azure-native.containerservice.getManagedCluster

func LookupManagedCluster(ctx *Context, args *LookupManagedClusterArgs, opts ...InvokeOption) (*LookupManagedClusterResult, error)
func LookupManagedClusterOutput(ctx *Context, args *LookupManagedClusterOutputArgs, opts ...InvokeOption) LookupManagedClusterResultOutput

> Note: This function is named LookupManagedCluster in the Go SDK.

ResourceGroupName

This property is required.

Changes to this property will trigger replacement.

string

The name of the resource group. The name is case insensitive.

ResourceName

This property is required.

Changes to this property will trigger replacement.

string

The name of the managed cluster resource.

ResourceGroupName

This property is required.

Changes to this property will trigger replacement.

string

The name of the resource group. The name is case insensitive.

ResourceName

This property is required.

Changes to this property will trigger replacement.

string

The name of the managed cluster resource.

resourceGroupName

This property is required.

Changes to this property will trigger replacement.

String

The name of the resource group. The name is case insensitive.

resourceName

This property is required.

Changes to this property will trigger replacement.

String

The name of the managed cluster resource.

resource_group_name

This property is required.

Changes to this property will trigger replacement.

str

The name of the resource group. The name is case insensitive.

resource_name

This property is required.

Changes to this property will trigger replacement.

str

The name of the managed cluster resource.

resourceGroupName

This property is required.

Changes to this property will trigger replacement.

String

The name of the resource group. The name is case insensitive.

resourceName

This property is required.

Changes to this property will trigger replacement.

String

The name of the managed cluster resource.

AzureApiVersion string

The Azure API version of the resource.

AzurePortalFQDN string

The Azure Portal requires certain Cross-Origin Resource Sharing (CORS) headers to be sent in some responses, which Kubernetes APIServer doesn't handle by default. This special FQDN supports CORS, allowing the Azure Portal to function properly.

CurrentKubernetesVersion string

If kubernetesVersion was a fully specified version <major.minor.patch>, this field will be exactly equal to it. If kubernetesVersion was <major.minor>, this field will contain the full <major.minor.patch> version being used.

ETag string

Unique read-only string used to implement optimistic concurrency. The eTag value will change when the resource is updated. Specify an if-match or if-none-match header with the eTag value for a subsequent request to enable optimistic concurrency per the normal etag convention.

Fqdn string

The FQDN of the master pool.

Id string

Fully qualified resource ID for the resource. E.g. "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}"

Location string

The geo-location where the resource lives

MaxAgentPools int

The max number of agent pools for the managed cluster.

Name string

The name of the resource

PowerState Pulumi.AzureNative.ContainerService.Outputs.PowerStateResponse

The Power State of the cluster.

PrivateFQDN string

The FQDN of private cluster.

ProvisioningState string

The current provisioning state.

ResourceUID string

The resourceUID uniquely identifies ManagedClusters that reuse ARM ResourceIds (i.e: create, delete, create sequence)

SystemData Pulumi.AzureNative.ContainerService.Outputs.SystemDataResponse

Azure Resource Manager metadata containing createdBy and modifiedBy information.

Type string

The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"

AadProfile Pulumi.AzureNative.ContainerService.Outputs.ManagedClusterAADProfileResponse

The Azure Active Directory configuration.

AddonProfiles Dictionary<string, Pulumi.AzureNative.ContainerService.Outputs.ManagedClusterAddonProfileResponse>

The profile of managed cluster add-on.

AgentPoolProfiles List<Pulumi.AzureNative.ContainerService.Outputs.ManagedClusterAgentPoolProfileResponse>

The agent pool properties.

ApiServerAccessProfile Pulumi.AzureNative.ContainerService.Outputs.ManagedClusterAPIServerAccessProfileResponse

The access profile for managed cluster API server.

AutoScalerProfile Pulumi.AzureNative.ContainerService.Outputs.ManagedClusterPropertiesResponseAutoScalerProfile

Parameters to be applied to the cluster-autoscaler when enabled

AutoUpgradeProfile Pulumi.AzureNative.ContainerService.Outputs.ManagedClusterAutoUpgradeProfileResponse

The auto upgrade configuration.

AzureMonitorProfile Pulumi.AzureNative.ContainerService.Outputs.ManagedClusterAzureMonitorProfileResponse

Azure Monitor addon profiles for monitoring the managed cluster.

DisableLocalAccounts bool

If set to true, getting static credentials will be disabled for this cluster. This must only be used on Managed Clusters that are AAD enabled. For more details see disable local accounts.

DiskEncryptionSetID string

This is of the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Compute/diskEncryptionSets/{encryptionSetName}'

DnsPrefix string

This cannot be updated once the Managed Cluster has been created.

EnablePodSecurityPolicy bool

(DEPRECATED) Whether to enable Kubernetes pod security policy (preview). PodSecurityPolicy was deprecated in Kubernetes v1.21, and removed from Kubernetes in v1.25. Learn more at https://aka.ms/k8s/psp and https://aka.ms/aks/psp.

EnableRBAC bool

Whether to enable Kubernetes Role-Based Access Control.

ExtendedLocation Pulumi.AzureNative.ContainerService.Outputs.ExtendedLocationResponse

The extended location of the Virtual Machine.

FqdnSubdomain string

This cannot be updated once the Managed Cluster has been created.

HttpProxyConfig Pulumi.AzureNative.ContainerService.Outputs.ManagedClusterHTTPProxyConfigResponse

Configurations for provisioning the cluster with HTTP proxy servers.

Identity Pulumi.AzureNative.ContainerService.Outputs.ManagedClusterIdentityResponse

The identity of the managed cluster, if configured.

IdentityProfile Dictionary<string, Pulumi.AzureNative.ContainerService.Outputs.UserAssignedIdentityResponse>

The user identity associated with the managed cluster. This identity will be used by the kubelet. Only one user assigned identity is allowed. The only accepted key is "kubeletidentity", with value of "resourceId": "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}".

IngressProfile Pulumi.AzureNative.ContainerService.Outputs.ManagedClusterIngressProfileResponse

Ingress profile for the managed cluster.

KubernetesVersion string

Both patch version <major.minor.patch> (e.g. 1.20.13) and <major.minor> (e.g. 1.20) are supported. When <major.minor> is specified, the latest supported GA patch version is chosen automatically. Updating the cluster with the same <major.minor> once it has been created (e.g. 1.14.x -> 1.14) will not trigger an upgrade, even if a newer patch version is available. When you upgrade a supported AKS cluster, Kubernetes minor versions cannot be skipped. All upgrades must be performed sequentially by major version number. For example, upgrades between 1.14.x -> 1.15.x or 1.15.x -> 1.16.x are allowed, however 1.14.x -> 1.16.x is not allowed. See upgrading an AKS cluster for more details.

LinuxProfile Pulumi.AzureNative.ContainerService.Outputs.ContainerServiceLinuxProfileResponse

The profile for Linux VMs in the Managed Cluster.

MetricsProfile Pulumi.AzureNative.ContainerService.Outputs.ManagedClusterMetricsProfileResponse

Optional cluster metrics configuration.

NetworkProfile Pulumi.AzureNative.ContainerService.Outputs.ContainerServiceNetworkProfileResponse

The network configuration profile.

NodeResourceGroup string

The name of the resource group containing agent pool nodes.

NodeResourceGroupProfile Pulumi.AzureNative.ContainerService.Outputs.ManagedClusterNodeResourceGroupProfileResponse

Profile of the node resource group configuration.

OidcIssuerProfile Pulumi.AzureNative.ContainerService.Outputs.ManagedClusterOIDCIssuerProfileResponse

The OIDC issuer profile of the Managed Cluster.

PodIdentityProfile Pulumi.AzureNative.ContainerService.Outputs.ManagedClusterPodIdentityProfileResponse

See use AAD pod identity for more details on AAD pod identity integration.

PrivateLinkResources List<Pulumi.AzureNative.ContainerService.Outputs.PrivateLinkResourceResponse>

Private link resources associated with the cluster.

PublicNetworkAccess string

Allow or deny public network access for AKS

SecurityProfile Pulumi.AzureNative.ContainerService.Outputs.ManagedClusterSecurityProfileResponse

Security profile for the managed cluster.

ServiceMeshProfile Pulumi.AzureNative.ContainerService.Outputs.ServiceMeshProfileResponse

Service mesh profile for a managed cluster.

ServicePrincipalProfile Pulumi.AzureNative.ContainerService.Outputs.ManagedClusterServicePrincipalProfileResponse

Information about a service principal identity for the cluster to use for manipulating Azure APIs.

Sku Pulumi.AzureNative.ContainerService.Outputs.ManagedClusterSKUResponse

The managed cluster SKU.

StorageProfile Pulumi.AzureNative.ContainerService.Outputs.ManagedClusterStorageProfileResponse

Storage profile for the managed cluster.

SupportPlan string

The support plan for the Managed Cluster. If unspecified, the default is 'KubernetesOfficial'.

Tags Dictionary<string, string>

Resource tags.

UpgradeSettings Pulumi.AzureNative.ContainerService.Outputs.ClusterUpgradeSettingsResponse

Settings for upgrading a cluster.

WindowsProfile Pulumi.AzureNative.ContainerService.Outputs.ManagedClusterWindowsProfileResponse

The profile for Windows VMs in the Managed Cluster.

WorkloadAutoScalerProfile Pulumi.AzureNative.ContainerService.Outputs.ManagedClusterWorkloadAutoScalerProfileResponse

Workload Auto-scaler profile for the managed cluster.

AzureApiVersion string

The Azure API version of the resource.

AzurePortalFQDN string

The Azure Portal requires certain Cross-Origin Resource Sharing (CORS) headers to be sent in some responses, which Kubernetes APIServer doesn't handle by default. This special FQDN supports CORS, allowing the Azure Portal to function properly.

CurrentKubernetesVersion string

If kubernetesVersion was a fully specified version <major.minor.patch>, this field will be exactly equal to it. If kubernetesVersion was <major.minor>, this field will contain the full <major.minor.patch> version being used.

ETag string

Unique read-only string used to implement optimistic concurrency. The eTag value will change when the resource is updated. Specify an if-match or if-none-match header with the eTag value for a subsequent request to enable optimistic concurrency per the normal etag convention.

Fqdn string

The FQDN of the master pool.

Id string

Fully qualified resource ID for the resource. E.g. "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}"

Location string

The geo-location where the resource lives

MaxAgentPools int

The max number of agent pools for the managed cluster.

Name string

The name of the resource

PowerState PowerStateResponse

The Power State of the cluster.

PrivateFQDN string

The FQDN of private cluster.

ProvisioningState string

The current provisioning state.

ResourceUID string

The resourceUID uniquely identifies ManagedClusters that reuse ARM ResourceIds (i.e: create, delete, create sequence)

SystemData SystemDataResponse

Azure Resource Manager metadata containing createdBy and modifiedBy information.

Type string

The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"

AadProfile ManagedClusterAADProfileResponse

The Azure Active Directory configuration.

AddonProfiles map[string]ManagedClusterAddonProfileResponse

The profile of managed cluster add-on.

AgentPoolProfiles []ManagedClusterAgentPoolProfileResponse

The agent pool properties.

ApiServerAccessProfile ManagedClusterAPIServerAccessProfileResponse

The access profile for managed cluster API server.

AutoScalerProfile ManagedClusterPropertiesResponseAutoScalerProfile

Parameters to be applied to the cluster-autoscaler when enabled

AutoUpgradeProfile ManagedClusterAutoUpgradeProfileResponse

The auto upgrade configuration.

AzureMonitorProfile ManagedClusterAzureMonitorProfileResponse

Azure Monitor addon profiles for monitoring the managed cluster.

DisableLocalAccounts bool

If set to true, getting static credentials will be disabled for this cluster. This must only be used on Managed Clusters that are AAD enabled. For more details see disable local accounts.

DiskEncryptionSetID string

This is of the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Compute/diskEncryptionSets/{encryptionSetName}'

DnsPrefix string

This cannot be updated once the Managed Cluster has been created.

EnablePodSecurityPolicy bool

(DEPRECATED) Whether to enable Kubernetes pod security policy (preview). PodSecurityPolicy was deprecated in Kubernetes v1.21, and removed from Kubernetes in v1.25. Learn more at https://aka.ms/k8s/psp and https://aka.ms/aks/psp.

EnableRBAC bool

Whether to enable Kubernetes Role-Based Access Control.

ExtendedLocation ExtendedLocationResponse

The extended location of the Virtual Machine.

FqdnSubdomain string

This cannot be updated once the Managed Cluster has been created.

HttpProxyConfig ManagedClusterHTTPProxyConfigResponse

Configurations for provisioning the cluster with HTTP proxy servers.

Identity ManagedClusterIdentityResponse

The identity of the managed cluster, if configured.

IdentityProfile map[string]UserAssignedIdentityResponse

The user identity associated with the managed cluster. This identity will be used by the kubelet. Only one user assigned identity is allowed. The only accepted key is "kubeletidentity", with value of "resourceId": "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}".

IngressProfile ManagedClusterIngressProfileResponse

Ingress profile for the managed cluster.

KubernetesVersion string

Both patch version <major.minor.patch> (e.g. 1.20.13) and <major.minor> (e.g. 1.20) are supported. When <major.minor> is specified, the latest supported GA patch version is chosen automatically. Updating the cluster with the same <major.minor> once it has been created (e.g. 1.14.x -> 1.14) will not trigger an upgrade, even if a newer patch version is available. When you upgrade a supported AKS cluster, Kubernetes minor versions cannot be skipped. All upgrades must be performed sequentially by major version number. For example, upgrades between 1.14.x -> 1.15.x or 1.15.x -> 1.16.x are allowed, however 1.14.x -> 1.16.x is not allowed. See upgrading an AKS cluster for more details.

LinuxProfile ContainerServiceLinuxProfileResponse

The profile for Linux VMs in the Managed Cluster.

MetricsProfile ManagedClusterMetricsProfileResponse

Optional cluster metrics configuration.

NetworkProfile ContainerServiceNetworkProfileResponse

The network configuration profile.

NodeResourceGroup string

The name of the resource group containing agent pool nodes.

NodeResourceGroupProfile ManagedClusterNodeResourceGroupProfileResponse

Profile of the node resource group configuration.

OidcIssuerProfile ManagedClusterOIDCIssuerProfileResponse

The OIDC issuer profile of the Managed Cluster.

PodIdentityProfile ManagedClusterPodIdentityProfileResponse

See use AAD pod identity for more details on AAD pod identity integration.

PrivateLinkResources []PrivateLinkResourceResponse

Private link resources associated with the cluster.

PublicNetworkAccess string

Allow or deny public network access for AKS

SecurityProfile ManagedClusterSecurityProfileResponse

Security profile for the managed cluster.

ServiceMeshProfile ServiceMeshProfileResponse

Service mesh profile for a managed cluster.

ServicePrincipalProfile ManagedClusterServicePrincipalProfileResponse

Information about a service principal identity for the cluster to use for manipulating Azure APIs.

Sku ManagedClusterSKUResponse

The managed cluster SKU.

StorageProfile ManagedClusterStorageProfileResponse

Storage profile for the managed cluster.

SupportPlan string

The support plan for the Managed Cluster. If unspecified, the default is 'KubernetesOfficial'.

Tags map[string]string

Resource tags.

UpgradeSettings ClusterUpgradeSettingsResponse

Settings for upgrading a cluster.

WindowsProfile ManagedClusterWindowsProfileResponse

The profile for Windows VMs in the Managed Cluster.

WorkloadAutoScalerProfile ManagedClusterWorkloadAutoScalerProfileResponse

Workload Auto-scaler profile for the managed cluster.

azureApiVersion String

The Azure API version of the resource.

azurePortalFQDN String

The Azure Portal requires certain Cross-Origin Resource Sharing (CORS) headers to be sent in some responses, which Kubernetes APIServer doesn't handle by default. This special FQDN supports CORS, allowing the Azure Portal to function properly.

currentKubernetesVersion String

If kubernetesVersion was a fully specified version <major.minor.patch>, this field will be exactly equal to it. If kubernetesVersion was <major.minor>, this field will contain the full <major.minor.patch> version being used.

eTag String

Unique read-only string used to implement optimistic concurrency. The eTag value will change when the resource is updated. Specify an if-match or if-none-match header with the eTag value for a subsequent request to enable optimistic concurrency per the normal etag convention.

fqdn String

The FQDN of the master pool.

id String

Fully qualified resource ID for the resource. E.g. "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}"

location String

The geo-location where the resource lives

maxAgentPools Integer

The max number of agent pools for the managed cluster.

name String

The name of the resource

powerState PowerStateResponse

The Power State of the cluster.

privateFQDN String

The FQDN of private cluster.

provisioningState String

The current provisioning state.

resourceUID String

The resourceUID uniquely identifies ManagedClusters that reuse ARM ResourceIds (i.e: create, delete, create sequence)

systemData SystemDataResponse

Azure Resource Manager metadata containing createdBy and modifiedBy information.

type String

The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"

aadProfile ManagedClusterAADProfileResponse

The Azure Active Directory configuration.

addonProfiles Map<String,ManagedClusterAddonProfileResponse>

The profile of managed cluster add-on.

agentPoolProfiles List<ManagedClusterAgentPoolProfileResponse>

The agent pool properties.

apiServerAccessProfile ManagedClusterAPIServerAccessProfileResponse

The access profile for managed cluster API server.

autoScalerProfile ManagedClusterPropertiesResponseAutoScalerProfile

Parameters to be applied to the cluster-autoscaler when enabled

autoUpgradeProfile ManagedClusterAutoUpgradeProfileResponse

The auto upgrade configuration.

azureMonitorProfile ManagedClusterAzureMonitorProfileResponse

Azure Monitor addon profiles for monitoring the managed cluster.

disableLocalAccounts Boolean

If set to true, getting static credentials will be disabled for this cluster. This must only be used on Managed Clusters that are AAD enabled. For more details see disable local accounts.

diskEncryptionSetID String

This is of the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Compute/diskEncryptionSets/{encryptionSetName}'

dnsPrefix String

This cannot be updated once the Managed Cluster has been created.

enablePodSecurityPolicy Boolean

(DEPRECATED) Whether to enable Kubernetes pod security policy (preview). PodSecurityPolicy was deprecated in Kubernetes v1.21, and removed from Kubernetes in v1.25. Learn more at https://aka.ms/k8s/psp and https://aka.ms/aks/psp.

enableRBAC Boolean

Whether to enable Kubernetes Role-Based Access Control.

extendedLocation ExtendedLocationResponse

The extended location of the Virtual Machine.

fqdnSubdomain String

This cannot be updated once the Managed Cluster has been created.

httpProxyConfig ManagedClusterHTTPProxyConfigResponse

Configurations for provisioning the cluster with HTTP proxy servers.

identity ManagedClusterIdentityResponse

The identity of the managed cluster, if configured.

identityProfile Map<String,UserAssignedIdentityResponse>

The user identity associated with the managed cluster. This identity will be used by the kubelet. Only one user assigned identity is allowed. The only accepted key is "kubeletidentity", with value of "resourceId": "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}".

ingressProfile ManagedClusterIngressProfileResponse

Ingress profile for the managed cluster.

kubernetesVersion String

Both patch version <major.minor.patch> (e.g. 1.20.13) and <major.minor> (e.g. 1.20) are supported. When <major.minor> is specified, the latest supported GA patch version is chosen automatically. Updating the cluster with the same <major.minor> once it has been created (e.g. 1.14.x -> 1.14) will not trigger an upgrade, even if a newer patch version is available. When you upgrade a supported AKS cluster, Kubernetes minor versions cannot be skipped. All upgrades must be performed sequentially by major version number. For example, upgrades between 1.14.x -> 1.15.x or 1.15.x -> 1.16.x are allowed, however 1.14.x -> 1.16.x is not allowed. See upgrading an AKS cluster for more details.

linuxProfile ContainerServiceLinuxProfileResponse

The profile for Linux VMs in the Managed Cluster.

metricsProfile ManagedClusterMetricsProfileResponse

Optional cluster metrics configuration.

networkProfile ContainerServiceNetworkProfileResponse

The network configuration profile.

nodeResourceGroup String

The name of the resource group containing agent pool nodes.

nodeResourceGroupProfile ManagedClusterNodeResourceGroupProfileResponse

Profile of the node resource group configuration.

oidcIssuerProfile ManagedClusterOIDCIssuerProfileResponse

The OIDC issuer profile of the Managed Cluster.

podIdentityProfile ManagedClusterPodIdentityProfileResponse

See use AAD pod identity for more details on AAD pod identity integration.

privateLinkResources List<PrivateLinkResourceResponse>

Private link resources associated with the cluster.

publicNetworkAccess String

Allow or deny public network access for AKS

securityProfile ManagedClusterSecurityProfileResponse

Security profile for the managed cluster.

serviceMeshProfile ServiceMeshProfileResponse

Service mesh profile for a managed cluster.

servicePrincipalProfile ManagedClusterServicePrincipalProfileResponse

Information about a service principal identity for the cluster to use for manipulating Azure APIs.

sku ManagedClusterSKUResponse

The managed cluster SKU.

storageProfile ManagedClusterStorageProfileResponse

Storage profile for the managed cluster.

supportPlan String

The support plan for the Managed Cluster. If unspecified, the default is 'KubernetesOfficial'.

tags Map<String,String>

Resource tags.

upgradeSettings ClusterUpgradeSettingsResponse

Settings for upgrading a cluster.

windowsProfile ManagedClusterWindowsProfileResponse

The profile for Windows VMs in the Managed Cluster.

workloadAutoScalerProfile ManagedClusterWorkloadAutoScalerProfileResponse

Workload Auto-scaler profile for the managed cluster.

azure_api_version str

The Azure API version of the resource.

azure_portal_fqdn str

The Azure Portal requires certain Cross-Origin Resource Sharing (CORS) headers to be sent in some responses, which Kubernetes APIServer doesn't handle by default. This special FQDN supports CORS, allowing the Azure Portal to function properly.

current_kubernetes_version str

If kubernetesVersion was a fully specified version <major.minor.patch>, this field will be exactly equal to it. If kubernetesVersion was <major.minor>, this field will contain the full <major.minor.patch> version being used.

e_tag str

Unique read-only string used to implement optimistic concurrency. The eTag value will change when the resource is updated. Specify an if-match or if-none-match header with the eTag value for a subsequent request to enable optimistic concurrency per the normal etag convention.

fqdn str

The FQDN of the master pool.

id str

Fully qualified resource ID for the resource. E.g. "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}"

location str

The geo-location where the resource lives

max_agent_pools int

The max number of agent pools for the managed cluster.

name str

The name of the resource

power_state PowerStateResponse

The Power State of the cluster.

private_fqdn str

The FQDN of private cluster.

provisioning_state str

The current provisioning state.

resource_uid str

The resourceUID uniquely identifies ManagedClusters that reuse ARM ResourceIds (i.e: create, delete, create sequence)

system_data SystemDataResponse

Azure Resource Manager metadata containing createdBy and modifiedBy information.

type str

The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"

aad_profile ManagedClusterAADProfileResponse

The Azure Active Directory configuration.

addon_profiles Mapping[str, ManagedClusterAddonProfileResponse]

The profile of managed cluster add-on.

agent_pool_profiles Sequence[ManagedClusterAgentPoolProfileResponse]

The agent pool properties.

api_server_access_profile ManagedClusterAPIServerAccessProfileResponse

The access profile for managed cluster API server.

auto_scaler_profile ManagedClusterPropertiesResponseAutoScalerProfile

Parameters to be applied to the cluster-autoscaler when enabled

auto_upgrade_profile ManagedClusterAutoUpgradeProfileResponse

The auto upgrade configuration.

azure_monitor_profile ManagedClusterAzureMonitorProfileResponse

Azure Monitor addon profiles for monitoring the managed cluster.

disable_local_accounts bool

If set to true, getting static credentials will be disabled for this cluster. This must only be used on Managed Clusters that are AAD enabled. For more details see disable local accounts.

disk_encryption_set_id str

This is of the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Compute/diskEncryptionSets/{encryptionSetName}'

dns_prefix str

This cannot be updated once the Managed Cluster has been created.

enable_pod_security_policy bool

(DEPRECATED) Whether to enable Kubernetes pod security policy (preview). PodSecurityPolicy was deprecated in Kubernetes v1.21, and removed from Kubernetes in v1.25. Learn more at https://aka.ms/k8s/psp and https://aka.ms/aks/psp.

enable_rbac bool

Whether to enable Kubernetes Role-Based Access Control.

extended_location ExtendedLocationResponse

The extended location of the Virtual Machine.

fqdn_subdomain str

This cannot be updated once the Managed Cluster has been created.

http_proxy_config ManagedClusterHTTPProxyConfigResponse

Configurations for provisioning the cluster with HTTP proxy servers.

identity ManagedClusterIdentityResponse

The identity of the managed cluster, if configured.

identity_profile Mapping[str, UserAssignedIdentityResponse]

The user identity associated with the managed cluster. This identity will be used by the kubelet. Only one user assigned identity is allowed. The only accepted key is "kubeletidentity", with value of "resourceId": "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}".

ingress_profile ManagedClusterIngressProfileResponse

Ingress profile for the managed cluster.

kubernetes_version str

Both patch version <major.minor.patch> (e.g. 1.20.13) and <major.minor> (e.g. 1.20) are supported. When <major.minor> is specified, the latest supported GA patch version is chosen automatically. Updating the cluster with the same <major.minor> once it has been created (e.g. 1.14.x -> 1.14) will not trigger an upgrade, even if a newer patch version is available. When you upgrade a supported AKS cluster, Kubernetes minor versions cannot be skipped. All upgrades must be performed sequentially by major version number. For example, upgrades between 1.14.x -> 1.15.x or 1.15.x -> 1.16.x are allowed, however 1.14.x -> 1.16.x is not allowed. See upgrading an AKS cluster for more details.

linux_profile ContainerServiceLinuxProfileResponse

The profile for Linux VMs in the Managed Cluster.

metrics_profile ManagedClusterMetricsProfileResponse

Optional cluster metrics configuration.

network_profile ContainerServiceNetworkProfileResponse

The network configuration profile.

node_resource_group str

The name of the resource group containing agent pool nodes.

node_resource_group_profile ManagedClusterNodeResourceGroupProfileResponse

Profile of the node resource group configuration.

oidc_issuer_profile ManagedClusterOIDCIssuerProfileResponse

The OIDC issuer profile of the Managed Cluster.

pod_identity_profile ManagedClusterPodIdentityProfileResponse

See use AAD pod identity for more details on AAD pod identity integration.

private_link_resources Sequence[PrivateLinkResourceResponse]

Private link resources associated with the cluster.

public_network_access str

Allow or deny public network access for AKS

security_profile ManagedClusterSecurityProfileResponse

Security profile for the managed cluster.

service_mesh_profile ServiceMeshProfileResponse

Service mesh profile for a managed cluster.

service_principal_profile ManagedClusterServicePrincipalProfileResponse

Information about a service principal identity for the cluster to use for manipulating Azure APIs.

sku ManagedClusterSKUResponse

The managed cluster SKU.

storage_profile ManagedClusterStorageProfileResponse

Storage profile for the managed cluster.

support_plan str

The support plan for the Managed Cluster. If unspecified, the default is 'KubernetesOfficial'.

tags Mapping[str, str]

Resource tags.

upgrade_settings ClusterUpgradeSettingsResponse

Settings for upgrading a cluster.

windows_profile ManagedClusterWindowsProfileResponse

The profile for Windows VMs in the Managed Cluster.

workload_auto_scaler_profile ManagedClusterWorkloadAutoScalerProfileResponse

Workload Auto-scaler profile for the managed cluster.

azureApiVersion String

The Azure API version of the resource.

azurePortalFQDN String

The Azure Portal requires certain Cross-Origin Resource Sharing (CORS) headers to be sent in some responses, which Kubernetes APIServer doesn't handle by default. This special FQDN supports CORS, allowing the Azure Portal to function properly.

currentKubernetesVersion String

If kubernetesVersion was a fully specified version <major.minor.patch>, this field will be exactly equal to it. If kubernetesVersion was <major.minor>, this field will contain the full <major.minor.patch> version being used.

eTag String

Unique read-only string used to implement optimistic concurrency. The eTag value will change when the resource is updated. Specify an if-match or if-none-match header with the eTag value for a subsequent request to enable optimistic concurrency per the normal etag convention.

fqdn String

The FQDN of the master pool.

id String

Fully qualified resource ID for the resource. E.g. "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}"

location String

The geo-location where the resource lives

maxAgentPools Number

The max number of agent pools for the managed cluster.

name String

The name of the resource

powerState Property Map

The Power State of the cluster.

privateFQDN String

The FQDN of private cluster.

provisioningState String

The current provisioning state.

resourceUID String

The resourceUID uniquely identifies ManagedClusters that reuse ARM ResourceIds (i.e: create, delete, create sequence)

systemData Property Map

Azure Resource Manager metadata containing createdBy and modifiedBy information.

type String

The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"

aadProfile Property Map

The Azure Active Directory configuration.

addonProfiles Map<Property Map>

The profile of managed cluster add-on.

agentPoolProfiles List<Property Map>

The agent pool properties.

apiServerAccessProfile Property Map

The access profile for managed cluster API server.

autoScalerProfile Property Map

Parameters to be applied to the cluster-autoscaler when enabled

autoUpgradeProfile Property Map

The auto upgrade configuration.

azureMonitorProfile Property Map

Azure Monitor addon profiles for monitoring the managed cluster.

disableLocalAccounts Boolean

If set to true, getting static credentials will be disabled for this cluster. This must only be used on Managed Clusters that are AAD enabled. For more details see disable local accounts.

diskEncryptionSetID String

This is of the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Compute/diskEncryptionSets/{encryptionSetName}'

dnsPrefix String

This cannot be updated once the Managed Cluster has been created.

enablePodSecurityPolicy Boolean

(DEPRECATED) Whether to enable Kubernetes pod security policy (preview). PodSecurityPolicy was deprecated in Kubernetes v1.21, and removed from Kubernetes in v1.25. Learn more at https://aka.ms/k8s/psp and https://aka.ms/aks/psp.

enableRBAC Boolean

Whether to enable Kubernetes Role-Based Access Control.

extendedLocation Property Map

The extended location of the Virtual Machine.

fqdnSubdomain String

This cannot be updated once the Managed Cluster has been created.

httpProxyConfig Property Map

Configurations for provisioning the cluster with HTTP proxy servers.

identity Property Map

The identity of the managed cluster, if configured.

identityProfile Map<Property Map>

The user identity associated with the managed cluster. This identity will be used by the kubelet. Only one user assigned identity is allowed. The only accepted key is "kubeletidentity", with value of "resourceId": "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}".

ingressProfile Property Map

Ingress profile for the managed cluster.

kubernetesVersion String

Both patch version <major.minor.patch> (e.g. 1.20.13) and <major.minor> (e.g. 1.20) are supported. When <major.minor> is specified, the latest supported GA patch version is chosen automatically. Updating the cluster with the same <major.minor> once it has been created (e.g. 1.14.x -> 1.14) will not trigger an upgrade, even if a newer patch version is available. When you upgrade a supported AKS cluster, Kubernetes minor versions cannot be skipped. All upgrades must be performed sequentially by major version number. For example, upgrades between 1.14.x -> 1.15.x or 1.15.x -> 1.16.x are allowed, however 1.14.x -> 1.16.x is not allowed. See upgrading an AKS cluster for more details.

linuxProfile Property Map

The profile for Linux VMs in the Managed Cluster.

metricsProfile Property Map

Optional cluster metrics configuration.

networkProfile Property Map

The network configuration profile.

nodeResourceGroup String

The name of the resource group containing agent pool nodes.

nodeResourceGroupProfile Property Map

Profile of the node resource group configuration.

oidcIssuerProfile Property Map

The OIDC issuer profile of the Managed Cluster.

podIdentityProfile Property Map

See use AAD pod identity for more details on AAD pod identity integration.

privateLinkResources List<Property Map>

Private link resources associated with the cluster.

publicNetworkAccess String

Allow or deny public network access for AKS

securityProfile Property Map

Security profile for the managed cluster.

serviceMeshProfile Property Map

Service mesh profile for a managed cluster.

servicePrincipalProfile Property Map

Information about a service principal identity for the cluster to use for manipulating Azure APIs.

sku Property Map

The managed cluster SKU.

storageProfile Property Map

Storage profile for the managed cluster.

supportPlan String

The support plan for the Managed Cluster. If unspecified, the default is 'KubernetesOfficial'.

tags Map<String>

Resource tags.

upgradeSettings Property Map

Settings for upgrading a cluster.

windowsProfile Property Map

The profile for Windows VMs in the Managed Cluster.

workloadAutoScalerProfile Property Map

Workload Auto-scaler profile for the managed cluster.

Enabled bool

Indicates the enablement of Advanced Networking observability functionalities on clusters.

Enabled bool

Indicates the enablement of Advanced Networking observability functionalities on clusters.

enabled Boolean

Indicates the enablement of Advanced Networking observability functionalities on clusters.

enabled bool

Indicates the enablement of Advanced Networking observability functionalities on clusters.

enabled Boolean

Indicates the enablement of Advanced Networking observability functionalities on clusters.

Enabled bool

Indicates the enablement of Advanced Networking functionalities of observability and security on AKS clusters. When this is set to true, all observability and security features will be set to enabled unless explicitly disabled. If not specified, the default is false.

Observability Pulumi.AzureNative.ContainerService.Inputs.AdvancedNetworkingObservabilityResponse

Observability profile to enable advanced network metrics and flow logs with historical contexts.

Security Pulumi.AzureNative.ContainerService.Inputs.AdvancedNetworkingSecurityResponse

Security profile to enable security features on cilium based cluster.

Enabled bool

Indicates the enablement of Advanced Networking functionalities of observability and security on AKS clusters. When this is set to true, all observability and security features will be set to enabled unless explicitly disabled. If not specified, the default is false.

Observability AdvancedNetworkingObservabilityResponse

Observability profile to enable advanced network metrics and flow logs with historical contexts.

Security AdvancedNetworkingSecurityResponse

Security profile to enable security features on cilium based cluster.

enabled Boolean

Indicates the enablement of Advanced Networking functionalities of observability and security on AKS clusters. When this is set to true, all observability and security features will be set to enabled unless explicitly disabled. If not specified, the default is false.

observability AdvancedNetworkingObservabilityResponse

Observability profile to enable advanced network metrics and flow logs with historical contexts.

security AdvancedNetworkingSecurityResponse

Security profile to enable security features on cilium based cluster.

enabled bool

Indicates the enablement of Advanced Networking functionalities of observability and security on AKS clusters. When this is set to true, all observability and security features will be set to enabled unless explicitly disabled. If not specified, the default is false.

observability AdvancedNetworkingObservabilityResponse

Observability profile to enable advanced network metrics and flow logs with historical contexts.

security AdvancedNetworkingSecurityResponse

Security profile to enable security features on cilium based cluster.

enabled Boolean

Indicates the enablement of Advanced Networking functionalities of observability and security on AKS clusters. When this is set to true, all observability and security features will be set to enabled unless explicitly disabled. If not specified, the default is false.

observability Property Map

Observability profile to enable advanced network metrics and flow logs with historical contexts.

security Property Map

Security profile to enable security features on cilium based cluster.

Enabled bool

This feature allows user to configure network policy based on DNS (FQDN) names. It can be enabled only on cilium based clusters. If not specified, the default is false.

Enabled bool

This feature allows user to configure network policy based on DNS (FQDN) names. It can be enabled only on cilium based clusters. If not specified, the default is false.

enabled Boolean

This feature allows user to configure network policy based on DNS (FQDN) names. It can be enabled only on cilium based clusters. If not specified, the default is false.

enabled bool

This feature allows user to configure network policy based on DNS (FQDN) names. It can be enabled only on cilium based clusters. If not specified, the default is false.

enabled Boolean

This feature allows user to configure network policy based on DNS (FQDN) names. It can be enabled only on cilium based clusters. If not specified, the default is false.

AllowedHostPorts List<Pulumi.AzureNative.ContainerService.Inputs.PortRangeResponse>

The port ranges that are allowed to access. The specified ranges are allowed to overlap.

ApplicationSecurityGroups List<string>

The IDs of the application security groups which agent pool will associate when created.

NodePublicIPTags List<Pulumi.AzureNative.ContainerService.Inputs.IPTagResponse>

IPTags of instance-level public IPs.

AllowedHostPorts []PortRangeResponse

The port ranges that are allowed to access. The specified ranges are allowed to overlap.

ApplicationSecurityGroups []string

The IDs of the application security groups which agent pool will associate when created.

NodePublicIPTags []IPTagResponse

IPTags of instance-level public IPs.

allowedHostPorts List<PortRangeResponse>

The port ranges that are allowed to access. The specified ranges are allowed to overlap.

applicationSecurityGroups List<String>

The IDs of the application security groups which agent pool will associate when created.

nodePublicIPTags List<IPTagResponse>

IPTags of instance-level public IPs.

allowed_host_ports Sequence[PortRangeResponse]

The port ranges that are allowed to access. The specified ranges are allowed to overlap.

application_security_groups Sequence[str]

The IDs of the application security groups which agent pool will associate when created.

node_public_ip_tags Sequence[IPTagResponse]

IPTags of instance-level public IPs.

allowedHostPorts List<Property Map>

The port ranges that are allowed to access. The specified ranges are allowed to overlap.

applicationSecurityGroups List<String>

The IDs of the application security groups which agent pool will associate when created.

nodePublicIPTags List<Property Map>

IPTags of instance-level public IPs.

EnableSecureBoot bool

Secure Boot is a feature of Trusted Launch which ensures that only signed operating systems and drivers can boot. For more details, see aka.ms/aks/trustedlaunch. If not specified, the default is false.

EnableVTPM bool

vTPM is a Trusted Launch feature for configuring a dedicated secure vault for keys and measurements held locally on the node. For more details, see aka.ms/aks/trustedlaunch. If not specified, the default is false.

EnableSecureBoot bool

Secure Boot is a feature of Trusted Launch which ensures that only signed operating systems and drivers can boot. For more details, see aka.ms/aks/trustedlaunch. If not specified, the default is false.

EnableVTPM bool

vTPM is a Trusted Launch feature for configuring a dedicated secure vault for keys and measurements held locally on the node. For more details, see aka.ms/aks/trustedlaunch. If not specified, the default is false.

enableSecureBoot Boolean

Secure Boot is a feature of Trusted Launch which ensures that only signed operating systems and drivers can boot. For more details, see aka.ms/aks/trustedlaunch. If not specified, the default is false.

enableVTPM Boolean

vTPM is a Trusted Launch feature for configuring a dedicated secure vault for keys and measurements held locally on the node. For more details, see aka.ms/aks/trustedlaunch. If not specified, the default is false.

enable_secure_boot bool

Secure Boot is a feature of Trusted Launch which ensures that only signed operating systems and drivers can boot. For more details, see aka.ms/aks/trustedlaunch. If not specified, the default is false.

enable_vtpm bool

vTPM is a Trusted Launch feature for configuring a dedicated secure vault for keys and measurements held locally on the node. For more details, see aka.ms/aks/trustedlaunch. If not specified, the default is false.

enableSecureBoot Boolean

Secure Boot is a feature of Trusted Launch which ensures that only signed operating systems and drivers can boot. For more details, see aka.ms/aks/trustedlaunch. If not specified, the default is false.

enableVTPM Boolean

vTPM is a Trusted Launch feature for configuring a dedicated secure vault for keys and measurements held locally on the node. For more details, see aka.ms/aks/trustedlaunch. If not specified, the default is false.

DrainTimeoutInMinutes int

The amount of time (in minutes) to wait on eviction of pods and graceful termination per node. This eviction wait time honors waiting on pod disruption budgets. If this time is exceeded, the upgrade fails. If not specified, the default is 30 minutes.

MaxSurge string

This can either be set to an integer (e.g. '5') or a percentage (e.g. '50%'). If a percentage is specified, it is the percentage of the total agent pool size at the time of the upgrade. For percentages, fractional nodes are rounded up. If not specified, the default is 10%. For more information, including best practices, see: https://docs.microsoft.com/azure/aks/upgrade-cluster#customize-node-surge-upgrade

NodeSoakDurationInMinutes int

The amount of time (in minutes) to wait after draining a node and before reimaging it and moving on to next node. If not specified, the default is 0 minutes.

DrainTimeoutInMinutes int

The amount of time (in minutes) to wait on eviction of pods and graceful termination per node. This eviction wait time honors waiting on pod disruption budgets. If this time is exceeded, the upgrade fails. If not specified, the default is 30 minutes.

MaxSurge string

This can either be set to an integer (e.g. '5') or a percentage (e.g. '50%'). If a percentage is specified, it is the percentage of the total agent pool size at the time of the upgrade. For percentages, fractional nodes are rounded up. If not specified, the default is 10%. For more information, including best practices, see: https://docs.microsoft.com/azure/aks/upgrade-cluster#customize-node-surge-upgrade

NodeSoakDurationInMinutes int

The amount of time (in minutes) to wait after draining a node and before reimaging it and moving on to next node. If not specified, the default is 0 minutes.

drainTimeoutInMinutes Integer

The amount of time (in minutes) to wait on eviction of pods and graceful termination per node. This eviction wait time honors waiting on pod disruption budgets. If this time is exceeded, the upgrade fails. If not specified, the default is 30 minutes.

maxSurge String

This can either be set to an integer (e.g. '5') or a percentage (e.g. '50%'). If a percentage is specified, it is the percentage of the total agent pool size at the time of the upgrade. For percentages, fractional nodes are rounded up. If not specified, the default is 10%. For more information, including best practices, see: https://docs.microsoft.com/azure/aks/upgrade-cluster#customize-node-surge-upgrade

nodeSoakDurationInMinutes Integer

The amount of time (in minutes) to wait after draining a node and before reimaging it and moving on to next node. If not specified, the default is 0 minutes.

drain_timeout_in_minutes int

The amount of time (in minutes) to wait on eviction of pods and graceful termination per node. This eviction wait time honors waiting on pod disruption budgets. If this time is exceeded, the upgrade fails. If not specified, the default is 30 minutes.

max_surge str

This can either be set to an integer (e.g. '5') or a percentage (e.g. '50%'). If a percentage is specified, it is the percentage of the total agent pool size at the time of the upgrade. For percentages, fractional nodes are rounded up. If not specified, the default is 10%. For more information, including best practices, see: https://docs.microsoft.com/azure/aks/upgrade-cluster#customize-node-surge-upgrade

node_soak_duration_in_minutes int

The amount of time (in minutes) to wait after draining a node and before reimaging it and moving on to next node. If not specified, the default is 0 minutes.

drainTimeoutInMinutes Number

The amount of time (in minutes) to wait on eviction of pods and graceful termination per node. This eviction wait time honors waiting on pod disruption budgets. If this time is exceeded, the upgrade fails. If not specified, the default is 30 minutes.

maxSurge String

This can either be set to an integer (e.g. '5') or a percentage (e.g. '50%'). If a percentage is specified, it is the percentage of the total agent pool size at the time of the upgrade. For percentages, fractional nodes are rounded up. If not specified, the default is 10%. For more information, including best practices, see: https://docs.microsoft.com/azure/aks/upgrade-cluster#customize-node-surge-upgrade

nodeSoakDurationInMinutes Number

The amount of time (in minutes) to wait after draining a node and before reimaging it and moving on to next node. If not specified, the default is 0 minutes.

DisableOutboundNat bool

The default value is false. Outbound NAT can only be disabled if the cluster outboundType is NAT Gateway and the Windows agent pool does not have node public IP enabled.

DisableOutboundNat bool

The default value is false. Outbound NAT can only be disabled if the cluster outboundType is NAT Gateway and the Windows agent pool does not have node public IP enabled.

disableOutboundNat Boolean

The default value is false. Outbound NAT can only be disabled if the cluster outboundType is NAT Gateway and the Windows agent pool does not have node public IP enabled.

disable_outbound_nat bool

The default value is false. Outbound NAT can only be disabled if the cluster outboundType is NAT Gateway and the Windows agent pool does not have node public IP enabled.

disableOutboundNat Boolean

The default value is false. Outbound NAT can only be disabled if the cluster outboundType is NAT Gateway and the Windows agent pool does not have node public IP enabled.

Enabled bool

Whether to enable Azure Key Vault key management service. The default is false.

KeyId string

Identifier of Azure Key Vault key. See key identifier format for more details. When Azure Key Vault key management service is enabled, this field is required and must be a valid key identifier. When Azure Key Vault key management service is disabled, leave the field empty.

KeyVaultNetworkAccess string

Network access of key vault. The possible values are Public and Private. Public means the key vault allows public access from all networks. Private means the key vault disables public access and enables private link. The default value is Public.

KeyVaultResourceId string

Resource ID of key vault. When keyVaultNetworkAccess is Private, this field is required and must be a valid resource ID. When keyVaultNetworkAccess is Public, leave the field empty.

Enabled bool

Whether to enable Azure Key Vault key management service. The default is false.

KeyId string

Identifier of Azure Key Vault key. See key identifier format for more details. When Azure Key Vault key management service is enabled, this field is required and must be a valid key identifier. When Azure Key Vault key management service is disabled, leave the field empty.

KeyVaultNetworkAccess string

Network access of key vault. The possible values are Public and Private. Public means the key vault allows public access from all networks. Private means the key vault disables public access and enables private link. The default value is Public.

KeyVaultResourceId string

Resource ID of key vault. When keyVaultNetworkAccess is Private, this field is required and must be a valid resource ID. When keyVaultNetworkAccess is Public, leave the field empty.

enabled Boolean

Whether to enable Azure Key Vault key management service. The default is false.

keyId String

Identifier of Azure Key Vault key. See key identifier format for more details. When Azure Key Vault key management service is enabled, this field is required and must be a valid key identifier. When Azure Key Vault key management service is disabled, leave the field empty.

keyVaultNetworkAccess String

Network access of key vault. The possible values are Public and Private. Public means the key vault allows public access from all networks. Private means the key vault disables public access and enables private link. The default value is Public.

keyVaultResourceId String

Resource ID of key vault. When keyVaultNetworkAccess is Private, this field is required and must be a valid resource ID. When keyVaultNetworkAccess is Public, leave the field empty.

enabled bool

Whether to enable Azure Key Vault key management service. The default is false.

key_id str

Identifier of Azure Key Vault key. See key identifier format for more details. When Azure Key Vault key management service is enabled, this field is required and must be a valid key identifier. When Azure Key Vault key management service is disabled, leave the field empty.

key_vault_network_access str

Network access of key vault. The possible values are Public and Private. Public means the key vault allows public access from all networks. Private means the key vault disables public access and enables private link. The default value is Public.

key_vault_resource_id str

Resource ID of key vault. When keyVaultNetworkAccess is Private, this field is required and must be a valid resource ID. When keyVaultNetworkAccess is Public, leave the field empty.

enabled Boolean

Whether to enable Azure Key Vault key management service. The default is false.

keyId String

Identifier of Azure Key Vault key. See key identifier format for more details. When Azure Key Vault key management service is enabled, this field is required and must be a valid key identifier. When Azure Key Vault key management service is disabled, leave the field empty.

keyVaultNetworkAccess String

Network access of key vault. The possible values are Public and Private. Public means the key vault allows public access from all networks. Private means the key vault disables public access and enables private link. The default value is Public.

keyVaultResourceId String

Resource ID of key vault. When keyVaultNetworkAccess is Private, this field is required and must be a valid resource ID. When keyVaultNetworkAccess is Public, leave the field empty.

OverrideSettings Pulumi.AzureNative.ContainerService.Inputs.UpgradeOverrideSettingsResponse

Settings for overrides.

OverrideSettings UpgradeOverrideSettingsResponse

Settings for overrides.

overrideSettings UpgradeOverrideSettingsResponse

Settings for overrides.

override_settings UpgradeOverrideSettingsResponse

Settings for overrides.

overrideSettings Property Map

Settings for overrides.

AdminUsername This property is required. string

The administrator username to use for Linux VMs.

Ssh This property is required. Pulumi.AzureNative.ContainerService.Inputs.ContainerServiceSshConfigurationResponse

The SSH configuration for Linux-based VMs running on Azure.

AdminUsername This property is required. string

The administrator username to use for Linux VMs.

Ssh This property is required. ContainerServiceSshConfigurationResponse

The SSH configuration for Linux-based VMs running on Azure.

adminUsername This property is required. String

The administrator username to use for Linux VMs.

ssh This property is required. ContainerServiceSshConfigurationResponse

The SSH configuration for Linux-based VMs running on Azure.

admin_username This property is required. str

The administrator username to use for Linux VMs.

ssh This property is required. ContainerServiceSshConfigurationResponse

The SSH configuration for Linux-based VMs running on Azure.

adminUsername This property is required. String

The administrator username to use for Linux VMs.

ssh This property is required. Property Map

The SSH configuration for Linux-based VMs running on Azure.

AdvancedNetworking Pulumi.AzureNative.ContainerService.Inputs.AdvancedNetworkingResponse

Advanced Networking profile for enabling observability and security feature suite on a cluster. For more information see aka.ms/aksadvancednetworking.

DnsServiceIP string

An IP address assigned to the Kubernetes DNS service. It must be within the Kubernetes service address range specified in serviceCidr.

IpFamilies List<string>

IP families are used to determine single-stack or dual-stack clusters. For single-stack, the expected value is IPv4. For dual-stack, the expected values are IPv4 and IPv6.

LoadBalancerProfile Pulumi.AzureNative.ContainerService.Inputs.ManagedClusterLoadBalancerProfileResponse

Profile of the cluster load balancer.

LoadBalancerSku string

The default is 'standard'. See Azure Load Balancer SKUs for more information about the differences between load balancer SKUs.

NatGatewayProfile Pulumi.AzureNative.ContainerService.Inputs.ManagedClusterNATGatewayProfileResponse

Profile of the cluster NAT gateway.

NetworkDataplane string

Network dataplane used in the Kubernetes cluster.

NetworkMode string

This cannot be specified if networkPlugin is anything other than 'azure'.

NetworkPlugin string

Network plugin used for building the Kubernetes network.

NetworkPluginMode string

The mode the network plugin should use.

NetworkPolicy string

Network policy used for building the Kubernetes network.

OutboundType string

This can only be set at cluster creation time and cannot be changed later. For more information see egress outbound type.

PodCidr string

A CIDR notation IP range from which to assign pod IPs when kubenet is used.

PodCidrs List<string>

One IPv4 CIDR is expected for single-stack networking. Two CIDRs, one for each IP family (IPv4/IPv6), is expected for dual-stack networking.

ServiceCidr string

A CIDR notation IP range from which to assign service cluster IPs. It must not overlap with any Subnet IP ranges.

ServiceCidrs List<string>

One IPv4 CIDR is expected for single-stack networking. Two CIDRs, one for each IP family (IPv4/IPv6), is expected for dual-stack networking. They must not overlap with any Subnet IP ranges.

AdvancedNetworking AdvancedNetworkingResponse

Advanced Networking profile for enabling observability and security feature suite on a cluster. For more information see aka.ms/aksadvancednetworking.

DnsServiceIP string

An IP address assigned to the Kubernetes DNS service. It must be within the Kubernetes service address range specified in serviceCidr.

IpFamilies []string

IP families are used to determine single-stack or dual-stack clusters. For single-stack, the expected value is IPv4. For dual-stack, the expected values are IPv4 and IPv6.

LoadBalancerProfile ManagedClusterLoadBalancerProfileResponse

Profile of the cluster load balancer.

LoadBalancerSku string

The default is 'standard'. See Azure Load Balancer SKUs for more information about the differences between load balancer SKUs.

NatGatewayProfile ManagedClusterNATGatewayProfileResponse

Profile of the cluster NAT gateway.

NetworkDataplane string

Network dataplane used in the Kubernetes cluster.

NetworkMode string

This cannot be specified if networkPlugin is anything other than 'azure'.

NetworkPlugin string

Network plugin used for building the Kubernetes network.

NetworkPluginMode string

The mode the network plugin should use.

NetworkPolicy string

Network policy used for building the Kubernetes network.

OutboundType string

This can only be set at cluster creation time and cannot be changed later. For more information see egress outbound type.

PodCidr string

A CIDR notation IP range from which to assign pod IPs when kubenet is used.

PodCidrs []string

One IPv4 CIDR is expected for single-stack networking. Two CIDRs, one for each IP family (IPv4/IPv6), is expected for dual-stack networking.

ServiceCidr string

A CIDR notation IP range from which to assign service cluster IPs. It must not overlap with any Subnet IP ranges.

ServiceCidrs []string

One IPv4 CIDR is expected for single-stack networking. Two CIDRs, one for each IP family (IPv4/IPv6), is expected for dual-stack networking. They must not overlap with any Subnet IP ranges.

advancedNetworking AdvancedNetworkingResponse

Advanced Networking profile for enabling observability and security feature suite on a cluster. For more information see aka.ms/aksadvancednetworking.

dnsServiceIP String

An IP address assigned to the Kubernetes DNS service. It must be within the Kubernetes service address range specified in serviceCidr.

ipFamilies List<String>

IP families are used to determine single-stack or dual-stack clusters. For single-stack, the expected value is IPv4. For dual-stack, the expected values are IPv4 and IPv6.

loadBalancerProfile ManagedClusterLoadBalancerProfileResponse

Profile of the cluster load balancer.

loadBalancerSku String

The default is 'standard'. See Azure Load Balancer SKUs for more information about the differences between load balancer SKUs.

natGatewayProfile ManagedClusterNATGatewayProfileResponse

Profile of the cluster NAT gateway.

networkDataplane String

Network dataplane used in the Kubernetes cluster.

networkMode String

This cannot be specified if networkPlugin is anything other than 'azure'.

networkPlugin String

Network plugin used for building the Kubernetes network.

networkPluginMode String

The mode the network plugin should use.

networkPolicy String

Network policy used for building the Kubernetes network.

outboundType String

This can only be set at cluster creation time and cannot be changed later. For more information see egress outbound type.

podCidr String

A CIDR notation IP range from which to assign pod IPs when kubenet is used.

podCidrs List<String>

One IPv4 CIDR is expected for single-stack networking. Two CIDRs, one for each IP family (IPv4/IPv6), is expected for dual-stack networking.

serviceCidr String

A CIDR notation IP range from which to assign service cluster IPs. It must not overlap with any Subnet IP ranges.

serviceCidrs List<String>

One IPv4 CIDR is expected for single-stack networking. Two CIDRs, one for each IP family (IPv4/IPv6), is expected for dual-stack networking. They must not overlap with any Subnet IP ranges.

advanced_networking AdvancedNetworkingResponse

Advanced Networking profile for enabling observability and security feature suite on a cluster. For more information see aka.ms/aksadvancednetworking.

dns_service_ip str

An IP address assigned to the Kubernetes DNS service. It must be within the Kubernetes service address range specified in serviceCidr.

ip_families Sequence[str]

IP families are used to determine single-stack or dual-stack clusters. For single-stack, the expected value is IPv4. For dual-stack, the expected values are IPv4 and IPv6.

load_balancer_profile ManagedClusterLoadBalancerProfileResponse

Profile of the cluster load balancer.

load_balancer_sku str

The default is 'standard'. See Azure Load Balancer SKUs for more information about the differences between load balancer SKUs.

nat_gateway_profile ManagedClusterNATGatewayProfileResponse

Profile of the cluster NAT gateway.

network_dataplane str

Network dataplane used in the Kubernetes cluster.

network_mode str

This cannot be specified if networkPlugin is anything other than 'azure'.

network_plugin str

Network plugin used for building the Kubernetes network.

network_plugin_mode str

The mode the network plugin should use.

network_policy str

Network policy used for building the Kubernetes network.

outbound_type str

This can only be set at cluster creation time and cannot be changed later. For more information see egress outbound type.

pod_cidr str

A CIDR notation IP range from which to assign pod IPs when kubenet is used.

pod_cidrs Sequence[str]

One IPv4 CIDR is expected for single-stack networking. Two CIDRs, one for each IP family (IPv4/IPv6), is expected for dual-stack networking.

service_cidr str

A CIDR notation IP range from which to assign service cluster IPs. It must not overlap with any Subnet IP ranges.

service_cidrs Sequence[str]

One IPv4 CIDR is expected for single-stack networking. Two CIDRs, one for each IP family (IPv4/IPv6), is expected for dual-stack networking. They must not overlap with any Subnet IP ranges.

advancedNetworking Property Map

Advanced Networking profile for enabling observability and security feature suite on a cluster. For more information see aka.ms/aksadvancednetworking.

dnsServiceIP String

An IP address assigned to the Kubernetes DNS service. It must be within the Kubernetes service address range specified in serviceCidr.

ipFamilies List<String>

IP families are used to determine single-stack or dual-stack clusters. For single-stack, the expected value is IPv4. For dual-stack, the expected values are IPv4 and IPv6.

loadBalancerProfile Property Map

Profile of the cluster load balancer.

loadBalancerSku String

The default is 'standard'. See Azure Load Balancer SKUs for more information about the differences between load balancer SKUs.

natGatewayProfile Property Map

Profile of the cluster NAT gateway.

networkDataplane String

Network dataplane used in the Kubernetes cluster.

networkMode String

This cannot be specified if networkPlugin is anything other than 'azure'.

networkPlugin String

Network plugin used for building the Kubernetes network.

networkPluginMode String

The mode the network plugin should use.

networkPolicy String

Network policy used for building the Kubernetes network.

outboundType String

This can only be set at cluster creation time and cannot be changed later. For more information see egress outbound type.

podCidr String

A CIDR notation IP range from which to assign pod IPs when kubenet is used.

podCidrs List<String>

One IPv4 CIDR is expected for single-stack networking. Two CIDRs, one for each IP family (IPv4/IPv6), is expected for dual-stack networking.

serviceCidr String

A CIDR notation IP range from which to assign service cluster IPs. It must not overlap with any Subnet IP ranges.

serviceCidrs List<String>

One IPv4 CIDR is expected for single-stack networking. Two CIDRs, one for each IP family (IPv4/IPv6), is expected for dual-stack networking. They must not overlap with any Subnet IP ranges.

PublicKeys This property is required. List<Pulumi.AzureNative.ContainerService.Inputs.ContainerServiceSshPublicKeyResponse>

The list of SSH public keys used to authenticate with Linux-based VMs. A maximum of 1 key may be specified.

PublicKeys This property is required. []ContainerServiceSshPublicKeyResponse

The list of SSH public keys used to authenticate with Linux-based VMs. A maximum of 1 key may be specified.

publicKeys This property is required. List<ContainerServiceSshPublicKeyResponse>

The list of SSH public keys used to authenticate with Linux-based VMs. A maximum of 1 key may be specified.

public_keys This property is required. Sequence[ContainerServiceSshPublicKeyResponse]

The list of SSH public keys used to authenticate with Linux-based VMs. A maximum of 1 key may be specified.

publicKeys This property is required. List<Property Map>

The list of SSH public keys used to authenticate with Linux-based VMs. A maximum of 1 key may be specified.

KeyData This property is required. string

Certificate public key used to authenticate with VMs through SSH. The certificate must be in PEM format with or without headers.

KeyData This property is required. string

Certificate public key used to authenticate with VMs through SSH. The certificate must be in PEM format with or without headers.

keyData This property is required. String

Certificate public key used to authenticate with VMs through SSH. The certificate must be in PEM format with or without headers.

key_data This property is required. str

Certificate public key used to authenticate with VMs through SSH. The certificate must be in PEM format with or without headers.

keyData This property is required. String

Certificate public key used to authenticate with VMs through SSH. The certificate must be in PEM format with or without headers.

SourceResourceId string

This is the ARM ID of the source object to be used to create the target object.

SourceResourceId string

This is the ARM ID of the source object to be used to create the target object.

sourceResourceId String

This is the ARM ID of the source object to be used to create the target object.

source_resource_id str

This is the ARM ID of the source object to be used to create the target object.

sourceResourceId String

This is the ARM ID of the source object to be used to create the target object.

Location string

The source resource location - internal use only.

ReferralResource string

The delegation id of the referral delegation (optional) - internal use only.

ResourceId string

The ARM resource id of the delegated resource - internal use only.

TenantId string

The tenant id of the delegated resource - internal use only.

Location string

The source resource location - internal use only.

ReferralResource string

The delegation id of the referral delegation (optional) - internal use only.

ResourceId string

The ARM resource id of the delegated resource - internal use only.

TenantId string

The tenant id of the delegated resource - internal use only.

location String

The source resource location - internal use only.

referralResource String

The delegation id of the referral delegation (optional) - internal use only.

resourceId String

The ARM resource id of the delegated resource - internal use only.

tenantId String

The tenant id of the delegated resource - internal use only.

location str

The source resource location - internal use only.

referral_resource str

The delegation id of the referral delegation (optional) - internal use only.

resource_id str

The ARM resource id of the delegated resource - internal use only.

tenant_id str

The tenant id of the delegated resource - internal use only.

location String

The source resource location - internal use only.

referralResource String

The delegation id of the referral delegation (optional) - internal use only.

resourceId String

The ARM resource id of the delegated resource - internal use only.

tenantId String

The tenant id of the delegated resource - internal use only.

Name string

The name of the extended location.

Type string

The type of the extended location.

Name string

The name of the extended location.

Type string

The type of the extended location.

name String

The name of the extended location.

type String

The type of the extended location.

name str

The name of the extended location.

type str

The type of the extended location.

name String

The name of the extended location.

type String

The type of the extended location.

IpTagType string

The IP tag type. Example: RoutingPreference.

Tag string

The value of the IP tag associated with the public IP. Example: Internet.

IpTagType string

The IP tag type. Example: RoutingPreference.

Tag string

The value of the IP tag associated with the public IP. Example: Internet.

ipTagType String

The IP tag type. Example: RoutingPreference.

tag String

The value of the IP tag associated with the public IP. Example: Internet.

ip_tag_type str

The IP tag type. Example: RoutingPreference.

tag str

The value of the IP tag associated with the public IP. Example: Internet.

ipTagType String

The IP tag type. Example: RoutingPreference.

tag String

The value of the IP tag associated with the public IP. Example: Internet.

Plugin Pulumi.AzureNative.ContainerService.Inputs.IstioPluginCertificateAuthorityResponse

Plugin certificates information for Service Mesh.

Plugin IstioPluginCertificateAuthorityResponse

Plugin certificates information for Service Mesh.

plugin IstioPluginCertificateAuthorityResponse

Plugin certificates information for Service Mesh.

plugin IstioPluginCertificateAuthorityResponse

Plugin certificates information for Service Mesh.

plugin Property Map

Plugin certificates information for Service Mesh.

EgressGateways List<Pulumi.AzureNative.ContainerService.Inputs.IstioEgressGatewayResponse>

Istio egress gateways.

IngressGateways List<Pulumi.AzureNative.ContainerService.Inputs.IstioIngressGatewayResponse>

Istio ingress gateways.

EgressGateways []IstioEgressGatewayResponse

Istio egress gateways.

IngressGateways []IstioIngressGatewayResponse

Istio ingress gateways.

egressGateways List<IstioEgressGatewayResponse>

Istio egress gateways.

ingressGateways List<IstioIngressGatewayResponse>

Istio ingress gateways.

egress_gateways Sequence[IstioEgressGatewayResponse]

Istio egress gateways.

ingress_gateways Sequence[IstioIngressGatewayResponse]

Istio ingress gateways.

egressGateways List<Property Map>

Istio egress gateways.

ingressGateways List<Property Map>

Istio ingress gateways.

Enabled This property is required. bool

Whether to enable the egress gateway.

Enabled This property is required. bool

Whether to enable the egress gateway.

enabled This property is required. Boolean

Whether to enable the egress gateway.

enabled This property is required. bool

Whether to enable the egress gateway.

enabled This property is required. Boolean

Whether to enable the egress gateway.

Enabled This property is required. bool

Whether to enable the ingress gateway.

Mode This property is required. string

Mode of an ingress gateway.

Enabled This property is required. bool

Whether to enable the ingress gateway.

Mode This property is required. string

Mode of an ingress gateway.

enabled This property is required. Boolean

Whether to enable the ingress gateway.

mode This property is required. String

Mode of an ingress gateway.

enabled This property is required. bool

Whether to enable the ingress gateway.

mode This property is required. str

Mode of an ingress gateway.

enabled This property is required. Boolean

Whether to enable the ingress gateway.

mode This property is required. String

Mode of an ingress gateway.

CertChainObjectName string

Certificate chain object name in Azure Key Vault.

CertObjectName string

Intermediate certificate object name in Azure Key Vault.

KeyObjectName string

Intermediate certificate private key object name in Azure Key Vault.

KeyVaultId string

The resource ID of the Key Vault.

RootCertObjectName string

Root certificate object name in Azure Key Vault.

CertChainObjectName string

Certificate chain object name in Azure Key Vault.

CertObjectName string

Intermediate certificate object name in Azure Key Vault.

KeyObjectName string

Intermediate certificate private key object name in Azure Key Vault.

KeyVaultId string

The resource ID of the Key Vault.

RootCertObjectName string

Root certificate object name in Azure Key Vault.

certChainObjectName String

Certificate chain object name in Azure Key Vault.

certObjectName String

Intermediate certificate object name in Azure Key Vault.

keyObjectName String

Intermediate certificate private key object name in Azure Key Vault.

keyVaultId String

The resource ID of the Key Vault.

rootCertObjectName String

Root certificate object name in Azure Key Vault.

cert_chain_object_name str

Certificate chain object name in Azure Key Vault.

cert_object_name str

Intermediate certificate object name in Azure Key Vault.

key_object_name str

Intermediate certificate private key object name in Azure Key Vault.

key_vault_id str

The resource ID of the Key Vault.

root_cert_object_name str

Root certificate object name in Azure Key Vault.

certChainObjectName String

Certificate chain object name in Azure Key Vault.

certObjectName String

Intermediate certificate object name in Azure Key Vault.

keyObjectName String

Intermediate certificate private key object name in Azure Key Vault.

keyVaultId String

The resource ID of the Key Vault.

rootCertObjectName String

Root certificate object name in Azure Key Vault.

CertificateAuthority Pulumi.AzureNative.ContainerService.Inputs.IstioCertificateAuthorityResponse

Istio Service Mesh Certificate Authority (CA) configuration. For now, we only support plugin certificates as described here https://aka.ms/asm-plugin-ca

Components Pulumi.AzureNative.ContainerService.Inputs.IstioComponentsResponse

Istio components configuration.

Revisions List<string>

The list of revisions of the Istio control plane. When an upgrade is not in progress, this holds one value. When canary upgrade is in progress, this can only hold two consecutive values. For more information, see: https://learn.microsoft.com/en-us/azure/aks/istio-upgrade

CertificateAuthority IstioCertificateAuthorityResponse

Istio Service Mesh Certificate Authority (CA) configuration. For now, we only support plugin certificates as described here https://aka.ms/asm-plugin-ca

Components IstioComponentsResponse

Istio components configuration.

Revisions []string

The list of revisions of the Istio control plane. When an upgrade is not in progress, this holds one value. When canary upgrade is in progress, this can only hold two consecutive values. For more information, see: https://learn.microsoft.com/en-us/azure/aks/istio-upgrade

certificateAuthority IstioCertificateAuthorityResponse

Istio Service Mesh Certificate Authority (CA) configuration. For now, we only support plugin certificates as described here https://aka.ms/asm-plugin-ca

components IstioComponentsResponse

Istio components configuration.

revisions List<String>

The list of revisions of the Istio control plane. When an upgrade is not in progress, this holds one value. When canary upgrade is in progress, this can only hold two consecutive values. For more information, see: https://learn.microsoft.com/en-us/azure/aks/istio-upgrade

certificate_authority IstioCertificateAuthorityResponse

Istio Service Mesh Certificate Authority (CA) configuration. For now, we only support plugin certificates as described here https://aka.ms/asm-plugin-ca

components IstioComponentsResponse

Istio components configuration.

revisions Sequence[str]

The list of revisions of the Istio control plane. When an upgrade is not in progress, this holds one value. When canary upgrade is in progress, this can only hold two consecutive values. For more information, see: https://learn.microsoft.com/en-us/azure/aks/istio-upgrade

certificateAuthority Property Map

Istio Service Mesh Certificate Authority (CA) configuration. For now, we only support plugin certificates as described here https://aka.ms/asm-plugin-ca

components Property Map

Istio components configuration.

revisions List<String>

The list of revisions of the Istio control plane. When an upgrade is not in progress, this holds one value. When canary upgrade is in progress, this can only hold two consecutive values. For more information, see: https://learn.microsoft.com/en-us/azure/aks/istio-upgrade

AllowedUnsafeSysctls List<string>

Allowed list of unsafe sysctls or unsafe sysctl patterns (ending in *).

ContainerLogMaxFiles int

The maximum number of container log files that can be present for a container. The number must be ≥ 2.

ContainerLogMaxSizeMB int

The maximum size (e.g. 10Mi) of container log file before it is rotated.

CpuCfsQuota bool

The default is true.

CpuCfsQuotaPeriod string

The default is '100ms.' Valid values are a sequence of decimal numbers with an optional fraction and a unit suffix. For example: '300ms', '2h45m'. Supported units are 'ns', 'us', 'ms', 's', 'm', and 'h'.

CpuManagerPolicy string

The default is 'none'. See Kubernetes CPU management policies for more information. Allowed values are 'none' and 'static'.

FailSwapOn bool

If set to true it will make the Kubelet fail to start if swap is enabled on the node.

ImageGcHighThreshold int

To disable image garbage collection, set to 100. The default is 85%

ImageGcLowThreshold int

This cannot be set higher than imageGcHighThreshold. The default is 80%

PodMaxPids int

The maximum number of processes per pod.

TopologyManagerPolicy string

For more information see Kubernetes Topology Manager. The default is 'none'. Allowed values are 'none', 'best-effort', 'restricted', and 'single-numa-node'.