managed_clusters
Creates, updates, deletes, gets or lists a managed_clusters resource.
Overview
| Name | managed_clusters |
| Type | Resource |
| Id | azure.container_service.managed_clusters |
Fields
The following fields are returned by SELECT queries:
- get_access_profile
- get_command_result
- get_mesh_upgrade_profile
- get
- get_guardrails_versions
- get_mesh_revision_profile
- list_by_resource_group
- list_guardrails_versions
- list
| Name | Datatype | Description |
|---|---|---|
id | string | Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}. |
name | string | The name of the resource. |
kubeConfig | string (byte) | Base64-encoded Kubernetes configuration file. |
location | string | The geo-location where the resource lives. Required. |
systemData | object | Azure Resource Manager metadata containing createdBy and modifiedBy information. |
tags | object | Resource tags. |
type | string | The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts". |
| Name | Datatype | Description |
|---|---|---|
id | string | The command id. |
exitCode | integer | The exit code of the command. |
finishedAt | string (date-time) | The time when the command finished. |
logs | string | The command output. |
provisioningState | string | provisioning State. |
reason | string | An explanation of why provisioningState is set to failed (if so). |
startedAt | string (date-time) | The time when the command started. |
| Name | Datatype | Description |
|---|---|---|
id | string | Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}. |
name | string | The name of the resource. |
compatibleWith | array | List of items this revision of service mesh is compatible with, and their associated versions. |
revision | string | The revision of the mesh release. |
systemData | object | Azure Resource Manager metadata containing createdBy and modifiedBy information. |
type | string | The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts". |
upgrades | array | List of revisions available for upgrade of a specific mesh revision. |
| Name | Datatype | Description |
|---|---|---|
id | string | Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}. |
name | string | The name of the resource. |
aadProfile | object | The Azure Active Directory configuration. |
addonProfiles | object | The profile of managed cluster add-on. |
agentPoolProfiles | array | The agent pool properties. |
aiToolchainOperatorProfile | object | AI toolchain operator settings that apply to the whole cluster. |
apiServerAccessProfile | object | The access profile for managed cluster API server. |
autoScalerProfile | object | Parameters to be applied to the cluster-autoscaler when enabled. |
autoUpgradeProfile | object | The auto upgrade configuration. |
azureMonitorProfile | object | Azure Monitor addon profiles for monitoring the managed cluster. |
azurePortalFQDN | string | The special FQDN used by the Azure Portal to access the Managed Cluster. This FQDN is for use only by the Azure Portal and should not be used by other clients. The Azure Portal requires certain Cross-Origin Resource Sharing (CORS) headers to be sent in some responses, which Kubernetes APIServer doesn't handle by default. This special FQDN supports CORS, allowing the Azure Portal to function properly. |
bootstrapProfile | object | Profile of the cluster bootstrap configuration. |
controlPlaneScalingProfile | object | Profile for providing scaled and performance guaranteed control plane capacity to deliver consistent performance under high workload. Requires Kubernetes version 1.33.0 or later. |
creationData | object | CreationData to be used to specify the source Snapshot ID if the cluster will be created/upgraded using a snapshot. |
currentKubernetesVersion | string | The version of Kubernetes the Managed Cluster is running. If kubernetesVersion was a fully specified version , this field will be exactly equal to it. If kubernetesVersion was , this field will contain the full version being used. |
disableLocalAccounts | boolean | If local accounts should be disabled on the Managed Cluster. If set to true, getting static credentials will be disabled for this cluster. This must only be used on Managed Clusters that are AAD enabled. For more details see disable local accounts _. |
diskEncryptionSetID | string | The Resource ID of the disk encryption set to use for enabling encryption at rest. This is of the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Compute/diskEncryptionSets/{encryptionSetName}'. |
dnsPrefix | string | The DNS prefix of the Managed Cluster. This cannot be updated once the Managed Cluster has been created. |
eTag | string | If eTag is provided in the response body, it may also be provided as a header per the normal etag convention. Entity tags are used for comparing two or more entities from the same requested resource. HTTP/1.1 uses entity tags in the etag (section 14.19), If-Match (section 14.24), If-None-Match (section 14.26), and If-Range (section 14.27) header fields. |
enableFIPS | boolean | Whether to enable FIPS mode at the cluster level. When enabled, this setting enforces FIPS compliance for all AKS-managed components, such as the node operating system, addons, and managed containerized components . See Enable cluster-wide FIPS for more details. When this property is enabled, all node pools in the cluster must also be FIPS-enabled. |
enableNamespaceResources | boolean | Enable namespace as Azure resource. The default value is false. It can be enabled/disabled on creation and updating of the managed cluster. See https://aka.ms/NamespaceARMResource _ for more details on Namespace as a ARM Resource. |
enableRBAC | boolean | Whether to enable Kubernetes Role-Based Access Control. |
extendedLocation | object | The extended location of the Virtual Machine. |
fqdn | string | The FQDN of the master pool. |
fqdnSubdomain | string | The FQDN subdomain of the private cluster with custom private dns zone. This cannot be updated once the Managed Cluster has been created. |
healthMonitorProfile | object | Health monitor profile for the managed cluster. |
hostedSystemProfile | object | Settings for hosted system addons. For more information, see https://aka.ms/aks/automatic/systemcomponents _. |
httpProxyConfig | object | Configurations for provisioning the cluster with HTTP proxy servers. |
identity | object | The identity of the managed cluster, if configured. |
identityProfile | object | The user identity associated with the managed cluster. This identity will be used by the kubelet. Only one user assigned identity is allowed. The only accepted key is "kubeletidentity", with value of "resourceId": "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}". |
ingressProfile | object | Ingress profile for the managed cluster. |
kind | string | This is primarily used to expose different UI experiences in the portal for different kinds. |
kubernetesVersion | string | The version of Kubernetes specified by the user. Both patch version (e.g. 1.20.13) and (e.g. 1.20) are supported. When is specified, the latest supported GA patch version is chosen automatically. Updating the cluster with the same once it has been created (e.g. 1.14.x -> 1.14) will not trigger an upgrade, even if a newer patch version is available. When you upgrade a supported AKS cluster, Kubernetes minor versions cannot be skipped. All upgrades must be performed sequentially by major version number. For example, upgrades between 1.14.x -> 1.15.x or 1.15.x -> 1.16.x are allowed, however 1.14.x -> 1.16.x is not allowed. See upgrading an AKS cluster _ for more details. |
linuxProfile | object | The profile for Linux VMs in the Managed Cluster. |
location | string | The geo-location where the resource lives. Required. |
maxAgentPools | integer | The max number of agent pools for the managed cluster. |
metricsProfile | object | Optional cluster metrics configuration. |
networkProfile | object | The network configuration profile. |
nodeDisruptionProfile | object | Node disruption profile for a managed cluster. |
nodeProvisioningProfile | object | Node provisioning settings that apply to the whole cluster. |
nodeResourceGroup | string | The name of the resource group containing agent pool nodes. |
nodeResourceGroupProfile | object | Profile of the node resource group configuration. |
oidcIssuerProfile | object | The OIDC issuer profile of the Managed Cluster. |
podIdentityProfile | object | The pod identity profile of the Managed Cluster. See use AAD pod identity _ for more details on AAD pod identity integration. |
powerState | object | The Power State of the cluster. |
privateFQDN | string | The FQDN of private cluster. |
privateLinkResources | array | Private link resources associated with the cluster. |
provisioningState | string | The current provisioning state. |
publicNetworkAccess | string | PublicNetworkAccess of the managedCluster. Allow or deny public network access for AKS. Known values are: "Enabled", "Disabled", and "SecuredByPerimeter". (Enabled, Disabled, SecuredByPerimeter) |
resourceUID | string | The resourceUID uniquely identifies ManagedClusters that reuse ARM ResourceIds (i.e: create, delete, create sequence). |
schedulerProfile | object | Profile of the pod scheduler configuration. |
securityProfile | object | Security profile for the managed cluster. |
serviceMeshProfile | object | Service mesh profile for a managed cluster. |
servicePrincipalProfile | object | Information about a service principal identity for the cluster to use for manipulating Azure APIs. |
sku | object | The managed cluster SKU. |
status | object | Contains read-only information about the Managed Cluster. |
storageProfile | object | Storage profile for the managed cluster. |
supportPlan | string | The support plan for the Managed Cluster. If unspecified, the default is 'KubernetesOfficial'. Known values are: "KubernetesOfficial" and "AKSLongTermSupport". (KubernetesOfficial, AKSLongTermSupport) |
systemData | object | Azure Resource Manager metadata containing createdBy and modifiedBy information. |
tags | object | Resource tags. |
type | string | The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts". |
upgradeSettings | object | Settings for upgrading a cluster. |
windowsProfile | object | The profile for Windows VMs in the Managed Cluster. |
workloadAutoScalerProfile | object | Workload Auto-scaler profile for the managed cluster. |
| Name | Datatype | Description |
|---|---|---|
id | string | Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}. |
name | string | The name of the resource. |
isDefaultVersion | boolean | Whether this is the default version. |
support | string | Whether the version is preview or stable. Known values are: "Preview" and "Stable". (Preview, Stable) |
systemData | object | Azure Resource Manager metadata containing createdBy and modifiedBy information. |
type | string | The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts". |
| Name | Datatype | Description |
|---|---|---|
id | string | Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}. |
name | string | The name of the resource. |
meshRevisions | array | Available mesh revisions. |
systemData | object | Azure Resource Manager metadata containing createdBy and modifiedBy information. |
type | string | The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts". |
| Name | Datatype | Description |
|---|---|---|
id | string | Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}. |
name | string | The name of the resource. |
aadProfile | object | The Azure Active Directory configuration. |
addonProfiles | object | The profile of managed cluster add-on. |
agentPoolProfiles | array | The agent pool properties. |
aiToolchainOperatorProfile | object | AI toolchain operator settings that apply to the whole cluster. |
apiServerAccessProfile | object | The access profile for managed cluster API server. |
autoScalerProfile | object | Parameters to be applied to the cluster-autoscaler when enabled. |
autoUpgradeProfile | object | The auto upgrade configuration. |
azureMonitorProfile | object | Azure Monitor addon profiles for monitoring the managed cluster. |
azurePortalFQDN | string | The special FQDN used by the Azure Portal to access the Managed Cluster. This FQDN is for use only by the Azure Portal and should not be used by other clients. The Azure Portal requires certain Cross-Origin Resource Sharing (CORS) headers to be sent in some responses, which Kubernetes APIServer doesn't handle by default. This special FQDN supports CORS, allowing the Azure Portal to function properly. |
bootstrapProfile | object | Profile of the cluster bootstrap configuration. |
controlPlaneScalingProfile | object | Profile for providing scaled and performance guaranteed control plane capacity to deliver consistent performance under high workload. Requires Kubernetes version 1.33.0 or later. |
creationData | object | CreationData to be used to specify the source Snapshot ID if the cluster will be created/upgraded using a snapshot. |
currentKubernetesVersion | string | The version of Kubernetes the Managed Cluster is running. If kubernetesVersion was a fully specified version , this field will be exactly equal to it. If kubernetesVersion was , this field will contain the full version being used. |
disableLocalAccounts | boolean | If local accounts should be disabled on the Managed Cluster. If set to true, getting static credentials will be disabled for this cluster. This must only be used on Managed Clusters that are AAD enabled. For more details see disable local accounts _. |
diskEncryptionSetID | string | The Resource ID of the disk encryption set to use for enabling encryption at rest. This is of the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Compute/diskEncryptionSets/{encryptionSetName}'. |
dnsPrefix | string | The DNS prefix of the Managed Cluster. This cannot be updated once the Managed Cluster has been created. |
eTag | string | If eTag is provided in the response body, it may also be provided as a header per the normal etag convention. Entity tags are used for comparing two or more entities from the same requested resource. HTTP/1.1 uses entity tags in the etag (section 14.19), If-Match (section 14.24), If-None-Match (section 14.26), and If-Range (section 14.27) header fields. |
enableFIPS | boolean | Whether to enable FIPS mode at the cluster level. When enabled, this setting enforces FIPS compliance for all AKS-managed components, such as the node operating system, addons, and managed containerized components . See Enable cluster-wide FIPS for more details. When this property is enabled, all node pools in the cluster must also be FIPS-enabled. |
enableNamespaceResources | boolean | Enable namespace as Azure resource. The default value is false. It can be enabled/disabled on creation and updating of the managed cluster. See https://aka.ms/NamespaceARMResource _ for more details on Namespace as a ARM Resource. |
enableRBAC | boolean | Whether to enable Kubernetes Role-Based Access Control. |
extendedLocation | object | The extended location of the Virtual Machine. |
fqdn | string | The FQDN of the master pool. |
fqdnSubdomain | string | The FQDN subdomain of the private cluster with custom private dns zone. This cannot be updated once the Managed Cluster has been created. |
healthMonitorProfile | object | Health monitor profile for the managed cluster. |
hostedSystemProfile | object | Settings for hosted system addons. For more information, see https://aka.ms/aks/automatic/systemcomponents _. |
httpProxyConfig | object | Configurations for provisioning the cluster with HTTP proxy servers. |
identity | object | The identity of the managed cluster, if configured. |
identityProfile | object | The user identity associated with the managed cluster. This identity will be used by the kubelet. Only one user assigned identity is allowed. The only accepted key is "kubeletidentity", with value of "resourceId": "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}". |
ingressProfile | object | Ingress profile for the managed cluster. |
kind | string | This is primarily used to expose different UI experiences in the portal for different kinds. |
kubernetesVersion | string | The version of Kubernetes specified by the user. Both patch version (e.g. 1.20.13) and (e.g. 1.20) are supported. When is specified, the latest supported GA patch version is chosen automatically. Updating the cluster with the same once it has been created (e.g. 1.14.x -> 1.14) will not trigger an upgrade, even if a newer patch version is available. When you upgrade a supported AKS cluster, Kubernetes minor versions cannot be skipped. All upgrades must be performed sequentially by major version number. For example, upgrades between 1.14.x -> 1.15.x or 1.15.x -> 1.16.x are allowed, however 1.14.x -> 1.16.x is not allowed. See upgrading an AKS cluster _ for more details. |
linuxProfile | object | The profile for Linux VMs in the Managed Cluster. |
location | string | The geo-location where the resource lives. Required. |
maxAgentPools | integer | The max number of agent pools for the managed cluster. |
metricsProfile | object | Optional cluster metrics configuration. |
networkProfile | object | The network configuration profile. |
nodeDisruptionProfile | object | Node disruption profile for a managed cluster. |
nodeProvisioningProfile | object | Node provisioning settings that apply to the whole cluster. |
nodeResourceGroup | string | The name of the resource group containing agent pool nodes. |
nodeResourceGroupProfile | object | Profile of the node resource group configuration. |
oidcIssuerProfile | object | The OIDC issuer profile of the Managed Cluster. |
podIdentityProfile | object | The pod identity profile of the Managed Cluster. See use AAD pod identity _ for more details on AAD pod identity integration. |
powerState | object | The Power State of the cluster. |
privateFQDN | string | The FQDN of private cluster. |
privateLinkResources | array | Private link resources associated with the cluster. |
provisioningState | string | The current provisioning state. |
publicNetworkAccess | string | PublicNetworkAccess of the managedCluster. Allow or deny public network access for AKS. Known values are: "Enabled", "Disabled", and "SecuredByPerimeter". (Enabled, Disabled, SecuredByPerimeter) |
resourceUID | string | The resourceUID uniquely identifies ManagedClusters that reuse ARM ResourceIds (i.e: create, delete, create sequence). |
schedulerProfile | object | Profile of the pod scheduler configuration. |
securityProfile | object | Security profile for the managed cluster. |
serviceMeshProfile | object | Service mesh profile for a managed cluster. |
servicePrincipalProfile | object | Information about a service principal identity for the cluster to use for manipulating Azure APIs. |
sku | object | The managed cluster SKU. |
status | object | Contains read-only information about the Managed Cluster. |
storageProfile | object | Storage profile for the managed cluster. |
supportPlan | string | The support plan for the Managed Cluster. If unspecified, the default is 'KubernetesOfficial'. Known values are: "KubernetesOfficial" and "AKSLongTermSupport". (KubernetesOfficial, AKSLongTermSupport) |
systemData | object | Azure Resource Manager metadata containing createdBy and modifiedBy information. |
tags | object | Resource tags. |
type | string | The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts". |
upgradeSettings | object | Settings for upgrading a cluster. |
windowsProfile | object | The profile for Windows VMs in the Managed Cluster. |
workloadAutoScalerProfile | object | Workload Auto-scaler profile for the managed cluster. |
| Name | Datatype | Description |
|---|---|---|
id | string | Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}. |
name | string | The name of the resource. |
isDefaultVersion | boolean | Whether this is the default version. |
support | string | Whether the version is preview or stable. Known values are: "Preview" and "Stable". (Preview, Stable) |
systemData | object | Azure Resource Manager metadata containing createdBy and modifiedBy information. |
type | string | The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts". |
| Name | Datatype | Description |
|---|---|---|
id | string | Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}. |
name | string | The name of the resource. |
aadProfile | object | The Azure Active Directory configuration. |
addonProfiles | object | The profile of managed cluster add-on. |
agentPoolProfiles | array | The agent pool properties. |
aiToolchainOperatorProfile | object | AI toolchain operator settings that apply to the whole cluster. |
apiServerAccessProfile | object | The access profile for managed cluster API server. |
autoScalerProfile | object | Parameters to be applied to the cluster-autoscaler when enabled. |
autoUpgradeProfile | object | The auto upgrade configuration. |
azureMonitorProfile | object | Azure Monitor addon profiles for monitoring the managed cluster. |
azurePortalFQDN | string | The special FQDN used by the Azure Portal to access the Managed Cluster. This FQDN is for use only by the Azure Portal and should not be used by other clients. The Azure Portal requires certain Cross-Origin Resource Sharing (CORS) headers to be sent in some responses, which Kubernetes APIServer doesn't handle by default. This special FQDN supports CORS, allowing the Azure Portal to function properly. |
bootstrapProfile | object | Profile of the cluster bootstrap configuration. |
controlPlaneScalingProfile | object | Profile for providing scaled and performance guaranteed control plane capacity to deliver consistent performance under high workload. Requires Kubernetes version 1.33.0 or later. |
creationData | object | CreationData to be used to specify the source Snapshot ID if the cluster will be created/upgraded using a snapshot. |
currentKubernetesVersion | string | The version of Kubernetes the Managed Cluster is running. If kubernetesVersion was a fully specified version , this field will be exactly equal to it. If kubernetesVersion was , this field will contain the full version being used. |
disableLocalAccounts | boolean | If local accounts should be disabled on the Managed Cluster. If set to true, getting static credentials will be disabled for this cluster. This must only be used on Managed Clusters that are AAD enabled. For more details see disable local accounts _. |
diskEncryptionSetID | string | The Resource ID of the disk encryption set to use for enabling encryption at rest. This is of the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Compute/diskEncryptionSets/{encryptionSetName}'. |
dnsPrefix | string | The DNS prefix of the Managed Cluster. This cannot be updated once the Managed Cluster has been created. |
eTag | string | If eTag is provided in the response body, it may also be provided as a header per the normal etag convention. Entity tags are used for comparing two or more entities from the same requested resource. HTTP/1.1 uses entity tags in the etag (section 14.19), If-Match (section 14.24), If-None-Match (section 14.26), and If-Range (section 14.27) header fields. |
enableFIPS | boolean | Whether to enable FIPS mode at the cluster level. When enabled, this setting enforces FIPS compliance for all AKS-managed components, such as the node operating system, addons, and managed containerized components . See Enable cluster-wide FIPS for more details. When this property is enabled, all node pools in the cluster must also be FIPS-enabled. |
enableNamespaceResources | boolean | Enable namespace as Azure resource. The default value is false. It can be enabled/disabled on creation and updating of the managed cluster. See https://aka.ms/NamespaceARMResource _ for more details on Namespace as a ARM Resource. |
enableRBAC | boolean | Whether to enable Kubernetes Role-Based Access Control. |
extendedLocation | object | The extended location of the Virtual Machine. |
fqdn | string | The FQDN of the master pool. |
fqdnSubdomain | string | The FQDN subdomain of the private cluster with custom private dns zone. This cannot be updated once the Managed Cluster has been created. |
healthMonitorProfile | object | Health monitor profile for the managed cluster. |
hostedSystemProfile | object | Settings for hosted system addons. For more information, see https://aka.ms/aks/automatic/systemcomponents _. |
httpProxyConfig | object | Configurations for provisioning the cluster with HTTP proxy servers. |
identity | object | The identity of the managed cluster, if configured. |
identityProfile | object | The user identity associated with the managed cluster. This identity will be used by the kubelet. Only one user assigned identity is allowed. The only accepted key is "kubeletidentity", with value of "resourceId": "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}". |
ingressProfile | object | Ingress profile for the managed cluster. |
kind | string | This is primarily used to expose different UI experiences in the portal for different kinds. |
kubernetesVersion | string | The version of Kubernetes specified by the user. Both patch version (e.g. 1.20.13) and (e.g. 1.20) are supported. When is specified, the latest supported GA patch version is chosen automatically. Updating the cluster with the same once it has been created (e.g. 1.14.x -> 1.14) will not trigger an upgrade, even if a newer patch version is available. When you upgrade a supported AKS cluster, Kubernetes minor versions cannot be skipped. All upgrades must be performed sequentially by major version number. For example, upgrades between 1.14.x -> 1.15.x or 1.15.x -> 1.16.x are allowed, however 1.14.x -> 1.16.x is not allowed. See upgrading an AKS cluster _ for more details. |
linuxProfile | object | The profile for Linux VMs in the Managed Cluster. |
location | string | The geo-location where the resource lives. Required. |
maxAgentPools | integer | The max number of agent pools for the managed cluster. |
metricsProfile | object | Optional cluster metrics configuration. |
networkProfile | object | The network configuration profile. |
nodeDisruptionProfile | object | Node disruption profile for a managed cluster. |
nodeProvisioningProfile | object | Node provisioning settings that apply to the whole cluster. |
nodeResourceGroup | string | The name of the resource group containing agent pool nodes. |
nodeResourceGroupProfile | object | Profile of the node resource group configuration. |
oidcIssuerProfile | object | The OIDC issuer profile of the Managed Cluster. |
podIdentityProfile | object | The pod identity profile of the Managed Cluster. See use AAD pod identity _ for more details on AAD pod identity integration. |
powerState | object | The Power State of the cluster. |
privateFQDN | string | The FQDN of private cluster. |
privateLinkResources | array | Private link resources associated with the cluster. |
provisioningState | string | The current provisioning state. |
publicNetworkAccess | string | PublicNetworkAccess of the managedCluster. Allow or deny public network access for AKS. Known values are: "Enabled", "Disabled", and "SecuredByPerimeter". (Enabled, Disabled, SecuredByPerimeter) |
resourceUID | string | The resourceUID uniquely identifies ManagedClusters that reuse ARM ResourceIds (i.e: create, delete, create sequence). |
schedulerProfile | object | Profile of the pod scheduler configuration. |
securityProfile | object | Security profile for the managed cluster. |
serviceMeshProfile | object | Service mesh profile for a managed cluster. |
servicePrincipalProfile | object | Information about a service principal identity for the cluster to use for manipulating Azure APIs. |
sku | object | The managed cluster SKU. |
status | object | Contains read-only information about the Managed Cluster. |
storageProfile | object | Storage profile for the managed cluster. |
supportPlan | string | The support plan for the Managed Cluster. If unspecified, the default is 'KubernetesOfficial'. Known values are: "KubernetesOfficial" and "AKSLongTermSupport". (KubernetesOfficial, AKSLongTermSupport) |
systemData | object | Azure Resource Manager metadata containing createdBy and modifiedBy information. |
tags | object | Resource tags. |
type | string | The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts". |
upgradeSettings | object | Settings for upgrading a cluster. |
windowsProfile | object | The profile for Windows VMs in the Managed Cluster. |
workloadAutoScalerProfile | object | Workload Auto-scaler profile for the managed cluster. |
Methods
The following methods are available for this resource:
| Name | Accessible by | Required Params | Optional Params | Description |
|---|---|---|---|---|
get_access_profile | select | resource_group_name, resource_name, role_name, subscription_id | Gets an access profile of a managed cluster. WARNING: This API will be deprecated. Instead use ListClusterUserCredentials _ or ListClusterAdminCredentials _ . | |
get_command_result | select | resource_group_name, resource_name, command_id, subscription_id | Gets the results of a command which has been run on the Managed Cluster. | |
get_mesh_upgrade_profile | select | resource_group_name, resource_name, mode, subscription_id | Gets available upgrades for a service mesh in a cluster. | |
get | select | resource_group_name, resource_name, subscription_id | Gets a managed cluster. | |
get_guardrails_versions | select | location, version, subscription_id | Gets supported Guardrails version in the specified subscription and location. Contains Guardrails version along with its support info and whether it is a default version. | |
get_mesh_revision_profile | select | location, mode, subscription_id | Gets a mesh revision profile for a specified mesh in the specified location. Contains extra metadata on the revision, including supported revisions, cluster compatibility and available upgrades. | |
list_by_resource_group | select | resource_group_name, subscription_id | Lists managed clusters in the specified subscription and resource group. | |
list_guardrails_versions | select | location, subscription_id | Gets a list of supported Guardrails versions in the specified subscription and location. Contains list of Guardrails version along with its support info and whether it is a default version. | |
list | select | subscription_id | Gets a list of managed clusters in the specified subscription. | |
create_or_update | insert | resource_group_name, resource_name, subscription_id, location | Creates or updates a managed cluster. | |
update_tags | update | resource_group_name, resource_name, subscription_id | Updates tags on a managed cluster. | |
create_or_update | replace | resource_group_name, resource_name, subscription_id, location | Creates or updates a managed cluster. | |
delete | delete | resource_group_name, resource_name, subscription_id | ignore-pod-disruption-budget | Deletes a managed cluster. |
list_cluster_admin_credentials | exec | resource_group_name, resource_name, subscription_id | server-fqdn | Lists the admin credentials of a managed cluster. |
list_cluster_user_credentials | exec | resource_group_name, resource_name, subscription_id | server-fqdn, format | Lists the user credentials of a managed cluster. |
list_cluster_monitoring_user_credentials | exec | resource_group_name, resource_name, subscription_id | server-fqdn | Lists the cluster monitoring user credentials of a managed cluster. |
list_outbound_network_dependencies_endpoints | exec | resource_group_name, resource_name, subscription_id | Gets a list of egress endpoints (network endpoints of all outbound dependencies) in the specified managed cluster. Gets a list of egress endpoints (network endpoints of all outbound dependencies) in the specified managed cluster. The operation returns properties of each egress endpoint. | |
list_safeguards_versions | exec | location, subscription_id | Gets a list of supported Safeguards versions in the specified subscription and location. Contains list of Safeguards version along with its support info and whether it is a default version. | |
list_mesh_revision_profiles | exec | location, subscription_id | Lists mesh revision profiles for all meshes in the specified location. Contains extra metadata on each revision, including supported revisions, cluster compatibility and available upgrades. | |
list_mesh_upgrade_profiles | exec | resource_group_name, resource_name, subscription_id | Lists available upgrades for all service meshes in a specific cluster. | |
list_kubernetes_versions | exec | location, subscription_id | Gets a list of supported Kubernetes versions in the specified subscription. Contains extra metadata on the version, including supported patch versions, capabilities, available upgrades, and details on preview status of the version. | |
get_upgrade_profile | exec | resource_group_name, resource_name, subscription_id | Gets the upgrade profile of a managed cluster. | |
get_safeguards_versions | exec | location, version, subscription_id | Gets supported Safeguards version in the specified subscription and location. Contains Safeguards version along with its support info and whether it is a default version. | |
reset_service_principal_profile | exec | resource_group_name, resource_name, subscription_id, clientId | Reset the Service Principal Profile of a managed cluster. This action cannot be performed on a cluster that is not using a service principal. | |
reset_aad_profile | exec | resource_group_name, resource_name, subscription_id | Reset the AAD Profile of a managed cluster. WARNING: This API will be deprecated. Please see AKS-managed Azure Active Directory integration _ to update your cluster with AKS-managed Azure AD. | |
rotate_cluster_certificates | exec | resource_group_name, resource_name, subscription_id | Rotates the certificates of a managed cluster. See Certificate rotation _ for more details about rotating managed cluster certificates. | |
abort_latest_operation | exec | resource_group_name, resource_name, subscription_id | Aborts last operation running on managed cluster. Aborts the currently running operation on the managed cluster. The Managed Cluster will be moved to a Canceling state and eventually to a Canceled state when cancellation finishes. If the operation completes before cancellation can take place, a 409 error code is returned. | |
rotate_service_account_signing_keys | exec | resource_group_name, resource_name, subscription_id | Rotates the service account signing keys of a managed cluster. | |
stop | exec | resource_group_name, resource_name, subscription_id | Stops a Managed Cluster. This can only be performed on Azure Virtual Machine Scale set backed clusters. Stopping a cluster stops the control plane and agent nodes entirely, while maintaining all object and cluster state. A cluster does not accrue charges while it is stopped. See stopping a cluster _ for more details about stopping a cluster. | |
start | exec | resource_group_name, resource_name, subscription_id | Starts a previously stopped Managed Cluster. See starting a cluster _ for more details about starting a cluster. | |
run_command | exec | resource_group_name, resource_name, subscription_id, command | Submits a command to run against the Managed Cluster. AKS will create a pod to run the command. This is primarily useful for private clusters. For more information see AKS Run Command _. | |
rebalance_load_balancers | exec | resource_group_name, resource_name, subscription_id | Rebalance nodes across specific load balancers. |
Parameters
Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.
| Name | Datatype | Description |
|---|---|---|
command_id | string | Id of the command. Required. |
location | string | The name of the Azure region. Required. |
mode | string | The mode of the mesh. Required. |
resource_group_name | string | The name of the resource group. The name is case insensitive. Required. |
resource_name | string | The name of the managed cluster resource. Required. |
role_name | string | The name of the role for managed cluster accessProfile resource. Required. |
subscription_id | string | |
version | string | Safeguards version. Required. |
format | string | Only apply to AAD clusters, specifies the format of returned kubeconfig. Format 'azure' will return azure auth-provider kubeconfig; format 'exec' will return exec format kubeconfig, which requires kubelogin binary in the path. Known values are: "azure" and "exec". Default value is None. |
ignore-pod-disruption-budget | boolean | ignore-pod-disruption-budget=true to delete those pods on a node without considering Pod Disruption Budget. Default value is None. |
server-fqdn | string | server fqdn type for credentials to be returned. Default value is None. |
SELECT examples
- get_access_profile
- get_command_result
- get_mesh_upgrade_profile
- get
- get_guardrails_versions
- get_mesh_revision_profile
- list_by_resource_group
- list_guardrails_versions
- list
Gets an access profile of a managed cluster. WARNING: This API will be deprecated. Instead use ListClusterUserCredentials _ or ListClusterAdminCredentials _ .
SELECT
id,
name,
kubeConfig,
location,
systemData,
tags,
type
FROM azure.container_service.managed_clusters
WHERE resource_group_name = '{{ resource_group_name }}' -- required
AND resource_name = '{{ resource_name }}' -- required
AND role_name = '{{ role_name }}' -- required
AND subscription_id = '{{ subscription_id }}' -- required
;
Gets the results of a command which has been run on the Managed Cluster.
SELECT
id,
exitCode,
finishedAt,
logs,
provisioningState,
reason,
startedAt
FROM azure.container_service.managed_clusters
WHERE resource_group_name = '{{ resource_group_name }}' -- required
AND resource_name = '{{ resource_name }}' -- required
AND command_id = '{{ command_id }}' -- required
AND subscription_id = '{{ subscription_id }}' -- required
;
Gets available upgrades for a service mesh in a cluster.
SELECT
id,
name,
compatibleWith,
revision,
systemData,
type,
upgrades
FROM azure.container_service.managed_clusters
WHERE resource_group_name = '{{ resource_group_name }}' -- required
AND resource_name = '{{ resource_name }}' -- required
AND mode = '{{ mode }}' -- required
AND subscription_id = '{{ subscription_id }}' -- required
;
Gets a managed cluster.
SELECT
id,
name,
aadProfile,
addonProfiles,
agentPoolProfiles,
aiToolchainOperatorProfile,
apiServerAccessProfile,
autoScalerProfile,
autoUpgradeProfile,
azureMonitorProfile,
azurePortalFQDN,
bootstrapProfile,
controlPlaneScalingProfile,
creationData,
currentKubernetesVersion,
disableLocalAccounts,
diskEncryptionSetID,
dnsPrefix,
eTag,
enableFIPS,
enableNamespaceResources,
enableRBAC,
extendedLocation,
fqdn,
fqdnSubdomain,
healthMonitorProfile,
hostedSystemProfile,
httpProxyConfig,
identity,
identityProfile,
ingressProfile,
kind,
kubernetesVersion,
linuxProfile,
location,
maxAgentPools,
metricsProfile,
networkProfile,
nodeDisruptionProfile,
nodeProvisioningProfile,
nodeResourceGroup,
nodeResourceGroupProfile,
oidcIssuerProfile,
podIdentityProfile,
powerState,
privateFQDN,
privateLinkResources,
provisioningState,
publicNetworkAccess,
resourceUID,
schedulerProfile,
securityProfile,
serviceMeshProfile,
servicePrincipalProfile,
sku,
status,
storageProfile,
supportPlan,
systemData,
tags,
type,
upgradeSettings,
windowsProfile,
workloadAutoScalerProfile
FROM azure.container_service.managed_clusters
WHERE resource_group_name = '{{ resource_group_name }}' -- required
AND resource_name = '{{ resource_name }}' -- required
AND subscription_id = '{{ subscription_id }}' -- required
;
Gets supported Guardrails version in the specified subscription and location. Contains Guardrails version along with its support info and whether it is a default version.
SELECT
id,
name,
isDefaultVersion,
support,
systemData,
type
FROM azure.container_service.managed_clusters
WHERE location = '{{ location }}' -- required
AND version = '{{ version }}' -- required
AND subscription_id = '{{ subscription_id }}' -- required
;
Gets a mesh revision profile for a specified mesh in the specified location. Contains extra metadata on the revision, including supported revisions, cluster compatibility and available upgrades.
SELECT
id,
name,
meshRevisions,
systemData,
type
FROM azure.container_service.managed_clusters
WHERE location = '{{ location }}' -- required
AND mode = '{{ mode }}' -- required
AND subscription_id = '{{ subscription_id }}' -- required
;
Lists managed clusters in the specified subscription and resource group.
SELECT
id,
name,
aadProfile,
addonProfiles,
agentPoolProfiles,
aiToolchainOperatorProfile,
apiServerAccessProfile,
autoScalerProfile,
autoUpgradeProfile,
azureMonitorProfile,
azurePortalFQDN,
bootstrapProfile,
controlPlaneScalingProfile,
creationData,
currentKubernetesVersion,
disableLocalAccounts,
diskEncryptionSetID,
dnsPrefix,
eTag,
enableFIPS,
enableNamespaceResources,
enableRBAC,
extendedLocation,
fqdn,
fqdnSubdomain,
healthMonitorProfile,
hostedSystemProfile,
httpProxyConfig,
identity,
identityProfile,
ingressProfile,
kind,
kubernetesVersion,
linuxProfile,
location,
maxAgentPools,
metricsProfile,
networkProfile,
nodeDisruptionProfile,
nodeProvisioningProfile,
nodeResourceGroup,
nodeResourceGroupProfile,
oidcIssuerProfile,
podIdentityProfile,
powerState,
privateFQDN,
privateLinkResources,
provisioningState,
publicNetworkAccess,
resourceUID,
schedulerProfile,
securityProfile,
serviceMeshProfile,
servicePrincipalProfile,
sku,
status,
storageProfile,
supportPlan,
systemData,
tags,
type,
upgradeSettings,
windowsProfile,
workloadAutoScalerProfile
FROM azure.container_service.managed_clusters
WHERE resource_group_name = '{{ resource_group_name }}' -- required
AND subscription_id = '{{ subscription_id }}' -- required
;
Gets a list of supported Guardrails versions in the specified subscription and location. Contains list of Guardrails version along with its support info and whether it is a default version.
SELECT
id,
name,
isDefaultVersion,
support,
systemData,
type
FROM azure.container_service.managed_clusters
WHERE location = '{{ location }}' -- required
AND subscription_id = '{{ subscription_id }}' -- required
;
Gets a list of managed clusters in the specified subscription.
SELECT
id,
name,
aadProfile,
addonProfiles,
agentPoolProfiles,
aiToolchainOperatorProfile,
apiServerAccessProfile,
autoScalerProfile,
autoUpgradeProfile,
azureMonitorProfile,
azurePortalFQDN,
bootstrapProfile,
controlPlaneScalingProfile,
creationData,
currentKubernetesVersion,
disableLocalAccounts,
diskEncryptionSetID,
dnsPrefix,
eTag,
enableFIPS,
enableNamespaceResources,
enableRBAC,
extendedLocation,
fqdn,
fqdnSubdomain,
healthMonitorProfile,
hostedSystemProfile,
httpProxyConfig,
identity,
identityProfile,
ingressProfile,
kind,
kubernetesVersion,
linuxProfile,
location,
maxAgentPools,
metricsProfile,
networkProfile,
nodeDisruptionProfile,
nodeProvisioningProfile,
nodeResourceGroup,
nodeResourceGroupProfile,
oidcIssuerProfile,
podIdentityProfile,
powerState,
privateFQDN,
privateLinkResources,
provisioningState,
publicNetworkAccess,
resourceUID,
schedulerProfile,
securityProfile,
serviceMeshProfile,
servicePrincipalProfile,
sku,
status,
storageProfile,
supportPlan,
systemData,
tags,
type,
upgradeSettings,
windowsProfile,
workloadAutoScalerProfile
FROM azure.container_service.managed_clusters
WHERE subscription_id = '{{ subscription_id }}' -- required
;
INSERT examples
- create_or_update
- Manifest
Creates or updates a managed cluster.
INSERT INTO azure.container_service.managed_clusters (
tags,
location,
properties,
sku,
extendedLocation,
identity,
kind,
resource_group_name,
resource_name,
subscription_id
)
SELECT
'{{ tags }}',
'{{ location }}' /* required */,
'{{ properties }}',
'{{ sku }}',
'{{ extendedLocation }}',
'{{ identity }}',
'{{ kind }}',
'{{ resource_group_name }}',
'{{ resource_name }}',
'{{ subscription_id }}'
RETURNING
id,
name,
eTag,
extendedLocation,
identity,
kind,
location,
properties,
sku,
systemData,
tags,
type
;
# Description fields are for documentation purposes
- name: managed_clusters
props:
- name: resource_group_name
value: "{{ resource_group_name }}"
description: Required parameter for the managed_clusters resource.
- name: resource_name
value: "{{ resource_name }}"
description: Required parameter for the managed_clusters resource.
- name: subscription_id
value: "{{ subscription_id }}"
description: Required parameter for the managed_clusters resource.
- name: tags
value: "{{ tags }}"
description: |
Resource tags.
- name: location
value: "{{ location }}"
description: |
The geo-location where the resource lives. Required.
- name: properties
description: |
Properties of a managed cluster.
value:
provisioningState: "{{ provisioningState }}"
powerState:
code: "{{ code }}"
creationData:
sourceResourceId: "{{ sourceResourceId }}"
maxAgentPools: {{ maxAgentPools }}
kubernetesVersion: "{{ kubernetesVersion }}"
currentKubernetesVersion: "{{ currentKubernetesVersion }}"
dnsPrefix: "{{ dnsPrefix }}"
fqdnSubdomain: "{{ fqdnSubdomain }}"
fqdn: "{{ fqdn }}"
privateFQDN: "{{ privateFQDN }}"
azurePortalFQDN: "{{ azurePortalFQDN }}"
agentPoolProfiles:
- eTag: "{{ eTag }}"
count: {{ count }}
vmSize: "{{ vmSize }}"
osDiskSizeGB: {{ osDiskSizeGB }}
osDiskType: "{{ osDiskType }}"
kubeletDiskType: "{{ kubeletDiskType }}"
workloadRuntime: "{{ workloadRuntime }}"
messageOfTheDay: "{{ messageOfTheDay }}"
vnetSubnetID: "{{ vnetSubnetID }}"
podSubnetID: "{{ podSubnetID }}"
podIPAllocationMode: "{{ podIPAllocationMode }}"
maxPods: {{ maxPods }}
osType: "{{ osType }}"
osSKU: "{{ osSKU }}"
maxCount: {{ maxCount }}
minCount: {{ minCount }}
enableAutoScaling: {{ enableAutoScaling }}
scaleDownMode: "{{ scaleDownMode }}"
type: "{{ type }}"
mode: "{{ mode }}"
orchestratorVersion: "{{ orchestratorVersion }}"
currentOrchestratorVersion: "{{ currentOrchestratorVersion }}"
nodeImageVersion: "{{ nodeImageVersion }}"
upgradeStrategy: "{{ upgradeStrategy }}"
enableOSDiskFullCaching: {{ enableOSDiskFullCaching }}
upgradeSettings:
maxSurge: "{{ maxSurge }}"
maxUnavailable: "{{ maxUnavailable }}"
maxBlockedNodes: "{{ maxBlockedNodes }}"
drainTimeoutInMinutes: {{ drainTimeoutInMinutes }}
nodeSoakDurationInMinutes: {{ nodeSoakDurationInMinutes }}
undrainableNodeBehavior: "{{ undrainableNodeBehavior }}"
upgradeSettingsBlueGreen:
drainBatchSize: "{{ drainBatchSize }}"
drainTimeoutInMinutes: {{ drainTimeoutInMinutes }}
batchSoakDurationInMinutes: {{ batchSoakDurationInMinutes }}
finalSoakDurationInMinutes: {{ finalSoakDurationInMinutes }}
provisioningState: "{{ provisioningState }}"
powerState:
code: "{{ code }}"
availabilityZones: "{{ availabilityZones }}"
enableNodePublicIP: {{ enableNodePublicIP }}
nodePublicIPPrefixID: "{{ nodePublicIPPrefixID }}"
scaleSetPriority: "{{ scaleSetPriority }}"
scaleSetEvictionPolicy: "{{ scaleSetEvictionPolicy }}"
spotMaxPrice: {{ spotMaxPrice }}
tags: "{{ tags }}"
nodeLabels: "{{ nodeLabels }}"
nodeTaints: "{{ nodeTaints }}"
nodeInitializationTaints: "{{ nodeInitializationTaints }}"
proximityPlacementGroupID: "{{ proximityPlacementGroupID }}"
kubeletConfig:
cpuManagerPolicy: "{{ cpuManagerPolicy }}"
cpuCfsQuota: {{ cpuCfsQuota }}
cpuCfsQuotaPeriod: "{{ cpuCfsQuotaPeriod }}"
imageGcHighThreshold: {{ imageGcHighThreshold }}
imageGcLowThreshold: {{ imageGcLowThreshold }}
topologyManagerPolicy: "{{ topologyManagerPolicy }}"
allowedUnsafeSysctls:
- "{{ allowedUnsafeSysctls }}"
failSwapOn: {{ failSwapOn }}
containerLogMaxSizeMB: {{ containerLogMaxSizeMB }}
containerLogMaxFiles: {{ containerLogMaxFiles }}
podMaxPids: {{ podMaxPids }}
seccompDefault: "{{ seccompDefault }}"
kubeReserved:
cpuMillicores: {{ cpuMillicores }}
memoryMB: {{ memoryMB }}
hardEvictionThreshold:
memoryAvailable: "{{ memoryAvailable }}"
nodeFsAvailable: "{{ nodeFsAvailable }}"
nodeFsInodesFree: "{{ nodeFsInodesFree }}"
linuxOSConfig:
sysctls:
netCoreSomaxconn: {{ netCoreSomaxconn }}
netCoreNetdevMaxBacklog: {{ netCoreNetdevMaxBacklog }}
netCoreRmemDefault: {{ netCoreRmemDefault }}
netCoreRmemMax: {{ netCoreRmemMax }}
netCoreWmemDefault: {{ netCoreWmemDefault }}
netCoreWmemMax: {{ netCoreWmemMax }}
netCoreOptmemMax: {{ netCoreOptmemMax }}
netIpv4TcpMaxSynBacklog: {{ netIpv4TcpMaxSynBacklog }}
netIpv4TcpMaxTwBuckets: {{ netIpv4TcpMaxTwBuckets }}
netIpv4TcpFinTimeout: {{ netIpv4TcpFinTimeout }}
netIpv4TcpKeepaliveTime: {{ netIpv4TcpKeepaliveTime }}
netIpv4TcpKeepaliveProbes: {{ netIpv4TcpKeepaliveProbes }}
netIpv4TcpkeepaliveIntvl: {{ netIpv4TcpkeepaliveIntvl }}
netIpv4TcpTwReuse: {{ netIpv4TcpTwReuse }}
netIpv4IpLocalPortRange: "{{ netIpv4IpLocalPortRange }}"
netIpv4NeighDefaultGcThresh1: {{ netIpv4NeighDefaultGcThresh1 }}
netIpv4NeighDefaultGcThresh2: {{ netIpv4NeighDefaultGcThresh2 }}
netIpv4NeighDefaultGcThresh3: {{ netIpv4NeighDefaultGcThresh3 }}
netNetfilterNfConntrackMax: {{ netNetfilterNfConntrackMax }}
netNetfilterNfConntrackBuckets: {{ netNetfilterNfConntrackBuckets }}
fsInotifyMaxUserWatches: {{ fsInotifyMaxUserWatches }}
fsFileMax: {{ fsFileMax }}
fsAioMaxNr: {{ fsAioMaxNr }}
fsNrOpen: {{ fsNrOpen }}
kernelThreadsMax: {{ kernelThreadsMax }}
vmMaxMapCount: {{ vmMaxMapCount }}
vmSwappiness: {{ vmSwappiness }}
vmVfsCachePressure: {{ vmVfsCachePressure }}
transparentHugePageEnabled: "{{ transparentHugePageEnabled }}"
transparentHugePageDefrag: "{{ transparentHugePageDefrag }}"
swapFileSizeMB: {{ swapFileSizeMB }}
enableEncryptionAtHost: {{ enableEncryptionAtHost }}
enableUltraSSD: {{ enableUltraSSD }}
enableFIPS: {{ enableFIPS }}
gpuInstanceProfile: "{{ gpuInstanceProfile }}"
creationData:
sourceResourceId: "{{ sourceResourceId }}"
capacityReservationGroupID: "{{ capacityReservationGroupID }}"
hostGroupID: "{{ hostGroupID }}"
networkProfile:
nodePublicIPTags:
- ipTagType: "{{ ipTagType }}"
tag: "{{ tag }}"
nodePublicIPPrefixIDs:
- "{{ nodePublicIPPrefixIDs }}"
allowedHostPorts:
- portStart: {{ portStart }}
portEnd: {{ portEnd }}
protocol: "{{ protocol }}"
applicationSecurityGroups:
- "{{ applicationSecurityGroups }}"
secondaryNetworkInterfaces:
- type: "{{ type }}"
vnetSubnetId: "{{ vnetSubnetId }}"
enableAcceleratedNetworking: {{ enableAcceleratedNetworking }}
windowsProfile:
disableOutboundNat: {{ disableOutboundNat }}
securityProfile:
enableVTPM: {{ enableVTPM }}
enableSecureBoot: {{ enableSecureBoot }}
sshAccess: "{{ sshAccess }}"
gpuProfile:
driver: "{{ driver }}"
driverType: "{{ driverType }}"
nvidia:
managementMode: "{{ managementMode }}"
migStrategy: "{{ migStrategy }}"
gatewayProfile:
publicIPPrefixSize: {{ publicIPPrefixSize }}
artifactStreamingProfile:
enabled: {{ enabled }}
virtualMachinesProfile:
scale:
manual:
- size: "{{ size }}"
count: {{ count }}
autoscale:
- size: "{{ size }}"
minCount: {{ minCount }}
maxCount: {{ maxCount }}
virtualMachineNodesStatus: "{{ virtualMachineNodesStatus }}"
status:
provisioningError:
code: "{{ code }}"
message: "{{ message }}"
target: "{{ target }}"
details:
- code: "{{ code }}"
message: "{{ message }}"
target: "{{ target }}"
details: "{{ details }}"
additionalInfo: "{{ additionalInfo }}"
additionalInfo:
- type: "{{ type }}"
info: "{{ info }}"
localDNSProfile:
mode: "{{ mode }}"
state: "{{ state }}"
vnetDNSOverrides: "{{ vnetDNSOverrides }}"
kubeDNSOverrides: "{{ kubeDNSOverrides }}"
preparedImageSpecificationProfile:
preparedImageSpecificationId: "{{ preparedImageSpecificationId }}"
name: "{{ name }}"
linuxProfile:
adminUsername: "{{ adminUsername }}"
ssh:
publicKeys:
- keyData: "{{ keyData }}"
windowsProfile:
adminUsername: "{{ adminUsername }}"
adminPassword: "{{ adminPassword }}"
licenseType: "{{ licenseType }}"
enableCSIProxy: {{ enableCSIProxy }}
gmsaProfile:
enabled: {{ enabled }}
dnsServer: "{{ dnsServer }}"
rootDomainName: "{{ rootDomainName }}"
servicePrincipalProfile:
clientId: "{{ clientId }}"
secret: "{{ secret }}"
addonProfiles: "{{ addonProfiles }}"
podIdentityProfile:
enabled: {{ enabled }}
allowNetworkPluginKubenet: {{ allowNetworkPluginKubenet }}
userAssignedIdentities:
- name: "{{ name }}"
namespace: "{{ namespace }}"
bindingSelector: "{{ bindingSelector }}"
identity:
resourceId: "{{ resourceId }}"
clientId: "{{ clientId }}"
objectId: "{{ objectId }}"
provisioningState: "{{ provisioningState }}"
provisioningInfo:
error:
error: "{{ error }}"
userAssignedIdentityExceptions:
- name: "{{ name }}"
namespace: "{{ namespace }}"
podLabels: "{{ podLabels }}"
oidcIssuerProfile:
issuerURL: "{{ issuerURL }}"
enabled: {{ enabled }}
nodeResourceGroup: "{{ nodeResourceGroup }}"
nodeResourceGroupProfile:
restrictionLevel: "{{ restrictionLevel }}"
enableRBAC: {{ enableRBAC }}
supportPlan: "{{ supportPlan }}"
enableFIPS: {{ enableFIPS }}
enableNamespaceResources: {{ enableNamespaceResources }}
networkProfile:
networkPlugin: "{{ networkPlugin }}"
networkPluginMode: "{{ networkPluginMode }}"
networkPolicy: "{{ networkPolicy }}"
networkMode: "{{ networkMode }}"
networkDataplane: "{{ networkDataplane }}"
advancedNetworking:
enabled: {{ enabled }}
observability:
enabled: {{ enabled }}
security:
enabled: {{ enabled }}
advancedNetworkPolicies: "{{ advancedNetworkPolicies }}"
transitEncryption:
type: "{{ type }}"
performance:
accelerationMode: "{{ accelerationMode }}"
podCidr: "{{ podCidr }}"
serviceCidr: "{{ serviceCidr }}"
dnsServiceIP: "{{ dnsServiceIP }}"
outboundType: "{{ outboundType }}"
loadBalancerSku: "{{ loadBalancerSku }}"
loadBalancerProfile:
managedOutboundIPs:
count: {{ count }}
countIPv6: {{ countIPv6 }}
outboundIPPrefixes:
publicIPPrefixes:
- id: "{{ id }}"
outboundIPs:
publicIPs:
- id: "{{ id }}"
effectiveOutboundIPs:
- id: "{{ id }}"
allocatedOutboundPorts: {{ allocatedOutboundPorts }}
idleTimeoutInMinutes: {{ idleTimeoutInMinutes }}
enableMultipleStandardLoadBalancers: {{ enableMultipleStandardLoadBalancers }}
backendPoolType: "{{ backendPoolType }}"
clusterServiceLoadBalancerHealthProbeMode: "{{ clusterServiceLoadBalancerHealthProbeMode }}"
bastionProfile:
enabled: {{ enabled }}
bastionId: "{{ bastionId }}"
sku: "{{ sku }}"
scaleUnits: {{ scaleUnits }}
publicIpAddressId: "{{ publicIpAddressId }}"
natGatewayProfile:
managedOutboundIPProfile:
count: {{ count }}
countIPv6: {{ countIPv6 }}
effectiveOutboundIPs:
- id: "{{ id }}"
outboundIPPrefixes:
publicIPPrefixes:
- "{{ publicIPPrefixes }}"
outboundIPs:
publicIPs:
- "{{ publicIPs }}"
idleTimeoutInMinutes: {{ idleTimeoutInMinutes }}
staticEgressGatewayProfile:
enabled: {{ enabled }}
podCidrs:
- "{{ podCidrs }}"
serviceCidrs:
- "{{ serviceCidrs }}"
ipFamilies:
- "{{ ipFamilies }}"
podLinkLocalAccess: "{{ podLinkLocalAccess }}"
kubeProxyConfig:
enabled: {{ enabled }}
mode: "{{ mode }}"
ipvsConfig:
scheduler: "{{ scheduler }}"
tcpTimeoutSeconds: {{ tcpTimeoutSeconds }}
tcpFinTimeoutSeconds: {{ tcpFinTimeoutSeconds }}
udpTimeoutSeconds: {{ udpTimeoutSeconds }}
aadProfile:
managed: {{ managed }}
enableAzureRBAC: {{ enableAzureRBAC }}
adminGroupObjectIDs:
- "{{ adminGroupObjectIDs }}"
clientAppID: "{{ clientAppID }}"
serverAppID: "{{ serverAppID }}"
serverAppSecret: "{{ serverAppSecret }}"
tenantID: "{{ tenantID }}"
autoUpgradeProfile:
upgradeChannel: "{{ upgradeChannel }}"
nodeOSUpgradeChannel: "{{ nodeOSUpgradeChannel }}"
upgradeSettings:
overrideSettings:
forceUpgrade: {{ forceUpgrade }}
until: "{{ until }}"
autoScalerProfile:
balance-similar-node-groups: "{{ balance-similar-node-groups }}"
daemonset-eviction-for-empty-nodes: {{ daemonset-eviction-for-empty-nodes }}
daemonset-eviction-for-occupied-nodes: {{ daemonset-eviction-for-occupied-nodes }}
ignore-daemonsets-utilization: {{ ignore-daemonsets-utilization }}
expander: "{{ expander }}"
max-empty-bulk-delete: "{{ max-empty-bulk-delete }}"
max-graceful-termination-sec: "{{ max-graceful-termination-sec }}"
max-node-provision-time: "{{ max-node-provision-time }}"
max-total-unready-percentage: "{{ max-total-unready-percentage }}"
new-pod-scale-up-delay: "{{ new-pod-scale-up-delay }}"
ok-total-unready-count: "{{ ok-total-unready-count }}"
scan-interval: "{{ scan-interval }}"
scale-down-delay-after-add: "{{ scale-down-delay-after-add }}"
scale-down-delay-after-delete: "{{ scale-down-delay-after-delete }}"
scale-down-delay-after-failure: "{{ scale-down-delay-after-failure }}"
scale-down-unneeded-time: "{{ scale-down-unneeded-time }}"
scale-down-unready-time: "{{ scale-down-unready-time }}"
scale-down-utilization-threshold: "{{ scale-down-utilization-threshold }}"
skip-nodes-with-local-storage: "{{ skip-nodes-with-local-storage }}"
skip-nodes-with-system-pods: "{{ skip-nodes-with-system-pods }}"
apiServerAccessProfile:
authorizedIPRanges:
- "{{ authorizedIPRanges }}"
enablePrivateCluster: {{ enablePrivateCluster }}
privateDNSZone: "{{ privateDNSZone }}"
enablePrivateClusterPublicFQDN: {{ enablePrivateClusterPublicFQDN }}
disableRunCommand: {{ disableRunCommand }}
enableVnetIntegration: {{ enableVnetIntegration }}
subnetId: "{{ subnetId }}"
diskEncryptionSetID: "{{ diskEncryptionSetID }}"
identityProfile: "{{ identityProfile }}"
privateLinkResources:
- id: "{{ id }}"
name: "{{ name }}"
type: "{{ type }}"
groupId: "{{ groupId }}"
requiredMembers: "{{ requiredMembers }}"
privateLinkServiceID: "{{ privateLinkServiceID }}"
disableLocalAccounts: {{ disableLocalAccounts }}
httpProxyConfig:
httpProxy: "{{ httpProxy }}"
httpsProxy: "{{ httpsProxy }}"
noProxy:
- "{{ noProxy }}"
effectiveNoProxy:
- "{{ effectiveNoProxy }}"
trustedCa: "{{ trustedCa }}"
enabled: {{ enabled }}
securityProfile:
defender:
logAnalyticsWorkspaceResourceId: "{{ logAnalyticsWorkspaceResourceId }}"
securityMonitoring:
enabled: {{ enabled }}
securityGating:
enabled: {{ enabled }}
identities:
- azureContainerRegistry: "{{ azureContainerRegistry }}"
identity:
resourceId: "{{ resourceId }}"
clientId: "{{ clientId }}"
objectId: "{{ objectId }}"
allowSecretAccess: {{ allowSecretAccess }}
azureKeyVaultKms:
enabled: {{ enabled }}
keyId: "{{ keyId }}"
keyVaultNetworkAccess: "{{ keyVaultNetworkAccess }}"
keyVaultResourceId: "{{ keyVaultResourceId }}"
kubernetesResourceObjectEncryptionProfile:
infrastructureEncryption: "{{ infrastructureEncryption }}"
workloadIdentity:
enabled: {{ enabled }}
imageCleaner:
enabled: {{ enabled }}
intervalHours: {{ intervalHours }}
imageIntegrity:
enabled: {{ enabled }}
nodeRestriction:
enabled: {{ enabled }}
customCATrustCertificates:
- "{{ customCATrustCertificates }}"
serviceAccountImagePullProfile:
enabled: {{ enabled }}
defaultManagedIdentityId: "{{ defaultManagedIdentityId }}"
storageProfile:
diskCSIDriver:
enabled: {{ enabled }}
fileCSIDriver:
enabled: {{ enabled }}
snapshotController:
enabled: {{ enabled }}
blobCSIDriver:
enabled: {{ enabled }}
ingressProfile:
webAppRouting:
enabled: {{ enabled }}
gatewayAPIImplementations:
appRoutingIstio:
mode: "{{ mode }}"
dnsZoneResourceIds:
- "{{ dnsZoneResourceIds }}"
nginx:
defaultIngressControllerType: "{{ defaultIngressControllerType }}"
identity:
resourceId: "{{ resourceId }}"
clientId: "{{ clientId }}"
objectId: "{{ objectId }}"
defaultDomain:
enabled: {{ enabled }}
domainName: "{{ domainName }}"
gatewayAPI:
installation: "{{ installation }}"
applicationLoadBalancer:
enabled: {{ enabled }}
identity:
resourceId: "{{ resourceId }}"
clientId: "{{ clientId }}"
objectId: "{{ objectId }}"
publicNetworkAccess: "{{ publicNetworkAccess }}"
workloadAutoScalerProfile:
keda:
enabled: {{ enabled }}
verticalPodAutoscaler:
enabled: {{ enabled }}
addonAutoscaling: "{{ addonAutoscaling }}"
azureMonitorProfile:
metrics:
enabled: {{ enabled }}
kubeStateMetrics:
metricLabelsAllowlist: "{{ metricLabelsAllowlist }}"
metricAnnotationsAllowList: "{{ metricAnnotationsAllowList }}"
controlPlane:
enabled: {{ enabled }}
containerInsights:
enabled: {{ enabled }}
logAnalyticsWorkspaceResourceId: "{{ logAnalyticsWorkspaceResourceId }}"
syslogPort: {{ syslogPort }}
disableCustomMetrics: {{ disableCustomMetrics }}
disablePrometheusMetricsScraping: {{ disablePrometheusMetricsScraping }}
containerNetworkLogs: "{{ containerNetworkLogs }}"
appMonitoring:
autoInstrumentation:
enabled: {{ enabled }}
openTelemetryMetrics:
enabled: {{ enabled }}
httpPort: {{ httpPort }}
grpcPort: {{ grpcPort }}
openTelemetryLogsAndTraces:
enabled: {{ enabled }}
httpPort: {{ httpPort }}
grpcPort: {{ grpcPort }}
serviceMeshProfile:
mode: "{{ mode }}"
istio:
components:
ingressGateways:
- mode: "{{ mode }}"
enabled: {{ enabled }}
egressGateways:
- enabled: {{ enabled }}
name: "{{ name }}"
namespace: "{{ namespace }}"
gatewayConfigurationName: "{{ gatewayConfigurationName }}"
proxyRedirectionMechanism: "{{ proxyRedirectionMechanism }}"
certificateAuthority:
plugin:
keyVaultId: "{{ keyVaultId }}"
certObjectName: "{{ certObjectName }}"
keyObjectName: "{{ keyObjectName }}"
rootCertObjectName: "{{ rootCertObjectName }}"
certChainObjectName: "{{ certChainObjectName }}"
revisions:
- "{{ revisions }}"
resourceUID: "{{ resourceUID }}"
metricsProfile:
costAnalysis:
enabled: {{ enabled }}
nodeProvisioningProfile:
mode: "{{ mode }}"
defaultNodePools: "{{ defaultNodePools }}"
bootstrapProfile:
artifactSource: "{{ artifactSource }}"
containerRegistryId: "{{ containerRegistryId }}"
aiToolchainOperatorProfile:
enabled: {{ enabled }}
schedulerProfile:
schedulerInstanceProfiles:
upstream:
schedulerConfigMode: "{{ schedulerConfigMode }}"
hostedSystemProfile:
enabled: {{ enabled }}
systemNodeSubnetID: "{{ systemNodeSubnetID }}"
nodeSubnetID: "{{ nodeSubnetID }}"
healthMonitorProfile:
enableContinuousControlPlaneAndAddonMonitor: {{ enableContinuousControlPlaneAndAddonMonitor }}
enableOnDemandMonitor: {{ enableOnDemandMonitor }}
controlPlaneScalingProfile:
scalingSize: "{{ scalingSize }}"
nodeDisruptionProfile:
nodeDisruptionPolicy: "{{ nodeDisruptionPolicy }}"
status:
provisioningError:
code: "{{ code }}"
message: "{{ message }}"
target: "{{ target }}"
details:
- code: "{{ code }}"
message: "{{ message }}"
target: "{{ target }}"
details: "{{ details }}"
additionalInfo: "{{ additionalInfo }}"
additionalInfo:
- type: "{{ type }}"
info: "{{ info }}"
- name: sku
description: |
The managed cluster SKU.
value:
name: "{{ name }}"
tier: "{{ tier }}"
- name: extendedLocation
description: |
The extended location of the Virtual Machine.
value:
name: "{{ name }}"
type: "{{ type }}"
- name: identity
description: |
The identity of the managed cluster, if configured.
value:
principalId: "{{ principalId }}"
tenantId: "{{ tenantId }}"
type: "{{ type }}"
delegatedResources: "{{ delegatedResources }}"
userAssignedIdentities: "{{ userAssignedIdentities }}"
- name: kind
value: "{{ kind }}"
description: |
This is primarily used to expose different UI experiences in the portal for different kinds.
UPDATE examples
- update_tags
Updates tags on a managed cluster.
UPDATE azure.container_service.managed_clusters
SET
tags = '{{ tags }}'
WHERE
resource_group_name = '{{ resource_group_name }}' --required
AND resource_name = '{{ resource_name }}' --required
AND subscription_id = '{{ subscription_id }}' --required
RETURNING
id,
name,
eTag,
extendedLocation,
identity,
kind,
location,
properties,
sku,
systemData,
tags,
type;
REPLACE examples
- create_or_update
Creates or updates a managed cluster.
REPLACE azure.container_service.managed_clusters
SET
tags = '{{ tags }}',
location = '{{ location }}',
properties = '{{ properties }}',
sku = '{{ sku }}',
extendedLocation = '{{ extendedLocation }}',
identity = '{{ identity }}',
kind = '{{ kind }}'
WHERE
resource_group_name = '{{ resource_group_name }}' --required
AND resource_name = '{{ resource_name }}' --required
AND subscription_id = '{{ subscription_id }}' --required
AND location = '{{ location }}' --required
RETURNING
id,
name,
eTag,
extendedLocation,
identity,
kind,
location,
properties,
sku,
systemData,
tags,
type;
DELETE examples
- delete
Deletes a managed cluster.
DELETE FROM azure.container_service.managed_clusters
WHERE resource_group_name = '{{ resource_group_name }}' --required
AND resource_name = '{{ resource_name }}' --required
AND subscription_id = '{{ subscription_id }}' --required
AND ignore-pod-disruption-budget = '{{ ignore-pod-disruption-budget }}'
;
Lifecycle Methods
- list_cluster_admin_credentials
- list_cluster_user_credentials
- list_cluster_monitoring_user_credentials
- list_outbound_network_dependencies_endpoints
- list_safeguards_versions
- list_mesh_revision_profiles
- list_mesh_upgrade_profiles
- list_kubernetes_versions
- get_upgrade_profile
- get_safeguards_versions
- reset_service_principal_profile
- reset_aad_profile
- rotate_cluster_certificates
- abort_latest_operation
- rotate_service_account_signing_keys
- stop
- start
- run_command
- rebalance_load_balancers
Lists the admin credentials of a managed cluster.
EXEC azure.container_service.managed_clusters.list_cluster_admin_credentials
@resource_group_name='{{ resource_group_name }}' --required,
@resource_name='{{ resource_name }}' --required,
@subscription_id='{{ subscription_id }}' --required,
@server-fqdn='{{ server-fqdn }}'
;
Lists the user credentials of a managed cluster.
EXEC azure.container_service.managed_clusters.list_cluster_user_credentials
@resource_group_name='{{ resource_group_name }}' --required,
@resource_name='{{ resource_name }}' --required,
@subscription_id='{{ subscription_id }}' --required,
@server-fqdn='{{ server-fqdn }}',
@format='{{ format }}'
;
Lists the cluster monitoring user credentials of a managed cluster.
EXEC azure.container_service.managed_clusters.list_cluster_monitoring_user_credentials
@resource_group_name='{{ resource_group_name }}' --required,
@resource_name='{{ resource_name }}' --required,
@subscription_id='{{ subscription_id }}' --required,
@server-fqdn='{{ server-fqdn }}'
;
Gets a list of egress endpoints (network endpoints of all outbound dependencies) in the specified managed cluster. Gets a list of egress endpoints (network endpoints of all outbound dependencies) in the specified managed cluster. The operation returns properties of each egress endpoint.
EXEC azure.container_service.managed_clusters.list_outbound_network_dependencies_endpoints
@resource_group_name='{{ resource_group_name }}' --required,
@resource_name='{{ resource_name }}' --required,
@subscription_id='{{ subscription_id }}' --required
;
Gets a list of supported Safeguards versions in the specified subscription and location. Contains list of Safeguards version along with its support info and whether it is a default version.
EXEC azure.container_service.managed_clusters.list_safeguards_versions
@location='{{ location }}' --required,
@subscription_id='{{ subscription_id }}' --required
;
Lists mesh revision profiles for all meshes in the specified location. Contains extra metadata on each revision, including supported revisions, cluster compatibility and available upgrades.
EXEC azure.container_service.managed_clusters.list_mesh_revision_profiles
@location='{{ location }}' --required,
@subscription_id='{{ subscription_id }}' --required
;
Lists available upgrades for all service meshes in a specific cluster.
EXEC azure.container_service.managed_clusters.list_mesh_upgrade_profiles
@resource_group_name='{{ resource_group_name }}' --required,
@resource_name='{{ resource_name }}' --required,
@subscription_id='{{ subscription_id }}' --required
;
Gets a list of supported Kubernetes versions in the specified subscription. Contains extra metadata on the version, including supported patch versions, capabilities, available upgrades, and details on preview status of the version.
EXEC azure.container_service.managed_clusters.list_kubernetes_versions
@location='{{ location }}' --required,
@subscription_id='{{ subscription_id }}' --required
;
Gets the upgrade profile of a managed cluster.
EXEC azure.container_service.managed_clusters.get_upgrade_profile
@resource_group_name='{{ resource_group_name }}' --required,
@resource_name='{{ resource_name }}' --required,
@subscription_id='{{ subscription_id }}' --required
;
Gets supported Safeguards version in the specified subscription and location. Contains Safeguards version along with its support info and whether it is a default version.
EXEC azure.container_service.managed_clusters.get_safeguards_versions
@location='{{ location }}' --required,
@version='{{ version }}' --required,
@subscription_id='{{ subscription_id }}' --required
;
Reset the Service Principal Profile of a managed cluster. This action cannot be performed on a cluster that is not using a service principal.
EXEC azure.container_service.managed_clusters.reset_service_principal_profile
@resource_group_name='{{ resource_group_name }}' --required,
@resource_name='{{ resource_name }}' --required,
@subscription_id='{{ subscription_id }}' --required
@@json=
'{
"clientId": "{{ clientId }}",
"secret": "{{ secret }}"
}'
;
Reset the AAD Profile of a managed cluster. WARNING: This API will be deprecated. Please see AKS-managed Azure Active Directory integration _ to update your cluster with AKS-managed Azure AD.
EXEC azure.container_service.managed_clusters.reset_aad_profile
@resource_group_name='{{ resource_group_name }}' --required,
@resource_name='{{ resource_name }}' --required,
@subscription_id='{{ subscription_id }}' --required
@@json=
'{
"managed": {{ managed }},
"enableAzureRBAC": {{ enableAzureRBAC }},
"adminGroupObjectIDs": "{{ adminGroupObjectIDs }}",
"clientAppID": "{{ clientAppID }}",
"serverAppID": "{{ serverAppID }}",
"serverAppSecret": "{{ serverAppSecret }}",
"tenantID": "{{ tenantID }}"
}'
;
Rotates the certificates of a managed cluster. See Certificate rotation _ for more details about rotating managed cluster certificates.
EXEC azure.container_service.managed_clusters.rotate_cluster_certificates
@resource_group_name='{{ resource_group_name }}' --required,
@resource_name='{{ resource_name }}' --required,
@subscription_id='{{ subscription_id }}' --required
;
Aborts last operation running on managed cluster. Aborts the currently running operation on the managed cluster. The Managed Cluster will be moved to a Canceling state and eventually to a Canceled state when cancellation finishes. If the operation completes before cancellation can take place, a 409 error code is returned.
EXEC azure.container_service.managed_clusters.abort_latest_operation
@resource_group_name='{{ resource_group_name }}' --required,
@resource_name='{{ resource_name }}' --required,
@subscription_id='{{ subscription_id }}' --required
;
Rotates the service account signing keys of a managed cluster.
EXEC azure.container_service.managed_clusters.rotate_service_account_signing_keys
@resource_group_name='{{ resource_group_name }}' --required,
@resource_name='{{ resource_name }}' --required,
@subscription_id='{{ subscription_id }}' --required
;
Stops a Managed Cluster. This can only be performed on Azure Virtual Machine Scale set backed clusters. Stopping a cluster stops the control plane and agent nodes entirely, while maintaining all object and cluster state. A cluster does not accrue charges while it is stopped. See stopping a cluster _ for more details about stopping a cluster.
EXEC azure.container_service.managed_clusters.stop
@resource_group_name='{{ resource_group_name }}' --required,
@resource_name='{{ resource_name }}' --required,
@subscription_id='{{ subscription_id }}' --required
;
Starts a previously stopped Managed Cluster. See starting a cluster _ for more details about starting a cluster.
EXEC azure.container_service.managed_clusters.start
@resource_group_name='{{ resource_group_name }}' --required,
@resource_name='{{ resource_name }}' --required,
@subscription_id='{{ subscription_id }}' --required
;
Submits a command to run against the Managed Cluster. AKS will create a pod to run the command. This is primarily useful for private clusters. For more information see AKS Run Command _.
EXEC azure.container_service.managed_clusters.run_command
@resource_group_name='{{ resource_group_name }}' --required,
@resource_name='{{ resource_name }}' --required,
@subscription_id='{{ subscription_id }}' --required
@@json=
'{
"command": "{{ command }}",
"context": "{{ context }}",
"clusterToken": "{{ clusterToken }}"
}'
;
Rebalance nodes across specific load balancers.
EXEC azure.container_service.managed_clusters.rebalance_load_balancers
@resource_group_name='{{ resource_group_name }}' --required,
@resource_name='{{ resource_name }}' --required,
@subscription_id='{{ subscription_id }}' --required
@@json=
'{
"loadBalancerNames": "{{ loadBalancerNames }}"
}'
;