKS cluster to use virtual nodes. - addon_
profile KubernetesCluster Addon Profile Args - An
addon_profileblock as defined below. - Sequence[str]
- The IP ranges to allow for incoming traffic to the server nodes.
- auto_
scaler_ Kubernetesprofile Cluster Auto Scaler Profile Args - A
auto_scaler_profileblock as defined below. - automatic_
channel_ strupgrade - The upgrade channel for this Kubernetes Cluster. Possible values are
patch,rapid,node-imageandstable. Omitting this field sets this value tonone. - azure_
active_ Kubernetesdirectory_ role_ based_ access_ control Cluster Azure Active Directory Role Based Access Control Args - A
azure_active_directory_role_based_access_controlblock as defined below.
- A
- azure_
policy_ boolenabled - Should the Azure Policy Add-On be enabled? For more details please visit Understand Azure Policy for Azure Kubernetes Service
- disk_
encryption_ strset_ id - The ID of the Disk Encryption Set which should be used for the Nodes and Volumes. More information can be found in the documentation.
- dns_
prefix str - DNS prefix specified when creating the managed cluster. Changing this forces a new resource to be created.
- dns_
prefix_ strprivate_ cluster - Specifies the DNS prefix to use with private clusters. Changing this forces a new resource to be created.
- enable_
pod_ boolsecurity_ policy - http_
application_ boolrouting_ enabled - Should HTTP Application Routing be enabled?
- http_
proxy_ Kubernetesconfig Cluster Http Proxy Config Args - A
http_proxy_configblock as defined below. - identity
Kubernetes
Cluster Identity Args - An
identityblock as defined below. One of eitheridentityorservice_principalmust be specified. - ingress_
application_ Kubernetesgateway Cluster Ingress Application Gateway Args - A
ingress_application_gatewayblock as defined below. - key_
vault_ Kubernetessecrets_ provider Cluster Key Vault Secrets Provider Args - A
key_vault_secrets_providerblock as defined below. For more details, please visit Azure Keyvault Secrets Provider for AKS. - kubelet_
identities Sequence[KubernetesCluster Kubelet Identity Args] - A
kubelet_identityblock as defined below. Changing this forces a new resource to be created. - kubernetes_
version str - Version of Kubernetes specified when creating the AKS managed cluster. If not specified, the latest recommended version will be used at provisioning time (but won't auto-upgrade).
- linux_
profile KubernetesCluster Linux Profile Args - A
linux_profileblock as defined below. - local_
account_ booldisabled - If
truelocal accounts will be disabled. Defaults tofalse. See the documentation for more information.
- If
- location str
- The location where the Managed Kubernetes Cluster should be created. Changing this forces a new resource to be created.
- maintenance_
window KubernetesCluster Maintenance Window Args - A
maintenance_windowblock as defined below. - name str
- The name of the Managed Kubernetes Cluster to create. Changing this forces a new resource to be created.
- network_
profile KubernetesCluster Network Profile Args - A
network_profileblock as defined below. - node_
resource_ strgroup - The name of the Resource Group where the Kubernetes Nodes should exist. Changing this forces a new resource to be created.
- oms_
agent KubernetesCluster Oms Agent Args - A
oms_agentblock as defined below. - open_
service_ boolmesh_ enabled - Is Open Service Mesh enabled? For more details, please visit Open Service Mesh for AKS.
- private_
cluster_ boolenabled - Should this Kubernetes Cluster have its API server only exposed on internal IP addresses? This provides a Private IP Address for the Kubernetes API on the Virtual Network where the Kubernetes Cluster is located. Defaults to
false. Changing this forces a new resource to be created. - private_
cluster_ boolpublic_ fqdn_ enabled - Specifies whether a Public FQDN for this Private Cluster should be added. Defaults to
false. - private_
dns_ strzone_ id - Either the ID of Private DNS Zone which should be delegated to this Cluster,
Systemto have AKS manage this orNone. In case ofNoneyou will need to bring your own DNS server and set up resolving, otherwise cluster will have issues after provisioning. Changing this forces a new resource to be created. - private_
link_ boolenabled - public_
network_ boolaccess_ enabled - role_
based_ Kubernetesaccess_ control Cluster Role Based Access Control Args - role_
based_ boolaccess_ control_ enabled - Whether Role Based Access Control for the Kubernetes Cluster should be enabled. Defaults to
true. Changing this forces a new resource to be created. - service_
principal KubernetesCluster Service Principal Args - A
service_principalblock as documented below. One of eitheridentityorservice_principalmust be specified. - sku_
tier str - The SKU Tier that should be used for this Kubernetes Cluster. Possible values are
FreeandPaid(which includes the Uptime SLA). Defaults toFree. - Mapping[str, str]
- A mapping of tags to assign to the resource.
- windows_
profile KubernetesCluster Windows Profile Args - A
windows_profileblock as defined below.
- default
Node Property MapPool - A
default_node_poolblock as defined below. - resource
Group StringName - Specifies the Resource Group where the Managed Kubernetes Cluster should exist. Changing this forces a new resource to be created.
- aci
Connector Property MapLinux - A
aci_connector_linuxblock as defined below. For more details, please visit Create and configure an AKS cluster to use virtual nodes. - addon
Profile Property Map - An
addon_profileblock as defined below. - List<String>
- The IP ranges to allow for incoming traffic to the server nodes.
- auto
Scaler Property MapProfile - A
auto_scaler_profileblock as defined below. - automatic
Channel StringUpgrade - The upgrade channel for this Kubernetes Cluster. Possible values are
patch,rapid,node-imageandstable. Omitting this field sets this value tonone. - azure
Active Property MapDirectory Role Based Access Control - A
azure_active_directory_role_based_access_controlblock as defined below.
- A
- azure
Policy BooleanEnabled - Should the Azure Policy Add-On be enabled? For more details please visit Understand Azure Policy for Azure Kubernetes Service
- disk
Encryption StringSet Id - The ID of the Disk Encryption Set which should be used for the Nodes and Volumes. More information can be found in the documentation.
- dns
Prefix String - DNS prefix specified when creating the managed cluster. Changing this forces a new resource to be created.
- dns
Prefix StringPrivate Cluster - Specifies the DNS prefix to use with private clusters. Changing this forces a new resource to be created.
- enable
Pod BooleanSecurity Policy - http
Application BooleanRouting Enabled - Should HTTP Application Routing be enabled?
- http
Proxy Property MapConfig - A
http_proxy_configblock as defined below. - identity Property Map
- An
identityblock as defined below. One of eitheridentityorservice_principalmust be specified. - ingress
Application Property MapGateway - A
ingress_application_gatewayblock as defined below. - key
Vault Property MapSecrets Provider - A
key_vault_secrets_providerblock as defined below. For more details, please visit Azure Keyvault Secrets Provider for AKS. - kubelet
Identities List<Property Map> - A
kubelet_identityblock as defined below. Changing this forces a new resource to be created. - kubernetes
Version String - Version of Kubernetes specified when creating the AKS managed cluster. If not specified, the latest recommended version will be used at provisioning time (but won't auto-upgrade).
- linux
Profile Property Map - A
linux_profileblock as defined below. - local
Account BooleanDisabled - If
truelocal accounts will be disabled. Defaults tofalse. See the documentation for more information.
- If
- location String
- The location where the Managed Kubernetes Cluster should be created. Changing this forces a new resource to be created.
- maintenance
Window Property Map - A
maintenance_windowblock as defined below. - name String
- The name of the Managed Kubernetes Cluster to create. Changing this forces a new resource to be created.
- network
Profile Property Map - A
network_profileblock as defined below. - node
Resource StringGroup - The name of the Resource Group where the Kubernetes Nodes should exist. Changing this forces a new resource to be created.
- oms
Agent Property Map - A
oms_agentblock as defined below. - open
Service BooleanMesh Enabled - Is Open Service Mesh enabled? For more details, please visit Open Service Mesh for AKS.
- private
Cluster BooleanEnabled - Should this Kubernetes Cluster have its API server only exposed on internal IP addresses? This provides a Private IP Address for the Kubernetes API on the Virtual Network where the Kubernetes Cluster is located. Defaults to
false. Changing this forces a new resource to be created. - private
Cluster BooleanPublic Fqdn Enabled - Specifies whether a Public FQDN for this Private Cluster should be added. Defaults to
false. - private
Dns StringZone Id - Either the ID of Private DNS Zone which should be delegated to this Cluster,
Systemto have AKS manage this orNone. In case ofNoneyou will need to bring your own DNS server and set up resolving, otherwise cluster will have issues after provisioning. Changing this forces a new resource to be created. - private
Link BooleanEnabled - public
Network BooleanAccess Enabled - role
Based Property MapAccess Control - role
Based BooleanAccess Control Enabled - Whether Role Based Access Control for the Kubernetes Cluster should be enabled. Defaults to
true. Changing this forces a new resource to be created. - service
Principal Property Map - A
service_principalblock as documented below. One of eitheridentityorservice_principalmust be specified. - sku
Tier String - The SKU Tier that should be used for this Kubernetes Cluster. Possible values are
FreeandPaid(which includes the Uptime SLA). Defaults toFree. - Map<String>
- A mapping of tags to assign to the resource.
- windows
Profile Property Map - A
windows_profileblock as defined below.
Outputs
All input properties are implicitly available as output properties. Additionally, the KubernetesCluster resource produces the following output properties:
- Fqdn string
- The FQDN of the Azure Kubernetes Managed Cluster.
- Http
Application stringRouting Zone Name - The Zone Name of the HTTP Application Routing.
- Id string
- The provider-assigned unique ID for this managed resource.
- Kube
Admin stringConfig Raw - Raw Kubernetes config for the admin account to be used by kubectl and other compatible tools. This is only available when Role Based Access Control with Azure Active Directory is enabled and local accounts enabled.
- Kube
Admin List<KubernetesConfigs Cluster Kube Admin Config> - A
kube_admin_configblock as defined below. This is only available when Role Based Access Control with Azure Active Directory is enabled and local accounts enabled. - Kube
Config stringRaw - Raw Kubernetes config to be used by kubectl and other compatible tools.
- Kube
Configs List<KubernetesCluster Kube Config> - A
kube_configblock as defined below. - Portal
Fqdn string - The FQDN for the Azure Portal resources when private link has been enabled, which is only resolvable inside the Virtual Network used by the Kubernetes Cluster.
- Private
Fqdn string - The FQDN for the Kubernetes Cluster when private link has been enabled, which is only resolvable inside the Virtual Network used by the Kubernetes Cluster.
- Fqdn string
- The FQDN of the Azure Kubernetes Managed Cluster.
- Http
Application stringRouting Zone Name - The Zone Name of the HTTP Application Routing.
- Id string
- The provider-assigned unique ID for this managed resource.
- Kube
Admin stringConfig Raw - Raw Kubernetes config for the admin account to be used by kubectl and other compatible tools. This is only available when Role Based Access Control with Azure Active Directory is enabled and local accounts enabled.
- Kube
Admin []KubernetesConfigs Cluster Kube Admin Config - A
kube_admin_configblock as defined below. This is only available when Role Based Access Control with Azure Active Directory is enabled and local accounts enabled. - Kube
Config stringRaw - Raw Kubernetes config to be used by kubectl and other compatible tools.
- Kube
Configs []KubernetesCluster Kube Config - A
kube_configblock as defined below. - Portal
Fqdn string - The FQDN for the Azure Portal resources when private link has been enabled, which is only resolvable inside the Virtual Network used by the Kubernetes Cluster.
- Private
Fqdn string - The FQDN for the Kubernetes Cluster when private link has been enabled, which is only resolvable inside the Virtual Network used by the Kubernetes Cluster.
- fqdn String
- The FQDN of the Azure Kubernetes Managed Cluster.
- http
Application StringRouting Zone Name - The Zone Name of the HTTP Application Routing.
- id String
- The provider-assigned unique ID for this managed resource.
- kube
Admin StringConfig Raw - Raw Kubernetes config for the admin account to be used by kubectl and other compatible tools. This is only available when Role Based Access Control with Azure Active Directory is enabled and local accounts enabled.
- kube
Admin List<KubernetesConfigs Cluster Kube Admin Config> - A
kube_admin_configblock as defined below. This is only available when Role Based Access Control with Azure Active Directory is enabled and local accounts enabled. - kube
Config StringRaw - Raw Kubernetes config to be used by kubectl and other compatible tools.
- kube
Configs List<KubernetesCluster Kube Config> - A
kube_configblock as defined below. - portal
Fqdn String - The FQDN for the Azure Portal resources when private link has been enabled, which is only resolvable inside the Virtual Network used by the Kubernetes Cluster.
- private
Fqdn String - The FQDN for the Kubernetes Cluster when private link has been enabled, which is only resolvable inside the Virtual Network used by the Kubernetes Cluster.
- fqdn string
- The FQDN of the Azure Kubernetes Managed Cluster.
- http
Application stringRouting Zone Name - The Zone Name of the HTTP Application Routing.
- id string
- The provider-assigned unique ID for this managed resource.
- kube
Admin stringConfig Raw - Raw Kubernetes config for the admin account to be used by kubectl and other compatible tools. This is only available when Role Based Access Control with Azure Active Directory is enabled and local accounts enabled.
- kube
Admin KubernetesConfigs Cluster Kube Admin Config[] - A
kube_admin_configblock as defined below. This is only available when Role Based Access Control with Azure Active Directory is enabled and local accounts enabled. - kube
Config stringRaw - Raw Kubernetes config to be used by kubectl and other compatible tools.
- kube
Configs KubernetesCluster Kube Config[] - A
kube_configblock as defined below. - portal
Fqdn string - The FQDN for the Azure Portal resources when private link has been enabled, which is only resolvable inside the Virtual Network used by the Kubernetes Cluster.
- private
Fqdn string - The FQDN for the Kubernetes Cluster when private link has been enabled, which is only resolvable inside the Virtual Network used by the Kubernetes Cluster.
- fqdn str
- The FQDN of the Azure Kubernetes Managed Cluster.
- http_
application_ strrouting_ zone_ name - The Zone Name of the HTTP Application Routing.
- id str
- The provider-assigned unique ID for this managed resource.
- kube_
admin_ strconfig_ raw - Raw Kubernetes config for the admin account to be used by kubectl and other compatible tools. This is only available when Role Based Access Control with Azure Active Directory is enabled and local accounts enabled.
- kube_
admin_ Sequence[Kubernetesconfigs Cluster Kube Admin Config] - A
kube_admin_configblock as defined below. This is only available when Role Based Access Control with Azure Active Directory is enabled and local accounts enabled. - kube_
config_ strraw - Raw Kubernetes config to be used by kubectl and other compatible tools.
- kube_
configs Sequence[KubernetesCluster Kube Config] - A
kube_configblock as defined below. - portal_
fqdn str - The FQDN for the Azure Portal resources when private link has been enabled, which is only resolvable inside the Virtual Network used by the Kubernetes Cluster.
- private_
fqdn str - The FQDN for the Kubernetes Cluster when private link has been enabled, which is only resolvable inside the Virtual Network used by the Kubernetes Cluster.
- fqdn String
- The FQDN of the Azure Kubernetes Managed Cluster.
- http
Application StringRouting Zone Name - The Zone Name of the HTTP Application Routing.
- id String
- The provider-assigned unique ID for this managed resource.
- kube
Admin StringConfig Raw - Raw Kubernetes config for the admin account to be used by kubectl and other compatible tools. This is only available when Role Based Access Control with Azure Active Directory is enabled and local accounts enabled.
- kube
Admin List<Property Map>Configs - A
kube_admin_configblock as defined below. This is only available when Role Based Access Control with Azure Active Directory is enabled and local accounts enabled. - kube
Config StringRaw - Raw Kubernetes config to be used by kubectl and other compatible tools.
- kube
Configs List<Property Map> - A
kube_configblock as defined below. - portal
Fqdn String - The FQDN for the Azure Portal resources when private link has been enabled, which is only resolvable inside the Virtual Network used by the Kubernetes Cluster.
- private
Fqdn String - The FQDN for the Kubernetes Cluster when private link has been enabled, which is only resolvable inside the Virtual Network used by the Kubernetes Cluster.
Look up Existing KubernetesCluster Resource
Get an existing KubernetesCluster resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: KubernetesClusterState, opts?: CustomResourceOptions): KubernetesCluster@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
aci_connector_linux: Optional[KubernetesClusterAciConnectorLinuxArgs] = None,
addon_profile: Optional[KubernetesClusterAddonProfileArgs] = None,
api_server_authorized_ip_ranges: Optional[Sequence[str]] = None,
auto_scaler_profile: Optional[KubernetesClusterAutoScalerProfileArgs] = None,
automatic_channel_upgrade: Optional[str] = None,
azure_active_directory_role_based_access_control: Optional[KubernetesClusterAzureActiveDirectoryRoleBasedAccessControlArgs] = None,
azure_policy_enabled: Optional[bool] = None,
default_node_pool: Optional[KubernetesClusterDefaultNodePoolArgs] = None,
disk_encryption_set_id: Optional[str] = None,
dns_prefix: Optional[str] = None,
dns_prefix_private_cluster: Optional[str] = None,
enable_pod_security_policy: Optional[bool] = None,
fqdn: Optional[str] = None,
http_application_routing_enabled: Optional[bool] = None,
http_application_routing_zone_name: Optional[str] = None,
http_proxy_config: Optional[KubernetesClusterHttpProxyConfigArgs] = None,
identity: Optional[KubernetesClusterIdentityArgs] = None,
ingress_application_gateway: Optional[KubernetesClusterIngressApplicationGatewayArgs] = None,
key_vault_secrets_provider: Optional[KubernetesClusterKeyVaultSecretsProviderArgs] = None,
kube_admin_config_raw: Optional[str] = None,
kube_admin_configs: Optional[Sequence[KubernetesClusterKubeAdminConfigArgs]] = None,
kube_config_raw: Optional[str] = None,
kube_configs: Optional[Sequence[KubernetesClusterKubeConfigArgs]] = None,
kubelet_identities: Optional[Sequence[KubernetesClusterKubeletIdentityArgs]] = None,
kubernetes_version: Optional[str] = None,
linux_profile: Optional[KubernetesClusterLinuxProfileArgs] = None,
local_account_disabled: Optional[bool] = None,
location: Optional[str] = None,
maintenance_window: Optional[KubernetesClusterMaintenanceWindowArgs] = None,
name: Optional[str] = None,
network_profile: Optional[KubernetesClusterNetworkProfileArgs] = None,
node_resource_group: Optional[str] = None,
oms_agent: Optional[KubernetesClusterOmsAgentArgs] = None,
open_service_mesh_enabled: Optional[bool] = None,
portal_fqdn: Optional[str] = None,
private_cluster_enabled: Optional[bool] = None,
private_cluster_public_fqdn_enabled: Optional[bool] = None,
private_dns_zone_id: Optional[str] = None,
private_fqdn: Optional[str] = None,
private_link_enabled: Optional[bool] = None,
public_network_access_enabled: Optional[bool] = None,
resource_group_name: Optional[str] = None,
role_based_access_control: Optional[KubernetesClusterRoleBasedAccessControlArgs] = None,
role_based_access_control_enabled: Optional[bool] = None,
service_principal: Optional[KubernetesClusterServicePrincipalArgs] = None,
sku_tier: Optional[str] = None,
tags: Optional[Mapping[str, str]] = None,
windows_profile: Optional[KubernetesClusterWindowsProfileArgs] = None) -> KubernetesClusterfunc GetKubernetesCluster(ctx *Context, name string, id IDInput, state *KubernetesClusterState, opts ...ResourceOption) (*KubernetesCluster, error)public static KubernetesCluster Get(string name, Input<string> id, KubernetesClusterState? state, CustomResourceOptions? opts = null)public static KubernetesCluster get(String name, Output<String> id, KubernetesClusterState state, CustomResourceOptions options)resources: _: type: azure:containerservice:KubernetesCluster get: id: ${id}- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Aci
Connector KubernetesLinux Cluster Aci Connector Linux - A
aci_connector_linuxblock as defined below. For more details, please visit Create and configure an AKS cluster to use virtual nodes. - Addon
Profile KubernetesCluster Addon Profile - An
addon_profileblock as defined below. - List<string>
- The IP ranges to allow for incoming traffic to the server nodes.
- Auto
Scaler KubernetesProfile Cluster Auto Scaler Profile - A
auto_scaler_profileblock as defined below. - Automatic
Channel stringUpgrade - The upgrade channel for this Kubernetes Cluster. Possible values are
patch,rapid,node-imageandstable. Omitting this field sets this value tonone. - Azure
Active KubernetesDirectory Role Based Access Control Cluster Azure Active Directory Role Based Access Control - A
azure_active_directory_role_based_access_controlblock as defined below.
- A
- Azure
Policy boolEnabled - Should the Azure Policy Add-On be enabled? For more details please visit Understand Azure Policy for Azure Kubernetes Service
- Default
Node KubernetesPool Cluster Default Node Pool - A
default_node_poolblock as defined below. - Disk
Encryption stringSet Id - The ID of the Disk Encryption Set which should be used for the Nodes and Volumes. More information can be found in the documentation.
- Dns
Prefix string - DNS prefix specified when creating the managed cluster. Changing this forces a new resource to be created.
- Dns
Prefix stringPrivate Cluster - Specifies the DNS prefix to use with private clusters. Changing this forces a new resource to be created.
- Enable
Pod boolSecurity Policy - Fqdn string
- The FQDN of the Azure Kubernetes Managed Cluster.
- Http
Application boolRouting Enabled - Should HTTP Application Routing be enabled?
- Http
Application stringRouting Zone Name - The Zone Name of the HTTP Application Routing.
- Http
Proxy KubernetesConfig Cluster Http Proxy Config - A
http_proxy_configblock as defined below. - Identity
Kubernetes
Cluster Identity - An
identityblock as defined below. One of eitheridentityorservice_principalmust be specified. - Ingress
Application KubernetesGateway Cluster Ingress Application Gateway - A
ingress_application_gatewayblock as defined below. - Key
Vault KubernetesSecrets Provider Cluster Key Vault Secrets Provider - A
key_vault_secrets_providerblock as defined below. For more details, please visit Azure Keyvault Secrets Provider for AKS. - Kube
Admin stringConfig Raw - Raw Kubernetes config for the admin account to be used by kubectl and other compatible tools. This is only available when Role Based Access Control with Azure Active Directory is enabled and local accounts enabled.
- Kube
Admin List<KubernetesConfigs Cluster Kube Admin Config> - A
kube_admin_configblock as defined below. This is only available when Role Based Access Control with Azure Active Directory is enabled and local accounts enabled. - Kube
Config stringRaw - Raw Kubernetes config to be used by kubectl and other compatible tools.
- Kube
Configs List<KubernetesCluster Kube Config> - A
kube_configblock as defined below. - Kubelet
Identities List<KubernetesCluster Kubelet Identity> - A
kubelet_identityblock as defined below. Changing this forces a new resource to be created. - Kubernetes
Version string - Version of Kubernetes specified when creating the AKS managed cluster. If not specified, the latest recommended version will be used at provisioning time (but won't auto-upgrade).
- Linux
Profile KubernetesCluster Linux Profile - A
linux_profileblock as defined below. - Local
Account boolDisabled - If
truelocal accounts will be disabled. Defaults tofalse. See the documentation for more information.
- If
- Location string
- The location where the Managed Kubernetes Cluster should be created. Changing this forces a new resource to be created.
- Maintenance
Window KubernetesCluster Maintenance Window - A
maintenance_windowblock as defined below. - Name string
- The name of the Managed Kubernetes Cluster to create. Changing this forces a new resource to be created.
- Network
Profile KubernetesCluster Network Profile - A
network_profileblock as defined below. - Node
Resource stringGroup - The name of the Resource Group where the Kubernetes Nodes should exist. Changing this forces a new resource to be created.
- Oms
Agent KubernetesCluster Oms Agent - A
oms_agentblock as defined below. - Open
Service boolMesh Enabled - Is Open Service Mesh enabled? For more details, please visit Open Service Mesh for AKS.
- Portal
Fqdn string - The FQDN for the Azure Portal resources when private link has been enabled, which is only resolvable inside the Virtual Network used by the Kubernetes Cluster.
- Private
Cluster boolEnabled - Should this Kubernetes Cluster have its API server only exposed on internal IP addresses? This provides a Private IP Address for the Kubernetes API on the Virtual Network where the Kubernetes Cluster is located. Defaults to
false. Changing this forces a new resource to be created. - Private
Cluster boolPublic Fqdn Enabled - Specifies whether a Public FQDN for this Private Cluster should be added. Defaults to
false. - Private
Dns stringZone Id - Either the ID of Private DNS Zone which should be delegated to this Cluster,
Systemto have AKS manage this orNone. In case ofNoneyou will need to bring your own DNS server and set up resolving, otherwise cluster will have issues after provisioning. Changing this forces a new resource to be created. - Private
Fqdn string - The FQDN for the Kubernetes Cluster when private link has been enabled, which is only resolvable inside the Virtual Network used by the Kubernetes Cluster.
- Private
Link boolEnabled - Public
Network boolAccess Enabled - Resource
Group stringName - Specifies the Resource Group where the Managed Kubernetes Cluster should exist. Changing this forces a new resource to be created.
- Role
Based KubernetesAccess Control Cluster Role Based Access Control - Role
Based boolAccess Control Enabled - Whether Role Based Access Control for the Kubernetes Cluster should be enabled. Defaults to
true. Changing this forces a new resource to be created. - Service
Principal KubernetesCluster Service Principal - A
service_principalblock as documented below. One of eitheridentityorservice_principalmust be specified. - Sku
Tier string - The SKU Tier that should be used for this Kubernetes Cluster. Possible values are
FreeandPaid(which includes the Uptime SLA). Defaults toFree. - Dictionary<string, string>
- A mapping of tags to assign to the resource.
- Windows
Profile KubernetesCluster Windows Profile - A
windows_profileblock as defined below.
- Aci
Connector KubernetesLinux Cluster Aci Connector Linux Args - A
aci_connector_linuxblock as defined below. For more details, please visit Create and configure an AKS cluster to use virtual nodes. - Addon
Profile KubernetesCluster Addon Profile Args - An
addon_profileblock as defined below. - []string
- The IP ranges to allow for incoming traffic to the server nodes.
- Auto
Scaler KubernetesProfile Cluster Auto Scaler Profile Args - A
auto_scaler_profileblock as defined below. - Automatic
Channel stringUpgrade - The upgrade channel for this Kubernetes Cluster. Possible values are
patch,rapid,node-imageandstable. Omitting this field sets this value tonone. - Azure
Active KubernetesDirectory Role Based Access Control Cluster Azure Active Directory Role Based Access Control Args - A
azure_active_directory_role_based_access_controlblock as defined below.
- A
- Azure
Policy boolEnabled - Should the Azure Policy Add-On be enabled? For more details please visit Understand Azure Policy for Azure Kubernetes Service
- Default
Node KubernetesPool Cluster Default Node Pool Args - A
default_node_poolblock as defined below. - Disk
Encryption stringSet Id - The ID of the Disk Encryption Set which should be used for the Nodes and Volumes. More information can be found in the documentation.
- Dns
Prefix string - DNS prefix specified when creating the managed cluster. Changing this forces a new resource to be created.
- Dns
Prefix stringPrivate Cluster - Specifies the DNS prefix to use with private clusters. Changing this forces a new resource to be created.
- Enable
Pod boolSecurity Policy - Fqdn string
- The FQDN of the Azure Kubernetes Managed Cluster.
- Http
Application boolRouting Enabled - Should HTTP Application Routing be enabled?
- Http
Application stringRouting Zone Name - The Zone Name of the HTTP Application Routing.
- Http
Proxy KubernetesConfig Cluster Http Proxy Config Args - A
http_proxy_configblock as defined below. - Identity
Kubernetes
Cluster Identity Args - An
identityblock as defined below. One of eitheridentityorservice_principalmust be specified. - Ingress
Application KubernetesGateway Cluster Ingress Application Gateway Args - A
ingress_application_gatewayblock as defined below. - Key
Vault KubernetesSecrets Provider Cluster Key Vault Secrets Provider Args - A
key_vault_secrets_providerblock as defined below. For more details, please visit Azure Keyvault Secrets Provider for AKS. - Kube
Admin stringConfig Raw - Raw Kubernetes config for the admin account to be used by kubectl and other compatible tools. This is only available when Role Based Access Control with Azure Active Directory is enabled and local accounts enabled.
- Kube
Admin []KubernetesConfigs Cluster Kube Admin Config Args - A
kube_admin_configblock as defined below. This is only available when Role Based Access Control with Azure Active Directory is enabled and local accounts enabled. - Kube
Config stringRaw - Raw Kubernetes config to be used by kubectl and other compatible tools.
- Kube
Configs []KubernetesCluster Kube Config Args - A
kube_configblock as defined below. - Kubelet
Identities []KubernetesCluster Kubelet Identity Args - A
kubelet_identityblock as defined below. Changing this forces a new resource to be created. - Kubernetes
Version string - Version of Kubernetes specified when creating the AKS managed cluster. If not specified, the latest recommended version will be used at provisioning time (but won't auto-upgrade).
- Linux
Profile KubernetesCluster Linux Profile Args - A
linux_profileblock as defined below. - Local
Account boolDisabled - If
truelocal accounts will be disabled. Defaults tofalse. See the documentation for more information.
- If
- Location string
- The location where the Managed Kubernetes Cluster should be created. Changing this forces a new resource to be created.
- Maintenance
Window KubernetesCluster Maintenance Window Args - A
maintenance_windowblock as defined below. - Name string
- The name of the Managed Kubernetes Cluster to create. Changing this forces a new resource to be created.
- Network
Profile KubernetesCluster Network Profile Args - A
network_profileblock as defined below. - Node
Resource stringGroup - The name of the Resource Group where the Kubernetes Nodes should exist. Changing this forces a new resource to be created.
- Oms
Agent KubernetesCluster Oms Agent Args - A
oms_agentblock as defined below. - Open
Service boolMesh Enabled - Is Open Service Mesh enabled? For more details, please visit Open Service Mesh for AKS.
- Portal
Fqdn string - The FQDN for the Azure Portal resources when private link has been enabled, which is only resolvable inside the Virtual Network used by the Kubernetes Cluster.
- Private
Cluster boolEnabled - Should this Kubernetes Cluster have its API server only exposed on internal IP addresses? This provides a Private IP Address for the Kubernetes API on the Virtual Network where the Kubernetes Cluster is located. Defaults to
false. Changing this forces a new resource to be created. - Private
Cluster boolPublic Fqdn Enabled - Specifies whether a Public FQDN for this Private Cluster should be added. Defaults to
false. - Private
Dns stringZone Id - Either the ID of Private DNS Zone which should be delegated to this Cluster,
Systemto have AKS manage this orNone. In case ofNoneyou will need to bring your own DNS server and set up resolving, otherwise cluster will have issues after provisioning. Changing this forces a new resource to be created. - Private
Fqdn string - The FQDN for the Kubernetes Cluster when private link has been enabled, which is only resolvable inside the Virtual Network used by the Kubernetes Cluster.
- Private
Link boolEnabled - Public
Network boolAccess Enabled - Resource
Group stringName - Specifies the Resource Group where the Managed Kubernetes Cluster should exist. Changing this forces a new resource to be created.
- Role
Based KubernetesAccess Control Cluster Role Based Access Control Args - Role
Based boolAccess Control Enabled - Whether Role Based Access Control for the Kubernetes Cluster should be enabled. Defaults to
true. Changing this forces a new resource to be created. - Service
Principal KubernetesCluster Service Principal Args - A
service_principalblock as documented below. One of eitheridentityorservice_principalmust be specified. - Sku
Tier string - The SKU Tier that should be used for this Kubernetes Cluster. Possible values are
FreeandPaid(which includes the Uptime SLA). Defaults toFree. - map[string]string
- A mapping of tags to assign to the resource.
- Windows
Profile KubernetesCluster Windows Profile Args - A
windows_profileblock as defined below.
- aci
Connector KubernetesLinux Cluster Aci Connector Linux - A
aci_connector_linuxblock as defined below. For more details, please visit Create and configure an AKS cluster to use virtual nodes. - addon
Profile KubernetesCluster Addon Profile - An
addon_profileblock as defined below. - List<String>
- The IP ranges to allow for incoming traffic to the server nodes.
- auto
Scaler KubernetesProfile Cluster Auto Scaler Profile - A
auto_scaler_profileblock as defined below. - automatic
Channel StringUpgrade - The upgrade channel for this Kubernetes Cluster. Possible values are
patch,rapid,node-imageandstable. Omitting this field sets this value tonone. - azure
Active KubernetesDirectory Role Based Access Control Cluster Azure Active Directory Role Based Access Control - A
azure_active_directory_role_based_access_controlblock as defined below.
- A
- azure
Policy BooleanEnabled - Should the Azure Policy Add-On be enabled? For more details please visit Understand Azure Policy for Azure Kubernetes Service
- default
Node KubernetesPool Cluster Default Node Pool - A
default_node_poolblock as defined below. - disk
Encryption StringSet Id - The ID of the Disk Encryption Set which should be used for the Nodes and Volumes. More information can be found in the documentation.
- dns
Prefix String - DNS prefix specified when creating the managed cluster. Changing this forces a new resource to be created.
- dns
Prefix StringPrivate Cluster - Specifies the DNS prefix to use with private clusters. Changing this forces a new resource to be created.
- enable
Pod BooleanSecurity Policy - fqdn String
- The FQDN of the Azure Kubernetes Managed Cluster.
- http
Application BooleanRouting Enabled - Should HTTP Application Routing be enabled?
- http
Application StringRouting Zone Name - The Zone Name of the HTTP Application Routing.
- http
Proxy KubernetesConfig Cluster Http Proxy Config - A
http_proxy_configblock as defined below. - identity
Kubernetes
Cluster Identity - An
identityblock as defined below. One of eitheridentityorservice_principalmust be specified. - ingress
Application KubernetesGateway Cluster Ingress Application Gateway - A
ingress_application_gatewayblock as defined below. - key
Vault KubernetesSecrets Provider Cluster Key Vault Secrets Provider - A
key_vault_secrets_providerblock as defined below. For more details, please visit Azure Keyvault Secrets Provider for AKS. - kube
Admin StringConfig Raw - Raw Kubernetes config for the admin account to be used by kubectl and other compatible tools. This is only available when Role Based Access Control with Azure Active Directory is enabled and local accounts enabled.
- kube
Admin List<KubernetesConfigs Cluster Kube Admin Config> - A
kube_admin_configblock as defined below. This is only available when Role Based Access Control with Azure Active Directory is enabled and local accounts enabled. - kube
Config StringRaw - Raw Kubernetes config to be used by kubectl and other compatible tools.
- kube
Configs List<KubernetesCluster Kube Config> - A
kube_configblock as defined below. - kubelet
Identities List<KubernetesCluster Kubelet Identity> - A
kubelet_identityblock as defined below. Changing this forces a new resource to be created. - kubernetes
Version String - Version of Kubernetes specified when creating the AKS managed cluster. If not specified, the latest recommended version will be used at provisioning time (but won't auto-upgrade).
- linux
Profile KubernetesCluster Linux Profile - A
linux_profileblock as defined below. - local
Account BooleanDisabled - If
truelocal accounts will be disabled. Defaults tofalse. See the documentation for more information.
- If
- location String
- The location where the Managed Kubernetes Cluster should be created. Changing this forces a new resource to be created.
- maintenance
Window KubernetesCluster Maintenance Window - A
maintenance_windowblock as defined below. - name String
- The name of the Managed Kubernetes Cluster to create. Changing this forces a new resource to be created.
- network
Profile KubernetesCluster Network Profile - A
network_profileblock as defined below. - node
Resource StringGroup - The name of the Resource Group where the Kubernetes Nodes should exist. Changing this forces a new resource to be created.
- oms
Agent KubernetesCluster Oms Agent - A
oms_agentblock as defined below. - open
Service BooleanMesh Enabled - Is Open Service Mesh enabled? For more details, please visit Open Service Mesh for AKS.
- portal
Fqdn String - The FQDN for the Azure Portal resources when private link has been enabled, which is only resolvable inside the Virtual Network used by the Kubernetes Cluster.
- private
Cluster BooleanEnabled - Should this Kubernetes Cluster have its API server only exposed on internal IP addresses? This provides a Private IP Address for the Kubernetes API on the Virtual Network where the Kubernetes Cluster is located. Defaults to
false. Changing this forces a new resource to be created. - private
Cluster BooleanPublic Fqdn Enabled - Specifies whether a Public FQDN for this Private Cluster should be added. Defaults to
false. - private
Dns StringZone Id - Either the ID of Private DNS Zone which should be delegated to this Cluster,
Systemto have AKS manage this orNone. In case ofNoneyou will need to bring your own DNS server and set up resolving, otherwise cluster will have issues after provisioning. Changing this forces a new resource to be created. - private
Fqdn String - The FQDN for the Kubernetes Cluster when private link has been enabled, which is only resolvable inside the Virtual Network used by the Kubernetes Cluster.
- private
Link BooleanEnabled - public
Network BooleanAccess Enabled - resource
Group StringName - Specifies the Resource Group where the Managed Kubernetes Cluster should exist. Changing this forces a new resource to be created.
- role
Based KubernetesAccess Control Cluster Role Based Access Control - role
Based BooleanAccess Control Enabled - Whether Role Based Access Control for the Kubernetes Cluster should be enabled. Defaults to
true. Changing this forces a new resource to be created. - service
Principal KubernetesCluster Service Principal - A
service_principalblock as documented below. One of eitheridentityorservice_principalmust be specified. - sku
Tier String - The SKU Tier that should be used for this Kubernetes Cluster. Possible values are
FreeandPaid(which includes the Uptime SLA). Defaults toFree. - Map<String,String>
- A mapping of tags to assign to the resource.
- windows
Profile KubernetesCluster Windows Profile - A
windows_profileblock as defined below.
- aci
Connector KubernetesLinux Cluster Aci Connector Linux - A
aci_connector_linuxblock as defined below. For more details, please visit Create and configure an AKS cluster to use virtual nodes. - addon
Profile KubernetesCluster Addon Profile - An
addon_profileblock as defined below. - string[]
- The IP ranges to allow for incoming traffic to the server nodes.
- auto
Scaler KubernetesProfile Cluster Auto Scaler Profile - A
auto_scaler_profileblock as defined below. - automatic
Channel stringUpgrade - The upgrade channel for this Kubernetes Cluster. Possible values are
patch,rapid,node-imageandstable. Omitting this field sets this value tonone. - azure
Active KubernetesDirectory Role Based Access Control Cluster Azure Active Directory Role Based Access Control - A
azure_active_directory_role_based_access_controlblock as defined below.
- A
- azure
Policy booleanEnabled - Should the Azure Policy Add-On be enabled? For more details please visit Understand Azure Policy for Azure Kubernetes Service
- default
Node KubernetesPool Cluster Default Node Pool - A
default_node_poolblock as defined below. - disk
Encryption stringSet Id - The ID of the Disk Encryption Set which should be used for the Nodes and Volumes. More information can be found in the documentation.
- dns
Prefix string - DNS prefix specified when creating the managed cluster. Changing this forces a new resource to be created.
- dns
Prefix stringPrivate Cluster - Specifies the DNS prefix to use with private clusters. Changing this forces a new resource to be created.
- enable
Pod booleanSecurity Policy - fqdn string
- The FQDN of the Azure Kubernetes Managed Cluster.
- http
Application booleanRouting Enabled - Should HTTP Application Routing be enabled?
- http
Application stringRouting Zone Name - The Zone Name of the HTTP Application Routing.
- http
Proxy KubernetesConfig Cluster Http Proxy Config - A
http_proxy_configblock as defined below. - identity
Kubernetes
Cluster Identity - An
identityblock as defined below. One of eitheridentityorservice_principalmust be specified. - ingress
Application KubernetesGateway Cluster Ingress Application Gateway - A
ingress_application_gatewayblock as defined below. - key
Vault KubernetesSecrets Provider Cluster Key Vault Secrets Provider - A
key_vault_secrets_providerblock as defined below. For more details, please visit Azure Keyvault Secrets Provider for AKS. - kube
Admin stringConfig Raw - Raw Kubernetes config for the admin account to be used by kubectl and other compatible tools. This is only available when Role Based Access Control with Azure Active Directory is enabled and local accounts enabled.
- kube
Admin KubernetesConfigs Cluster Kube Admin Config[] - A
kube_admin_configblock as defined below. This is only available when Role Based Access Control with Azure Active Directory is enabled and local accounts enabled. - kube
Config stringRaw - Raw Kubernetes config to be used by kubectl and other compatible tools.
- kube
Configs KubernetesCluster Kube Config[] - A
kube_configblock as defined below. - kubelet
Identities KubernetesCluster Kubelet Identity[] - A
kubelet_identityblock as defined below. Changing this forces a new resource to be created. - kubernetes
Version string - Version of Kubernetes specified when creating the AKS managed cluster. If not specified, the latest recommended version will be used at provisioning time (but won't auto-upgrade).
- linux
Profile KubernetesCluster Linux Profile - A
linux_profileblock as defined below. - local
Account booleanDisabled - If
truelocal accounts will be disabled. Defaults tofalse. See the documentation for more information.
- If
- location string
- The location where the Managed Kubernetes Cluster should be created. Changing this forces a new resource to be created.
- maintenance
Window KubernetesCluster Maintenance Window - A
maintenance_windowblock as defined below. - name string
- The name of the Managed Kubernetes Cluster to create. Changing this forces a new resource to be created.
- network
Profile KubernetesCluster Network Profile - A
network_profileblock as defined below. - node
Resource stringGroup - The name of the Resource Group where the Kubernetes Nodes should exist. Changing this forces a new resource to be created.
- oms
Agent KubernetesCluster Oms Agent - A
oms_agentblock as defined below. - open
Service booleanMesh Enabled - Is Open Service Mesh enabled? For more details, please visit Open Service Mesh for AKS.
- portal
Fqdn string - The FQDN for the Azure Portal resources when private link has been enabled, which is only resolvable inside the Virtual Network used by the Kubernetes Cluster.
- private
Cluster booleanEnabled - Should this Kubernetes Cluster have its API server only exposed on internal IP addresses? This provides a Private IP Address for the Kubernetes API on the Virtual Network where the Kubernetes Cluster is located. Defaults to
false. Changing this forces a new resource to be created. - private
Cluster booleanPublic Fqdn Enabled - Specifies whether a Public FQDN for this Private Cluster should be added. Defaults to
false. - private
Dns stringZone Id - Either the ID of Private DNS Zone which should be delegated to this Cluster,
Systemto have AKS manage this orNone. In case ofNoneyou will need to bring your own DNS server and set up resolving, otherwise cluster will have issues after provisioning. Changing this forces a new resource to be created. - private
Fqdn string - The FQDN for the Kubernetes Cluster when private link has been enabled, which is only resolvable inside the Virtual Network used by the Kubernetes Cluster.
- private
Link booleanEnabled - public
Network booleanAccess Enabled - resource
Group stringName - Specifies the Resource Group where the Managed Kubernetes Cluster should exist. Changing this forces a new resource to be created.
- role
Based KubernetesAccess Control Cluster Role Based Access Control - role
Based booleanAccess Control Enabled - Whether Role Based Access Control for the Kubernetes Cluster should be enabled. Defaults to
true. Changing this forces a new resource to be created. - service
Principal KubernetesCluster Service Principal - A
service_principalblock as documented below. One of eitheridentityorservice_principalmust be specified. - sku
Tier string - The SKU Tier that should be used for this Kubernetes Cluster. Possible values are
FreeandPaid(which includes the Uptime SLA). Defaults toFree. - {[key: string]: string}
- A mapping of tags to assign to the resource.
- windows
Profile KubernetesCluster Windows Profile - A
windows_profileblock as defined below.
- aci_
connector_ Kuberneteslinux Cluster Aci Connector Linux Args - A
aci_connector_linuxblock as defined below. For more details, please visit Create and configure an AKS cluster to use virtual nodes. - addon_
profile KubernetesCluster Addon Profile Args - An
addon_profileblock as defined below. - Sequence[str]
- The IP ranges to allow for incoming traffic to the server nodes.
- auto_
scaler_ Kubernetesprofile Cluster Auto Scaler Profile Args - A
auto_scaler_profileblock as defined below. - automatic_
channel_ strupgrade - The upgrade channel for this Kubernetes Cluster. Possible values are
patch,rapid,node-imageandstable. Omitting this field sets this value tonone. - azure_
active_ Kubernetesdirectory_ role_ based_ access_ control Cluster Azure Active Directory Role Based Access Control Args - A
azure_active_directory_role_based_access_controlblock as defined below.
- A
- azure_
policy_ boolenabled - Should the Azure Policy Add-On be enabled? For more details please visit Understand Azure Policy for Azure Kubernetes Service
- default_
node_ Kubernetespool Cluster Default Node Pool Args - A
default_node_poolblock as defined below. - disk_
encryption_ strset_ id - The ID of the Disk Encryption Set which should be used for the Nodes and Volumes. More information can be found in the documentation.
- dns_
prefix str - DNS prefix specified when creating the managed cluster. Changing this forces a new resource to be created.
- dns_
prefix_ strprivate_ cluster - Specifies the DNS prefix to use with private clusters. Changing this forces a new resource to be created.
- enable_
pod_ boolsecurity_ policy - fqdn str
- The FQDN of the Azure Kubernetes Managed Cluster.
- http_
application_ boolrouting_ enabled - Should HTTP Application Routing be enabled?
- http_
application_ strrouting_ zone_ name - The Zone Name of the HTTP Application Routing.
- http_
proxy_ Kubernetesconfig Cluster Http Proxy Config Args - A
http_proxy_configblock as defined below. - identity
Kubernetes
Cluster Identity Args - An
identityblock as defined below. One of eitheridentityorservice_principalmust be specified. - ingress_
application_ Kubernetesgateway Cluster Ingress Application Gateway Args - A
ingress_application_gatewayblock as defined below. - key_
vault_ Kubernetessecrets_ provider Cluster Key Vault Secrets Provider Args - A
key_vault_secrets_providerblock as defined below. For more details, please visit Azure Keyvault Secrets Provider for AKS. - kube_
admin_ strconfig_ raw - Raw Kubernetes config for the admin account to be used by kubectl and other compatible tools. This is only available when Role Based Access Control with Azure Active Directory is enabled and local accounts enabled.
- kube_
admin_ Sequence[Kubernetesconfigs Cluster Kube Admin Config Args] - A
kube_admin_configblock as defined below. This is only available when Role Based Access Control with Azure Active Directory is enabled and local accounts enabled. - kube_
config_ strraw - Raw Kubernetes config to be used by kubectl and other compatible tools.
- kube_
configs Sequence[KubernetesCluster Kube Config Args] - A
kube_configblock as defined below. - kubelet_
identities Sequence[KubernetesCluster Kubelet Identity Args] - A
kubelet_identityblock as defined below. Changing this forces a new resource to be created. - kubernetes_
version str - Version of Kubernetes specified when creating the AKS managed cluster. If not specified, the latest recommended version will be used at provisioning time (but won't auto-upgrade).
- linux_
profile KubernetesCluster Linux Profile Args - A
linux_profileblock as defined below. - local_
account_ booldisabled - If
truelocal accounts will be disabled. Defaults tofalse. See the documentation for more information.
- If
- location str
- The location where the Managed Kubernetes Cluster should be created. Changing this forces a new resource to be created.
- maintenance_
window KubernetesCluster Maintenance Window Args - A
maintenance_windowblock as defined below. - name str
- The name of the Managed Kubernetes Cluster to create. Changing this forces a new resource to be created.
- network_
profile KubernetesCluster Network Profile Args - A
network_profileblock as defined below. - node_
resource_ strgroup - The name of the Resource Group where the Kubernetes Nodes should exist. Changing this forces a new resource to be created.
- oms_
agent KubernetesCluster Oms Agent Args - A
oms_agentblock as defined below. - open_
service_ boolmesh_ enabled - Is Open Service Mesh enabled? For more details, please visit Open Service Mesh for AKS.
- portal_
fqdn str - The FQDN for the Azure Portal resources when private link has been enabled, which is only resolvable inside the Virtual Network used by the Kubernetes Cluster.
- private_
cluster_ boolenabled - Should this Kubernetes Cluster have its API server only exposed on internal IP addresses? This provides a Private IP Address for the Kubernetes API on the Virtual Network where the Kubernetes Cluster is located. Defaults to
false. Changing this forces a new resource to be created. - private_
cluster_ boolpublic_ fqdn_ enabled - Specifies whether a Public FQDN for this Private Cluster should be added. Defaults to
false. - private_
dns_ strzone_ id - Either the ID of Private DNS Zone which should be delegated to this Cluster,
Systemto have AKS manage this orNone. In case ofNoneyou will need to bring your own DNS server and set up resolving, otherwise cluster will have issues after provisioning. Changing this forces a new resource to be created. - private_
fqdn str - The FQDN for the Kubernetes Cluster when private link has been enabled, which is only resolvable inside the Virtual Network used by the Kubernetes Cluster.
- private_
link_ boolenabled - public_
network_ boolaccess_ enabled - resource_
group_ strname - Specifies the Resource Group where the Managed Kubernetes Cluster should exist. Changing this forces a new resource to be created.
- role_
based_ Kubernetesaccess_ control Cluster Role Based Access Control Args - role_
based_ boolaccess_ control_ enabled - Whether Role Based Access Control for the Kubernetes Cluster should be enabled. Defaults to
true. Changing this forces a new resource to be created. - service_
principal KubernetesCluster Service Principal Args - A
service_principalblock as documented below. One of eitheridentityorservice_principalmust be specified. - sku_
tier str - The SKU Tier that should be used for this Kubernetes Cluster. Possible values are
FreeandPaid(which includes the Uptime SLA). Defaults toFree. - Mapping[str, str]
- A mapping of tags to assign to the resource.
- windows_
profile KubernetesCluster Windows Profile Args - A
windows_profileblock as defined below.
- aci
Connector Property MapLinux - A
aci_connector_linuxblock as defined below. For more details, please visit Create and configure an AKS cluster to use virtual nodes. - addon
Profile Property Map - An
addon_profileblock as defined below. - List<String>
- The IP ranges to allow for incoming traffic to the server nodes.
- auto
Scaler Property MapProfile - A
auto_scaler_profileblock as defined below. - automatic
Channel StringUpgrade - The upgrade channel for this Kubernetes Cluster. Possible values are
patch,rapid,node-imageandstable. Omitting this field sets this value tonone. - azure
Active Property MapDirectory Role Based Access Control - A
azure_active_directory_role_based_access_controlblock as defined below.
- A
- azure
Policy BooleanEnabled - Should the Azure Policy Add-On be enabled? For more details please visit Understand Azure Policy for Azure Kubernetes Service
- default
Node Property MapPool - A
default_node_poolblock as defined below. - disk
Encryption StringSet Id - The ID of the Disk Encryption Set which should be used for the Nodes and Volumes. More information can be found in the documentation.
- dns
Prefix String - DNS prefix specified when creating the managed cluster. Changing this forces a new resource to be created.
- dns
Prefix StringPrivate Cluster - Specifies the DNS prefix to use with private clusters. Changing this forces a new resource to be created.
- enable
Pod BooleanSecurity Policy - fqdn String
- The FQDN of the Azure Kubernetes Managed Cluster.
- http
Application BooleanRouting Enabled - Should HTTP Application Routing be enabled?
- http
Application StringRouting Zone Name - The Zone Name of the HTTP Application Routing.
- http
Proxy Property MapConfig - A
http_proxy_configblock as defined below. - identity Property Map
- An
identityblock as defined below. One of eitheridentityorservice_principalmust be specified. - ingress
Application Property MapGateway - A
ingress_application_gatewayblock as defined below. - key
Vault Property MapSecrets Provider - A
key_vault_secrets_providerblock as defined below. For more details, please visit Azure Keyvault Secrets Provider for AKS. - kube
Admin StringConfig Raw - Raw Kubernetes config for the admin account to be used by kubectl and other compatible tools. This is only available when Role Based Access Control with Azure Active Directory is enabled and local accounts enabled.
- kube
Admin List<Property Map>Configs - A
kube_admin_configblock as defined below. This is only available when Role Based Access Control with Azure Active Directory is enabled and local accounts enabled. - kube
Config StringRaw - Raw Kubernetes config to be used by kubectl and other compatible tools.
- kube
Configs List<Property Map> - A
kube_configblock as defined below. - kubelet
Identities List<Property Map> - A
kubelet_identityblock as defined below. Changing this forces a new resource to be created. - kubernetes
Version String - Version of Kubernetes specified when creating the AKS managed cluster. If not specified, the latest recommended version will be used at provisioning time (but won't auto-upgrade).
- linux
Profile Property Map - A
linux_profileblock as defined below. - local
Account BooleanDisabled - If
truelocal accounts will be disabled. Defaults tofalse. See the documentation for more information.
- If
- location String
- The location where the Managed Kubernetes Cluster should be created. Changing this forces a new resource to be created.
- maintenance
Window Property Map - A
maintenance_windowblock as defined below. - name String
- The name of the Managed Kubernetes Cluster to create. Changing this forces a new resource to be created.
- network
Profile Property Map - A
network_profileblock as defined below. - node
Resource StringGroup - The name of the Resource Group where the Kubernetes Nodes should exist. Changing this forces a new resource to be created.
- oms
Agent Property Map - A
oms_agentblock as defined below. - open
Service BooleanMesh Enabled - Is Open Service Mesh enabled? For more details, please visit Open Service Mesh for AKS.
- portal
Fqdn String - The FQDN for the Azure Portal resources when private link has been enabled, which is only resolvable inside the Virtual Network used by the Kubernetes Cluster.
- private
Cluster BooleanEnabled - Should this Kubernetes Cluster have its API server only exposed on internal IP addresses? This provides a Private IP Address for the Kubernetes API on the Virtual Network where the Kubernetes Cluster is located. Defaults to
false. Changing this forces a new resource to be created. - private
Cluster BooleanPublic Fqdn Enabled - Specifies whether a Public FQDN for this Private Cluster should be added. Defaults to
false. - private
Dns StringZone Id - Either the ID of Private DNS Zone which should be delegated to this Cluster,
Systemto have AKS manage this orNone. In case ofNoneyou will need to bring your own DNS server and set up resolving, otherwise cluster will have issues after provisioning. Changing this forces a new resource to be created. - private
Fqdn String - The FQDN for the Kubernetes Cluster when private link has been enabled, which is only resolvable inside the Virtual Network used by the Kubernetes Cluster.
- private
Link BooleanEnabled - public
Network BooleanAccess Enabled - resource
Group StringName - Specifies the Resource Group where the Managed Kubernetes Cluster should exist. Changing this forces a new resource to be created.
- role
Based Property MapAccess Control - role
Based BooleanAccess Control Enabled - Whether Role Based Access Control for the Kubernetes Cluster should be enabled. Defaults to
true. Changing this forces a new resource to be created. - service
Principal Property Map - A
service_principalblock as documented below. One of eitheridentityorservice_principalmust be specified. - sku
Tier String - The SKU Tier that should be used for this Kubernetes Cluster. Possible values are
FreeandPaid(which includes the Uptime SLA). Defaults toFree. - Map<String>
- A mapping of tags to assign to the resource.
- windows
Profile Property Map - A
windows_profileblock as defined below.
Supporting Types
KubernetesClusterAciConnectorLinux, KubernetesClusterAciConnectorLinuxArgs
- Subnet
Name string - The subnet name for the virtual nodes to run.
- Subnet
Name string - The subnet name for the virtual nodes to run.
- subnet
Name String - The subnet name for the virtual nodes to run.
- subnet
Name string - The subnet name for the virtual nodes to run.
- subnet_
name str - The subnet name for the virtual nodes to run.
- subnet
Name String - The subnet name for the virtual nodes to run.
KubernetesClusterAddonProfile, KubernetesClusterAddonProfileArgs
- Aci
Connector KubernetesLinux Cluster Addon Profile Aci Connector Linux - A
aci_connector_linuxblock as defined below. For more details, please visit Create and configure an AKS cluster to use virtual nodes. - Azure
Keyvault KubernetesSecrets Provider Cluster Addon Profile Azure Keyvault Secrets Provider - Azure
Policy KubernetesCluster Addon Profile Azure Policy - Http
Application KubernetesRouting Cluster Addon Profile Http Application Routing - A
http_application_routingblock as defined below. - Ingress
Application KubernetesGateway Cluster Addon Profile Ingress Application Gateway - A
ingress_application_gatewayblock as defined below. - Kube
Dashboard KubernetesCluster Addon Profile Kube Dashboard - Oms
Agent KubernetesCluster Addon Profile Oms Agent - A
oms_agentblock as defined below. - Open
Service KubernetesMesh Cluster Addon Profile Open Service Mesh
- Aci
Connector KubernetesLinux Cluster Addon Profile Aci Connector Linux - A
aci_connector_linuxblock as defined below. For more details, please visit Create and configure an AKS cluster to use virtual nodes. - Azure
Keyvault KubernetesSecrets Provider Cluster Addon Profile Azure Keyvault Secrets Provider - Azure
Policy KubernetesCluster Addon Profile Azure Policy - Http
Application KubernetesRouting Cluster Addon Profile Http Application Routing - A
http_application_routingblock as defined below. - Ingress
Application KubernetesGateway Cluster Addon Profile Ingress Application Gateway - A
ingress_application_gatewayblock as defined below. - Kube
Dashboard KubernetesCluster Addon Profile Kube Dashboard - Oms
Agent KubernetesCluster Addon Profile Oms Agent - A
oms_agentblock as defined below. - Open
Service KubernetesMesh Cluster Addon Profile Open Service Mesh
- aci
Connector KubernetesLinux Cluster Addon Profile Aci Connector Linux - A
aci_connector_linuxblock as defined below. For more details, please visit Create and configure an AKS cluster to use virtual nodes. - azure
Keyvault KubernetesSecrets Provider Cluster Addon Profile Azure Keyvault Secrets Provider - azure
Policy KubernetesCluster Addon Profile Azure Policy - http
Application KubernetesRouting Cluster Addon Profile Http Application Routing - A
http_application_routingblock as defined below. - ingress
Application KubernetesGateway Cluster Addon Profile Ingress Application Gateway - A
ingress_application_gatewayblock as defined below. - kube
Dashboard KubernetesCluster Addon Profile Kube Dashboard - oms
Agent KubernetesCluster Addon Profile Oms Agent - A
oms_agentblock as defined below. - open
Service KubernetesMesh Cluster Addon Profile Open Service Mesh
- aci
Connector KubernetesLinux Cluster Addon Profile Aci Connector Linux - A
aci_connector_linuxblock as defined below. For more details, please visit Create and configure an AKS cluster to use virtual nodes. - azure
Keyvault KubernetesSecrets Provider Cluster Addon Profile Azure Keyvault Secrets Provider - azure
Policy KubernetesCluster Addon Profile Azure Policy - http
Application KubernetesRouting Cluster Addon Profile Http Application Routing - A
http_application_routingblock as defined below. - ingress
Application KubernetesGateway Cluster Addon Profile Ingress Application Gateway - A
ingress_application_gatewayblock as defined below. - kube
Dashboard KubernetesCluster Addon Profile Kube Dashboard - oms
Agent KubernetesCluster Addon Profile Oms Agent - A
oms_agentblock as defined below. - open
Service KubernetesMesh Cluster Addon Profile Open Service Mesh
- aci_
connector_ Kuberneteslinux Cluster Addon Profile Aci Connector Linux - A
aci_connector_linuxblock as defined below. For more details, please visit Create and configure an AKS cluster to use virtual nodes. - azure_
keyvault_ Kubernetessecrets_ provider Cluster Addon Profile Azure Keyvault Secrets Provider - azure_
policy KubernetesCluster Addon Profile Azure Policy - http_
application_ Kubernetesrouting Cluster Addon Profile Http Application Routing - A
http_application_routingblock as defined below. - ingress_
application_ Kubernetesgateway Cluster Addon Profile Ingress Application Gateway - A
ingress_application_gatewayblock as defined below. - kube_
dashboard KubernetesCluster Addon Profile Kube Dashboard - oms_
agent KubernetesCluster Addon Profile Oms Agent - A
oms_agentblock as defined below. - open_
service_ Kubernetesmesh Cluster Addon Profile Open Service Mesh
- aci
Connector Property MapLinux - A
aci_connector_linuxblock as defined below. For more details, please visit Create and configure an AKS cluster to use virtual nodes. - azure
Keyvault Property MapSecrets Provider - azure
Policy Property Map - http
Application Property MapRouting - A
http_application_routingblock as defined below. - ingress
Application Property MapGateway - A
ingress_application_gatewayblock as defined below. - kube
Dashboard Property Map - oms
Agent Property Map - A
oms_agentblock as defined below. - open
Service Property MapMesh
KubernetesClusterAddonProfileAciConnectorLinux, KubernetesClusterAddonProfileAciConnectorLinuxArgs
- Enabled bool
- Is the Kubernetes Dashboard enabled?
- Subnet
Name string - The subnet name for the virtual nodes to run.
- Enabled bool
- Is the Kubernetes Dashboard enabled?
- Subnet
Name string - The subnet name for the virtual nodes to run.
- enabled Boolean
- Is the Kubernetes Dashboard enabled?
- subnet
Name String - The subnet name for the virtual nodes to run.
- enabled boolean
- Is the Kubernetes Dashboard enabled?
- subnet
Name string - The subnet name for the virtual nodes to run.
- enabled bool
- Is the Kubernetes Dashboard enabled?
- subnet_
name str - The subnet name for the virtual nodes to run.
- enabled Boolean
- Is the Kubernetes Dashboard enabled?
- subnet
Name String - The subnet name for the virtual nodes to run.
KubernetesClusterAddonProfileAzureKeyvaultSecretsProvider, KubernetesClusterAddonProfileAzureKeyvaultSecretsProviderArgs
- Enabled bool
- Is the Kubernetes Dashboard enabled?
- Secret
Identities List<KubernetesCluster Addon Profile Azure Keyvault Secrets Provider Secret Identity> - An
secret_identityblock is exported. The exported attributes are defined below. - Secret
Rotation boolEnabled - Is secret rotation enabled?
- Secret
Rotation stringInterval - The interval to poll for secret rotation. This attribute is only set when
secret_rotationis true and defaults to2m.
- Enabled bool
- Is the Kubernetes Dashboard enabled?
- Secret
Identities []KubernetesCluster Addon Profile Azure Keyvault Secrets Provider Secret Identity - An
secret_identityblock is exported. The exported attributes are defined below. - Secret
Rotation boolEnabled - Is secret rotation enabled?
- Secret
Rotation stringInterval - The interval to poll for secret rotation. This attribute is only set when
secret_rotationis true and defaults to2m.
- enabled Boolean
- Is the Kubernetes Dashboard enabled?
- secret
Identities List<KubernetesCluster Addon Profile Azure Keyvault Secrets Provider Secret Identity> - An
secret_identityblock is exported. The exported attributes are defined below. - secret
Rotation BooleanEnabled - Is secret rotation enabled?
- secret
Rotation StringInterval - The interval to poll for secret rotation. This attribute is only set when
secret_rotationis true and defaults to2m.
- enabled boolean
- Is the Kubernetes Dashboard enabled?
- secret
Identities KubernetesCluster Addon Profile Azure Keyvault Secrets Provider Secret Identity[] - An
secret_identityblock is exported. The exported attributes are defined below. - secret
Rotation booleanEnabled - Is secret rotation enabled?
- secret
Rotation stringInterval - The interval to poll for secret rotation. This attribute is only set when
secret_rotationis true and defaults to2m.
- enabled bool
- Is the Kubernetes Dashboard enabled?
- secret_
identities Sequence[KubernetesCluster Addon Profile Azure Keyvault Secrets Provider Secret Identity] - An
secret_identityblock is exported. The exported attributes are defined below. - secret_
rotation_ boolenabled - Is secret rotation enabled?
- secret_
rotation_ strinterval - The interval to poll for secret rotation. This attribute is only set when
secret_rotationis true and defaults to2m.
- enabled Boolean
- Is the Kubernetes Dashboard enabled?
- secret
Identities List<Property Map> - An
secret_identityblock is exported. The exported attributes are defined below. - secret
Rotation BooleanEnabled - Is secret rotation enabled?
- secret
Rotation StringInterval - The interval to poll for secret rotation. This attribute is only set when
secret_rotationis true and defaults to2m.
KubernetesClusterAddonProfileAzureKeyvaultSecretsProviderSecretIdentity, KubernetesClusterAddonProfileAzureKeyvaultSecretsProviderSecretIdentityArgs
- Client
Id string - The Client ID of the user-defined Managed Identity to be assigned to the Kubelets. If not specified a Managed Identity is created automatically.
- Object
Id string - The Object ID of the user-defined Managed Identity assigned to the Kubelets.If not specified a Managed Identity is created automatically.
- User
Assigned stringIdentity Id - The ID of a user assigned identity.
- Client
Id string - The Client ID of the user-defined Managed Identity to be assigned to the Kubelets. If not specified a Managed Identity is created automatically.
- Object
Id string - The Object ID of the user-defined Managed Identity assigned to the Kubelets.If not specified a Managed Identity is created automatically.
- User
Assigned stringIdentity Id - The ID of a user assigned identity.
- client
Id String - The Client ID of the user-defined Managed Identity to be assigned to the Kubelets. If not specified a Managed Identity is created automatically.
- object
Id String - The Object ID of the user-defined Managed Identity assigned to the Kubelets.If not specified a Managed Identity is created automatically.
- user
Assigned StringIdentity Id - The ID of a user assigned identity.
- client
Id string - The Client ID of the user-defined Managed Identity to be assigned to the Kubelets. If not specified a Managed Identity is created automatically.
- object
Id string - The Object ID of the user-defined Managed Identity assigned to the Kubelets.If not specified a Managed Identity is created automatically.
- user
Assigned stringIdentity Id - The ID of a user assigned identity.
- client_
id str - The Client ID of the user-defined Managed Identity to be assigned to the Kubelets. If not specified a Managed Identity is created automatically.
- object_
id str - The Object ID of the user-defined Managed Identity assigned to the Kubelets.If not specified a Managed Identity is created automatically.
- user_
assigned_ stridentity_ id - The ID of a user assigned identity.
- client
Id String - The Client ID of the user-defined Managed Identity to be assigned to the Kubelets. If not specified a Managed Identity is created automatically.
- object
Id String - The Object ID of the user-defined Managed Identity assigned to the Kubelets.If not specified a Managed Identity is created automatically.
- user
Assigned StringIdentity Id - The ID of a user assigned identity.
KubernetesClusterAddonProfileAzurePolicy, KubernetesClusterAddonProfileAzurePolicyArgs
- Enabled bool
- Is the Kubernetes Dashboard enabled?
- Enabled bool
- Is the Kubernetes Dashboard enabled?
- enabled Boolean
- Is the Kubernetes Dashboard enabled?
- enabled boolean
- Is the Kubernetes Dashboard enabled?
- enabled bool
- Is the Kubernetes Dashboard enabled?
- enabled Boolean
- Is the Kubernetes Dashboard enabled?
KubernetesClusterAddonProfileHttpApplicationRouting, KubernetesClusterAddonProfileHttpApplicationRoutingArgs
- Enabled bool
- Is the Kubernetes Dashboard enabled?
- Http
Application stringRouting Zone Name - The Zone Name of the HTTP Application Routing.
- Enabled bool
- Is the Kubernetes Dashboard enabled?
- Http
Application stringRouting Zone Name - The Zone Name of the HTTP Application Routing.
- enabled Boolean
- Is the Kubernetes Dashboard enabled?
- http
Application StringRouting Zone Name - The Zone Name of the HTTP Application Routing.
- enabled boolean
- Is the Kubernetes Dashboard enabled?
- http
Application stringRouting Zone Name - The Zone Name of the HTTP Application Routing.
- enabled bool
- Is the Kubernetes Dashboard enabled?
- http_
application_ strrouting_ zone_ name - The Zone Name of the HTTP Application Routing.
- enabled Boolean
- Is the Kubernetes Dashboard enabled?
- http
Application StringRouting Zone Name - The Zone Name of the HTTP Application Routing.
KubernetesClusterAddonProfileIngressApplicationGateway, KubernetesClusterAddonProfileIngressApplicationGatewayArgs
- Enabled bool
- Is the Kubernetes Dashboard enabled?
- Effective
Gateway stringId - The ID of the Application Gateway associated with the ingress controller deployed to this Kubernetes Cluster.
- Gateway
Id string - The ID of the Application Gateway to integrate with the ingress controller of this Kubernetes Cluster. See this page for further details.
- Gateway
Name string - The name of the Application Gateway to be used or created in the Nodepool Resource Group, which in turn will be integrated with the ingress controller of this Kubernetes Cluster. See this page for further details.
- Ingress
Application List<KubernetesGateway Identities Cluster Addon Profile Ingress Application Gateway Ingress Application Gateway Identity> - An
ingress_application_gateway_identityblock is exported. The exported attributes are defined below. - Subnet
Cidr string - The subnet CIDR to be used to create an Application Gateway, which in turn will be integrated with the ingress controller of this Kubernetes Cluster. See this page for further details.
- Subnet
Id string - The ID of the subnet on which to create an Application Gateway, which in turn will be integrated with the ingress controller of this Kubernetes Cluster. See this page for further details.
- Enabled bool
- Is the Kubernetes Dashboard enabled?
- Effective
Gateway stringId - The ID of the Application Gateway associated with the ingress controller deployed to this Kubernetes Cluster.
- Gateway
Id string - The ID of the Application Gateway to integrate with the ingress controller of this Kubernetes Cluster. See this page for further details.
- Gateway
Name string - The name of the Application Gateway to be used or created in the Nodepool Resource Group, which in turn will be integrated with the ingress controller of this Kubernetes Cluster. See this page for further details.
- Ingress
Application []KubernetesGateway Identities Cluster Addon Profile Ingress Application Gateway Ingress Application Gateway Identity - An
ingress_application_gateway_identityblock is exported. The exported attributes are defined below. - Subnet
Cidr string - The subnet CIDR to be used to create an Application Gateway, which in turn will be integrated with the ingress controller of this Kubernetes Cluster. See this page for further details.
- Subnet
Id string - The ID of the subnet on which to create an Application Gateway, which in turn will be integrated with the ingress controller of this Kubernetes Cluster. See this page for further details.
- enabled Boolean
- Is the Kubernetes Dashboard enabled?
- effective
Gateway StringId - The ID of the Application Gateway associated with the ingress controller deployed to this Kubernetes Cluster.
- gateway
Id String - The ID of the Application Gateway to integrate with the ingress controller of this Kubernetes Cluster. See this page for further details.
- gateway
Name String - The name of the Application Gateway to be used or created in the Nodepool Resource Group, which in turn will be integrated with the ingress controller of this Kubernetes Cluster. See this page for further details.
- ingress
Application List<KubernetesGateway Identities Cluster Addon Profile Ingress Application Gateway Ingress Application Gateway Identity> - An
ingress_application_gateway_identityblock is exported. The exported attributes are defined below. - subnet
Cidr String - The subnet CIDR to be used to create an Application Gateway, which in turn will be integrated with the ingress controller of this Kubernetes Cluster. See this page for further details.
- subnet
Id String - The ID of the subnet on which to create an Application Gateway, which in turn will be integrated with the ingress controller of this Kubernetes Cluster. See this page for further details.
- enabled boolean
- Is the Kubernetes Dashboard enabled?
- effective
Gateway stringId - The ID of the Application Gateway associated with the ingress controller deployed to this Kubernetes Cluster.
- gateway
Id string - The ID of the Application Gateway to integrate with the ingress controller of this Kubernetes Cluster. See this page for further details.
- gateway
Name string - The name of the Application Gateway to be used or created in the Nodepool Resource Group, which in turn will be integrated with the ingress controller of this Kubernetes Cluster. See this page for further details.
- ingress
Application KubernetesGateway Identities Cluster Addon Profile Ingress Application Gateway Ingress Application Gateway Identity[] - An
ingress_application_gateway_identityblock is exported. The exported attributes are defined below. - subnet
Cidr string - The subnet CIDR to be used to create an Application Gateway, which in turn will be integrated with the ingress controller of this Kubernetes Cluster. See this page for further details.
- subnet
Id string - The ID of the subnet on which to create an Application Gateway, which in turn will be integrated with the ingress controller of this Kubernetes Cluster. See this page for further details.
- enabled bool
- Is the Kubernetes Dashboard enabled?
- effective_
gateway_ strid - The ID of the Application Gateway associated with the ingress controller deployed to this Kubernetes Cluster.
- gateway_
id str - The ID of the Application Gateway to integrate with the ingress controller of this Kubernetes Cluster. See this page for further details.
- gateway_
name str - The name of the Application Gateway to be used or created in the Nodepool Resource Group, which in turn will be integrated with the ingress controller of this Kubernetes Cluster. See this page for further details.
- ingress_
application_ Sequence[Kubernetesgateway_ identities Cluster Addon Profile Ingress Application Gateway Ingress Application Gateway Identity] - An
ingress_application_gateway_identityblock is exported. The exported attributes are defined below. - subnet_
cidr str - The subnet CIDR to be used to create an Application Gateway, which in turn will be integrated with the ingress controller of this Kubernetes Cluster. See this page for further details.
- subnet_
id str - The ID of the subnet on which to create an Application Gateway, which in turn will be integrated with the ingress controller of this Kubernetes Cluster. See this page for further details.
- enabled Boolean
- Is the Kubernetes Dashboard enabled?
- effective
Gateway StringId - The ID of the Application Gateway associated with the ingress controller deployed to this Kubernetes Cluster.
- gateway
Id String - The ID of the Application Gateway to integrate with the ingress controller of this Kubernetes Cluster. See this page for further details.
- gateway
Name String - The name of the Application Gateway to be used or created in the Nodepool Resource Group, which in turn will be integrated with the ingress controller of this Kubernetes Cluster. See this page for further details.
- ingress
Application List<Property Map>Gateway Identities - An
ingress_application_gateway_identityblock is exported. The exported attributes are defined below. - subnet
Cidr String - The subnet CIDR to be used to create an Application Gateway, which in turn will be integrated with the ingress controller of this Kubernetes Cluster. See this page for further details.
- subnet
Id String - The ID of the subnet on which to create an Application Gateway, which in turn will be integrated with the ingress controller of this Kubernetes Cluster. See this page for further details.
KubernetesClusterAddonProfileIngressApplicationGatewayIngressApplicationGatewayIdentity, KubernetesClusterAddonProfileIngressApplicationGatewayIngressApplicationGatewayIdentityArgs
- Client
Id string - The Client ID of the user-defined Managed Identity to be assigned to the Kubelets. If not specified a Managed Identity is created automatically.
- Object
Id string - The Object ID of the user-defined Managed Identity assigned to the Kubelets.If not specified a Managed Identity is created automatically.
- User
Assigned stringIdentity Id - The ID of a user assigned identity.
- Client
Id string - The Client ID of the user-defined Managed Identity to be assigned to the Kubelets. If not specified a Managed Identity is created automatically.
- Object
Id string - The Object ID of the user-defined Managed Identity assigned to the Kubelets.If not specified a Managed Identity is created automatically.
- User
Assigned stringIdentity Id - The ID of a user assigned identity.
- client
Id String - The Client ID of the user-defined Managed Identity to be assigned to the Kubelets. If not specified a Managed Identity is created automatically.
- object
Id String - The Object ID of the user-defined Managed Identity assigned to the Kubelets.If not specified a Managed Identity is created automatically.
- user
Assigned StringIdentity Id - The ID of a user assigned identity.
- client
Id string - The Client ID of the user-defined Managed Identity to be assigned to the Kubelets. If not specified a Managed Identity is created automatically.
- object
Id string - The Object ID of the user-defined Managed Identity assigned to the Kubelets.If not specified a Managed Identity is created automatically.
- user
Assigned stringIdentity Id - The ID of a user assigned identity.
- client_
id str - The Client ID of the user-defined Managed Identity to be assigned to the Kubelets. If not specified a Managed Identity is created automatically.
- object_
id str - The Object ID of the user-defined Managed Identity assigned to the Kubelets.If not specified a Managed Identity is created automatically.
- user_
assigned_ stridentity_ id - The ID of a user assigned identity.
- client
Id String - The Client ID of the user-defined Managed Identity to be assigned to the Kubelets. If not specified a Managed Identity is created automatically.
- object
Id String - The Object ID of the user-defined Managed Identity assigned to the Kubelets.If not specified a Managed Identity is created automatically.
- user
Assigned StringIdentity Id - The ID of a user assigned identity.
KubernetesClusterAddonProfileKubeDashboard, KubernetesClusterAddonProfileKubeDashboardArgs
- Enabled bool
- Is the Kubernetes Dashboard enabled?
- Enabled bool
- Is the Kubernetes Dashboard enabled?
- enabled Boolean
- Is the Kubernetes Dashboard enabled?
- enabled boolean
- Is the Kubernetes Dashboard enabled?
- enabled bool
- Is the Kubernetes Dashboard enabled?
- enabled Boolean
- Is the Kubernetes Dashboard enabled?
KubernetesClusterAddonProfileOmsAgent, KubernetesClusterAddonProfileOmsAgentArgs
- Enabled bool
- Is the Kubernetes Dashboard enabled?
- Log
Analytics stringWorkspace Id - The ID of the Log Analytics Workspace which the OMS Agent should send data to.
- Oms
Agent List<KubernetesIdentities Cluster Addon Profile Oms Agent Oms Agent Identity> - An
oms_agent_identityblock is exported. The exported attributes are defined below.
- Enabled bool
- Is the Kubernetes Dashboard enabled?
- Log
Analytics stringWorkspace Id - The ID of the Log Analytics Workspace which the OMS Agent should send data to.
- Oms
Agent []KubernetesIdentities Cluster Addon Profile Oms Agent Oms Agent Identity - An
oms_agent_identityblock is exported. The exported attributes are defined below.
- enabled Boolean
- Is the Kubernetes Dashboard enabled?
- log
Analytics StringWorkspace Id - The ID of the Log Analytics Workspace which the OMS Agent should send data to.
- oms
Agent List<KubernetesIdentities Cluster Addon Profile Oms Agent Oms Agent Identity> - An
oms_agent_identityblock is exported. The exported attributes are defined below.
- enabled boolean
- Is the Kubernetes Dashboard enabled?
- log
Analytics stringWorkspace Id - The ID of the Log Analytics Workspace which the OMS Agent should send data to.
- oms
Agent KubernetesIdentities Cluster Addon Profile Oms Agent Oms Agent Identity[] - An
oms_agent_identityblock is exported. The exported attributes are defined below.
- enabled bool
- Is the Kubernetes Dashboard enabled?
- log_
analytics_ strworkspace_ id - The ID of the Log Analytics Workspace which the OMS Agent should send data to.
- oms_
agent_ Sequence[Kubernetesidentities Cluster Addon Profile Oms Agent Oms Agent Identity] - An
oms_agent_identityblock is exported. The exported attributes are defined below.
- enabled Boolean
- Is the Kubernetes Dashboard enabled?
- log
Analytics StringWorkspace Id - The ID of the Log Analytics Workspace which the OMS Agent should send data to.
- oms
Agent List<Property Map>Identities - An
oms_agent_identityblock is exported. The exported attributes are defined below.
KubernetesClusterAddonProfileOmsAgentOmsAgentIdentity, KubernetesClusterAddonProfileOmsAgentOmsAgentIdentityArgs
- Client
Id string - The Client ID of the user-defined Managed Identity to be assigned to the Kubelets. If not specified a Managed Identity is created automatically.
- Object
Id string - The Object ID of the user-defined Managed Identity assigned to the Kubelets.If not specified a Managed Identity is created automatically.
- User
Assigned stringIdentity Id - The ID of a user assigned identity.
- Client
Id string - The Client ID of the user-defined Managed Identity to be assigned to the Kubelets. If not specified a Managed Identity is created automatically.
- Object
Id string - The Object ID of the user-defined Managed Identity assigned to the Kubelets.If not specified a Managed Identity is created automatically.
- User
Assigned stringIdentity Id - The ID of a user assigned identity.
- client
Id String - The Client ID of the user-defined Managed Identity to be assigned to the Kubelets. If not specified a Managed Identity is created automatically.
- object
Id String - The Object ID of the user-defined Managed Identity assigned to the Kubelets.If not specified a Managed Identity is created automatically.
- user
Assigned StringIdentity Id - The ID of a user assigned identity.
- client
Id string - The Client ID of the user-defined Managed Identity to be assigned to the Kubelets. If not specified a Managed Identity is created automatically.
- object
Id string - The Object ID of the user-defined Managed Identity assigned to the Kubelets.If not specified a Managed Identity is created automatically.
- user
Assigned stringIdentity Id - The ID of a user assigned identity.
- client_
id str - The Client ID of the user-defined Managed Identity to be assigned to the Kubelets. If not specified a Managed Identity is created automatically.
- object_
id str - The Object ID of the user-defined Managed Identity assigned to the Kubelets.If not specified a Managed Identity is created automatically.
- user_
assigned_ stridentity_ id - The ID of a user assigned identity.
- client
Id String - The Client ID of the user-defined Managed Identity to be assigned to the Kubelets. If not specified a Managed Identity is created automatically.
- object
Id String - The Object ID of the user-defined Managed Identity assigned to the Kubelets.If not specified a Managed Identity is created automatically.
- user
Assigned StringIdentity Id - The ID of a user assigned identity.
KubernetesClusterAddonProfileOpenServiceMesh, KubernetesClusterAddonProfileOpenServiceMeshArgs
- Enabled bool
- Is the Kubernetes Dashboard enabled?
- Enabled bool
- Is the Kubernetes Dashboard enabled?
- enabled Boolean
- Is the Kubernetes Dashboard enabled?
- enabled boolean
- Is the Kubernetes Dashboard enabled?
- enabled bool
- Is the Kubernetes Dashboard enabled?
- enabled Boolean
- Is the Kubernetes Dashboard enabled?
KubernetesClusterAutoScalerProfile, KubernetesClusterAutoScalerProfileArgs
- Balance
Similar boolNode Groups - Detect similar node groups and balance the number of nodes between them. Defaults to
false. - Empty
Bulk stringDelete Max - Maximum number of empty nodes that can be deleted at the same time. Defaults to
10. - Expander string
- Expander to use. Possible values are
least-waste,priority,most-podsandrandom. Defaults torandom. - Max
Graceful stringTermination Sec - Maximum number of seconds the cluster autoscaler waits for pod termination when trying to scale down a node. Defaults to
600. - Max
Node stringProvisioning Time - Maximum time the autoscaler waits for a node to be provisioned. Defaults to
15m. - Max
Unready intNodes - Maximum Number of allowed unready nodes. Defaults to
3. - Max
Unready doublePercentage - Maximum percentage of unready nodes the cluster autoscaler will stop if the percentage is exceeded. Defaults to
45. - New
Pod stringScale Up Delay - For scenarios like burst/batch scale where you don't want CA to act before the kubernetes scheduler could schedule all the pods, you can tell CA to ignore unscheduled pods before they're a certain age. Defaults to
10s. - Scale
Down stringDelay After Add - How long after the scale up of AKS nodes the scale down evaluation resumes. Defaults to
10m. - Scale
Down stringDelay After Delete - How long after node deletion that scale down evaluation resumes. Defaults to the value used for
scan_interval. - Scale
Down stringDelay After Failure - How long after scale down failure that scale down evaluation resumes. Defaults to
3m. - Scale
Down stringUnneeded - How long a node should be unneeded before it is eligible for scale down. Defaults to
10m. - Scale
Down stringUnready - How long an unready node should be unneeded before it is eligible for scale down. Defaults to
20m. - Scale
Down stringUtilization Threshold - Node utilization level, defined as sum of requested resources divided by capacity, below which a node can be considered for scale down. Defaults to
0.5. - Scan
Interval string - How often the AKS Cluster should be re-evaluated for scale up/down. Defaults to
10s. - Skip
Nodes boolWith Local Storage - If
truecluster autoscaler will never delete nodes with pods with local storage, for example, EmptyDir or HostPath. Defaults totrue. - Skip
Nodes boolWith System Pods - If
truecluster autoscaler will never delete nodes with pods from kube-system (except for DaemonSet or mirror pods). Defaults totrue.
- Balance
Similar boolNode Groups - Detect similar node groups and balance the number of nodes between them. Defaults to
false. - Empty
Bulk stringDelete Max - Maximum number of empty nodes that can be deleted at the same time. Defaults to
10. - Expander string
- Expander to use. Possible values are
least-waste,priority,most-podsandrandom. Defaults torandom. - Max
Graceful stringTermination Sec - Maximum number of seconds the cluster autoscaler waits for pod termination when trying to scale down a node. Defaults to
600. - Max
Node stringProvisioning Time - Maximum time the autoscaler waits for a node to be provisioned. Defaults to
15m. - Max
Unready intNodes - Maximum Number of allowed unready nodes. Defaults to
3. - Max
Unready float64Percentage - Maximum percentage of unready nodes the cluster autoscaler will stop if the percentage is exceeded. Defaults to
45. - New
Pod stringScale Up Delay - For scenarios like burst/batch scale where you don't want CA to act before the kubernetes scheduler could schedule all the pods, you can tell CA to ignore unscheduled pods before they're a certain age. Defaults to
10s. - Scale
Down stringDelay After Add - How long after the scale up of AKS nodes the scale down evaluation resumes. Defaults to
10m. - Scale
Down stringDelay After Delete - How long after node deletion that scale down evaluation resumes. Defaults to the value used for
scan_interval. - Scale
Down stringDelay After Failure - How long after scale down failure that scale down evaluation resumes. Defaults to
3m. - Scale
Down stringUnneeded - How long a node should be unneeded before it is eligible for scale down. Defaults to
10m. - Scale
Down stringUnready - How long an unready node should be unneeded before it is eligible for scale down. Defaults to
20m. - Scale
Down stringUtilization Threshold - Node utilization level, defined as sum of requested resources divided by capacity, below which a node can be considered for scale down. Defaults to
0.5. - Scan
Interval string - How often the AKS Cluster should be re-evaluated for scale up/down. Defaults to
10s. - Skip
Nodes boolWith Local Storage - If
truecluster autoscaler will never delete nodes with pods with local storage, for example, EmptyDir or HostPath. Defaults totrue. - Skip
Nodes boolWith System Pods - If
truecluster autoscaler will never delete nodes with pods from kube-system (except for DaemonSet or mirror pods). Defaults totrue.
- balance
Similar BooleanNode Groups - Detect similar node groups and balance the number of nodes between them. Defaults to
false. - empty
Bulk StringDelete Max - Maximum number of empty nodes that can be deleted at the same time. Defaults to
10. - expander String
- Expander to use. Possible values are
least-waste,priority,most-podsandrandom. Defaults torandom. - max
Graceful StringTermination Sec - Maximum number of seconds the cluster autoscaler waits for pod termination when trying to scale down a node. Defaults to
600. - max
Node StringProvisioning Time - Maximum time the autoscaler waits for a node to be provisioned. Defaults to
15m. - max
Unready IntegerNodes - Maximum Number of allowed unready nodes. Defaults to
3. - max
Unready DoublePercentage - Maximum percentage of unready nodes the cluster autoscaler will stop if the percentage is exceeded. Defaults to
45. - new
Pod StringScale Up Delay - For scenarios like burst/batch scale where you don't want CA to act before the kubernetes scheduler could schedule all the pods, you can tell CA to ignore unscheduled pods before they're a certain age. Defaults to
10s. - scale
Down StringDelay After Add - How long after the scale up of AKS nodes the scale down evaluation resumes. Defaults to
10m. - scale
Down StringDelay After Delete - How long after node deletion that scale down evaluation resumes. Defaults to the value used for
scan_interval. - scale
Down StringDelay After Failure - How long after scale down failure that scale down evaluation resumes. Defaults to
3m. - scale
Down StringUnneeded - How long a node should be unneeded before it is eligible for scale down. Defaults to
10m. - scale
Down StringUnready - How long an unready node should be unneeded before it is eligible for scale down. Defaults to
20m. - scale
Down StringUtilization Threshold - Node utilization level, defined as sum of requested resources divided by capacity, below which a node can be considered for scale down. Defaults to
0.5. - scan
Interval String - How often the AKS Cluster should be re-evaluated for scale up/down. Defaults to
10s. - skip
Nodes BooleanWith Local Storage - If
truecluster autoscaler will never delete nodes with pods with local storage, for example, EmptyDir or HostPath. Defaults totrue. - skip
Nodes BooleanWith System Pods - If
truecluster autoscaler will never delete nodes with pods from kube-system (except for DaemonSet or mirror pods). Defaults totrue.
- balance
Similar booleanNode Groups - Detect similar node groups and balance the number of nodes between them. Defaults to
false. - empty
Bulk stringDelete Max - Maximum number of empty nodes that can be deleted at the same time. Defaults to
10. - expander string
- Expander to use. Possible values are
least-waste,priority,most-podsandrandom. Defaults torandom. - max
Graceful stringTermination Sec - Maximum number of seconds the cluster autoscaler waits for pod termination when trying to scale down a node. Defaults to
600. - max
Node stringProvisioning Time - Maximum time the autoscaler waits for a node to be provisioned. Defaults to
15m. - max
Unready numberNodes - Maximum Number of allowed unready nodes. Defaults to
3. - max
Unready numberPercentage - Maximum percentage of unready nodes the cluster autoscaler will stop if the percentage is exceeded. Defaults to
45. - new
Pod stringScale Up Delay - For scenarios like burst/batch scale where you don't want CA to act before the kubernetes scheduler could schedule all the pods, you can tell CA to ignore unscheduled pods before they're a certain age. Defaults to
10s. - scale
Down stringDelay After Add - How long after the scale up of AKS nodes the scale down evaluation resumes. Defaults to
10m. - scale
Down stringDelay After Delete - How long after node deletion that scale down evaluation resumes. Defaults to the value used for
scan_interval. - scale
Down stringDelay After Failure - How long after scale down failure that scale down evaluation resumes. Defaults to
3m. - scale
Down stringUnneeded - How long a node should be unneeded before it is eligible for scale down. Defaults to
10m. - scale
Down stringUnready - How long an unready node should be unneeded before it is eligible for scale down. Defaults to
20m. - scale
Down stringUtilization Threshold - Node utilization level, defined as sum of requested resources divided by capacity, below which a node can be considered for scale down. Defaults to
0.5. - scan
Interval string - How often the AKS Cluster should be re-evaluated for scale up/down. Defaults to
10s. - skip
Nodes booleanWith Local Storage - If
truecluster autoscaler will never delete nodes with pods with local storage, for example, EmptyDir or HostPath. Defaults totrue. - skip
Nodes booleanWith System Pods - If
truecluster autoscaler will never delete nodes with pods from kube-system (except for DaemonSet or mirror pods). Defaults totrue.
- balance_
similar_ boolnode_ groups - Detect similar node groups and balance the number of nodes between them. Defaults to
false. - empty_
bulk_ strdelete_ max - Maximum number of empty nodes that can be deleted at the same time. Defaults to
10. - expander str
- Expander to use. Possible values are
least-waste,priority,most-podsandrandom. Defaults torandom. - max_
graceful_ strtermination_ sec - Maximum number of seconds the cluster autoscaler waits for pod termination when trying to scale down a node. Defaults to
600. - max_
node_ strprovisioning_ time - Maximum time the autoscaler waits for a node to be provisioned. Defaults to
15m. - max_
unready_ intnodes - Maximum Number of allowed unready nodes. Defaults to
3. - max_
unready_ floatpercentage - Maximum percentage of unready nodes the cluster autoscaler will stop if the percentage is exceeded. Defaults to
45. - new_
pod_ strscale_ up_ delay - For scenarios like burst/batch scale where you don't want CA to act before the kubernetes scheduler could schedule all the pods, you can tell CA to ignore unscheduled pods before they're a certain age. Defaults to
10s. - scale_
down_ strdelay_ after_ add - How long after the scale up of AKS nodes the scale down evaluation resumes. Defaults to
10m. - scale_
down_ strdelay_ after_ delete - How long after node deletion that scale down evaluation resumes. Defaults to the value used for
scan_interval. - scale_
down_ strdelay_ after_ failure - How long after scale down failure that scale down evaluation resumes. Defaults to
3m. - scale_
down_ strunneeded - How long a node should be unneeded before it is eligible for scale down. Defaults to
10m. - scale_
down_ strunready - How long an unready node should be unneeded before it is eligible for scale down. Defaults to
20m. - scale_
down_ strutilization_ threshold - Node utilization level, defined as sum of requested resources divided by capacity, below which a node can be considered for scale down. Defaults to
0.5. - scan_
interval str - How often the AKS Cluster should be re-evaluated for scale up/down. Defaults to
10s. - skip_
nodes_ boolwith_ local_ storage - If
truecluster autoscaler will never delete nodes with pods with local storage, for example, EmptyDir or HostPath. Defaults totrue. - skip_
nodes_ boolwith_ system_ pods - If
truecluster autoscaler will never delete nodes with pods from kube-system (except for DaemonSet or mirror pods). Defaults totrue.
- balance
Similar BooleanNode Groups - Detect similar node groups and balance the number of nodes between them. Defaults to
false. - empty
Bulk StringDelete Max - Maximum number of empty nodes that can be deleted at the same time. Defaults to
10. - expander String
- Expander to use. Possible values are
least-waste,priority,most-podsandrandom. Defaults torandom. - max
Graceful StringTermination Sec - Maximum number of seconds the cluster autoscaler waits for pod termination when trying to scale down a node. Defaults to
600. - max
Node StringProvisioning Time - Maximum time the autoscaler waits for a node to be provisioned. Defaults to
15m. - max
Unready NumberNodes - Maximum Number of allowed unready nodes. Defaults to
3. - max
Unready NumberPercentage - Maximum percentage of unready nodes the cluster autoscaler will stop if the percentage is exceeded. Defaults to
45. - new
Pod StringScale Up Delay - For scenarios like burst/batch scale where you don't want CA to act before the kubernetes scheduler could schedule all the pods, you can tell CA to ignore unscheduled pods before they're a certain age. Defaults to
10s. - scale
Down StringDelay After Add - How long after the scale up of AKS nodes the scale down evaluation resumes. Defaults to
10m. - scale
Down StringDelay After Delete - How long after node deletion that scale down evaluation resumes. Defaults to the value used for
scan_interval. - scale
Down StringDelay After Failure - How long after scale down failure that scale down evaluation resumes. Defaults to
3m. - scale
Down StringUnneeded - How long a node should be unneeded before it is eligible for scale down. Defaults to
10m. - scale
Down StringUnready - How long an unready node should be unneeded before it is eligible for scale down. Defaults to
20m. - scale
Down StringUtilization Threshold - Node utilization level, defined as sum of requested resources divided by capacity, below which a node can be considered for scale down. Defaults to
0.5. - scan
Interval String - How often the AKS Cluster should be re-evaluated for scale up/down. Defaults to
10s. - skip
Nodes BooleanWith Local Storage - If
truecluster autoscaler will never delete nodes with pods with local storage, for example, EmptyDir or HostPath. Defaults totrue. - skip
Nodes BooleanWith System Pods - If
truecluster autoscaler will never delete nodes with pods from kube-system (except for DaemonSet or mirror pods). Defaults totrue.
KubernetesClusterAzureActiveDirectoryRoleBasedAccessControl, KubernetesClusterAzureActiveDirectoryRoleBasedAccessControlArgs
- Admin
Group List<string>Object Ids - A list of Object IDs of Azure Active Directory Groups which should have Admin Role on the Cluster.
- Azure
Rbac boolEnabled - Is Role Based Access Control based on Azure AD enabled?
- Client
App stringId - The Client ID of an Azure Active Directory Application.
- Managed bool
- Is the Azure Active Directory integration Managed, meaning that Azure will create/manage the Service Principal used for integration.
- Server
App stringId - The Server ID of an Azure Active Directory Application.
- Server
App stringSecret - The Server Secret of an Azure Active Directory Application.
- Tenant
Id string - The Tenant ID used for Azure Active Directory Application. If this isn't specified the Tenant ID of the current Subscription is used.
- Admin
Group []stringObject Ids - A list of Object IDs of Azure Active Directory Groups which should have Admin Role on the Cluster.
- Azure
Rbac boolEnabled - Is Role Based Access Control based on Azure AD enabled?
- Client
App stringId - The Client ID of an Azure Active Directory Application.
- Managed bool
- Is the Azure Active Directory integration Managed, meaning that Azure will create/manage the Service Principal used for integration.
- Server
App stringId - The Server ID of an Azure Active Directory Application.
- Server
App stringSecret - The Server Secret of an Azure Active Directory Application.
- Tenant
Id string - The Tenant ID used for Azure Active Directory Application. If this isn't specified the Tenant ID of the current Subscription is used.
- admin
Group List<String>Object Ids - A list of Object IDs of Azure Active Directory Groups which should have Admin Role on the Cluster.
- azure
Rbac BooleanEnabled - Is Role Based Access Control based on Azure AD enabled?
- client
App StringId - The Client ID of an Azure Active Directory Application.
- managed Boolean
- Is the Azure Active Directory integration Managed, meaning that Azure will create/manage the Service Principal used for integration.
- server
App StringId - The Server ID of an Azure Active Directory Application.
- server
App StringSecret - The Server Secret of an Azure Active Directory Application.
- tenant
Id String - The Tenant ID used for Azure Active Directory Application. If this isn't specified the Tenant ID of the current Subscription is used.
- admin
Group string[]Object Ids - A list of Object IDs of Azure Active Directory Groups which should have Admin Role on the Cluster.
- azure
Rbac booleanEnabled - Is Role Based Access Control based on Azure AD enabled?
- client
App stringId - The Client ID of an Azure Active Directory Application.
- managed boolean
- Is the Azure Active Directory integration Managed, meaning that Azure will create/manage the Service Principal used for integration.
- server
App stringId - The Server ID of an Azure Active Directory Application.
- server
App stringSecret - The Server Secret of an Azure Active Directory Application.
- tenant
Id string - The Tenant ID used for Azure Active Directory Application. If this isn't specified the Tenant ID of the current Subscription is used.
- admin_
group_ Sequence[str]object_ ids - A list of Object IDs of Azure Active Directory Groups which should have Admin Role on the Cluster.
- azure_
rbac_ boolenabled - Is Role Based Access Control based on Azure AD enabled?
- client_
app_ strid - The Client ID of an Azure Active Directory Application.
- managed bool
- Is the Azure Active Directory integration Managed, meaning that Azure will create/manage the Service Principal used for integration.
- server_
app_ strid - The Server ID of an Azure Active Directory Application.
- server_
app_ strsecret - The Server Secret of an Azure Active Directory Application.
- tenant_
id str - The Tenant ID used for Azure Active Directory Application. If this isn't specified the Tenant ID of the current Subscription is used.
- admin
Group List<String>Object Ids - A list of Object IDs of Azure Active Directory Groups which should have Admin Role on the Cluster.
- azure
Rbac BooleanEnabled - Is Role Based Access Control based on Azure AD enabled?
- client
App StringId - The Client ID of an Azure Active Directory Application.
- managed Boolean
- Is the Azure Active Directory integration Managed, meaning that Azure will create/manage the Service Principal used for integration.
- server
App StringId - The Server ID of an Azure Active Directory Application.
- server
App StringSecret - The Server Secret of an Azure Active Directory Application.
- tenant
Id String - The Tenant ID used for Azure Active Directory Application. If this isn't specified the Tenant ID of the current Subscription is used.
KubernetesClusterDefaultNodePool, KubernetesClusterDefaultNodePoolArgs
- Name string
- The name which should be used for the default Kubernetes Node Pool. Changing this forces a new resource to be created.
- Vm
Size string - The size of the Virtual Machine, such as
Standard_DS2_v2. - Availability
Zones List<string> - A list of Availability Zones across which the Node Pool should be spread. Changing this forces a new resource to be created.
- Enable
Auto boolScaling - Should the Kubernetes Auto Scaler be enabled for this Node Pool? Defaults to
false. - Enable
Host boolEncryption - Should the nodes in the Default Node Pool have host encryption enabled? Defaults to
false. - Enable
Node boolPublic Ip - Should nodes in this Node Pool have a Public IP Address? Defaults to
false. Changing this forces a new resource to be created. - Fips
Enabled bool - Should the nodes in this Node Pool have Federal Information Processing Standard enabled? Changing this forces a new resource to be created.
- Kubelet
Config KubernetesCluster Default Node Pool Kubelet Config - A
kubelet_configblock as defined below. - Kubelet
Disk stringType - The type of disk used by kubelet. Possible values are
OSandTemporary. - Linux
Os KubernetesConfig Cluster Default Node Pool Linux Os Config - A
linux_os_configblock as defined below. - Max
Count int - The maximum number of nodes which should exist in this Node Pool. If specified this must be between
1and1000. - Max
Pods int - The maximum number of pods that can run on each agent. Changing this forces a new resource to be created.
- Min
Count int - The minimum number of nodes which should exist in this Node Pool. If specified this must be between
1and1000. - Node
Count int - The initial number of nodes which should exist in this Node Pool. If specified this must be between
1and1000and betweenmin_countandmax_count. - Node
Labels Dictionary<string, string> - A map of Kubernetes labels which should be applied to nodes in the Default Node Pool. Changing this forces a new resource to be created.
- Node
Public stringIp Prefix Id - Resource ID for the Public IP Addresses Prefix for the nodes in this Node Pool.
enable_node_public_ipshould betrue. Changing this forces a new resource to be created. - Node
Taints List<string> - Only
Critical boolAddons Enabled - Enabling this option will taint default node pool with
CriticalAddonsOnly=true:NoScheduletaint. Changing this forces a new resource to be created. - Orchestrator
Version string - Version of Kubernetes used for the Agents. If not specified, the latest recommended version will be used at provisioning time (but won't auto-upgrade)
- Os
Disk intSize Gb - The size of the OS Disk which should be used for each agent in the Node Pool. Changing this forces a new resource to be created.
- Os
Disk stringType - The type of disk which should be used for the Operating System. Possible values are
EphemeralandManaged. Defaults toManaged. Changing this forces a new resource to be created. - Os
Sku string - OsSKU to be used to specify Linux OSType. Not applicable to Windows OSType. Possible values include:
Ubuntu,CBLMariner. Defaults toUbuntu. Changing this forces a new resource to be created. - Pod
Subnet stringId - The ID of the Subnet where the pods in the default Node Pool should exist. Changing this forces a new resource to be created.
- Proximity
Placement stringGroup Id - Dictionary<string, string>
- A mapping of tags to assign to the Node Pool.
- Type string
- The type of Node Pool which should be created. Possible values are
AvailabilitySetandVirtualMachineScaleSets. Defaults toVirtualMachineScaleSets. - Ultra
Ssd boolEnabled - Used to specify whether the UltraSSD is enabled in the Default Node Pool. Defaults to
false. See the documentation for more information. - Upgrade
Settings KubernetesCluster Default Node Pool Upgrade Settings - A
upgrade_settingsblock as documented below. - Vnet
Subnet stringId - The ID of a Subnet where the Kubernetes Node Pool should exist. Changing this forces a new resource to be created.
- Name string
- The name which should be used for the default Kubernetes Node Pool. Changing this forces a new resource to be created.
- Vm
Size string - The size of the Virtual Machine, such as
Standard_DS2_v2. - Availability
Zones []string - A list of Availability Zones across which the Node Pool should be spread. Changing this forces a new resource to be created.
- Enable
Auto boolScaling - Should the Kubernetes Auto Scaler be enabled for this Node Pool? Defaults to
false. - Enable
Host boolEncryption - Should the nodes in the Default Node Pool have host encryption enabled? Defaults to
false. - Enable
Node boolPublic Ip - Should nodes in this Node Pool have a Public IP Address? Defaults to
false. Changing this forces a new resource to be created. - Fips
Enabled bool - Should the nodes in this Node Pool have Federal Information Processing Standard enabled? Changing this forces a new resource to be created.
- Kubelet
Config KubernetesCluster Default Node Pool Kubelet Config - A
kubelet_configblock as defined below. - Kubelet
Disk stringType - The type of disk used by kubelet. Possible values are
OSandTemporary. - Linux
Os KubernetesConfig Cluster Default Node Pool Linux Os Config - A
linux_os_configblock as defined below. - Max
Count int - The maximum number of nodes which should exist in this Node Pool. If specified this must be between
1and1000. - Max
Pods int - The maximum number of pods that can run on each agent. Changing this forces a new resource to be created.
- Min
Count int - The minimum number of nodes which should exist in this Node Pool. If specified this must be between
1and1000. - Node
Count int - The initial number of nodes which should exist in this Node Pool. If specified this must be between
1and1000and betweenmin_countandmax_count. - Node
Labels map[string]string - A map of Kubernetes labels which should be applied to nodes in the Default Node Pool. Changing this forces a new resource to be created.
- Node
Public stringIp Prefix Id - Resource ID for the Public IP Addresses Prefix for the nodes in this Node Pool.
enable_node_public_ipshould betrue. Changing this forces a new resource to be created. - Node
Taints []string - Only
Critical boolAddons Enabled - Enabling this option will taint default node pool with
CriticalAddonsOnly=true:NoScheduletaint. Changing this forces a new resource to be created. - Orchestrator
Version string - Version of Kubernetes used for the Agents. If not specified, the latest recommended version will be used at provisioning time (but won't auto-upgrade)
- Os
Disk intSize Gb - The size of the OS Disk which should be used for each agent in the Node Pool. Changing this forces a new resource to be created.
- Os
Disk stringType - The type of disk which should be used for the Operating System. Possible values are
EphemeralandManaged. Defaults toManaged. Changing this forces a new resource to be created. - Os
Sku string - OsSKU to be used to specify Linux OSType. Not applicable to Windows OSType. Possible values include:
Ubuntu,CBLMariner. Defaults toUbuntu. Changing this forces a new resource to be created. - Pod
Subnet stringId - The ID of the Subnet where the pods in the default Node Pool should exist. Changing this forces a new resource to be created.
- Proximity
Placement stringGroup Id - map[string]string
- A mapping of tags to assign to the Node Pool.
- Type string
- The type of Node Pool which should be created. Possible values are
AvailabilitySetandVirtualMachineScaleSets. Defaults toVirtualMachineScaleSets. - Ultra
Ssd boolEnabled - Used to specify whether the UltraSSD is enabled in the Default Node Pool. Defaults to
false. See the documentation for more information. - Upgrade
Settings KubernetesCluster Default Node Pool Upgrade Settings - A
upgrade_settingsblock as documented below. - Vnet
Subnet stringId - The ID of a Subnet where the Kubernetes Node Pool should exist. Changing this forces a new resource to be created.
- name String
- The name which should be used for the default Kubernetes Node Pool. Changing this forces a new resource to be created.
- vm
Size String - The size of the Virtual Machine, such as
Standard_DS2_v2. - availability
Zones List<String> - A list of Availability Zones across which the Node Pool should be spread. Changing this forces a new resource to be created.
- enable
Auto BooleanScaling - Should the Kubernetes Auto Scaler be enabled for this Node Pool? Defaults to
false. - enable
Host BooleanEncryption - Should the nodes in the Default Node Pool have host encryption enabled? Defaults to
false. - enable
Node BooleanPublic Ip - Should nodes in this Node Pool have a Public IP Address? Defaults to
false. Changing this forces a new resource to be created. - fips
Enabled Boolean - Should the nodes in this Node Pool have Federal Information Processing Standard enabled? Changing this forces a new resource to be created.
- kubelet
Config KubernetesCluster Default Node Pool Kubelet Config - A
kubelet_configblock as defined below. - kubelet
Disk StringType - The type of disk used by kubelet. Possible values are
OSandTemporary. - linux
Os KubernetesConfig Cluster Default Node Pool Linux Os Config - A
linux_os_configblock as defined below. - max
Count Integer - The maximum number of nodes which should exist in this Node Pool. If specified this must be between
1and1000. - max
Pods Integer - The maximum number of pods that can run on each agent. Changing this forces a new resource to be created.
- min
Count Integer - The minimum number of nodes which should exist in this Node Pool. If specified this must be between
1and1000. - node
Count Integer - The initial number of nodes which should exist in this Node Pool. If specified this must be between
1and1000and betweenmin_countandmax_count. - node
Labels Map<String,String> - A map of Kubernetes labels which should be applied to nodes in the Default Node Pool. Changing this forces a new resource to be created.
- node
Public StringIp Prefix Id - Resource ID for the Public IP Addresses Prefix for the nodes in this Node Pool.
enable_node_public_ipshould betrue. Changing this forces a new resource to be created. - node
Taints List<String> - only
Critical BooleanAddons Enabled - Enabling this option will taint default node pool with
CriticalAddonsOnly=true:NoScheduletaint. Changing this forces a new resource to be created. - orchestrator
Version String - Version of Kubernetes used for the Agents. If not specified, the latest recommended version will be used at provisioning time (but won't auto-upgrade)
- os
Disk IntegerSize Gb - The size of the OS Disk which should be used for each agent in the Node Pool. Changing this forces a new resource to be created.
- os
Disk StringType - The type of disk which should be used for the Operating System. Possible values are
EphemeralandManaged. Defaults toManaged. Changing this forces a new resource to be created. - os
Sku String - OsSKU to be used to specify Linux OSType. Not applicable to Windows OSType. Possible values include:
Ubuntu,CBLMariner. Defaults toUbuntu. Changing this forces a new resource to be created. - pod
Subnet StringId - The ID of the Subnet where the pods in the default Node Pool should exist. Changing this forces a new resource to be created.
- proximity
Placement StringGroup Id - Map<String,String>
- A mapping of tags to assign to the Node Pool.
- type String
- The type of Node Pool which should be created. Possible values are
AvailabilitySetandVirtualMachineScaleSets. Defaults toVirtualMachineScaleSets. - ultra
Ssd BooleanEnabled - Used to specify whether the UltraSSD is enabled in the Default Node Pool. Defaults to
false. See the documentation for more information. - upgrade
Settings KubernetesCluster Default Node Pool Upgrade Settings - A
upgrade_settingsblock as documented below. - vnet
Subnet StringId - The ID of a Subnet where the Kubernetes Node Pool should exist. Changing this forces a new resource to be created.
- name string
- The name which should be used for the default Kubernetes Node Pool. Changing this forces a new resource to be created.
- vm
Size string - The size of the Virtual Machine, such as
Standard_DS2_v2. - availability
Zones string[] - A list of Availability Zones across which the Node Pool should be spread. Changing this forces a new resource to be created.
- enable
Auto booleanScaling - Should the Kubernetes Auto Scaler be enabled for this Node Pool? Defaults to
false. - enable
Host booleanEncryption - Should the nodes in the Default Node Pool have host encryption enabled? Defaults to
false. - enable
Node booleanPublic Ip - Should nodes in this Node Pool have a Public IP Address? Defaults to
false. Changing this forces a new resource to be created. - fips
Enabled boolean - Should the nodes in this Node Pool have Federal Information Processing Standard enabled? Changing this forces a new resource to be created.
- kubelet
Config KubernetesCluster Default Node Pool Kubelet Config - A
kubelet_configblock as defined below. - kubelet
Disk stringType - The type of disk used by kubelet. Possible values are
OSandTemporary. - linux
Os KubernetesConfig Cluster Default Node Pool Linux Os Config - A
linux_os_configblock as defined below. - max
Count number - The maximum number of nodes which should exist in this Node Pool. If specified this must be between
1and1000. - max
Pods number - The maximum number of pods that can run on each agent. Changing this forces a new resource to be created.
- min
Count number - The minimum number of nodes which should exist in this Node Pool. If specified this must be between
1and1000. - node
Count number - The initial number of nodes which should exist in this Node Pool. If specified this must be between
1and1000and betweenmin_countandmax_count. - node
Labels {[key: string]: string} - A map of Kubernetes labels which should be applied to nodes in the Default Node Pool. Changing this forces a new resource to be created.
- node
Public stringIp Prefix Id - Resource ID for the Public IP Addresses Prefix for the nodes in this Node Pool.
enable_node_public_ipshould betrue. Changing this forces a new resource to be created. - node
Taints string[] - only
Critical booleanAddons Enabled - Enabling this option will taint default node pool with
CriticalAddonsOnly=true:NoScheduletaint. Changing this forces a new resource to be created. - orchestrator
Version string - Version of Kubernetes used for the Agents. If not specified, the latest recommended version will be used at provisioning time (but won't auto-upgrade)
- os
Disk numberSize Gb - The size of the OS Disk which should be used for each agent in the Node Pool. Changing this forces a new resource to be created.
- os
Disk stringType - The type of disk which should be used for the Operating System. Possible values are
EphemeralandManaged. Defaults toManaged. Changing this forces a new resource to be created. - os
Sku string - OsSKU to be used to specify Linux OSType. Not applicable to Windows OSType. Possible values include:
Ubuntu,CBLMariner. Defaults toUbuntu. Changing this forces a new resource to be created. - pod
Subnet stringId - The ID of the Subnet where the pods in the default Node Pool should exist. Changing this forces a new resource to be created.
- proximity
Placement stringGroup Id - {[key: string]: string}
- A mapping of tags to assign to the Node Pool.
- type string
- The type of Node Pool which should be created. Possible values are
AvailabilitySetandVirtualMachineScaleSets. Defaults toVirtualMachineScaleSets. - ultra
Ssd booleanEnabled - Used to specify whether the UltraSSD is enabled in the Default Node Pool. Defaults to
false. See the documentation for more information. - upgrade
Settings KubernetesCluster Default Node Pool Upgrade Settings - A
upgrade_settingsblock as documented below. - vnet
Subnet stringId - The ID of a Subnet where the Kubernetes Node Pool should exist. Changing this forces a new resource to be created.
- name str
- The name which should be used for the default Kubernetes Node Pool. Changing this forces a new resource to be created.
- vm_
size str - The size of the Virtual Machine, such as
Standard_DS2_v2. - availability_
zones Sequence[str] - A list of Availability Zones across which the Node Pool should be spread. Changing this forces a new resource to be created.
- enable_
auto_ boolscaling - Should the Kubernetes Auto Scaler be enabled for this Node Pool? Defaults to
false. - enable_
host_ boolencryption - Should the nodes in the Default Node Pool have host encryption enabled? Defaults to
false. - enable_
node_ boolpublic_ ip - Should nodes in this Node Pool have a Public IP Address? Defaults to
false. Changing this forces a new resource to be created. - fips_
enabled bool - Should the nodes in this Node Pool have Federal Information Processing Standard enabled? Changing this forces a new resource to be created.
- kubelet_
config KubernetesCluster Default Node Pool Kubelet Config - A
kubelet_configblock as defined below. - kubelet_
disk_ strtype - The type of disk used by kubelet. Possible values are
OSandTemporary. - linux_
os_ Kubernetesconfig Cluster Default Node Pool Linux Os Config - A
linux_os_configblock as defined below. - max_
count int - The maximum number of nodes which should exist in this Node Pool. If specified this must be between
1and1000. - max_
pods int - The maximum number of pods that can run on each agent. Changing this forces a new resource to be created.
- min_
count int - The minimum number of nodes which should exist in this Node Pool. If specified this must be between
1and1000. - node_
count int - The initial number of nodes which should exist in this Node Pool. If specified this must be between
1and1000and betweenmin_countandmax_count. - node_
labels Mapping[str, str] - A map of Kubernetes labels which should be applied to nodes in the Default Node Pool. Changing this forces a new resource to be created.
- node_
public_ strip_ prefix_ id - Resource ID for the Public IP Addresses Prefix for the nodes in this Node Pool.
enable_node_public_ipshould betrue. Changing this forces a new resource to be created. - node_
taints Sequence[str] - only_
critical_ booladdons_ enabled - Enabling this option will taint default node pool with
CriticalAddonsOnly=true:NoScheduletaint. Changing this forces a new resource to be created. - orchestrator_
version str - Version of Kubernetes used for the Agents. If not specified, the latest recommended version will be used at provisioning time (but won't auto-upgrade)
- os_
disk_ intsize_ gb - The size of the OS Disk which should be used for each agent in the Node Pool. Changing this forces a new resource to be created.
- os_
disk_ strtype - The type of disk which should be used for the Operating System. Possible values are
EphemeralandManaged. Defaults toManaged. Changing this forces a new resource to be created. - os_
sku str - OsSKU to be used to specify Linux OSType. Not applicable to Windows OSType. Possible values include:
Ubuntu,CBLMariner. Defaults toUbuntu. Changing this forces a new resource to be created. - pod_
subnet_ strid - The ID of the Subnet where the pods in the default Node Pool should exist. Changing this forces a new resource to be created.
- proximity_
placement_ strgroup_ id - Mapping[str, str]
- A mapping of tags to assign to the Node Pool.
- type str
- The type of Node Pool which should be created. Possible values are
AvailabilitySetandVirtualMachineScaleSets. Defaults toVirtualMachineScaleSets. - ultra_
ssd_ boolenabled - Used to specify whether the UltraSSD is enabled in the Default Node Pool. Defaults to
false. See the documentation for more information. - upgrade_
settings KubernetesCluster Default Node Pool Upgrade Settings - A
upgrade_settingsblock as documented below. - vnet_
subnet_ strid - The ID of a Subnet where the Kubernetes Node Pool should exist. Changing this forces a new resource to be created.
- name String
- The name which should be used for the default Kubernetes Node Pool. Changing this forces a new resource to be created.
- vm
Size String - The size of the Virtual Machine, such as
Standard_DS2_v2. - availability
Zones List<String> - A list of Availability Zones across which the Node Pool should be spread. Changing this forces a new resource to be created.
- enable
Auto BooleanScaling - Should the Kubernetes Auto Scaler be enabled for this Node Pool? Defaults to
false. - enable
Host BooleanEncryption - Should the nodes in the Default Node Pool have host encryption enabled? Defaults to
false. - enable
Node BooleanPublic Ip - Should nodes in this Node Pool have a Public IP Address? Defaults to
false. Changing this forces a new resource to be created. - fips
Enabled Boolean - Should the nodes in this Node Pool have Federal Information Processing Standard enabled? Changing this forces a new resource to be created.
- kubelet
Config Property Map - A
kubelet_configblock as defined below. - kubelet
Disk StringType - The type of disk used by kubelet. Possible values are
OSandTemporary. - linux
Os Property MapConfig - A
linux_os_configblock as defined below. - max
Count Number - The maximum number of nodes which should exist in this Node Pool. If specified this must be between
1and1000. - max
Pods Number - The maximum number of pods that can run on each agent. Changing this forces a new resource to be created.
- min
Count Number - The minimum number of nodes which should exist in this Node Pool. If specified this must be between
1and1000. - node
Count Number - The initial number of nodes which should exist in this Node Pool. If specified this must be between
1and1000and betweenmin_countandmax_count. - node
Labels Map<String> - A map of Kubernetes labels which should be applied to nodes in the Default Node Pool. Changing this forces a new resource to be created.
- node
Public StringIp Prefix Id - Resource ID for the Public IP Addresses Prefix for the nodes in this Node Pool.
enable_node_public_ipshould betrue. Changing this forces a new resource to be created. - node
Taints List<String> - only
Critical BooleanAddons Enabled - Enabling this option will taint default node pool with
CriticalAddonsOnly=true:NoScheduletaint. Changing this forces a new resource to be created. - orchestrator
Version String - Version of Kubernetes used for the Agents. If not specified, the latest recommended version will be used at provisioning time (but won't auto-upgrade)
- os
Disk NumberSize Gb - The size of the OS Disk which should be used for each agent in the Node Pool. Changing this forces a new resource to be created.
- os
Disk StringType - The type of disk which should be used for the Operating System. Possible values are
EphemeralandManaged. Defaults toManaged. Changing this forces a new resource to be created. - os
Sku String - OsSKU to be used to specify Linux OSType. Not applicable to Windows OSType. Possible values include:
Ubuntu,CBLMariner. Defaults toUbuntu. Changing this forces a new resource to be created. - pod
Subnet StringId - The ID of the Subnet where the pods in the default Node Pool should exist. Changing this forces a new resource to be created.
- proximity
Placement StringGroup Id - Map<String>
- A mapping of tags to assign to the Node Pool.
- type String
- The type of Node Pool which should be created. Possible values are
AvailabilitySetandVirtualMachineScaleSets. Defaults toVirtualMachineScaleSets. - ultra
Ssd BooleanEnabled - Used to specify whether the UltraSSD is enabled in the Default Node Pool. Defaults to
false. See the documentation for more information. - upgrade
Settings Property Map - A
upgrade_settingsblock as documented below. - vnet
Subnet StringId - The ID of a Subnet where the Kubernetes Node Pool should exist. Changing this forces a new resource to be created.
KubernetesClusterDefaultNodePoolKubeletConfig, KubernetesClusterDefaultNodePoolKubeletConfigArgs
- Allowed
Unsafe List<string>Sysctls - Specifies the allow list of unsafe sysctls command or patterns (ending in
*). Changing this forces a new resource to be created. - Container
Log intMax Line - Specifies the maximum number of container log files that can be present for a container. must be at least 2. Changing this forces a new resource to be created.
- Container
Log intMax Size Mb - Specifies the maximum size (e.g. 10MB) of container log file before it is rotated. Changing this forces a new resource to be created.
- Cpu
Cfs boolQuota Enabled - Is CPU CFS quota enforcement for containers enabled? Changing this forces a new resource to be created.
- Cpu
Cfs stringQuota Period - Specifies the CPU CFS quota period value. Changing this forces a new resource to be created.
- Cpu
Manager stringPolicy - Specifies the CPU Manager policy to use. Possible values are
noneandstatic, Changing this forces a new resource to be created. - Image
Gc intHigh Threshold - Specifies the percent of disk usage above which image garbage collection is always run. Must be between
0and100. Changing this forces a new resource to be created. - Image
Gc intLow Threshold - Specifies the percent of disk usage lower than which image garbage collection is never run. Must be between
0and100. Changing this forces a new resource to be created. - Pod
Max intPid - Specifies the maximum number of processes per pod. Changing this forces a new resource to be created.
- Topology
Manager stringPolicy - Specifies the Topology Manager policy to use. Possible values are
none,best-effort,restrictedorsingle-numa-node. Changing this forces a new resource to be created.
- Allowed
Unsafe []stringSysctls - Specifies the allow list of unsafe sysctls command or patterns (ending in
*). Changing this forces a new resource to be created. - Container
Log intMax Line - Specifies the maximum number of container log files that can be present for a container. must be at least 2. Changing this forces a new resource to be created.
- Container
Log intMax Size Mb - Specifies the maximum size (e.g. 10MB) of container log file before it is rotated. Changing this forces a new resource to be created.
- Cpu
Cfs boolQuota Enabled - Is CPU CFS quota enforcement for containers enabled? Changing this forces a new resource to be created.
- Cpu
Cfs stringQuota Period - Specifies the CPU CFS quota period value. Changing this forces a new resource to be created.
- Cpu
Manager stringPolicy - Specifies the CPU Manager policy to use. Possible values are
noneandstatic, Changing this forces a new resource to be created. - Image
Gc intHigh Threshold - Specifies the percent of disk usage above which image garbage collection is always run. Must be between
0and100. Changing this forces a new resource to be created. - Image
Gc intLow Threshold - Specifies the percent of disk usage lower than which image garbage collection is never run. Must be between
0and100. Changing this forces a new resource to be created. - Pod
Max intPid - Specifies the maximum number of processes per pod. Changing this forces a new resource to be created.
- Topology
Manager stringPolicy - Specifies the Topology Manager policy to use. Possible values are
none,best-effort,restrictedorsingle-numa-node. Changing this forces a new resource to be created.
- allowed
Unsafe List<String>Sysctls - Specifies the allow list of unsafe sysctls command or patterns (ending in
*). Changing this forces a new resource to be created. - container
Log IntegerMax Line - Specifies the maximum number of container log files that can be present for a container. must be at least 2. Changing this forces a new resource to be created.
- container
Log IntegerMax Size Mb - Specifies the maximum size (e.g. 10MB) of container log file before it is rotated. Changing this forces a new resource to be created.
- cpu
Cfs BooleanQuota Enabled - Is CPU CFS quota enforcement for containers enabled? Changing this forces a new resource to be created.
- cpu
Cfs StringQuota Period - Specifies the CPU CFS quota period value. Changing this forces a new resource to be created.
- cpu
Manager StringPolicy - Specifies the CPU Manager policy to use. Possible values are
noneandstatic, Changing this forces a new resource to be created. - image
Gc IntegerHigh Threshold - Specifies the percent of disk usage above which image garbage collection is always run. Must be between
0and100. Changing this forces a new resource to be created. - image
Gc IntegerLow Threshold - Specifies the percent of disk usage lower than which image garbage collection is never run. Must be between
0and100. Changing this forces a new resource to be created. - pod
Max IntegerPid - Specifies the maximum number of processes per pod. Changing this forces a new resource to be created.
- topology
Manager StringPolicy - Specifies the Topology Manager policy to use. Possible values are
none,best-effort,restrictedorsingle-numa-node. Changing this forces a new resource to be created.
- allowed
Unsafe string[]Sysctls - Specifies the allow list of unsafe sysctls command or patterns (ending in
*). Changing this forces a new resource to be created. - container
Log numberMax Line - Specifies the maximum number of container log files that can be present for a container. must be at least 2. Changing this forces a new resource to be created.
- container
Log numberMax Size Mb - Specifies the maximum size (e.g. 10MB) of container log file before it is rotated. Changing this forces a new resource to be created.
- cpu
Cfs booleanQuota Enabled - Is CPU CFS quota enforcement for containers enabled? Changing this forces a new resource to be created.
- cpu
Cfs stringQuota Period - Specifies the CPU CFS quota period value. Changing this forces a new resource to be created.
- cpu
Manager stringPolicy - Specifies the CPU Manager policy to use. Possible values are
noneandstatic, Changing this forces a new resource to be created. - image
Gc numberHigh Threshold - Specifies the percent of disk usage above which image garbage collection is always run. Must be between
0and100. Changing this forces a new resource to be created. - image
Gc numberLow Threshold - Specifies the percent of disk usage lower than which image garbage collection is never run. Must be between
0and100. Changing this forces a new resource to be created. - pod
Max numberPid - Specifies the maximum number of processes per pod. Changing this forces a new resource to be created.
- topology
Manager stringPolicy - Specifies the Topology Manager policy to use. Possible values are
none,best-effort,restrictedorsingle-numa-node. Changing this forces a new resource to be created.
- allowed_
unsafe_ Sequence[str]sysctls - Specifies the allow list of unsafe sysctls command or patterns (ending in
*). Changing this forces a new resource to be created. - container_
log_ intmax_ line - Specifies the maximum number of container log files that can be present for a container. must be at least 2. Changing this forces a new resource to be created.
- container_
log_ intmax_ size_ mb - Specifies the maximum size (e.g. 10MB) of container log file before it is rotated. Changing this forces a new resource to be created.
- cpu_
cfs_ boolquota_ enabled - Is CPU CFS quota enforcement for containers enabled? Changing this forces a new resource to be created.
- cpu_
cfs_ strquota_ period - Specifies the CPU CFS quota period value. Changing this forces a new resource to be created.
- cpu_
manager_ strpolicy - Specifies the CPU Manager policy to use. Possible values are
noneandstatic, Changing this forces a new resource to be created. - image_
gc_ inthigh_ threshold - Specifies the percent of disk usage above which image garbage collection is always run. Must be between
0and100. Changing this forces a new resource to be created. - image_
gc_ intlow_ threshold - Specifies the percent of disk usage lower than which image garbage collection is never run. Must be between
0and100. Changing this forces a new resource to be created. - pod_
max_ intpid - Specifies the maximum number of processes per pod. Changing this forces a new resource to be created.
- topology_
manager_ strpolicy - Specifies the Topology Manager policy to use. Possible values are
none,best-effort,restrictedorsingle-numa-node. Changing this forces a new resource to be created.
- allowed
Unsafe List<String>Sysctls - Specifies the allow list of unsafe sysctls command or patterns (ending in
*). Changing this forces a new resource to be created. - container
Log NumberMax Line - Specifies the maximum number of container log files that can be present for a container. must be at least 2. Changing this forces a new resource to be created.
- container
Log NumberMax Size Mb - Specifies the maximum size (e.g. 10MB) of container log file before it is rotated. Changing this forces a new resource to be created.
- cpu
Cfs BooleanQuota Enabled - Is CPU CFS quota enforcement for containers enabled? Changing this forces a new resource to be created.
- cpu
Cfs StringQuota Period - Specifies the CPU CFS quota period value. Changing this forces a new resource to be created.
- cpu
Manager StringPolicy - Specifies the CPU Manager policy to use. Possible values are
noneandstatic, Changing this forces a new resource to be created. - image
Gc NumberHigh Threshold - Specifies the percent of disk usage above which image garbage collection is always run. Must be between
0and100. Changing this forces a new resource to be created. - image
Gc NumberLow Threshold - Specifies the percent of disk usage lower than which image garbage collection is never run. Must be between
0and100. Changing this forces a new resource to be created. - pod
Max NumberPid - Specifies the maximum number of processes per pod. Changing this forces a new resource to be created.
- topology
Manager StringPolicy - Specifies the Topology Manager policy to use. Possible values are
none,best-effort,restrictedorsingle-numa-node. Changing this forces a new resource to be created.
KubernetesClusterDefaultNodePoolLinuxOsConfig, KubernetesClusterDefaultNodePoolLinuxOsConfigArgs
- Swap
File intSize Mb - Specifies the size of swap file on each node in MB. Changing this forces a new resource to be created.
- Sysctl
Config KubernetesCluster Default Node Pool Linux Os Config Sysctl Config - A
sysctl_configblock as defined below. Changing this forces a new resource to be created. - Transparent
Huge stringPage Defrag - specifies the defrag configuration for Transparent Huge Page. Possible values are
always,defer,defer+madvise,madviseandnever. Changing this forces a new resource to be created. - Transparent
Huge stringPage Enabled - Specifies the Transparent Huge Page enabled configuration. Possible values are
always,madviseandnever. Changing this forces a new resource to be created.
- Swap
File intSize Mb - Specifies the size of swap file on each node in MB. Changing this forces a new resource to be created.
- Sysctl
Config KubernetesCluster Default Node Pool Linux Os Config Sysctl Config - A
sysctl_configblock as defined below. Changing this forces a new resource to be created. - Transparent
Huge stringPage Defrag - specifies the defrag configuration for Transparent Huge Page. Possible values are
always,defer,defer+madvise,madviseandnever. Changing this forces a new resource to be created. - Transparent
Huge stringPage Enabled - Specifies the Transparent Huge Page enabled configuration. Possible values are
always,madviseandnever. Changing this forces a new resource to be created.
- swap
File IntegerSize Mb - Specifies the size of swap file on each node in MB. Changing this forces a new resource to be created.
- sysctl
Config KubernetesCluster Default Node Pool Linux Os Config Sysctl Config - A
sysctl_configblock as defined below. Changing this forces a new resource to be created. - transparent
Huge StringPage Defrag - specifies the defrag configuration for Transparent Huge Page. Possible values are
always,defer,defer+madvise,madviseandnever. Changing this forces a new resource to be created. - transparent
Huge StringPage Enabled - Specifies the Transparent Huge Page enabled configuration. Possible values are
always,madviseandnever. Changing this forces a new resource to be created.
- swap
File numberSize Mb - Specifies the size of swap file on each node in MB. Changing this forces a new resource to be created.
- sysctl
Config KubernetesCluster Default Node Pool Linux Os Config Sysctl Config - A
sysctl_configblock as defined below. Changing this forces a new resource to be created. - transparent
Huge stringPage Defrag - specifies the defrag configuration for Transparent Huge Page. Possible values are
always,defer,defer+madvise,madviseandnever. Changing this forces a new resource to be created. - transparent
Huge stringPage Enabled - Specifies the Transparent Huge Page enabled configuration. Possible values are
always,madviseandnever. Changing this forces a new resource to be created.
- swap_
file_ intsize_ mb - Specifies the size of swap file on each node in MB. Changing this forces a new resource to be created.
- sysctl_
config KubernetesCluster Default Node Pool Linux Os Config Sysctl Config - A
sysctl_configblock as defined below. Changing this forces a new resource to be created. - transparent_
huge_ strpage_ defrag - specifies the defrag configuration for Transparent Huge Page. Possible values are
always,defer,defer+madvise,madviseandnever. Changing this forces a new resource to be created. - transparent_
huge_ strpage_ enabled - Specifies the Transparent Huge Page enabled configuration. Possible values are
always,madviseandnever. Changing this forces a new resource to be created.
- swap
File NumberSize Mb - Specifies the size of swap file on each node in MB. Changing this forces a new resource to be created.
- sysctl
Config Property Map - A
sysctl_configblock as defined below. Changing this forces a new resource to be created. - transparent
Huge StringPage Defrag - specifies the defrag configuration for Transparent Huge Page. Possible values are
always,defer,defer+madvise,madviseandnever. Changing this forces a new resource to be created. - transparent
Huge StringPage Enabled - Specifies the Transparent Huge Page enabled configuration. Possible values are
always,madviseandnever. Changing this forces a new resource to be created.
KubernetesClusterDefaultNodePoolLinuxOsConfigSysctlConfig, KubernetesClusterDefaultNodePoolLinuxOsConfigSysctlConfigArgs
- Fs
Aio intMax Nr - The sysctl setting fs.aio-max-nr. Must be between
65536and6553500. Changing this forces a new resource to be created. - Fs
File intMax - The sysctl setting fs.file-max. Must be between
8192and12000500. Changing this forces a new resource to be created. - Fs
Inotify intMax User Watches - The sysctl setting fs.inotify.max_user_watches. Must be between
781250and2097152. Changing this forces a new resource to be created. - Fs
Nr intOpen - The sysctl setting fs.nr_open. Must be between
8192and20000500. Changing this forces a new resource to be created. - Kernel
Threads intMax - The sysctl setting kernel.threads-max. Must be between
20and513785. Changing this forces a new resource to be created. - Net
Core intNetdev Max Backlog - The sysctl setting net.core.netdev_max_backlog. Must be between
1000and3240000. Changing this forces a new resource to be created. - Net
Core intOptmem Max - The sysctl setting net.core.optmem_max. Must be between
20480and4194304. Changing this forces a new resource to be created. - Net
Core intRmem Default - The sysctl setting net.core.rmem_default. Must be between
212992and134217728. Changing this forces a new resource to be created. - Net
Core intRmem Max - The sysctl setting net.core.rmem_max. Must be between
212992and134217728. Changing this forces a new resource to be created. - Net
Core intSomaxconn - The sysctl setting net.core.somaxconn. Must be between
4096and3240000. Changing this forces a new resource to be created. - Net
Core intWmem Default - The sysctl setting net.core.wmem_default. Must be between
212992and134217728. Changing this forces a new resource to be created. - Net
Core intWmem Max - The sysctl setting net.core.wmem_max. Must be between
212992and134217728. Changing this forces a new resource to be created. - Net
Ipv4Ip intLocal Port Range Max - The sysctl setting net.ipv4.ip_local_port_range max value. Must be between
1024and60999. Changing this forces a new resource to be created. - Net
Ipv4Ip intLocal Port Range Min - The sysctl setting net.ipv4.ip_local_port_range min value. Must be between
1024and60999. Changing this forces a new resource to be created. - Net
Ipv4Neigh intDefault Gc Thresh1 - The sysctl setting net.ipv4.neigh.default.gc_thresh1. Must be between
128and80000. Changing this forces a new resource to be created. - Net
Ipv4Neigh intDefault Gc Thresh2 - The sysctl setting net.ipv4.neigh.default.gc_thresh2. Must be between
512and90000. Changing this forces a new resource to be created. - Net
Ipv4Neigh intDefault Gc Thresh3 - The sysctl setting net.ipv4.neigh.default.gc_thresh3. Must be between
1024and100000. Changing this forces a new resource to be created. - Net
Ipv4Tcp intFin Timeout - The sysctl setting net.ipv4.tcp_fin_timeout. Must be between
5and120. Changing this forces a new resource to be created. - Net
Ipv4Tcp intKeepalive Intvl - The sysctl setting net.ipv4.tcp_keepalive_intvl. Must be between
10and75. Changing this forces a new resource to be created. - Net
Ipv4Tcp intKeepalive Probes - The sysctl setting net.ipv4.tcp_keepalive_probes. Must be between
1and15. Changing this forces a new resource to be created. - Net
Ipv4Tcp intKeepalive Time - The sysctl setting net.ipv4.tcp_keepalive_time. Must be between
30and432000. Changing this forces a new resource to be created. - Net
Ipv4Tcp intMax Syn Backlog - The sysctl setting net.ipv4.tcp_max_syn_backlog. Must be between
128and3240000. Changing this forces a new resource to be created. - Net
Ipv4Tcp intMax Tw Buckets - The sysctl setting net.ipv4.tcp_max_tw_buckets. Must be between
8000and1440000. Changing this forces a new resource to be created. - Net
Ipv4Tcp boolTw Reuse - The sysctl setting net.ipv4.tcp_tw_reuse. Changing this forces a new resource to be created.
- Net
Netfilter intNf Conntrack Buckets - The sysctl setting net.netfilter.nf_conntrack_buckets. Must be between
65536and147456. Changing this forces a new resource to be created. - Net
Netfilter intNf Conntrack Max - The sysctl setting net.netfilter.nf_conntrack_max. Must be between
131072and589824. Changing this forces a new resource to be created. - Vm
Max intMap Count - The sysctl setting vm.max_map_count. Must be between
65530and262144. Changing this forces a new resource to be created. - Vm
Swappiness int - The sysctl setting vm.swappiness. Must be between
0and100. Changing this forces a new resource to be created. - Vm
Vfs intCache Pressure - The sysctl setting vm.vfs_cache_pressure. Must be between
0and100. Changing this forces a new resource to be created.
- Fs
Aio intMax Nr - The sysctl setting fs.aio-max-nr. Must be between
65536and6553500. Changing this forces a new resource to be created. - Fs
File intMax - The sysctl setting fs.file-max. Must be between
8192and12000500. Changing this forces a new resource to be created. - Fs
Inotify intMax User Watches - The sysctl setting fs.inotify.max_user_watches. Must be between
781250and2097152. Changing this forces a new resource to be created. - Fs
Nr intOpen - The sysctl setting fs.nr_open. Must be between
8192and20000500. Changing this forces a new resource to be created. - Kernel
Threads intMax - The sysctl setting kernel.threads-max. Must be between
20and513785. Changing this forces a new resource to be created. - Net
Core intNetdev Max Backlog - The sysctl setting net.core.netdev_max_backlog. Must be between
1000and3240000. Changing this forces a new resource to be created. - Net
Core intOptmem Max - The sysctl setting net.core.optmem_max. Must be between
20480and4194304. Changing this forces a new resource to be created. - Net
Core intRmem Default - The sysctl setting net.core.rmem_default. Must be between
212992and134217728. Changing this forces a new resource to be created. - Net
Core intRmem Max - The sysctl setting net.core.rmem_max. Must be between
212992and134217728. Changing this forces a new resource to be created. - Net
Core intSomaxconn - The sysctl setting net.core.somaxconn. Must be between
4096and3240000. Changing this forces a new resource to be created. - Net
Core intWmem Default - The sysctl setting net.core.wmem_default. Must be between
212992and134217728. Changing this forces a new resource to be created. - Net
Core intWmem Max - The sysctl setting net.core.wmem_max. Must be between
212992and134217728. Changing this forces a new resource to be created. - Net
Ipv4Ip intLocal Port Range Max - The sysctl setting net.ipv4.ip_local_port_range max value. Must be between
1024and60999. Changing this forces a new resource to be created. - Net
Ipv4Ip intLocal Port Range Min - The sysctl setting net.ipv4.ip_local_port_range min value. Must be between
1024and60999. Changing this forces a new resource to be created. - Net
Ipv4Neigh intDefault Gc Thresh1 - The sysctl setting net.ipv4.neigh.default.gc_thresh1. Must be between
128and80000. Changing this forces a new resource to be created. - Net
Ipv4Neigh intDefault Gc Thresh2 - The sysctl setting net.ipv4.neigh.default.gc_thresh2. Must be between
512and90000. Changing this forces a new resource to be created. - Net
Ipv4Neigh intDefault Gc Thresh3 - The sysctl setting net.ipv4.neigh.default.gc_thresh3. Must be between
1024and100000. Changing this forces a new resource to be created. - Net
Ipv4Tcp intFin Timeout - The sysctl setting net.ipv4.tcp_fin_timeout. Must be between
5and120. Changing this forces a new resource to be created. - Net
Ipv4Tcp intKeepalive Intvl - The sysctl setting net.ipv4.tcp_keepalive_intvl. Must be between
10and75. Changing this forces a new resource to be created. - Net
Ipv4Tcp intKeepalive Probes - The sysctl setting net.ipv4.tcp_keepalive_probes. Must be between
1and15. Changing this forces a new resource to be created. - Net
Ipv4Tcp intKeepalive Time - The sysctl setting net.ipv4.tcp_keepalive_time. Must be between
30and432000. Changing this forces a new resource to be created. - Net
Ipv4Tcp intMax Syn Backlog - The sysctl setting net.ipv4.tcp_max_syn_backlog. Must be between
128and3240000. Changing this forces a new resource to be created. - Net
Ipv4Tcp intMax Tw Buckets - The sysctl setting net.ipv4.tcp_max_tw_buckets. Must be between
8000and1440000. Changing this forces a new resource to be created. - Net
Ipv4Tcp boolTw Reuse - The sysctl setting net.ipv4.tcp_tw_reuse. Changing this forces a new resource to be created.
- Net
Netfilter intNf Conntrack Buckets - The sysctl setting net.netfilter.nf_conntrack_buckets. Must be between
65536and147456. Changing this forces a new resource to be created. - Net
Netfilter intNf Conntrack Max - The sysctl setting net.netfilter.nf_conntrack_max. Must be between
131072and589824. Changing this forces a new resource to be created. - Vm
Max intMap Count - The sysctl setting vm.max_map_count. Must be between
65530and262144. Changing this forces a new resource to be created. - Vm
Swappiness int - The sysctl setting vm.swappiness. Must be between
0and100. Changing this forces a new resource to be created. - Vm
Vfs intCache Pressure - The sysctl setting vm.vfs_cache_pressure. Must be between
0and100. Changing this forces a new resource to be created.
- fs
Aio IntegerMax Nr - The sysctl setting fs.aio-max-nr. Must be between
65536and6553500. Changing this forces a new resource to be created. - fs
File IntegerMax - The sysctl setting fs.file-max. Must be between
8192and12000500. Changing this forces a new resource to be created. - fs
Inotify IntegerMax User Watches - The sysctl setting fs.inotify.max_user_watches. Must be between
781250and2097152. Changing this forces a new resource to be created. - fs
Nr IntegerOpen - The sysctl setting fs.nr_open. Must be between
8192and20000500. Changing this forces a new resource to be created. - kernel
Threads IntegerMax - The sysctl setting kernel.threads-max. Must be between
20and513785. Changing this forces a new resource to be created. - net
Core IntegerNetdev Max Backlog - The sysctl setting net.core.netdev_max_backlog. Must be between
1000and3240000. Changing this forces a new resource to be created. - net
Core IntegerOptmem Max - The sysctl setting net.core.optmem_max. Must be between
20480and4194304. Changing this forces a new resource to be created. - net
Core IntegerRmem Default - The sysctl setting net.core.rmem_default. Must be between
212992and134217728. Changing this forces a new resource to be created. - net
Core IntegerRmem Max - The sysctl setting net.core.rmem_max. Must be between
212992and134217728. Changing this forces a new resource to be created. - net
Core IntegerSomaxconn - The sysctl setting net.core.somaxconn. Must be between
4096and3240000. Changing this forces a new resource to be created. - net
Core IntegerWmem Default - The sysctl setting net.core.wmem_default. Must be between
212992and134217728. Changing this forces a new resource to be created. - net
Core IntegerWmem Max - The sysctl setting net.core.wmem_max. Must be between
212992and134217728. Changing this forces a new resource to be created. - net
Ipv4Ip IntegerLocal Port Range Max - The sysctl setting net.ipv4.ip_local_port_range max value. Must be between
1024and60999. Changing this forces a new resource to be created. - net
Ipv4Ip IntegerLocal Port Range Min - The sysctl setting net.ipv4.ip_local_port_range min value. Must be between
1024and60999. Changing this forces a new resource to be created. - net
Ipv4Neigh IntegerDefault Gc Thresh1 - The sysctl setting net.ipv4.neigh.default.gc_thresh1. Must be between
128and80000. Changing this forces a new resource to be created. - net
Ipv4Neigh IntegerDefault Gc Thresh2 - The sysctl setting net.ipv4.neigh.default.gc_thresh2. Must be between
512and90000. Changing this forces a new resource to be created. - net
Ipv4Neigh IntegerDefault Gc Thresh3 - The sysctl setting net.ipv4.neigh.default.gc_thresh3. Must be between
1024and100000. Changing this forces a new resource to be created. - net
Ipv4Tcp IntegerFin Timeout - The sysctl setting net.ipv4.tcp_fin_timeout. Must be between
5and120. Changing this forces a new resource to be created. - net
Ipv4Tcp IntegerKeepalive Intvl - The sysctl setting net.ipv4.tcp_keepalive_intvl. Must be between
10and75. Changing this forces a new resource to be created. - net
Ipv4Tcp IntegerKeepalive Probes - The sysctl setting net.ipv4.tcp_keepalive_probes. Must be between
1and15. Changing this forces a new resource to be created. - net
Ipv4Tcp IntegerKeepalive Time - The sysctl setting net.ipv4.tcp_keepalive_time. Must be between
30and432000. Changing this forces a new resource to be created. - net
Ipv4Tcp IntegerMax Syn Backlog - The sysctl setting net.ipv4.tcp_max_syn_backlog. Must be between
128and3240000. Changing this forces a new resource to be created. - net
Ipv4Tcp IntegerMax Tw Buckets - The sysctl setting net.ipv4.tcp_max_tw_buckets. Must be between
8000and1440000. Changing this forces a new resource to be created. - net
Ipv4Tcp BooleanTw Reuse - The sysctl setting net.ipv4.tcp_tw_reuse. Changing this forces a new resource to be created.
- net
Netfilter IntegerNf Conntrack Buckets - The sysctl setting net.netfilter.nf_conntrack_buckets. Must be between
65536and147456. Changing this forces a new resource to be created. - net
Netfilter IntegerNf Conntrack Max - The sysctl setting net.netfilter.nf_conntrack_max. Must be between
131072and589824. Changing this forces a new resource to be created. - vm
Max IntegerMap Count - The sysctl setting vm.max_map_count. Must be between
65530and262144. Changing this forces a new resource to be created. - vm
Swappiness Integer - The sysctl setting vm.swappiness. Must be between
0and100. Changing this forces a new resource to be created. - vm
Vfs IntegerCache Pressure - The sysctl setting vm.vfs_cache_pressure. Must be between
0and100. Changing this forces a new resource to be created.
- fs
Aio numberMax Nr - The sysctl setting fs.aio-max-nr. Must be between
65536and6553500. Changing this forces a new resource to be created. - fs
File numberMax - The sysctl setting fs.file-max. Must be between
8192and12000500. Changing this forces a new resource to be created. - fs
Inotify numberMax User Watches - The sysctl setting fs.inotify.max_user_watches. Must be between
781250and2097152. Changing this forces a new resource to be created. - fs
Nr numberOpen - The sysctl setting fs.nr_open. Must be between
8192and20000500. Changing this forces a new resource to be created. - kernel
Threads numberMax - The sysctl setting kernel.threads-max. Must be between
20and513785. Changing this forces a new resource to be created. - net
Core numberNetdev Max Backlog - The sysctl setting net.core.netdev_max_backlog. Must be between
1000and3240000. Changing this forces a new resource to be created. - net
Core numberOptmem Max - The sysctl setting net.core.optmem_max. Must be between
20480and4194304. Changing this forces a new resource to be created. - net
Core numberRmem Default - The sysctl setting net.core.rmem_default. Must be between
212992and134217728. Changing this forces a new resource to be created. - net
Core numberRmem Max - The sysctl setting net.core.rmem_max. Must be between
212992and134217728. Changing this forces a new resource to be created. - net
Core numberSomaxconn - The sysctl setting net.core.somaxconn. Must be between
4096and3240000. Changing this forces a new resource to be created. - net
Core numberWmem Default - The sysctl setting net.core.wmem_default. Must be between
212992and134217728. Changing this forces a new resource to be created. - net
Core numberWmem Max - The sysctl setting net.core.wmem_max. Must be between
212992and134217728. Changing this forces a new resource to be created. - net
Ipv4Ip numberLocal Port Range Max - The sysctl setting net.ipv4.ip_local_port_range max value. Must be between
1024and60999. Changing this forces a new resource to be created. - net
Ipv4Ip numberLocal Port Range Min - The sysctl setting net.ipv4.ip_local_port_range min value. Must be between
1024and60999. Changing this forces a new resource to be created. - net
Ipv4Neigh numberDefault Gc Thresh1 - The sysctl setting net.ipv4.neigh.default.gc_thresh1. Must be between
128and80000. Changing this forces a new resource to be created. - net
Ipv4Neigh numberDefault Gc Thresh2 - The sysctl setting net.ipv4.neigh.default.gc_thresh2. Must be between
512and90000. Changing this forces a new resource to be created. - net
Ipv4Neigh numberDefault Gc Thresh3 - The sysctl setting net.ipv4.neigh.default.gc_thresh3. Must be between
1024and100000. Changing this forces a new resource to be created. - net
Ipv4Tcp numberFin Timeout - The sysctl setting net.ipv4.tcp_fin_timeout. Must be between
5and120. Changing this forces a new resource to be created. - net
Ipv4Tcp numberKeepalive Intvl - The sysctl setting net.ipv4.tcp_keepalive_intvl. Must be between
10and75. Changing this forces a new resource to be created. - net
Ipv4Tcp numberKeepalive Probes - The sysctl setting net.ipv4.tcp_keepalive_probes. Must be between
1and15. Changing this forces a new resource to be created. - net
Ipv4Tcp numberKeepalive Time - The sysctl setting net.ipv4.tcp_keepalive_time. Must be between
30and432000. Changing this forces a new resource to be created. - net
Ipv4Tcp numberMax Syn Backlog - The sysctl setting net.ipv4.tcp_max_syn_backlog. Must be between
128and3240000. Changing this forces a new resource to be created. - net
Ipv4Tcp numberMax Tw Buckets - The sysctl setting net.ipv4.tcp_max_tw_buckets. Must be between
8000and1440000. Changing this forces a new resource to be created. - net
Ipv4Tcp booleanTw Reuse - The sysctl setting net.ipv4.tcp_tw_reuse. Changing this forces a new resource to be created.
- net
Netfilter numberNf Conntrack Buckets - The sysctl setting net.netfilter.nf_conntrack_buckets. Must be between
65536and147456. Changing this forces a new resource to be created. - net
Netfilter numberNf Conntrack Max - The sysctl setting net.netfilter.nf_conntrack_max. Must be between
131072and589824. Changing this forces a new resource to be created. - vm
Max numberMap Count - The sysctl setting vm.max_map_count. Must be between
65530and262144. Changing this forces a new resource to be created. - vm
Swappiness number - The sysctl setting vm.swappiness. Must be between
0and100. Changing this forces a new resource to be created. - vm
Vfs numberCache Pressure - The sysctl setting vm.vfs_cache_pressure. Must be between
0and100. Changing this forces a new resource to be created.
- fs_
aio_ intmax_ nr - The sysctl setting fs.aio-max-nr. Must be between
65536and6553500. Changing this forces a new resource to be created. - fs_
file_ intmax - The sysctl setting fs.file-max. Must be between
8192and12000500. Changing this forces a new resource to be created. - fs_
inotify_ intmax_ user_ watches - The sysctl setting fs.inotify.max_user_watches. Must be between
781250and2097152. Changing this forces a new resource to be created. - fs_
nr_ intopen - The sysctl setting fs.nr_open. Must be between
8192and20000500. Changing this forces a new resource to be created. - kernel_
threads_ intmax - The sysctl setting kernel.threads-max. Must be between
20and513785. Changing this forces a new resource to be created. - net_
core_ intnetdev_ max_ backlog - The sysctl setting net.core.netdev_max_backlog. Must be between
1000and3240000. Changing this forces a new resource to be created. - net_
core_ intoptmem_ max - The sysctl setting net.core.optmem_max. Must be between
20480and4194304. Changing this forces a new resource to be created. - net_
core_ intrmem_ default - The sysctl setting net.core.rmem_default. Must be between
212992and134217728. Changing this forces a new resource to be created. - net_
core_ intrmem_ max - The sysctl setting net.core.rmem_max. Must be between
212992and134217728. Changing this forces a new resource to be created. - net_
core_ intsomaxconn - The sysctl setting net.core.somaxconn. Must be between
4096and3240000. Changing this forces a new resource to be created. - net_
core_ intwmem_ default - The sysctl setting net.core.wmem_default. Must be between
212992and134217728. Changing this forces a new resource to be created. - net_
core_ intwmem_ max - The sysctl setting net.core.wmem_max. Must be between
212992and134217728. Changing this forces a new resource to be created. - net_
ipv4_ intip_ local_ port_ range_ max - The sysctl setting net.ipv4.ip_local_port_range max value. Must be between
1024and60999. Changing this forces a new resource to be created. - net_
ipv4_ intip_ local_ port_ range_ min - The sysctl setting net.ipv4.ip_local_port_range min value. Must be between
1024and60999. Changing this forces a new resource to be created. - net_
ipv4_ intneigh_ default_ gc_ thresh1 - The sysctl setting net.ipv4.neigh.default.gc_thresh1. Must be between
128and80000. Changing this forces a new resource to be created. - net_
ipv4_ intneigh_ default_ gc_ thresh2 - The sysctl setting net.ipv4.neigh.default.gc_thresh2. Must be between
512and90000. Changing this forces a new resource to be created. - net_
ipv4_ intneigh_ default_ gc_ thresh3 - The sysctl setting net.ipv4.neigh.default.gc_thresh3. Must be between
1024and100000. Changing this forces a new resource to be created. - net_
ipv4_ inttcp_ fin_ timeout - The sysctl setting net.ipv4.tcp_fin_timeout. Must be between
5and120. Changing this forces a new resource to be created. - net_
ipv4_ inttcp_ keepalive_ intvl - The sysctl setting net.ipv4.tcp_keepalive_intvl. Must be between
10and75. Changing this forces a new resource to be created. - net_
ipv4_ inttcp_ keepalive_ probes - The sysctl setting net.ipv4.tcp_keepalive_probes. Must be between
1and15. Changing this forces a new resource to be created. - net_
ipv4_ inttcp_ keepalive_ time - The sysctl setting net.ipv4.tcp_keepalive_time. Must be between
30and432000. Changing this forces a new resource to be created. - net_
ipv4_ inttcp_ max_ syn_ backlog - The sysctl setting net.ipv4.tcp_max_syn_backlog. Must be between
128and3240000. Changing this forces a new resource to be created. - net_
ipv4_ inttcp_ max_ tw_ buckets - The sysctl setting net.ipv4.tcp_max_tw_buckets. Must be between
8000and1440000. Changing this forces a new resource to be created. - net_
ipv4_ booltcp_ tw_ reuse - The sysctl setting net.ipv4.tcp_tw_reuse. Changing this forces a new resource to be created.
- net_
netfilter_ intnf_ conntrack_ buckets - The sysctl setting net.netfilter.nf_conntrack_buckets. Must be between
65536and147456. Changing this forces a new resource to be created. - net_
netfilter_ intnf_ conntrack_ max - The sysctl setting net.netfilter.nf_conntrack_max. Must be between
131072and589824. Changing this forces a new resource to be created. - vm_
max_ intmap_ count - The sysctl setting vm.max_map_count. Must be between
65530and262144. Changing this forces a new resource to be created. - vm_
swappiness int - The sysctl setting vm.swappiness. Must be between
0and100. Changing this forces a new resource to be created. - vm_
vfs_ intcache_ pressure - The sysctl setting vm.vfs_cache_pressure. Must be between
0and100. Changing this forces a new resource to be created.
- fs
Aio NumberMax Nr - The sysctl setting fs.aio-max-nr. Must be between
65536and6553500. Changing this forces a new resource to be created. - fs
File NumberMax - The sysctl setting fs.file-max. Must be between
8192and12000500. Changing this forces a new resource to be created. - fs
Inotify NumberMax User Watches - The sysctl setting fs.inotify.max_user_watches. Must be between
781250and2097152. Changing this forces a new resource to be created. - fs
Nr NumberOpen - The sysctl setting fs.nr_open. Must be between
8192and20000500. Changing this forces a new resource to be created. - kernel
Threads NumberMax - The sysctl setting kernel.threads-max. Must be between
20and513785. Changing this forces a new resource to be created. - net
Core NumberNetdev Max Backlog - The sysctl setting net.core.netdev_max_backlog. Must be between
1000and3240000. Changing this forces a new resource to be created. - net
Core NumberOptmem Max - The sysctl setting net.core.optmem_max. Must be between
20480and4194304. Changing this forces a new resource to be created. - net
Core NumberRmem Default - The sysctl setting net.core.rmem_default. Must be between
212992and134217728. Changing this forces a new resource to be created. - net
Core NumberRmem Max - The sysctl setting net.core.rmem_max. Must be between
212992and134217728. Changing this forces a new resource to be created. - net
Core NumberSomaxconn - The sysctl setting net.core.somaxconn. Must be between
4096and3240000. Changing this forces a new resource to be created. - net
Core NumberWmem Default - The sysctl setting net.core.wmem_default. Must be between
212992and134217728. Changing this forces a new resource to be created. - net
Core NumberWmem Max - The sysctl setting net.core.wmem_max. Must be between
212992and134217728. Changing this forces a new resource to be created. - net
Ipv4Ip NumberLocal Port Range Max - The sysctl setting net.ipv4.ip_local_port_range max value. Must be between
1024and60999. Changing this forces a new resource to be created. - net
Ipv4Ip NumberLocal Port Range Min - The sysctl setting net.ipv4.ip_local_port_range min value. Must be between
1024and60999. Changing this forces a new resource to be created. - net
Ipv4Neigh NumberDefault Gc Thresh1 - The sysctl setting net.ipv4.neigh.default.gc_thresh1. Must be between
128and80000. Changing this forces a new resource to be created. - net
Ipv4Neigh NumberDefault Gc Thresh2 - The sysctl setting net.ipv4.neigh.default.gc_thresh2. Must be between
512and90000. Changing this forces a new resource to be created. - net
Ipv4Neigh NumberDefault Gc Thresh3 - The sysctl setting net.ipv4.neigh.default.gc_thresh3. Must be between
1024and100000. Changing this forces a new resource to be created. - net
Ipv4Tcp NumberFin Timeout - The sysctl setting net.ipv4.tcp_fin_timeout. Must be between
5and120. Changing this forces a new resource to be created. - net
Ipv4Tcp NumberKeepalive Intvl - The sysctl setting net.ipv4.tcp_keepalive_intvl. Must be between
10and75. Changing this forces a new resource to be created. - net
Ipv4Tcp NumberKeepalive Probes - The sysctl setting net.ipv4.tcp_keepalive_probes. Must be between
1and15. Changing this forces a new resource to be created. - net
Ipv4Tcp NumberKeepalive Time - The sysctl setting net.ipv4.tcp_keepalive_time. Must be between
30and432000. Changing this forces a new resource to be created. - net
Ipv4Tcp NumberMax Syn Backlog - The sysctl setting net.ipv4.tcp_max_syn_backlog. Must be between
128and3240000. Changing this forces a new resource to be created. - net
Ipv4Tcp NumberMax Tw Buckets - The sysctl setting net.ipv4.tcp_max_tw_buckets. Must be between
8000and1440000. Changing this forces a new resource to be created. - net
Ipv4Tcp BooleanTw Reuse - The sysctl setting net.ipv4.tcp_tw_reuse. Changing this forces a new resource to be created.
- net
Netfilter NumberNf Conntrack Buckets - The sysctl setting net.netfilter.nf_conntrack_buckets. Must be between
65536and147456. Changing this forces a new resource to be created. - net
Netfilter NumberNf Conntrack Max - The sysctl setting net.netfilter.nf_conntrack_max. Must be between
131072and589824. Changing this forces a new resource to be created. - vm
Max NumberMap Count - The sysctl setting vm.max_map_count. Must be between
65530and262144. Changing this forces a new resource to be created. - vm
Swappiness Number - The sysctl setting vm.swappiness. Must be between
0and100. Changing this forces a new resource to be created. - vm
Vfs NumberCache Pressure - The sysctl setting vm.vfs_cache_pressure. Must be between
0and100. Changing this forces a new resource to be created.
KubernetesClusterDefaultNodePoolUpgradeSettings, KubernetesClusterDefaultNodePoolUpgradeSettingsArgs
- Max
Surge string - The maximum number or percentage of nodes which will be added to the Node Pool size during an upgrade.
- Max
Surge string - The maximum number or percentage of nodes which will be added to the Node Pool size during an upgrade.
- max
Surge String - The maximum number or percentage of nodes which will be added to the Node Pool size during an upgrade.
- max
Surge string - The maximum number or percentage of nodes which will be added to the Node Pool size during an upgrade.
- max_
surge str - The maximum number or percentage of nodes which will be added to the Node Pool size during an upgrade.
- max
Surge String - The maximum number or percentage of nodes which will be added to the Node Pool size during an upgrade.
KubernetesClusterHttpProxyConfig, KubernetesClusterHttpProxyConfigArgs
- Http
Proxy string - The proxy address to be used when communicating over HTTP.
- Https
Proxy string - The proxy address to be used when communicating over HTTPS.
- No
Proxies List<string> - The list of domains that will not use the proxy for communication.
- Trusted
Ca string - The base64 encoded alternative CA certificate content in PEM format.
- Http
Proxy string - The proxy address to be used when communicating over HTTP.
- Https
Proxy string - The proxy address to be used when communicating over HTTPS.
- No
Proxies []string - The list of domains that will not use the proxy for communication.
- Trusted
Ca string - The base64 encoded alternative CA certificate content in PEM format.
- http
Proxy String - The proxy address to be used when communicating over HTTP.
- https
Proxy String - The proxy address to be used when communicating over HTTPS.
- no
Proxies List<String> - The list of domains that will not use the proxy for communication.
- trusted
Ca String - The base64 encoded alternative CA certificate content in PEM format.
- http
Proxy string - The proxy address to be used when communicating over HTTP.
- https
Proxy string - The proxy address to be used when communicating over HTTPS.
- no
Proxies string[] - The list of domains that will not use the proxy for communication.
- trusted
Ca string - The base64 encoded alternative CA certificate content in PEM format.
- http_
proxy str - The proxy address to be used when communicating over HTTP.
- https_
proxy str - The proxy address to be used when communicating over HTTPS.
- no_
proxies Sequence[str] - The list of domains that will not use the proxy for communication.
- trusted_
ca str - The base64 encoded alternative CA certificate content in PEM format.
- http
Proxy String - The proxy address to be used when communicating over HTTP.
- https
Proxy String - The proxy address to be used when communicating over HTTPS.
- no
Proxies List<String> - The list of domains that will not use the proxy for communication.
- trusted
Ca String - The base64 encoded alternative CA certificate content in PEM format.
KubernetesClusterIdentity, KubernetesClusterIdentityArgs
- Type string
- The type of identity used for the managed cluster. Possible values are
SystemAssignedandUserAssigned. IfUserAssignedis set, auser_assigned_identity_idmust be set as well. - Principal
Id string - The principal id of the system assigned identity which is used by main components.
- Tenant
Id string - The Tenant ID used for Azure Active Directory Application. If this isn't specified the Tenant ID of the current Subscription is used.
- User
Assigned stringIdentity Id - The ID of a user assigned identity.
- Type string
- The type of identity used for the managed cluster. Possible values are
SystemAssignedandUserAssigned. IfUserAssignedis set, auser_assigned_identity_idmust be set as well. - Principal
Id string - The principal id of the system assigned identity which is used by main components.
- Tenant
Id string - The Tenant ID used for Azure Active Directory Application. If this isn't specified the Tenant ID of the current Subscription is used.
- User
Assigned stringIdentity Id - The ID of a user assigned identity.
- type String
- The type of identity used for the managed cluster. Possible values are
SystemAssignedandUserAssigned. IfUserAssignedis set, auser_assigned_identity_idmust be set as well. - principal
Id String - The principal id of the system assigned identity which is used by main components.
- tenant
Id String - The Tenant ID used for Azure Active Directory Application. If this isn't specified the Tenant ID of the current Subscription is used.
- user
Assigned StringIdentity Id - The ID of a user assigned identity.
- type string
- The type of identity used for the managed cluster. Possible values are
SystemAssignedandUserAssigned. IfUserAssignedis set, auser_assigned_identity_idmust be set as well. - principal
Id string - The principal id of the system assigned identity which is used by main components.
- tenant
Id string - The Tenant ID used for Azure Active Directory Application. If this isn't specified the Tenant ID of the current Subscription is used.
- user
Assigned stringIdentity Id - The ID of a user assigned identity.
- type str
- The type of identity used for the managed cluster. Possible values are
SystemAssignedandUserAssigned. IfUserAssignedis set, auser_assigned_identity_idmust be set as well. - principal_
id str - The principal id of the system assigned identity which is used by main components.
- tenant_
id str - The Tenant ID used for Azure Active Directory Application. If this isn't specified the Tenant ID of the current Subscription is used.
- user_
assigned_ stridentity_ id - The ID of a user assigned identity.
- type String
- The type of identity used for the managed cluster. Possible values are
SystemAssignedandUserAssigned. IfUserAssignedis set, auser_assigned_identity_idmust be set as well. - principal
Id String - The principal id of the system assigned identity which is used by main components.
- tenant
Id String - The Tenant ID used for Azure Active Directory Application. If this isn't specified the Tenant ID of the current Subscription is used.
- user
Assigned StringIdentity Id - The ID of a user assigned identity.
KubernetesClusterIngressApplicationGateway, KubernetesClusterIngressApplicationGatewayArgs
- Effective
Gateway stringId - The ID of the Application Gateway associated with the ingress controller deployed to this Kubernetes Cluster.
- Gateway
Id string - The ID of the Application Gateway to integrate with the ingress controller of this Kubernetes Cluster. See this page for further details.
- Gateway
Name string - The name of the Application Gateway to be used or created in the Nodepool Resource Group, which in turn will be integrated with the ingress controller of this Kubernetes Cluster. See this page for further details.
- Ingress
Application List<KubernetesGateway Identities Cluster Ingress Application Gateway Ingress Application Gateway Identity> - An
ingress_application_gateway_identityblock is exported. The exported attributes are defined below. - Subnet
Cidr string - The subnet CIDR to be used to create an Application Gateway, which in turn will be integrated with the ingress controller of this Kubernetes Cluster. See this page for further details.
- Subnet
Id string - The ID of the subnet on which to create an Application Gateway, which in turn will be integrated with the ingress controller of this Kubernetes Cluster. See this page for further details.
- Effective
Gateway stringId - The ID of the Application Gateway associated with the ingress controller deployed to this Kubernetes Cluster.
- Gateway
Id string - The ID of the Application Gateway to integrate with the ingress controller of this Kubernetes Cluster. See this page for further details.
- Gateway
Name string - The name of the Application Gateway to be used or created in the Nodepool Resource Group, which in turn will be integrated with the ingress controller of this Kubernetes Cluster. See this page for further details.
- Ingress
Application []KubernetesGateway Identities Cluster Ingress Application Gateway Ingress Application Gateway Identity - An
ingress_application_gateway_identityblock is exported. The exported attributes are defined below. - Subnet
Cidr string - The subnet CIDR to be used to create an Application Gateway, which in turn will be integrated with the ingress controller of this Kubernetes Cluster. See this page for further details.
- Subnet
Id string - The ID of the subnet on which to create an Application Gateway, which in turn will be integrated with the ingress controller of this Kubernetes Cluster. See this page for further details.
- effective
Gateway StringId - The ID of the Application Gateway associated with the ingress controller deployed to this Kubernetes Cluster.
- gateway
Id String - The ID of the Application Gateway to integrate with the ingress controller of this Kubernetes Cluster. See this page for further details.
- gateway
Name String - The name of the Application Gateway to be used or created in the Nodepool Resource Group, which in turn will be integrated with the ingress controller of this Kubernetes Cluster. See this page for further details.
- ingress
Application List<KubernetesGateway Identities Cluster Ingress Application Gateway Ingress Application Gateway Identity> - An
ingress_application_gateway_identityblock is exported. The exported attributes are defined below. - subnet
Cidr String - The subnet CIDR to be used to create an Application Gateway, which in turn will be integrated with the ingress controller of this Kubernetes Cluster. See this page for further details.
- subnet
Id String - The ID of the subnet on which to create an Application Gateway, which in turn will be integrated with the ingress controller of this Kubernetes Cluster. See this page for further details.
- effective
Gateway stringId - The ID of the Application Gateway associated with the ingress controller deployed to this Kubernetes Cluster.
- gateway
Id string - The ID of the Application Gateway to integrate with the ingress controller of this Kubernetes Cluster. See this page for further details.
- gateway
Name string - The name of the Application Gateway to be used or created in the Nodepool Resource Group, which in turn will be integrated with the ingress controller of this Kubernetes Cluster. See this page for further details.
- ingress
Application KubernetesGateway Identities Cluster Ingress Application Gateway Ingress Application Gateway Identity[] - An
ingress_application_gateway_identityblock is exported. The exported attributes are defined below. - subnet
Cidr string - The subnet CIDR to be used to create an Application Gateway, which in turn will be integrated with the ingress controller of this Kubernetes Cluster. See this page for further details.
- subnet
Id string - The ID of the subnet on which to create an Application Gateway, which in turn will be integrated with the ingress controller of this Kubernetes Cluster. See this page for further details.
- effective_
gateway_ strid - The ID of the Application Gateway associated with the ingress controller deployed to this Kubernetes Cluster.
- gateway_
id str - The ID of the Application Gateway to integrate with the ingress controller of this Kubernetes Cluster. See this page for further details.
- gateway_
name str - The name of the Application Gateway to be used or created in the Nodepool Resource Group, which in turn will be integrated with the ingress controller of this Kubernetes Cluster. See this page for further details.
- ingress_
application_ Sequence[Kubernetesgateway_ identities Cluster Ingress Application Gateway Ingress Application Gateway Identity] - An
ingress_application_gateway_identityblock is exported. The exported attributes are defined below. - subnet_
cidr str - The subnet CIDR to be used to create an Application Gateway, which in turn will be integrated with the ingress controller of this Kubernetes Cluster. See this page for further details.
- subnet_
id str - The ID of the subnet on which to create an Application Gateway, which in turn will be integrated with the ingress controller of this Kubernetes Cluster. See this page for further details.
- effective
Gateway StringId - The ID of the Application Gateway associated with the ingress controller deployed to this Kubernetes Cluster.
- gateway
Id String - The ID of the Application Gateway to integrate with the ingress controller of this Kubernetes Cluster. See this page for further details.
- gateway
Name String - The name of the Application Gateway to be used or created in the Nodepool Resource Group, which in turn will be integrated with the ingress controller of this Kubernetes Cluster. See this page for further details.
- ingress
Application List<Property Map>Gateway Identities - An
ingress_application_gateway_identityblock is exported. The exported attributes are defined below. - subnet
Cidr String - The subnet CIDR to be used to create an Application Gateway, which in turn will be integrated with the ingress controller of this Kubernetes Cluster. See this page for further details.
- subnet
Id String - The ID of the subnet on which to create an Application Gateway, which in turn will be integrated with the ingress controller of this Kubernetes Cluster. See this page for further details.
KubernetesClusterIngressApplicationGatewayIngressApplicationGatewayIdentity, KubernetesClusterIngressApplicationGatewayIngressApplicationGatewayIdentityArgs
- Client
Id string - The Client ID of the user-defined Managed Identity to be assigned to the Kubelets. If not specified a Managed Identity is created automatically.
- Object
Id string - The Object ID of the user-defined Managed Identity assigned to the Kubelets.If not specified a Managed Identity is created automatically.
- User
Assigned stringIdentity Id - The ID of a user assigned identity.
- Client
Id string - The Client ID of the user-defined Managed Identity to be assigned to the Kubelets. If not specified a Managed Identity is created automatically.
- Object
Id string - The Object ID of the user-defined Managed Identity assigned to the Kubelets.If not specified a Managed Identity is created automatically.
- User
Assigned stringIdentity Id - The ID of a user assigned identity.
- client
Id String - The Client ID of the user-defined Managed Identity to be assigned to the Kubelets. If not specified a Managed Identity is created automatically.
- object
Id String - The Object ID of the user-defined Managed Identity assigned to the Kubelets.If not specified a Managed Identity is created automatically.
- user
Assigned StringIdentity Id - The ID of a user assigned identity.
- client
Id string - The Client ID of the user-defined Managed Identity to be assigned to the Kubelets. If not specified a Managed Identity is created automatically.
- object
Id string - The Object ID of the user-defined Managed Identity assigned to the Kubelets.If not specified a Managed Identity is created automatically.
- user
Assigned stringIdentity Id - The ID of a user assigned identity.
- client_
id str - The Client ID of the user-defined Managed Identity to be assigned to the Kubelets. If not specified a Managed Identity is created automatically.
- object_
id str - The Object ID of the user-defined Managed Identity assigned to the Kubelets.If not specified a Managed Identity is created automatically.
- user_
assigned_ stridentity_ id - The ID of a user assigned identity.
- client
Id String - The Client ID of the user-defined Managed Identity to be assigned to the Kubelets. If not specified a Managed Identity is created automatically.
- object
Id String - The Object ID of the user-defined Managed Identity assigned to the Kubelets.If not specified a Managed Identity is created automatically.
- user
Assigned StringIdentity Id - The ID of a user assigned identity.
KubernetesClusterKeyVaultSecretsProvider, KubernetesClusterKeyVaultSecretsProviderArgs
- Secret
Identities List<KubernetesCluster Key Vault Secrets Provider Secret Identity> - An
secret_identityblock is exported. The exported attributes are defined below. - Secret
Rotation boolEnabled - Is secret rotation enabled?
- Secret
Rotation stringInterval - The interval to poll for secret rotation. This attribute is only set when
secret_rotationis true and defaults to2m.
- Secret
Identities []KubernetesCluster Key Vault Secrets Provider Secret Identity - An
secret_identityblock is exported. The exported attributes are defined below. - Secret
Rotation boolEnabled - Is secret rotation enabled?
- Secret
Rotation stringInterval - The interval to poll for secret rotation. This attribute is only set when
secret_rotationis true and defaults to2m.
- secret
Identities List<KubernetesCluster Key Vault Secrets Provider Secret Identity> - An
secret_identityblock is exported. The exported attributes are defined below. - secret
Rotation BooleanEnabled - Is secret rotation enabled?
- secret
Rotation StringInterval - The interval to poll for secret rotation. This attribute is only set when
secret_rotationis true and defaults to2m.
- secret
Identities KubernetesCluster Key Vault Secrets Provider Secret Identity[] - An
secret_identityblock is exported. The exported attributes are defined below. - secret
Rotation booleanEnabled - Is secret rotation enabled?
- secret
Rotation stringInterval - The interval to poll for secret rotation. This attribute is only set when
secret_rotationis true and defaults to2m.
- secret_
identities Sequence[KubernetesCluster Key Vault Secrets Provider Secret Identity] - An
secret_identityblock is exported. The exported attributes are defined below. - secret_
rotation_ boolenabled - Is secret rotation enabled?
- secret_
rotation_ strinterval - The interval to poll for secret rotation. This attribute is only set when
secret_rotationis true and defaults to2m.
- secret
Identities List<Property Map> - An
secret_identityblock is exported. The exported attributes are defined below. - secret
Rotation BooleanEnabled - Is secret rotation enabled?
- secret
Rotation StringInterval - The interval to poll for secret rotation. This attribute is only set when
secret_rotationis true and defaults to2m.
KubernetesClusterKeyVaultSecretsProviderSecretIdentity, KubernetesClusterKeyVaultSecretsProviderSecretIdentityArgs
- Client
Id string - The Client ID of the user-defined Managed Identity to be assigned to the Kubelets. If not specified a Managed Identity is created automatically.
- Object
Id string - The Object ID of the user-defined Managed Identity assigned to the Kubelets.If not specified a Managed Identity is created automatically.
- User
Assigned stringIdentity Id - The ID of a user assigned identity.
- Client
Id string - The Client ID of the user-defined Managed Identity to be assigned to the Kubelets. If not specified a Managed Identity is created automatically.
- Object
Id string - The Object ID of the user-defined Managed Identity assigned to the Kubelets.If not specified a Managed Identity is created automatically.
- User
Assigned stringIdentity Id - The ID of a user assigned identity.
- client
Id String - The Client ID of the user-defined Managed Identity to be assigned to the Kubelets. If not specified a Managed Identity is created automatically.
- object
Id String - The Object ID of the user-defined Managed Identity assigned to the Kubelets.If not specified a Managed Identity is created automatically.
- user
Assigned StringIdentity Id - The ID of a user assigned identity.
- client
Id string - The Client ID of the user-defined Managed Identity to be assigned to the Kubelets. If not specified a Managed Identity is created automatically.
- object
Id string - The Object ID of the user-defined Managed Identity assigned to the Kubelets.If not specified a Managed Identity is created automatically.
- user
Assigned stringIdentity Id - The ID of a user assigned identity.
- client_
id str - The Client ID of the user-defined Managed Identity to be assigned to the Kubelets. If not specified a Managed Identity is created automatically.
- object_
id str - The Object ID of the user-defined Managed Identity assigned to the Kubelets.If not specified a Managed Identity is created automatically.
- user_
assigned_ stridentity_ id - The ID of a user assigned identity.
- client
Id String - The Client ID of the user-defined Managed Identity to be assigned to the Kubelets. If not specified a Managed Identity is created automatically.
- object
Id String - The Object ID of the user-defined Managed Identity assigned to the Kubelets.If not specified a Managed Identity is created automatically.
- user
Assigned StringIdentity Id - The ID of a user assigned identity.
KubernetesClusterKubeAdminConfig, KubernetesClusterKubeAdminConfigArgs
- Client
Certificate string - Base64 encoded public certificate used by clients to authenticate to the Kubernetes cluster.
- Client
Key string - Base64 encoded private key used by clients to authenticate to the Kubernetes cluster.
- Cluster
Ca stringCertificate - Base64 encoded public CA certificate used as the root of trust for the Kubernetes cluster.
- Host string
- The Kubernetes cluster server host.
- Password string
- A password or token used to authenticate to the Kubernetes cluster.
- Username string
- A username used to authenticate to the Kubernetes cluster.
- Client
Certificate string - Base64 encoded public certificate used by clients to authenticate to the Kubernetes cluster.
- Client
Key string - Base64 encoded private key used by clients to authenticate to the Kubernetes cluster.
- Cluster
Ca stringCertificate - Base64 encoded public CA certificate used as the root of trust for the Kubernetes cluster.
- Host string
- The Kubernetes cluster server host.
- Password string
- A password or token used to authenticate to the Kubernetes cluster.
- Username string
- A username used to authenticate to the Kubernetes cluster.
- client
Certificate String - Base64 encoded public certificate used by clients to authenticate to the Kubernetes cluster.
- client
Key String - Base64 encoded private key used by clients to authenticate to the Kubernetes cluster.
- cluster
Ca StringCertificate - Base64 encoded public CA certificate used as the root of trust for the Kubernetes cluster.
- host String
- The Kubernetes cluster server host.
- password String
- A password or token used to authenticate to the Kubernetes cluster.
- username String
- A username used to authenticate to the Kubernetes cluster.
- client
Certificate string - Base64 encoded public certificate used by clients to authenticate to the Kubernetes cluster.
- client
Key string - Base64 encoded private key used by clients to authenticate to the Kubernetes cluster.
- cluster
Ca stringCertificate - Base64 encoded public CA certificate used as the root of trust for the Kubernetes cluster.
- host string
- The Kubernetes cluster server host.
- password string
- A password or token used to authenticate to the Kubernetes cluster.
- username string
- A username used to authenticate to the Kubernetes cluster.
- client_
certificate str - Base64 encoded public certificate used by clients to authenticate to the Kubernetes cluster.
- client_
key str - Base64 encoded private key used by clients to authenticate to the Kubernetes cluster.
- cluster_
ca_ strcertificate - Base64 encoded public CA certificate used as the root of trust for the Kubernetes cluster.
- host str
- The Kubernetes cluster server host.
- password str
- A password or token used to authenticate to the Kubernetes cluster.
- username str
- A username used to authenticate to the Kubernetes cluster.
- client
Certificate String - Base64 encoded public certificate used by clients to authenticate to the Kubernetes cluster.
- client
Key String - Base64 encoded private key used by clients to authenticate to the Kubernetes cluster.
- cluster
Ca StringCertificate - Base64 encoded public CA certificate used as the root of trust for the Kubernetes cluster.
- host String
- The Kubernetes cluster server host.
- password String
- A password or token used to authenticate to the Kubernetes cluster.
- username String
- A username used to authenticate to the Kubernetes cluster.
KubernetesClusterKubeConfig, KubernetesClusterKubeConfigArgs
- Client
Certificate string - Base64 encoded public certificate used by clients to authenticate to the Kubernetes cluster.
- Client
Key string - Base64 encoded private key used by clients to authenticate to the Kubernetes cluster.
- Cluster
Ca stringCertificate - Base64 encoded public CA certificate used as the root of trust for the Kubernetes cluster.
- Host string
- The Kubernetes cluster server host.
- Password string
- A password or token used to authenticate to the Kubernetes cluster.
- Username string
- A username used to authenticate to the Kubernetes cluster.
- Client
Certificate string - Base64 encoded public certificate used by clients to authenticate to the Kubernetes cluster.
- Client
Key string - Base64 encoded private key used by clients to authenticate to the Kubernetes cluster.
- Cluster
Ca stringCertificate - Base64 encoded public CA certificate used as the root of trust for the Kubernetes cluster.
- Host string
- The Kubernetes cluster server host.
- Password string
- A password or token used to authenticate to the Kubernetes cluster.
- Username string
- A username used to authenticate to the Kubernetes cluster.
- client
Certificate String - Base64 encoded public certificate used by clients to authenticate to the Kubernetes cluster.
- client
Key String - Base64 encoded private key used by clients to authenticate to the Kubernetes cluster.
- cluster
Ca StringCertificate - Base64 encoded public CA certificate used as the root of trust for the Kubernetes cluster.
- host String
- The Kubernetes cluster server host.
- password String
- A password or token used to authenticate to the Kubernetes cluster.
- username String
- A username used to authenticate to the Kubernetes cluster.
- client
Certificate string - Base64 encoded public certificate used by clients to authenticate to the Kubernetes cluster.
- client
Key string - Base64 encoded private key used by clients to authenticate to the Kubernetes cluster.
- cluster
Ca stringCertificate - Base64 encoded public CA certificate used as the root of trust for the Kubernetes cluster.
- host string
- The Kubernetes cluster server host.
- password string
- A password or token used to authenticate to the Kubernetes cluster.
- username string
- A username used to authenticate to the Kubernetes cluster.
- client_
certificate str - Base64 encoded public certificate used by clients to authenticate to the Kubernetes cluster.
- client_
key str - Base64 encoded private key used by clients to authenticate to the Kubernetes cluster.
- cluster_
ca_ strcertificate - Base64 encoded public CA certificate used as the root of trust for the Kubernetes cluster.
- host str
- The Kubernetes cluster server host.
- password str
- A password or token used to authenticate to the Kubernetes cluster.
- username str
- A username used to authenticate to the Kubernetes cluster.
- client
Certificate String - Base64 encoded public certificate used by clients to authenticate to the Kubernetes cluster.
- client
Key String - Base64 encoded private key used by clients to authenticate to the Kubernetes cluster.
- cluster
Ca StringCertificate - Base64 encoded public CA certificate used as the root of trust for the Kubernetes cluster.
- host String
- The Kubernetes cluster server host.
- password String
- A password or token used to authenticate to the Kubernetes cluster.
- username String
- A username used to authenticate to the Kubernetes cluster.
KubernetesClusterKubeletIdentity, KubernetesClusterKubeletIdentityArgs
- Client
Id string - The Client ID of the user-defined Managed Identity to be assigned to the Kubelets. If not specified a Managed Identity is created automatically.
- Object
Id string - The Object ID of the user-defined Managed Identity assigned to the Kubelets.If not specified a Managed Identity is created automatically.
- User
Assigned stringIdentity Id - The ID of the User Assigned Identity assigned to the Kubelets. If not specified a Managed Identity is created automatically.
- Client
Id string - The Client ID of the user-defined Managed Identity to be assigned to the Kubelets. If not specified a Managed Identity is created automatically.
- Object
Id string - The Object ID of the user-defined Managed Identity assigned to the Kubelets.If not specified a Managed Identity is created automatically.
- User
Assigned stringIdentity Id - The ID of the User Assigned Identity assigned to the Kubelets. If not specified a Managed Identity is created automatically.
- client
Id String - The Client ID of the user-defined Managed Identity to be assigned to the Kubelets. If not specified a Managed Identity is created automatically.
- object
Id String - The Object ID of the user-defined Managed Identity assigned to the Kubelets.If not specified a Managed Identity is created automatically.
- user
Assigned StringIdentity Id - The ID of the User Assigned Identity assigned to the Kubelets. If not specified a Managed Identity is created automatically.
- client
Id string - The Client ID of the user-defined Managed Identity to be assigned to the Kubelets. If not specified a Managed Identity is created automatically.
- object
Id string - The Object ID of the user-defined Managed Identity assigned to the Kubelets.If not specified a Managed Identity is created automatically.
- user
Assigned stringIdentity Id - The ID of the User Assigned Identity assigned to the Kubelets. If not specified a Managed Identity is created automatically.
- client_
id str - The Client ID of the user-defined Managed Identity to be assigned to the Kubelets. If not specified a Managed Identity is created automatically.
- object_
id str - The Object ID of the user-defined Managed Identity assigned to the Kubelets.If not specified a Managed Identity is created automatically.
- user_
assigned_ stridentity_ id - The ID of the User Assigned Identity assigned to the Kubelets. If not specified a Managed Identity is created automatically.
- client
Id String - The Client ID of the user-defined Managed Identity to be assigned to the Kubelets. If not specified a Managed Identity is created automatically.
- object
Id String - The Object ID of the user-defined Managed Identity assigned to the Kubelets.If not specified a Managed Identity is created automatically.
- user
Assigned StringIdentity Id - The ID of the User Assigned Identity assigned to the Kubelets. If not specified a Managed Identity is created automatically.
KubernetesClusterLinuxProfile, KubernetesClusterLinuxProfileArgs
- Admin
Username string - The Admin Username for the Cluster. Changing this forces a new resource to be created.
- Ssh
Key KubernetesCluster Linux Profile Ssh Key - An
ssh_keyblock. Only one is currently allowed. Changing this forces a new resource to be created.
- Admin
Username string - The Admin Username for the Cluster. Changing this forces a new resource to be created.
- Ssh
Key KubernetesCluster Linux Profile Ssh Key - An
ssh_keyblock. Only one is currently allowed. Changing this forces a new resource to be created.
- admin
Username String - The Admin Username for the Cluster. Changing this forces a new resource to be created.
- ssh
Key KubernetesCluster Linux Profile Ssh Key - An
ssh_keyblock. Only one is currently allowed. Changing this forces a new resource to be created.
- admin
Username string - The Admin Username for the Cluster. Changing this forces a new resource to be created.
- ssh
Key KubernetesCluster Linux Profile Ssh Key - An
ssh_keyblock. Only one is currently allowed. Changing this forces a new resource to be created.
- admin_
username str - The Admin Username for the Cluster. Changing this forces a new resource to be created.
- ssh_
key KubernetesCluster Linux Profile Ssh Key - An
ssh_keyblock. Only one is currently allowed. Changing this forces a new resource to be created.
- admin
Username String - The Admin Username for the Cluster. Changing this forces a new resource to be created.
- ssh
Key Property Map - An
ssh_keyblock. Only one is currently allowed. Changing this forces a new resource to be created.
KubernetesClusterLinuxProfileSshKey, KubernetesClusterLinuxProfileSshKeyArgs
- Key
Data string - The Public SSH Key used to access the cluster. Changing this forces a new resource to be created.
- Key
Data string - The Public SSH Key used to access the cluster. Changing this forces a new resource to be created.
- key
Data String - The Public SSH Key used to access the cluster. Changing this forces a new resource to be created.
- key
Data string - The Public SSH Key used to access the cluster. Changing this forces a new resource to be created.
- key_
data str - The Public SSH Key used to access the cluster. Changing this forces a new resource to be created.
- key
Data String - The Public SSH Key used to access the cluster. Changing this forces a new resource to be created.
KubernetesClusterMaintenanceWindow, KubernetesClusterMaintenanceWindowArgs
- Alloweds
List<Kubernetes
Cluster Maintenance Window Allowed> - One or more
allowedblock as defined below. - Not
Alloweds List<KubernetesCluster Maintenance Window Not Allowed> - One or more
not_allowedblock as defined below.
- Alloweds
[]Kubernetes
Cluster Maintenance Window Allowed - One or more
allowedblock as defined below. - Not
Alloweds []KubernetesCluster Maintenance Window Not Allowed - One or more
not_allowedblock as defined below.
- alloweds
List<Kubernetes
Cluster Maintenance Window Allowed> - One or more
allowedblock as defined below. - not
Alloweds List<KubernetesCluster Maintenance Window Not Allowed> - One or more
not_allowedblock as defined below.
- alloweds
Kubernetes
Cluster Maintenance Window Allowed[] - One or more
allowedblock as defined below. - not
Alloweds KubernetesCluster Maintenance Window Not Allowed[] - One or more
not_allowedblock as defined below.
- alloweds
Sequence[Kubernetes
Cluster Maintenance Window Allowed] - One or more
allowedblock as defined below. - not_
alloweds Sequence[KubernetesCluster Maintenance Window Not Allowed] - One or more
not_allowedblock as defined below.
- alloweds List<Property Map>
- One or more
allowedblock as defined below. - not
Alloweds List<Property Map> - One or more
not_allowedblock as defined below.
KubernetesClusterMaintenanceWindowAllowed, KubernetesClusterMaintenanceWindowAllowedArgs
KubernetesClusterMaintenanceWindowNotAllowed, KubernetesClusterMaintenanceWindowNotAllowedArgs
KubernetesClusterNetworkProfile, KubernetesClusterNetworkProfileArgs
- Network
Plugin string - Network plugin to use for networking. Currently supported values are
azureandkubenet. Changing this forces a new resource to be created. - Dns
Service stringIp - IP address within the Kubernetes service address range that will be used by cluster service discovery (kube-dns). Changing this forces a new resource to be created.
- Docker
Bridge stringCidr - IP address (in CIDR notation) used as the Docker bridge IP address on nodes. Changing this forces a new resource to be created.
- Load
Balancer KubernetesProfile Cluster Network Profile Load Balancer Profile - A
load_balancer_profileblock. This can only be specified whenload_balancer_skuis set toStandard. - Load
Balancer stringSku - Specifies the SKU of the Load Balancer used for this Kubernetes Cluster. Possible values are
BasicandStandard. Defaults toStandard. - Nat
Gateway KubernetesProfile Cluster Network Profile Nat Gateway Profile - A
nat_gateway_profileblock. This can only be specified whenload_balancer_skuis set toStandardandoutbound_typeis set tomanagedNATGatewayoruserAssignedNATGateway. - Network
Mode string - Network mode to be used with Azure CNI. Possible values are
bridgeandtransparent. Changing this forces a new resource to be created. - Network
Policy string - Sets up network policy to be used with Azure CNI. Network policy allows us to control the traffic flow between pods. Currently supported values are
calicoandazure. Changing this forces a new resource to be created. - Outbound
Type string - The outbound (egress) routing method which should be used for this Kubernetes Cluster. Possible values are
loadBalancer,userDefinedRouting,managedNATGatewayanduserAssignedNATGateway. Defaults toloadBalancer. - Pod
Cidr string - The CIDR to use for pod IP addresses. This field can only be set when
network_pluginis set tokubenet. Changing this forces a new resource to be created. - Service
Cidr string - The Network Range used by the Kubernetes service. Changing this forces a new resource to be created.
- Network
Plugin string - Network plugin to use for networking. Currently supported values are
azureandkubenet. Changing this forces a new resource to be created. - Dns
Service stringIp - IP address within the Kubernetes service address range that will be used by cluster service discovery (kube-dns). Changing this forces a new resource to be created.
- Docker
Bridge stringCidr - IP address (in CIDR notation) used as the Docker bridge IP address on nodes. Changing this forces a new resource to be created.
- Load
Balancer KubernetesProfile Cluster Network Profile Load Balancer Profile - A
load_balancer_profileblock. This can only be specified whenload_balancer_skuis set toStandard. - Load
Balancer stringSku - Specifies the SKU of the Load Balancer used for this Kubernetes Cluster. Possible values are
BasicandStandard. Defaults toStandard. - Nat
Gateway KubernetesProfile Cluster Network Profile Nat Gateway Profile - A
nat_gateway_profileblock. This can only be specified whenload_balancer_skuis set toStandardandoutbound_typeis set tomanagedNATGatewayoruserAssignedNATGateway. - Network
Mode string - Network mode to be used with Azure CNI. Possible values are
bridgeandtransparent. Changing this forces a new resource to be created. - Network
Policy string - Sets up network policy to be used with Azure CNI. Network policy allows us to control the traffic flow between pods. Currently supported values are
calicoandazure. Changing this forces a new resource to be created. - Outbound
Type string - The outbound (egress) routing method which should be used for this Kubernetes Cluster. Possible values are
loadBalancer,userDefinedRouting,managedNATGatewayanduserAssignedNATGateway. Defaults toloadBalancer. - Pod
Cidr string - The CIDR to use for pod IP addresses. This field can only be set when
network_pluginis set tokubenet. Changing this forces a new resource to be created. - Service
Cidr string - The Network Range used by the Kubernetes service. Changing this forces a new resource to be created.
- network
Plugin String - Network plugin to use for networking. Currently supported values are
azureandkubenet. Changing this forces a new resource to be created. - dns
Service StringIp - IP address within the Kubernetes service address range that will be used by cluster service discovery (kube-dns). Changing this forces a new resource to be created.
- docker
Bridge StringCidr - IP address (in CIDR notation) used as the Docker bridge IP address on nodes. Changing this forces a new resource to be created.
- load
Balancer KubernetesProfile Cluster Network Profile Load Balancer Profile - A
load_balancer_profileblock. This can only be specified whenload_balancer_skuis set toStandard. - load
Balancer StringSku - Specifies the SKU of the Load Balancer used for this Kubernetes Cluster. Possible values are
BasicandStandard. Defaults toStandard. - nat
Gateway KubernetesProfile Cluster Network Profile Nat Gateway Profile - A
nat_gateway_profileblock. This can only be specified whenload_balancer_skuis set toStandardandoutbound_typeis set tomanagedNATGatewayoruserAssignedNATGateway. - network
Mode String - Network mode to be used with Azure CNI. Possible values are
bridgeandtransparent. Changing this forces a new resource to be created. - network
Policy String - Sets up network policy to be used with Azure CNI. Network policy allows us to control the traffic flow between pods. Currently supported values are
calicoandazure. Changing this forces a new resource to be created. - outbound
Type String - The outbound (egress) routing method which should be used for this Kubernetes Cluster. Possible values are
loadBalancer,userDefinedRouting,managedNATGatewayanduserAssignedNATGateway. Defaults toloadBalancer. - pod
Cidr String - The CIDR to use for pod IP addresses. This field can only be set when
network_pluginis set tokubenet. Changing this forces a new resource to be created. - service
Cidr String - The Network Range used by the Kubernetes service. Changing this forces a new resource to be created.
- network
Plugin string - Network plugin to use for networking. Currently supported values are
azureandkubenet. Changing this forces a new resource to be created. - dns
Service stringIp - IP address within the Kubernetes service address range that will be used by cluster service discovery (kube-dns). Changing this forces a new resource to be created.
- docker
Bridge stringCidr - IP address (in CIDR notation) used as the Docker bridge IP address on nodes. Changing this forces a new resource to be created.
- load
Balancer KubernetesProfile Cluster Network Profile Load Balancer Profile - A
load_balancer_profileblock. This can only be specified whenload_balancer_skuis set toStandard. - load
Balancer stringSku - Specifies the SKU of the Load Balancer used for this Kubernetes Cluster. Possible values are
BasicandStandard. Defaults toStandard. - nat
Gateway KubernetesProfile Cluster Network Profile Nat Gateway Profile - A
nat_gateway_profileblock. This can only be specified whenload_balancer_skuis set toStandardandoutbound_typeis set tomanagedNATGatewayoruserAssignedNATGateway. - network
Mode string - Network mode to be used with Azure CNI. Possible values are
bridgeandtransparent. Changing this forces a new resource to be created. - network
Policy string - Sets up network policy to be used with Azure CNI. Network policy allows us to control the traffic flow between pods. Currently supported values are
calicoandazure. Changing this forces a new resource to be created. - outbound
Type string - The outbound (egress) routing method which should be used for this Kubernetes Cluster. Possible values are
loadBalancer,userDefinedRouting,managedNATGatewayanduserAssignedNATGateway. Defaults toloadBalancer. - pod
Cidr string - The CIDR to use for pod IP addresses. This field can only be set when
network_pluginis set tokubenet. Changing this forces a new resource to be created. - service
Cidr string - The Network Range used by the Kubernetes service. Changing this forces a new resource to be created.
- network_
plugin str - Network plugin to use for networking. Currently supported values are
azureandkubenet. Changing this forces a new resource to be created. - dns_
service_ strip - IP address within the Kubernetes service address range that will be used by cluster service discovery (kube-dns). Changing this forces a new resource to be created.
- docker_
bridge_ strcidr - IP address (in CIDR notation) used as the Docker bridge IP address on nodes. Changing this forces a new resource to be created.
- load_
balancer_ Kubernetesprofile Cluster Network Profile Load Balancer Profile - A
load_balancer_profileblock. This can only be specified whenload_balancer_skuis set toStandard. - load_
balancer_ strsku - Specifies the SKU of the Load Balancer used for this Kubernetes Cluster. Possible values are
BasicandStandard. Defaults toStandard. - nat_
gateway_ Kubernetesprofile Cluster Network Profile Nat Gateway Profile - A
nat_gateway_profileblock. This can only be specified whenload_balancer_skuis set toStandardandoutbound_typeis set tomanagedNATGatewayoruserAssignedNATGateway. - network_
mode str - Network mode to be used with Azure CNI. Possible values are
bridgeandtransparent. Changing this forces a new resource to be created. - network_
policy str - Sets up network policy to be used with Azure CNI. Network policy allows us to control the traffic flow between pods. Currently supported values are
calicoandazure. Changing this forces a new resource to be created. - outbound_
type str - The outbound (egress) routing method which should be used for this Kubernetes Cluster. Possible values are
loadBalancer,userDefinedRouting,managedNATGatewayanduserAssignedNATGateway. Defaults toloadBalancer. - pod_
cidr str - The CIDR to use for pod IP addresses. This field can only be set when
network_pluginis set tokubenet. Changing this forces a new resource to be created. - service_
cidr str - The Network Range used by the Kubernetes service. Changing this forces a new resource to be created.
- network
Plugin String - Network plugin to use for networking. Currently supported values are
azureandkubenet. Changing this forces a new resource to be created. - dns
Service StringIp - IP address within the Kubernetes service address range that will be used by cluster service discovery (kube-dns). Changing this forces a new resource to be created.
- docker
Bridge StringCidr - IP address (in CIDR notation) used as the Docker bridge IP address on nodes. Changing this forces a new resource to be created.
- load
Balancer Property MapProfile - A
load_balancer_profileblock. This can only be specified whenload_balancer_skuis set toStandard. - load
Balancer StringSku - Specifies the SKU of the Load Balancer used for this Kubernetes Cluster. Possible values are
BasicandStandard. Defaults toStandard. - nat
Gateway Property MapProfile - A
nat_gateway_profileblock. This can only be specified whenload_balancer_skuis set toStandardandoutbound_typeis set tomanagedNATGatewayoruserAssignedNATGateway. - network
Mode String - Network mode to be used with Azure CNI. Possible values are
bridgeandtransparent. Changing this forces a new resource to be created. - network
Policy String - Sets up network policy to be used with Azure CNI. Network policy allows us to control the traffic flow between pods. Currently supported values are
calicoandazure. Changing this forces a new resource to be created. - outbound
Type String - The outbound (egress) routing method which should be used for this Kubernetes Cluster. Possible values are
loadBalancer,userDefinedRouting,managedNATGatewayanduserAssignedNATGateway. Defaults toloadBalancer. - pod
Cidr String - The CIDR to use for pod IP addresses. This field can only be set when
network_pluginis set tokubenet. Changing this forces a new resource to be created. - service
Cidr String - The Network Range used by the Kubernetes service. Changing this forces a new resource to be created.
KubernetesClusterNetworkProfileLoadBalancerProfile, KubernetesClusterNetworkProfileLoadBalancerProfileArgs
- Effective
Outbound List<string>Ips - The outcome (resource IDs) of the specified arguments.
- Idle
Timeout intIn Minutes - Desired outbound flow idle timeout in minutes for the cluster load balancer. Must be between
4and120inclusive. Defaults to30. - Managed
Outbound intIp Count - Count of desired managed outbound IPs for the cluster load balancer. Must be between
1and100inclusive. - Outbound
Ip List<string>Address Ids - The ID of the Public IP Addresses which should be used for outbound communication for the cluster load balancer.
- Outbound
Ip List<string>Prefix Ids - The ID of the outbound Public IP Address Prefixes which should be used for the cluster load balancer.
- Outbound
Ports intAllocated - Number of desired SNAT port for each VM in the clusters load balancer. Must be between
0and64000inclusive. Defaults to0.
- Effective
Outbound []stringIps - The outcome (resource IDs) of the specified arguments.
- Idle
Timeout intIn Minutes - Desired outbound flow idle timeout in minutes for the cluster load balancer. Must be between
4and120inclusive. Defaults to30. - Managed
Outbound intIp Count - Count of desired managed outbound IPs for the cluster load balancer. Must be between
1and100inclusive. - Outbound
Ip []stringAddress Ids - The ID of the Public IP Addresses which should be used for outbound communication for the cluster load balancer.
- Outbound
Ip []stringPrefix Ids - The ID of the outbound Public IP Address Prefixes which should be used for the cluster load balancer.
- Outbound
Ports intAllocated - Number of desired SNAT port for each VM in the clusters load balancer. Must be between
0and64000inclusive. Defaults to0.
- effective
Outbound List<String>Ips - The outcome (resource IDs) of the specified arguments.
- idle
Timeout IntegerIn Minutes - Desired outbound flow idle timeout in minutes for the cluster load balancer. Must be between
4and120inclusive. Defaults to30. - managed
Outbound IntegerIp Count - Count of desired managed outbound IPs for the cluster load balancer. Must be between
1and100inclusive. - outbound
Ip List<String>Address Ids - The ID of the Public IP Addresses which should be used for outbound communication for the cluster load balancer.
- outbound
Ip List<String>Prefix Ids - The ID of the outbound Public IP Address Prefixes which should be used for the cluster load balancer.
- outbound
Ports IntegerAllocated - Number of desired SNAT port for each VM in the clusters load balancer. Must be between
0and64000inclusive. Defaults to0.
- effective
Outbound string[]Ips - The outcome (resource IDs) of the specified arguments.
- idle
Timeout numberIn Minutes - Desired outbound flow idle timeout in minutes for the cluster load balancer. Must be between
4and120inclusive. Defaults to30. - managed
Outbound numberIp Count - Count of desired managed outbound IPs for the cluster load balancer. Must be between
1and100inclusive. - outbound
Ip string[]Address Ids - The ID of the Public IP Addresses which should be used for outbound communication for the cluster load balancer.
- outbound
Ip string[]Prefix Ids - The ID of the outbound Public IP Address Prefixes which should be used for the cluster load balancer.
- outbound
Ports numberAllocated - Number of desired SNAT port for each VM in the clusters load balancer. Must be between
0and64000inclusive. Defaults to0.
- effective_
outbound_ Sequence[str]ips - The outcome (resource IDs) of the specified arguments.
- idle_
timeout_ intin_ minutes - Desired outbound flow idle timeout in minutes for the cluster load balancer. Must be between
4and120inclusive. Defaults to30. - managed_
outbound_ intip_ count - Count of desired managed outbound IPs for the cluster load balancer. Must be between
1and100inclusive. - outbound_
ip_ Sequence[str]address_ ids - The ID of the Public IP Addresses which should be used for outbound communication for the cluster load balancer.
- outbound_
ip_ Sequence[str]prefix_ ids - The ID of the outbound Public IP Address Prefixes which should be used for the cluster load balancer.
- outbound_
ports_ intallocated - Number of desired SNAT port for each VM in the clusters load balancer. Must be between
0and64000inclusive. Defaults to0.
- effective
Outbound List<String>Ips - The outcome (resource IDs) of the specified arguments.
- idle
Timeout NumberIn Minutes - Desired outbound flow idle timeout in minutes for the cluster load balancer. Must be between
4and120inclusive. Defaults to30. - managed
Outbound NumberIp Count - Count of desired managed outbound IPs for the cluster load balancer. Must be between
1and100inclusive. - outbound
Ip List<String>Address Ids - The ID of the Public IP Addresses which should be used for outbound communication for the cluster load balancer.
- outbound
Ip List<String>Prefix Ids - The ID of the outbound Public IP Address Prefixes which should be used for the cluster load balancer.
- outbound
Ports NumberAllocated - Number of desired SNAT port for each VM in the clusters load balancer. Must be between
0and64000inclusive. Defaults to0.
KubernetesClusterNetworkProfileNatGatewayProfile, KubernetesClusterNetworkProfileNatGatewayProfileArgs
- Effective
Outbound List<string>Ips - The outcome (resource IDs) of the specified arguments.
- Idle
Timeout intIn Minutes - Desired outbound flow idle timeout in minutes for the cluster load balancer. Must be between
4and120inclusive. Defaults to4. - Managed
Outbound intIp Count - Count of desired managed outbound IPs for the cluster load balancer. Must be between
1and100inclusive.
- Effective
Outbound []stringIps - The outcome (resource IDs) of the specified arguments.
- Idle
Timeout intIn Minutes - Desired outbound flow idle timeout in minutes for the cluster load balancer. Must be between
4and120inclusive. Defaults to4. - Managed
Outbound intIp Count - Count of desired managed outbound IPs for the cluster load balancer. Must be between
1and100inclusive.
- effective
Outbound List<String>Ips - The outcome (resource IDs) of the specified arguments.
- idle
Timeout IntegerIn Minutes - Desired outbound flow idle timeout in minutes for the cluster load balancer. Must be between
4and120inclusive. Defaults to4. - managed
Outbound IntegerIp Count - Count of desired managed outbound IPs for the cluster load balancer. Must be between
1and100inclusive.
- effective
Outbound string[]Ips - The outcome (resource IDs) of the specified arguments.
- idle
Timeout numberIn Minutes - Desired outbound flow idle timeout in minutes for the cluster load balancer. Must be between
4and120inclusive. Defaults to4. - managed
Outbound numberIp Count - Count of desired managed outbound IPs for the cluster load balancer. Must be between
1and100inclusive.
- effective_
outbound_ Sequence[str]ips - The outcome (resource IDs) of the specified arguments.
- idle_
timeout_ intin_ minutes - Desired outbound flow idle timeout in minutes for the cluster load balancer. Must be between
4and120inclusive. Defaults to4. - managed_
outbound_ intip_ count - Count of desired managed outbound IPs for the cluster load balancer. Must be between
1and100inclusive.
- effective
Outbound List<String>Ips - The outcome (resource IDs) of the specified arguments.
- idle
Timeout NumberIn Minutes - Desired outbound flow idle timeout in minutes for the cluster load balancer. Must be between
4and120inclusive. Defaults to4. - managed
Outbound NumberIp Count - Count of desired managed outbound IPs for the cluster load balancer. Must be between
1and100inclusive.
KubernetesClusterOmsAgent, KubernetesClusterOmsAgentArgs
- Log
Analytics stringWorkspace Id - The ID of the Log Analytics Workspace which the OMS Agent should send data to.
- Oms
Agent List<KubernetesIdentities Cluster Oms Agent Oms Agent Identity> - An
oms_agent_identityblock is exported. The exported attributes are defined below.
- Log
Analytics stringWorkspace Id - The ID of the Log Analytics Workspace which the OMS Agent should send data to.
- Oms
Agent []KubernetesIdentities Cluster Oms Agent Oms Agent Identity - An
oms_agent_identityblock is exported. The exported attributes are defined below.
- log
Analytics StringWorkspace Id - The ID of the Log Analytics Workspace which the OMS Agent should send data to.
- oms
Agent List<KubernetesIdentities Cluster Oms Agent Oms Agent Identity> - An
oms_agent_identityblock is exported. The exported attributes are defined below.
- log
Analytics stringWorkspace Id - The ID of the Log Analytics Workspace which the OMS Agent should send data to.
- oms
Agent KubernetesIdentities Cluster Oms Agent Oms Agent Identity[] - An
oms_agent_identityblock is exported. The exported attributes are defined below.
- log_
analytics_ strworkspace_ id - The ID of the Log Analytics Workspace which the OMS Agent should send data to.
- oms_
agent_ Sequence[Kubernetesidentities Cluster Oms Agent Oms Agent Identity] - An
oms_agent_identityblock is exported. The exported attributes are defined below.
- log
Analytics StringWorkspace Id - The ID of the Log Analytics Workspace which the OMS Agent should send data to.
- oms
Agent List<Property Map>Identities - An
oms_agent_identityblock is exported. The exported attributes are defined below.
KubernetesClusterOmsAgentOmsAgentIdentity, KubernetesClusterOmsAgentOmsAgentIdentityArgs
- Client
Id string - The Client ID of the user-defined Managed Identity to be assigned to the Kubelets. If not specified a Managed Identity is created automatically.
- Object
Id string - The Object ID of the user-defined Managed Identity assigned to the Kubelets.If not specified a Managed Identity is created automatically.
- User
Assigned stringIdentity Id - The ID of a user assigned identity.
- Client
Id string - The Client ID of the user-defined Managed Identity to be assigned to the Kubelets. If not specified a Managed Identity is created automatically.
- Object
Id string - The Object ID of the user-defined Managed Identity assigned to the Kubelets.If not specified a Managed Identity is created automatically.
- User
Assigned stringIdentity Id - The ID of a user assigned identity.
- client
Id String - The Client ID of the user-defined Managed Identity to be assigned to the Kubelets. If not specified a Managed Identity is created automatically.
- object
Id String - The Object ID of the user-defined Managed Identity assigned to the Kubelets.If not specified a Managed Identity is created automatically.
- user
Assigned StringIdentity Id - The ID of a user assigned identity.
- client
Id string - The Client ID of the user-defined Managed Identity to be assigned to the Kubelets. If not specified a Managed Identity is created automatically.
- object
Id string - The Object ID of the user-defined Managed Identity assigned to the Kubelets.If not specified a Managed Identity is created automatically.
- user
Assigned stringIdentity Id - The ID of a user assigned identity.
- client_
id str - The Client ID of the user-defined Managed Identity to be assigned to the Kubelets. If not specified a Managed Identity is created automatically.
- object_
id str - The Object ID of the user-defined Managed Identity assigned to the Kubelets.If not specified a Managed Identity is created automatically.
- user_
assigned_ stridentity_ id - The ID of a user assigned identity.
- client
Id String - The Client ID of the user-defined Managed Identity to be assigned to the Kubelets. If not specified a Managed Identity is created automatically.
- object
Id String - The Object ID of the user-defined Managed Identity assigned to the Kubelets.If not specified a Managed Identity is created automatically.
- user
Assigned StringIdentity Id - The ID of a user assigned identity.
KubernetesClusterRoleBasedAccessControl, KubernetesClusterRoleBasedAccessControlArgs
- Enabled bool
- Is the Kubernetes Dashboard enabled?
- Azure
Active KubernetesDirectory Cluster Role Based Access Control Azure Active Directory
- Enabled bool
- Is the Kubernetes Dashboard enabled?
- Azure
Active KubernetesDirectory Cluster Role Based Access Control Azure Active Directory
- enabled Boolean
- Is the Kubernetes Dashboard enabled?
- azure
Active KubernetesDirectory Cluster Role Based Access Control Azure Active Directory
- enabled boolean
- Is the Kubernetes Dashboard enabled?
- azure
Active KubernetesDirectory Cluster Role Based Access Control Azure Active Directory
- enabled bool
- Is the Kubernetes Dashboard enabled?
- azure_
active_ Kubernetesdirectory Cluster Role Based Access Control Azure Active Directory
- enabled Boolean
- Is the Kubernetes Dashboard enabled?
- azure
Active Property MapDirectory
KubernetesClusterRoleBasedAccessControlAzureActiveDirectory, KubernetesClusterRoleBasedAccessControlAzureActiveDirectoryArgs
- Admin
Group List<string>Object Ids - A list of Object IDs of Azure Active Directory Groups which should have Admin Role on the Cluster.
- Azure
Rbac boolEnabled - Is Role Based Access Control based on Azure AD enabled?
- Client
App stringId - The Client ID of an Azure Active Directory Application.
- Managed bool
- Is the Azure Active Directory integration Managed, meaning that Azure will create/manage the Service Principal used for integration.
- Server
App stringId - The Server ID of an Azure Active Directory Application.
- Server
App stringSecret - The Server Secret of an Azure Active Directory Application.
- Tenant
Id string - The Tenant ID used for Azure Active Directory Application. If this isn't specified the Tenant ID of the current Subscription is used.
- Admin
Group []stringObject Ids - A list of Object IDs of Azure Active Directory Groups which should have Admin Role on the Cluster.
- Azure
Rbac boolEnabled - Is Role Based Access Control based on Azure AD enabled?
- Client
App stringId - The Client ID of an Azure Active Directory Application.
- Managed bool
- Is the Azure Active Directory integration Managed, meaning that Azure will create/manage the Service Principal used for integration.
- Server
App stringId - The Server ID of an Azure Active Directory Application.
- Server
App stringSecret - The Server Secret of an Azure Active Directory Application.
- Tenant
Id string - The Tenant ID used for Azure Active Directory Application. If this isn't specified the Tenant ID of the current Subscription is used.
- admin
Group List<String>Object Ids - A list of Object IDs of Azure Active Directory Groups which should have Admin Role on the Cluster.
- azure
Rbac BooleanEnabled - Is Role Based Access Control based on Azure AD enabled?
- client
App StringId - The Client ID of an Azure Active Directory Application.
- managed Boolean
- Is the Azure Active Directory integration Managed, meaning that Azure will create/manage the Service Principal used for integration.
- server
App StringId - The Server ID of an Azure Active Directory Application.
- server
App StringSecret - The Server Secret of an Azure Active Directory Application.
- tenant
Id String - The Tenant ID used for Azure Active Directory Application. If this isn't specified the Tenant ID of the current Subscription is used.
- admin
Group string[]Object Ids - A list of Object IDs of Azure Active Directory Groups which should have Admin Role on the Cluster.
- azure
Rbac booleanEnabled - Is Role Based Access Control based on Azure AD enabled?
- client
App stringId - The Client ID of an Azure Active Directory Application.
- managed boolean
- Is the Azure Active Directory integration Managed, meaning that Azure will create/manage the Service Principal used for integration.
- server
App stringId - The Server ID of an Azure Active Directory Application.
- server
App stringSecret - The Server Secret of an Azure Active Directory Application.
- tenant
Id string - The Tenant ID used for Azure Active Directory Application. If this isn't specified the Tenant ID of the current Subscription is used.
- admin_
group_ Sequence[str]object_ ids - A list of Object IDs of Azure Active Directory Groups which should have Admin Role on the Cluster.
- azure_
rbac_ boolenabled - Is Role Based Access Control based on Azure AD enabled?
- client_
app_ strid - The Client ID of an Azure Active Directory Application.
- managed bool
- Is the Azure Active Directory integration Managed, meaning that Azure will create/manage the Service Principal used for integration.
- server_
app_ strid - The Server ID of an Azure Active Directory Application.
- server_
app_ strsecret - The Server Secret of an Azure Active Directory Application.
- tenant_
id str - The Tenant ID used for Azure Active Directory Application. If this isn't specified the Tenant ID of the current Subscription is used.
- admin
Group List<String>Object Ids - A list of Object IDs of Azure Active Directory Groups which should have Admin Role on the Cluster.
- azure
Rbac BooleanEnabled - Is Role Based Access Control based on Azure AD enabled?
- client
App StringId - The Client ID of an Azure Active Directory Application.
- managed Boolean
- Is the Azure Active Directory integration Managed, meaning that Azure will create/manage the Service Principal used for integration.
- server
App StringId - The Server ID of an Azure Active Directory Application.
- server
App StringSecret - The Server Secret of an Azure Active Directory Application.
- tenant
Id String - The Tenant ID used for Azure Active Directory Application. If this isn't specified the Tenant ID of the current Subscription is used.
KubernetesClusterServicePrincipal, KubernetesClusterServicePrincipalArgs
- Client
Id string - The Client ID for the Service Principal.
- Client
Secret string - The Client Secret for the Service Principal.
- Client
Id string - The Client ID for the Service Principal.
- Client
Secret string - The Client Secret for the Service Principal.
- client
Id String - The Client ID for the Service Principal.
- client
Secret String - The Client Secret for the Service Principal.
- client
Id string - The Client ID for the Service Principal.
- client
Secret string - The Client Secret for the Service Principal.
- client_
id str - The Client ID for the Service Principal.
- client_
secret str - The Client Secret for the Service Principal.
- client
Id String - The Client ID for the Service Principal.
- client
Secret String - The Client Secret for the Service Principal.
KubernetesClusterWindowsProfile, KubernetesClusterWindowsProfileArgs
- Admin
Username string - The Admin Username for Windows VMs.
- Admin
Password string - The Admin Password for Windows VMs. Length must be between 14 and 123 characters.
- License string
- Specifies the type of on-premise license which should be used for Node Pool Windows Virtual Machine. At this time the only possible value is
Windows_Server.
- Admin
Username string - The Admin Username for Windows VMs.
- Admin
Password string - The Admin Password for Windows VMs. Length must be between 14 and 123 characters.
- License string
- Specifies the type of on-premise license which should be used for Node Pool Windows Virtual Machine. At this time the only possible value is
Windows_Server.
- admin
Username String - The Admin Username for Windows VMs.
- admin
Password String - The Admin Password for Windows VMs. Length must be between 14 and 123 characters.
- license String
- Specifies the type of on-premise license which should be used for Node Pool Windows Virtual Machine. At this time the only possible value is
Windows_Server.
- admin
Username string - The Admin Username for Windows VMs.
- admin
Password string - The Admin Password for Windows VMs. Length must be between 14 and 123 characters.
- license string
- Specifies the type of on-premise license which should be used for Node Pool Windows Virtual Machine. At this time the only possible value is
Windows_Server.
- admin_
username str - The Admin Username for Windows VMs.
- admin_
password str - The Admin Password for Windows VMs. Length must be between 14 and 123 characters.
- license str
- Specifies the type of on-premise license which should be used for Node Pool Windows Virtual Machine. At this time the only possible value is
Windows_Server.
- admin
Username String - The Admin Username for Windows VMs.
- admin
Password String - The Admin Password for Windows VMs. Length must be between 14 and 123 characters.
- license String
- Specifies the type of on-premise license which should be used for Node Pool Windows Virtual Machine. At this time the only possible value is
Windows_Server.
Import
Managed Kubernetes Clusters can be imported using the resource id, e.g.
$ pulumi import azure:containerservice/kubernetesCluster:KubernetesCluster cluster1 /subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/group1/providers/Microsoft.ContainerService/managedClusters/cluster1
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- Azure Classic pulumi/pulumi-azure
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
azurermTerraform Provider.
We recommend using Azure Native.
Viewing docs for Azure v4.42.0 (Older version)
published on Monday, Mar 9, 2026 by Pulumi
published on Monday, Mar 9, 2026 by Pulumi
