app.azure.com/v1api20240301

"2024-03-01"

AllowedAudiences: The configuration settings of the allowed list of audiences from which to validate the JWT token.

AllowedAudiences: The configuration settings of the allowed list of audiences from which to validate the JWT token.

Groups: The list of the allowed groups.

Identities: The list of the allowed identities.

Groups: The list of the allowed groups.

Identities: The list of the allowed identities.

Destination: Logs destination, can be ‘log-analytics’, ‘azure-monitor’ or ‘none’

LogAnalyticsConfiguration: Log Analytics configuration, must only be provided when destination is configured as ‘log-analytics’

Destination: Logs destination, can be ‘log-analytics’, ‘azure-monitor’ or ‘none’

LogAnalyticsConfiguration: Log Analytics configuration, must only be provided when destination is configured as ‘log-analytics’

AppId: The App ID of the app used for login.

AppSecretSettingName: The app setting name that contains the app secret.

AppId: The App ID of the app used for login.

AppSecretSettingName: The app setting name that contains the app secret.

Enabled: false if the Apple provider should not be enabled despite the set registration; otherwise, true.

Login: The configuration settings of the login flow.

Registration: The configuration settings of the Apple registration.

ClientId: The Client ID of the app used for login.

ClientSecretSettingName: The app setting name that contains the client secret.

ClientId: The Client ID of the app used for login.

ClientSecretSettingName: The app setting name that contains the client secret.

Enabled: false if the Apple provider should not be enabled despite the set registration; otherwise, true.

Login: The configuration settings of the login flow.

Registration: The configuration settings of the Apple registration.

ConfigMapExpressions: configures where to place operator written dynamic ConfigMaps (created with CEL expressions).

SecretExpressions: configures where to place operator written dynamic secrets (created with CEL expressions).

Conditions: The observed state of the resource

EncryptionSettings: The configuration settings of the secrets references of encryption key and signing key for ContainerApp Service Authentication/Authorization.

GlobalValidation: The configuration settings that determines the validation flow of users using Service Authentication/Authorization.

HttpSettings: The configuration settings of the HTTP requests for authentication and authorization requests made against ContainerApp Service Authentication/Authorization.

Id: Fully qualified resource ID for the resource. Ex - /​subscriptions/​{subscriptionId}/​resourceGroups/​{resourceGroupName}/​providers/​{resourceProviderNamespace}/​{resourceType}/​{resourceName}

IdentityProviders: The configuration settings of each of the identity providers used to configure ContainerApp Service Authentication/Authorization.

Login: The configuration settings of the login flow of users using ContainerApp Service Authentication/Authorization.

Name: The name of the resource

Platform: The configuration settings of the platform of ContainerApp Service Authentication/Authorization.

SystemData: Azure Resource Manager metadata containing createdBy and modifiedBy information.

Type: The type of the resource. E.g. “Microsoft.Compute/virtualMachines” or “Microsoft.Storage/storageAccounts”

AzureName: The name of the resource in Azure. This is often the same as the name of the resource in Kubernetes but it doesn’t have to be.

EncryptionSettings: The configuration settings of the secrets references of encryption key and signing key for ContainerApp Service Authentication/Authorization.

GlobalValidation: The configuration settings that determines the validation flow of users using Service Authentication/Authorization.

HttpSettings: The configuration settings of the HTTP requests for authentication and authorization requests made against ContainerApp Service Authentication/Authorization.

IdentityProviders: The configuration settings of each of the identity providers used to configure ContainerApp Service Authentication/Authorization.

Login: The configuration settings of the login flow of users using ContainerApp Service Authentication/Authorization.

OperatorSpec: The specification for configuring operator behavior. This field is interpreted by the operator and not passed directly to Azure

Owner: The owner of the resource. The owner controls where the resource goes when it is deployed. The owner also controls the resources lifecycle. When the owner is deleted the resource will also be deleted. Owner is expected to be a reference to a app.azure.com/ContainerApp resource

Platform: The configuration settings of the platform of ContainerApp Service Authentication/Authorization.

Enabled: true if the Authentication / Authorization feature is enabled for the current app; otherwise, false.

RuntimeVersion: The RuntimeVersion of the Authentication / Authorization feature in use for the current app. The setting in this value can control the behavior of certain features in the Authentication / Authorization module.

Enabled: true if the Authentication / Authorization feature is enabled for the current app; otherwise, false.

RuntimeVersion: The RuntimeVersion of the Authentication / Authorization feature in use for the current app. The setting in this value can control the behavior of certain features in the Authentication / Authorization module.

Enabled: false if the Azure Active Directory provider should not be enabled despite the set registration; otherwise, true.

IsAutoProvisioned: Gets a value indicating whether the Azure AD configuration was auto-provisioned using 1st party tooling. This is an internal flag primarily intended to support the Azure Management Portal. Users should not read or write to this property.

Login: The configuration settings of the Azure Active Directory login flow.

Registration: The configuration settings of the Azure Active Directory app registration.

Validation: The configuration settings of the Azure Active Directory token validation flow.

DisableWWWAuthenticate: true if the www-authenticate provider should be omitted from the request; otherwise, false.

LoginParameters: Login parameters to send to the OpenID Connect authorization endpoint when a user logs in. Each parameter must be in the form “key=value”.

DisableWWWAuthenticate: true if the www-authenticate provider should be omitted from the request; otherwise, false.

LoginParameters: Login parameters to send to the OpenID Connect authorization endpoint when a user logs in. Each parameter must be in the form “key=value”.

ClientId: The Client ID of this relying party application, known as the client_id. This setting is required for enabling OpenID Connection authentication with Azure Active Directory or other 3rd party OpenID Connect providers. More information on OpenID Connect: http://openid.net/specs/openid-connect-core-1_0.html

ClientSecretCertificateIssuer: An alternative to the client secret thumbprint, that is the issuer of a certificate used for signing purposes. This property acts as a replacement for the Client Secret Certificate Thumbprint. It is also optional.

ClientSecretCertificateSubjectAlternativeName: An alternative to the client secret thumbprint, that is the subject alternative name of a certificate used for signing purposes. This property acts as a replacement for the Client Secret Certificate Thumbprint. It is also optional.

ClientSecretCertificateThumbprint: An alternative to the client secret, that is the thumbprint of a certificate used for signing purposes. This property acts as a replacement for the Client Secret. It is also optional.

ClientSecretSettingName: The app setting name that contains the client secret of the relying party application.

OpenIdIssuer: The OpenID Connect Issuer URI that represents the entity which issues access tokens for this application. When using Azure Active Directory, this value is the URI of the directory tenant, e.g. https://login.microsoftonline.com/v2.0/{tenant-guid}/. This URI is a case-sensitive identifier for the token issuer. More information on OpenID Connect Discovery: http://openid.net/specs/openid-connect-discovery-1_0.html

ClientId: The Client ID of this relying party application, known as the client_id. This setting is required for enabling OpenID Connection authentication with Azure Active Directory or other 3rd party OpenID Connect providers. More information on OpenID Connect: http://openid.net/specs/openid-connect-core-1_0.html

ClientSecretCertificateIssuer: An alternative to the client secret thumbprint, that is the issuer of a certificate used for signing purposes. This property acts as a replacement for the Client Secret Certificate Thumbprint. It is also optional.

ClientSecretCertificateSubjectAlternativeName: An alternative to the client secret thumbprint, that is the subject alternative name of a certificate used for signing purposes. This property acts as a replacement for the Client Secret Certificate Thumbprint. It is also optional.

ClientSecretCertificateThumbprint: An alternative to the client secret, that is the thumbprint of a certificate used for signing purposes. This property acts as a replacement for the Client Secret. It is also optional.

ClientSecretSettingName: The app setting name that contains the client secret of the relying party application.

OpenIdIssuer: The OpenID Connect Issuer URI that represents the entity which issues access tokens for this application. When using Azure Active Directory, this value is the URI of the directory tenant, e.g. https://login.microsoftonline.com/v2.0/{tenant-guid}/. This URI is a case-sensitive identifier for the token issuer. More information on OpenID Connect Discovery: http://openid.net/specs/openid-connect-discovery-1_0.html

AllowedAudiences: The list of audiences that can make successful authentication/authorization requests.

DefaultAuthorizationPolicy: The configuration settings of the default authorization policy.

JwtClaimChecks: The configuration settings of the checks that should be made while validating the JWT Claims.

AllowedAudiences: The list of audiences that can make successful authentication/authorization requests.

DefaultAuthorizationPolicy: The configuration settings of the default authorization policy.

JwtClaimChecks: The configuration settings of the checks that should be made while validating the JWT Claims.

Enabled: false if the Azure Active Directory provider should not be enabled despite the set registration; otherwise, true.

IsAutoProvisioned: Gets a value indicating whether the Azure AD configuration was auto-provisioned using 1st party tooling. This is an internal flag primarily intended to support the Azure Management Portal. Users should not read or write to this property.

Login: The configuration settings of the Azure Active Directory login flow.

Registration: The configuration settings of the Azure Active Directory app registration.

Validation: The configuration settings of the Azure Active Directory token validation flow.

Enabled: false if the Azure Static Web Apps provider should not be enabled despite the set registration; otherwise, true.

Registration: The configuration settings of the Azure Static Web Apps registration.

ClientId: The Client ID of the app used for login.

ClientId: The Client ID of the app used for login.

Enabled: false if the Azure Static Web Apps provider should not be enabled despite the set registration; otherwise, true.

Registration: The configuration settings of the Azure Static Web Apps registration.

Args: Container start command arguments.

Command: Container start command.

Env: Container environment variables.

Image: Container image tag.

Name: Custom container name.

Resources: Container resource requirements.

VolumeMounts: Container volume mounts.

Args: Container start command arguments.

Command: Container start command.

Env: Container environment variables.

Image: Container image tag.

Name: Custom container name.

Resources: Container resource requirements.

VolumeMounts: Container volume mounts.

SasUrlSettingName: The name of the app secrets containing the SAS URL of the blob storage containing the tokens.

SasUrlSettingName: The name of the app secrets containing the SAS URL of the blob storage containing the tokens.

ClientId: The Client ID of the app used for login.

ClientSecretSettingName: The app setting name that contains the client secret.

ClientId: The Client ID of the app used for login.

ClientSecretSettingName: The app setting name that contains the client secret.

ActiveRevisionsMode: ActiveRevisionsMode controls how active revisions are handled for the Container app: Multiple: multiple revisions can be active.Single: Only one revision can be active at a time. Revision weights can not be used in this mode. If no value if provided, this is the default.

Dapr: Dapr configuration for the Container App.

Ingress: Ingress configurations.

MaxInactiveRevisions: Optional. Max inactive revisions a Container App can have.

Registries: Collection of private container registry credentials for containers used by the Container app

Secrets: Collection of secrets used by a Container app

Service: Container App to be a dev Container App Service

"Multiple"

"Single"

"Multiple"

"Single"

ActiveRevisionsMode: ActiveRevisionsMode controls how active revisions are handled for the Container app: Multiple: multiple revisions can be active.Single: Only one revision can be active at a time. Revision weights can not be used in this mode. If no value if provided, this is the default.

Dapr: Dapr configuration for the Container App.

Ingress: Ingress configurations.

MaxInactiveRevisions: Optional. Max inactive revisions a Container App can have.

Registries: Collection of private container registry credentials for containers used by the Container app

Secrets: Collection of secrets used by a Container app

Service: Container App to be a dev Container App Service

Args: Container start command arguments.

Command: Container start command.

Env: Container environment variables.

Image: Container image tag.

Name: Custom container name.

Probes: List of probes for the container.

Resources: Container resource requirements.

VolumeMounts: Container volume mounts.

EventStreamEndpoint: indicates where the EventStreamEndpoint config map should be placed. If omitted, no config map will be created.

Fqdn: indicates where the Fqdn config map should be placed. If omitted, no config map will be created.

ConfigMapExpressions: configures where to place operator written dynamic ConfigMaps (created with CEL expressions).

ConfigMaps: configures where to place operator written ConfigMaps.

SecretExpressions: configures where to place operator written dynamic secrets (created with CEL expressions).

FailureThreshold: Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1. Maximum value is 10.

HttpGet: HTTPGet specifies the http request to perform.

InitialDelaySeconds: Number of seconds after the container has started before liveness probes are initiated. Minimum value is 1. Maximum value is 60.

PeriodSeconds: How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1. Maximum value is 240.

SuccessThreshold: Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1. Maximum value is 10.

TcpSocket: TCPSocket specifies an action involving a TCP port. TCP hooks not yet supported.

TerminationGracePeriodSeconds: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod’s terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is an alpha field and requires enabling ProbeTerminationGracePeriod feature gate. Maximum value is 3600 seconds (1 hour)

TimeoutSeconds: Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. Maximum value is 240.

Type: The type of probe.

Host: Host name to connect to, defaults to the pod IP. You probably want to set “Host” in httpHeaders instead.

HttpHeaders: Custom headers to set in the request. HTTP allows repeated headers.

Path: Path to access on the HTTP server.

Port: Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.

Scheme: Scheme to use for connecting to the host. Defaults to HTTP.

Name: The header field name

Value: The header field value

Name: The header field name

Value: The header field value

Host: Host name to connect to, defaults to the pod IP. You probably want to set “Host” in httpHeaders instead.

HttpHeaders: Custom headers to set in the request. HTTP allows repeated headers.

Path: Path to access on the HTTP server.

Port: Name or number of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.

Scheme: Scheme to use for connecting to the host. Defaults to HTTP.

"HTTP"

"HTTPS"

"HTTP"

"HTTPS"

FailureThreshold: Minimum consecutive failures for the probe to be considered failed after having succeeded. Defaults to 3. Minimum value is 1. Maximum value is 10.

HttpGet: HTTPGet specifies the http request to perform.

InitialDelaySeconds: Number of seconds after the container has started before liveness probes are initiated. Minimum value is 1. Maximum value is 60.

PeriodSeconds: How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1. Maximum value is 240.

SuccessThreshold: Minimum consecutive successes for the probe to be considered successful after having failed. Defaults to 1. Must be 1 for liveness and startup. Minimum value is 1. Maximum value is 10.

TcpSocket: TCPSocket specifies an action involving a TCP port. TCP hooks not yet supported.

TerminationGracePeriodSeconds: Optional duration in seconds the pod needs to terminate gracefully upon probe failure. The grace period is the duration in seconds after the processes running in the pod are sent a termination signal and the time when the processes are forcibly halted with a kill signal. Set this value longer than the expected cleanup time for your process. If this value is nil, the pod’s terminationGracePeriodSeconds will be used. Otherwise, this value overrides the value provided by the pod spec. Value must be non-negative integer. The value zero indicates stop immediately via the kill signal (no opportunity to shut down). This is an alpha field and requires enabling ProbeTerminationGracePeriod feature gate. Maximum value is 3600 seconds (1 hour)

TimeoutSeconds: Number of seconds after which the probe times out. Defaults to 1 second. Minimum value is 1. Maximum value is 240.

Type: The type of probe.

Host: Optional: Host name to connect to, defaults to the pod IP.

Port: Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.

Host: Optional: Host name to connect to, defaults to the pod IP.

Port: Number or name of the port to access on the container. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME.

"Liveness"

"Readiness"

"Startup"

"Liveness"

"Readiness"

"Startup"

"Canceled"

"Deleting"

"Failed"

"InProgress"

"Succeeded"

Conditions: The observed state of the resource

Configuration: Non versioned Container App configuration properties.

CustomDomainVerificationId: Id used to verify domain name ownership

EnvironmentId: Resource ID of environment.

EventStreamEndpoint: The endpoint of the eventstream of the container app.

ExtendedLocation: The complex type of the extended location.

Id: Fully qualified resource ID for the resource. Ex - /​subscriptions/​{subscriptionId}/​resourceGroups/​{resourceGroupName}/​providers/​{resourceProviderNamespace}/​{resourceType}/​{resourceName}

Identity: managed identities for the Container App to interact with other Azure services without maintaining any secrets or credentials in code.

LatestReadyRevisionName: Name of the latest ready revision of the Container App.

LatestRevisionFqdn: Fully Qualified Domain Name of the latest revision of the Container App.

LatestRevisionName: Name of the latest revision of the Container App.

Location: The geo-location where the resource lives

ManagedBy: The fully qualified resource ID of the resource that manages this resource. Indicates if this resource is managed by another Azure resource. If this is present, complete mode deployment will not delete the resource if it is removed from the template since it is managed by another resource.

ManagedEnvironmentId: Deprecated. Resource ID of the Container App’s environment.

Name: The name of the resource

OutboundIpAddresses: Outbound IP Addresses for container app.

ProvisioningState: Provisioning state of the Container App.

SystemData: Azure Resource Manager metadata containing createdBy and modifiedBy information.

Tags: Resource tags.

Template: Container App versioned application definition.

Type: The type of the resource. E.g. “Microsoft.Compute/virtualMachines” or “Microsoft.Storage/storageAccounts”

WorkloadProfileName: Workload profile name to pin for container app execution.

AzureName: The name of the resource in Azure. This is often the same as the name of the resource in Kubernetes but it doesn’t have to be.

Configuration: Non versioned Container App configuration properties.

EnvironmentReference: Resource ID of environment.

ExtendedLocation: The complex type of the extended location.

Identity: managed identities for the Container App to interact with other Azure services without maintaining any secrets or credentials in code.

Location: The geo-location where the resource lives

ManagedByReference: The fully qualified resource ID of the resource that manages this resource. Indicates if this resource is managed by another Azure resource. If this is present, complete mode deployment will not delete the resource if it is removed from the template since it is managed by another resource.

ManagedEnvironmentReference: Deprecated. Resource ID of the Container App’s environment.

OperatorSpec: The specification for configuring operator behavior. This field is interpreted by the operator and not passed directly to Azure

Owner: The owner of the resource. The owner controls where the resource goes when it is deployed. The owner also controls the resources lifecycle. When the owner is deleted the resource will also be deleted. Owner is expected to be a reference to a resources.azure.com/ResourceGroup resource

Tags: Resource tags.

Template: Container App versioned application definition.

WorkloadProfileName: Workload profile name to pin for container app execution.

Cpu: Required CPU in cores, e.g. 0.5

Memory: Required memory, e.g. “250Mb”

Cpu: Required CPU in cores, e.g. 0.5

EphemeralStorage: Ephemeral Storage, e.g. “1Gi”

Memory: Required memory, e.g. “250Mb”

Args: Container start command arguments.

Command: Container start command.

Env: Container environment variables.

Image: Container image tag.

Name: Custom container name.

Probes: List of probes for the container.

Resources: Container resource requirements.

VolumeMounts: Container volume mounts.

Convention: The convention used when determining the session cookie’s expiration.

TimeToExpiration: The time after the request is made when the session cookie should expire.

"FixedTime"

"IdentityProviderDerived"

"FixedTime"

"IdentityProviderDerived"

Convention: The convention used when determining the session cookie’s expiration.

TimeToExpiration: The time after the request is made when the session cookie should expire.

AllowCredentials: Specifies whether the resource allows credentials

AllowedHeaders: Specifies the content for the access-control-allow-headers header

AllowedMethods: Specifies the content for the access-control-allow-methods header

AllowedOrigins: Specifies the content for the access-control-allow-origins header

ExposeHeaders: Specifies the content for the access-control-expose-headers header

MaxAge: Specifies the content for the access-control-max-age header

AllowCredentials: Specifies whether the resource allows credentials

AllowedHeaders: Specifies the content for the access-control-allow-headers header

AllowedMethods: Specifies the content for the access-control-allow-methods header

AllowedOrigins: Specifies the content for the access-control-allow-origins header

ExposeHeaders: Specifies the content for the access-control-expose-headers header

MaxAge: Specifies the content for the access-control-max-age header

BindingType: Custom Domain binding type.

CertificateReference: Resource Id of the Certificate to be bound to this hostname. Must exist in the Managed Environment.

Name: Hostname.

CertificatePassword: Certificate password

CertificateValue: PFX or PEM blob

DnsSuffix: Dns suffix for the environment domain

CustomDomainVerificationId: Id used to verify domain name ownership

DnsSuffix: Dns suffix for the environment domain

ExpirationDate: Certificate expiration date.

SubjectName: Subject name of the certificate.

Thumbprint: Certificate thumbprint.

"Disabled"

"SniEnabled"

"Disabled"

"SniEnabled"

BindingType: Custom Domain binding type.

CertificateId: Resource Id of the Certificate to be bound to this hostname. Must exist in the Managed Environment.

Name: Hostname.

Enabled: false if the custom Open ID provider provider should not be enabled; otherwise, true.

Login: The configuration settings of the login flow of the custom Open ID Connect provider.

Registration: The configuration settings of the app registration for the custom Open ID Connect provider.

Enabled: false if the custom Open ID provider provider should not be enabled; otherwise, true.

Login: The configuration settings of the login flow of the custom Open ID Connect provider.

Registration: The configuration settings of the app registration for the custom Open ID Connect provider.

Auth: Authentication secrets for the custom scale rule.

Metadata: Metadata properties to describe custom scale rule.

Type: Type of the custom scale rule eg: azure-servicebus, redis etc.

Auth: Authentication secrets for the custom scale rule.

Metadata: Metadata properties to describe custom scale rule.

Type: Type of the custom scale rule eg: azure-servicebus, redis etc.

AppId: Dapr application identifier

AppPort: Tells Dapr which port your application is listening on

AppProtocol: Tells Dapr which protocol your application is using. Valid options are http and grpc. Default is http

EnableApiLogging: Enables API logging for the Dapr sidecar

Enabled: Boolean indicating if the Dapr side car is enabled

HttpMaxRequestSize: Increasing max size of request body http and grpc servers parameter in MB to handle uploading of big files. Default is 4 MB.

HttpReadBufferSize: Dapr max size of http header read buffer in KB to handle when sending multi-KB headers. Default is 65KB.

LogLevel: Sets the log level for the Dapr sidecar. Allowed values are debug, info, warn, error. Default is info.

Version: The version of Dapr

"grpc"

"http"

"grpc"

"http"

"debug"

"error"

"info"

"warn"

"debug"

"error"

"info"

"warn"

AppId: Dapr application identifier

AppPort: Tells Dapr which port your application is listening on

AppProtocol: Tells Dapr which protocol your application is using. Valid options are http and grpc. Default is http

EnableApiLogging: Enables API logging for the Dapr sidecar

Enabled: Boolean indicating if the Dapr side car is enabled

HttpMaxRequestSize: Increasing max size of request body http and grpc servers parameter in MB to handle uploading of big files. Default is 4 MB.

HttpReadBufferSize: Dapr max size of http header read buffer in KB to handle when sending multi-KB headers. Default is 65KB.

LogLevel: Sets the log level for the Dapr sidecar. Allowed values are debug, info, warn, error. Default is info.

AllowedApplications: The configuration settings of the Azure Active Directory allowed applications.

AllowedPrincipals: The configuration settings of the Azure Active Directory allowed principals.

AllowedApplications: The configuration settings of the Azure Active Directory allowed applications.

AllowedPrincipals: The configuration settings of the Azure Active Directory allowed principals.

ContainerAppAuthEncryptionSecretName: The secret name which is referenced for EncryptionKey.

ContainerAppAuthSigningSecretName: The secret name which is referenced for SigningKey.

ContainerAppAuthEncryptionSecretName: The secret name which is referenced for EncryptionKey.

ContainerAppAuthSigningSecretName: The secret name which is referenced for SigningKey.

Name: Environment variable name.

SecretRef: Name of the Container App secret from which to pull the environment variable value.

Value: Non-secret environment variable value.

Name: Environment variable name.

SecretRef: Name of the Container App secret from which to pull the environment variable value.

Value: Non-secret environment variable value.

Name: The name of the extended location.

Type: The type of the extended location.

"CustomLocation"

"CustomLocation"

Name: The name of the extended location.

Type: The type of the extended location.

Enabled: false if the Facebook provider should not be enabled despite the set registration; otherwise, true.

GraphApiVersion: The version of the Facebook api to be used while logging in.

Login: The configuration settings of the login flow.

Registration: The configuration settings of the app registration for the Facebook provider.

Enabled: false if the Facebook provider should not be enabled despite the set registration; otherwise, true.

GraphApiVersion: The version of the Facebook api to be used while logging in.

Login: The configuration settings of the login flow.

Registration: The configuration settings of the app registration for the Facebook provider.

Convention: The convention used to determine the url of the request made.

CustomHostHeaderName: The name of the header containing the host of the request.

CustomProtoHeaderName: The name of the header containing the scheme of the request.

"Custom"

"NoProxy"

"Standard"

"Custom"

"NoProxy"

"Standard"

Convention: The convention used to determine the url of the request made.

CustomHostHeaderName: The name of the header containing the host of the request.

CustomProtoHeaderName: The name of the header containing the scheme of the request.

Enabled: false if the GitHub provider should not be enabled despite the set registration; otherwise, true.

Login: The configuration settings of the login flow.

Registration: The configuration settings of the app registration for the GitHub provider.

Enabled: false if the GitHub provider should not be enabled despite the set registration; otherwise, true.

Login: The configuration settings of the login flow.

Registration: The configuration settings of the app registration for the GitHub provider.

ExcludedPaths: The paths for which unauthenticated flow would not be redirected to the login page.

RedirectToProvider: The default authentication provider to use when multiple providers are configured. This setting is only needed if multiple providers are configured and the unauthenticated client action is set to “RedirectToLoginPage”.

UnauthenticatedClientAction: The action to take when an unauthenticated client attempts to access the app.

ExcludedPaths: The paths for which unauthenticated flow would not be redirected to the login page.

RedirectToProvider: The default authentication provider to use when multiple providers are configured. This setting is only needed if multiple providers are configured and the unauthenticated client action is set to “RedirectToLoginPage”.

UnauthenticatedClientAction: The action to take when an unauthenticated client attempts to access the app.

"AllowAnonymous"

"RedirectToLoginPage"

"Return401"

"Return403"

"AllowAnonymous"

"RedirectToLoginPage"

"Return401"

"Return403"

Enabled: false if the Google provider should not be enabled despite the set registration; otherwise, true.

Login: The configuration settings of the login flow.

Registration: The configuration settings of the app registration for the Google provider.

Validation: The configuration settings of the Azure Active Directory token validation flow.

Enabled: false if the Google provider should not be enabled despite the set registration; otherwise, true.

Login: The configuration settings of the login flow.

Registration: The configuration settings of the app registration for the Google provider.

Validation: The configuration settings of the Azure Active Directory token validation flow.

Auth: Authentication secrets for the custom scale rule.

Metadata: Metadata properties to describe http scale rule.

Auth: Authentication secrets for the custom scale rule.

Metadata: Metadata properties to describe http scale rule.

ForwardProxy: The configuration settings of a forward proxy used to make the requests.

RequireHttps: false if the authentication/authorization responses not having the HTTPS scheme are permissible; otherwise, true.

Routes: The configuration settings of the paths HTTP requests.

ApiPrefix: The prefix that should precede all the authentication/authorization paths.

ApiPrefix: The prefix that should precede all the authentication/authorization paths.

ForwardProxy: The configuration settings of a forward proxy used to make the requests.

RequireHttps: false if the authentication/authorization responses not having the HTTPS scheme are permissible; otherwise, true.

Routes: The configuration settings of the paths HTTP requests.

Apple: The configuration settings of the Apple provider.

AzureActiveDirectory: The configuration settings of the Azure Active directory provider.

AzureStaticWebApps: The configuration settings of the Azure Static Web Apps provider.

CustomOpenIdConnectProviders: The map of the name of the alias of each custom Open ID Connect provider to the configuration settings of the custom Open ID Connect provider.

Facebook: The configuration settings of the Facebook provider.

GitHub: The configuration settings of the GitHub provider.

Google: The configuration settings of the Google provider.

Twitter: The configuration settings of the Twitter provider.

Apple: The configuration settings of the Apple provider.

AzureActiveDirectory: The configuration settings of the Azure Active directory provider.

AzureStaticWebApps: The configuration settings of the Azure Static Web Apps provider.

CustomOpenIdConnectProviders: The map of the name of the alias of each custom Open ID Connect provider to the configuration settings of the custom Open ID Connect provider.

Facebook: The configuration settings of the Facebook provider.

GitHub: The configuration settings of the GitHub provider.

Google: The configuration settings of the Google provider.

Twitter: The configuration settings of the Twitter provider.

AdditionalPortMappings: Settings to expose additional ports on container app

AllowInsecure: Bool indicating if HTTP connections to is allowed. If set to false HTTP connections are automatically redirected to HTTPS connections

ClientCertificateMode: Client certificate mode for mTLS authentication. Ignore indicates server drops client certificate on forwarding. Accept indicates server forwards client certificate but does not require a client certificate. Require indicates server requires a client certificate.

CorsPolicy: CORS policy for container app

CustomDomains: custom domain bindings for Container Apps’ hostnames.

ExposedPort: Exposed Port in containers for TCP traffic from ingress

External: Bool indicating if app exposes an external http endpoint

IpSecurityRestrictions: Rules to restrict incoming IP address.

StickySessions: Sticky Sessions for Single Revision Mode

TargetPort: Target Port in containers for traffic from ingress

Traffic: Traffic weights for app’s revisions

Transport: Ingress transport protocol

ExposedPort: Specifies the exposed port for the target port. If not specified, it defaults to target port

External: Specifies whether the app port is accessible outside of the environment

TargetPort: Specifies the port user’s container listens on

ExposedPort: Specifies the exposed port for the target port. If not specified, it defaults to target port

External: Specifies whether the app port is accessible outside of the environment

TargetPort: Specifies the port user’s container listens on

"accept"

"ignore"

"require"

"accept"

"ignore"

"require"

AdditionalPortMappings: Settings to expose additional ports on container app

AllowInsecure: Bool indicating if HTTP connections to is allowed. If set to false HTTP connections are automatically redirected to HTTPS connections

ClientCertificateMode: Client certificate mode for mTLS authentication. Ignore indicates server drops client certificate on forwarding. Accept indicates server forwards client certificate but does not require a client certificate. Require indicates server requires a client certificate.

CorsPolicy: CORS policy for container app

CustomDomains: custom domain bindings for Container Apps’ hostnames.

ExposedPort: Exposed Port in containers for TCP traffic from ingress

External: Bool indicating if app exposes an external http endpoint

Fqdn: Hostname.

IpSecurityRestrictions: Rules to restrict incoming IP address.

StickySessions: Sticky Sessions for Single Revision Mode

TargetPort: Target Port in containers for traffic from ingress

Traffic: Traffic weights for app’s revisions

Transport: Ingress transport protocol

Affinity: Sticky Session Affinity

"none"

"sticky"

"none"

"sticky"

Affinity: Sticky Session Affinity

"auto"

"http"

"http2"

"tcp"

"auto"

"http"

"http2"

"tcp"

Action: Allow or Deny rules to determine for incoming IP. Note: Rules can only consist of ALL Allow or ALL Deny

Description: Describe the IP restriction rule that is being sent to the container-app. This is an optional field.

IpAddressRange: CIDR notation to match incoming IP address

Name: Name for the IP restriction rule.

"Allow"

"Deny"

"Allow"

"Deny"

Action: Allow or Deny rules to determine for incoming IP. Note: Rules can only consist of ALL Allow or ALL Deny

Description: Describe the IP restriction rule that is being sent to the container-app. This is an optional field.

IpAddressRange: CIDR notation to match incoming IP address

Name: Name for the IP restriction rule.

EventTriggerConfig: Trigger configuration of an event driven job.

ManualTriggerConfig: Manual trigger configuration for a single execution job. Properties replicaCompletionCount and parallelism would be set to 1 by default

Registries: Collection of private container registry credentials used by a Container apps job

ReplicaRetryLimit: Maximum number of retries before failing the job.

ReplicaTimeout: Maximum number of seconds a replica is allowed to run.

ScheduleTriggerConfig: Cron formatted repeating trigger schedule (“* * * * *”) for cronjobs. Properties completions and parallelism would be set to 1 by default

Secrets: Collection of secrets used by a Container Apps Job

TriggerType: Trigger type of the job

Scale: Scaling configurations for event driven jobs.

Scale: Scaling configurations for event driven jobs.

EventTriggerConfig: Trigger configuration of an event driven job.

ManualTriggerConfig: Manual trigger configuration for a single execution job. Properties replicaCompletionCount and parallelism would be set to 1 by default

Registries: Collection of private container registry credentials used by a Container apps job

ReplicaRetryLimit: Maximum number of retries before failing the job.

ReplicaTimeout: Maximum number of seconds a replica is allowed to run.

ScheduleTriggerConfig: Cron formatted repeating trigger schedule (“* * * * *”) for cronjobs. Properties completions and parallelism would be set to 1 by default

Secrets: Collection of secrets used by a Container Apps Job

TriggerType: Trigger type of the job

CronExpression: Cron formatted repeating schedule (“* * * * *”) of a Cron Job.

CronExpression: Cron formatted repeating schedule (“* * * * *”) of a Cron Job.

"Event"

"Manual"

"Schedule"

"Event"

"Manual"

"Schedule"

ConfigMapExpressions: configures where to place operator written dynamic ConfigMaps (created with CEL expressions).

SecretExpressions: configures where to place operator written dynamic secrets (created with CEL expressions).

MaxExecutions: Maximum number of job executions that are created for a trigger, default 100.

MinExecutions: Minimum number of job executions that are created for a trigger, default 0

Rules: Scaling rules.

Auth: Authentication secrets for the scale rule.

Metadata: Metadata properties to describe the scale rule.

Name: Scale Rule Name

Type: Type of the scale rule eg: azure-servicebus, redis etc.

Auth: Authentication secrets for the scale rule.

Metadata: Metadata properties to describe the scale rule.

Name: Scale Rule Name

Type: Type of the scale rule eg: azure-servicebus, redis etc.

MaxExecutions: Maximum number of job executions that are created for a trigger, default 100.

MinExecutions: Minimum number of job executions that are created for a trigger, default 0

Rules: Scaling rules.

Containers: List of container definitions for the Container App.

InitContainers: List of specialized containers that run before app containers.

Volumes: List of volume definitions for the Container App.

Containers: List of container definitions for the Container App.

InitContainers: List of specialized containers that run before app containers.

Volumes: List of volume definitions for the Container App.

"Canceled"

"Deleting"

"Failed"

"InProgress"

"Succeeded"

Conditions: The observed state of the resource

Configuration: Container Apps Job configuration properties.

EnvironmentId: Resource ID of environment.

EventStreamEndpoint: The endpoint of the eventstream of the container apps job.

Id: Fully qualified resource ID for the resource. Ex - /​subscriptions/​{subscriptionId}/​resourceGroups/​{resourceGroupName}/​providers/​{resourceProviderNamespace}/​{resourceType}/​{resourceName}

Identity: Managed identities needed by a container app job to interact with other Azure services to not maintain any secrets or credentials in code.

Location: The geo-location where the resource lives

Name: The name of the resource

OutboundIpAddresses: Outbound IP Addresses of a container apps job.

ProvisioningState: Provisioning state of the Container Apps Job.

SystemData: Azure Resource Manager metadata containing createdBy and modifiedBy information.

Tags: Resource tags.

Template: Container Apps job definition.

Type: The type of the resource. E.g. “Microsoft.Compute/virtualMachines” or “Microsoft.Storage/storageAccounts”

WorkloadProfileName: Workload profile name to pin for container apps job execution.

AzureName: The name of the resource in Azure. This is often the same as the name of the resource in Kubernetes but it doesn’t have to be.

Configuration: Container Apps Job configuration properties.

EnvironmentReference: Resource ID of environment.

Identity: Managed identities needed by a container app job to interact with other Azure services to not maintain any secrets or credentials in code.

Location: The geo-location where the resource lives

OperatorSpec: The specification for configuring operator behavior. This field is interpreted by the operator and not passed directly to Azure

Owner: The owner of the resource. The owner controls where the resource goes when it is deployed. The owner also controls the resources lifecycle. When the owner is deleted the resource will also be deleted. Owner is expected to be a reference to a resources.azure.com/ResourceGroup resource

Tags: Resource tags.

Template: Container Apps job definition.

WorkloadProfileName: Workload profile name to pin for container apps job execution.

AllowedClientApplications: The list of the allowed client applications.

AllowedGroups: The list of the allowed groups.

AllowedClientApplications: The list of the allowed client applications.

AllowedGroups: The list of the allowed groups.

Version: The version of Keda

CustomerId: Log analytics customer id

SharedKey: Log analytics customer key

CustomerId: Log analytics customer id

AllowedExternalRedirectUrls: External URLs that can be redirected to as part of logging in or logging out of the app. Note that the query string part of the URL is ignored. This is an advanced setting typically only needed by Windows Store application backends. Note that URLs within the current domain are always implicitly allowed.

CookieExpiration: The configuration settings of the session cookie’s expiration.

Nonce: The configuration settings of the nonce used in the login flow.

PreserveUrlFragmentsForLogins: true if the fragments from the request are preserved after the login request is made; otherwise, false.

Routes: The routes that specify the endpoints used for login and logout requests.

TokenStore: The configuration settings of the token store.

LogoutEndpoint: The endpoint at which a logout request should be made.

LogoutEndpoint: The endpoint at which a logout request should be made.

Scopes: A list of the scopes that should be requested while authenticating.

Scopes: A list of the scopes that should be requested while authenticating.

AllowedExternalRedirectUrls: External URLs that can be redirected to as part of logging in or logging out of the app. Note that the query string part of the URL is ignored. This is an advanced setting typically only needed by Windows Store application backends. Note that URLs within the current domain are always implicitly allowed.

CookieExpiration: The configuration settings of the session cookie’s expiration.

Nonce: The configuration settings of the nonce used in the login flow.

PreserveUrlFragmentsForLogins: true if the fragments from the request are preserved after the login request is made; otherwise, false.

Routes: The routes that specify the endpoints used for login and logout requests.

TokenStore: The configuration settings of the token store.

ConfigMapExpressions: configures where to place operator written dynamic ConfigMaps (created with CEL expressions).

SecretExpressions: configures where to place operator written dynamic secrets (created with CEL expressions).

Mtls: Mutual TLS authentication settings for the Managed Environment

Mtls: Mutual TLS authentication settings for the Managed Environment

Enabled: Boolean indicating whether the peer traffic encryption is enabled

Enabled: Boolean indicating whether the peer traffic encryption is enabled

Encryption: Peer traffic encryption settings for the Managed Environment

Encryption: Peer traffic encryption settings for the Managed Environment

"Canceled"

"Failed"

"InfrastructureSetupComplete"

"InfrastructureSetupInProgress"

"InitializationInProgress"

"ScheduledForDelete"

"Succeeded"

"UpgradeFailed"

"UpgradeRequested"

"Waiting"

AppLogsConfiguration: Cluster configuration which enables the log daemon to export app logs to configured destination.

Conditions: The observed state of the resource

CustomDomainConfiguration: Custom domain configuration for the environment

DaprConfiguration: The configuration of Dapr component.

DefaultDomain: Default Domain Name for the cluster

DeploymentErrors: Any errors that occurred during deployment or deployment validation

EventStreamEndpoint: The endpoint of the eventstream of the Environment.

Id: Fully qualified resource ID for the resource. Ex - /​subscriptions/​{subscriptionId}/​resourceGroups/​{resourceGroupName}/​providers/​{resourceProviderNamespace}/​{resourceType}/​{resourceName}

InfrastructureResourceGroup: Name of the platform-managed resource group created for the Managed Environment to host infrastructure resources. If a subnet ID is provided, this resource group will be created in the same subscription as the subnet.

KedaConfiguration: The configuration of Keda component.

Kind: Kind of the Environment.

Location: The geo-location where the resource lives

Name: The name of the resource

PeerAuthentication: Peer authentication settings for the Managed Environment

PeerTrafficConfiguration: Peer traffic settings for the Managed Environment

ProvisioningState: Provisioning state of the Environment.

StaticIp: Static IP of the Environment

SystemData: Azure Resource Manager metadata containing createdBy and modifiedBy information.

Tags: Resource tags.

Type: The type of the resource. E.g. “Microsoft.Compute/virtualMachines” or “Microsoft.Storage/storageAccounts”

VnetConfiguration: Vnet configuration for the environment

WorkloadProfiles: Workload profiles configured for the Managed Environment.

ZoneRedundant: Whether or not this Managed Environment is zone-redundant.

AppLogsConfiguration: Cluster configuration which enables the log daemon to export app logs to configured destination.

AzureName: The name of the resource in Azure. This is often the same as the name of the resource in Kubernetes but it doesn’t have to be.

CustomDomainConfiguration: Custom domain configuration for the environment

DaprAIConnectionString: Application Insights connection string used by Dapr to export Service to Service communication telemetry

DaprAIInstrumentationKey: Azure Monitor instrumentation key used by Dapr to export Service to Service communication telemetry

InfrastructureResourceGroup: Name of the platform-managed resource group created for the Managed Environment to host infrastructure resources. If a subnet ID is provided, this resource group will be created in the same subscription as the subnet.

Kind: Kind of the Environment.

Location: The geo-location where the resource lives

OperatorSpec: The specification for configuring operator behavior. This field is interpreted by the operator and not passed directly to Azure

Owner: The owner of the resource. The owner controls where the resource goes when it is deployed. The owner also controls the resources lifecycle. When the owner is deleted the resource will also be deleted. Owner is expected to be a reference to a resources.azure.com/ResourceGroup resource

PeerAuthentication: Peer authentication settings for the Managed Environment

PeerTrafficConfiguration: Peer traffic settings for the Managed Environment

Tags: Resource tags.

VnetConfiguration: Vnet configuration for the environment

WorkloadProfiles: Workload profiles configured for the Managed Environment.

ZoneRedundant: Whether or not this Managed Environment is zone-redundant.

Type: Type of managed service identity (where both SystemAssigned and UserAssigned types are allowed).

"None"

"SystemAssigned"

"SystemAssigned,UserAssigned"

"UserAssigned"

"None"

"SystemAssigned"

"SystemAssigned,UserAssigned"

"UserAssigned"

PrincipalId: The service principal ID of the system assigned identity. This property will only be provided for a system assigned identity.

TenantId: The tenant ID of the system assigned identity. This property will only be provided for a system assigned identity.

Type: Type of managed service identity (where both SystemAssigned and UserAssigned types are allowed).

Enabled: Boolean indicating whether the mutual TLS authentication is enabled

Enabled: Boolean indicating whether the mutual TLS authentication is enabled

NonceExpirationInterval: The time after the request is made when the nonce should expire.

ValidateNonce: false if the nonce should not be validated while completing the login flow; otherwise, true.

NonceExpirationInterval: The time after the request is made when the nonce should expire.

ValidateNonce: false if the nonce should not be validated while completing the login flow; otherwise, true.

ClientSecretSettingName: The app setting that contains the client secret for the custom Open ID Connect provider.

Method: The method that should be used to authenticate the user.

"ClientSecretPost"

"ClientSecretPost"

ClientSecretSettingName: The app setting that contains the client secret for the custom Open ID Connect provider.

Method: The method that should be used to authenticate the user.

AuthorizationEndpoint: The endpoint to be used to make an authorization request.

CertificationUri: The endpoint that provides the keys necessary to validate the token.

Issuer: The endpoint that issues the token.

TokenEndpoint: The endpoint to be used to request a token.

WellKnownOpenIdConfiguration: The endpoint that contains all the configuration endpoints for the provider.

AuthorizationEndpoint: The endpoint to be used to make an authorization request.

CertificationUri: The endpoint that provides the keys necessary to validate the token.

Issuer: The endpoint that issues the token.

TokenEndpoint: The endpoint to be used to request a token.

WellKnownOpenIdConfiguration: The endpoint that contains all the configuration endpoints for the provider.

NameClaimType: The name of the claim that contains the users name.

Scopes: A list of the scopes that should be requested while authenticating.

NameClaimType: The name of the claim that contains the users name.

Scopes: A list of the scopes that should be requested while authenticating.

ClientCredential: The authentication credentials of the custom Open ID Connect provider.

ClientId: The client id of the custom Open ID Connect provider.

OpenIdConnectConfiguration: The configuration settings of the endpoints used for the custom Open ID Connect provider.

ClientCredential: The authentication credentials of the custom Open ID Connect provider.

ClientId: The client id of the custom Open ID Connect provider.

OpenIdConnectConfiguration: The configuration settings of the endpoints used for the custom Open ID Connect provider.

Auth: Authentication secrets for the queue scale rule.

QueueLength: Queue length.

QueueName: Queue name.

Auth: Authentication secrets for the queue scale rule.

QueueLength: Queue length.

QueueName: Queue name.

IdentityReference: A Managed Identity to use to authenticate with Azure Container Registry. For user-assigned identities, use the full user-assigned identity Resource ID. For system-assigned identities, use ‘system’

PasswordSecretRef: The name of the Secret that contains the registry login password

Server: Container Registry Server

Username: Container Registry Username

Identity: A Managed Identity to use to authenticate with Azure Container Registry. For user-assigned identities, use the full user-assigned identity Resource ID. For system-assigned identities, use ‘system’

PasswordSecretRef: The name of the Secret that contains the registry login password

Server: Container Registry Server

Username: Container Registry Username

MaxReplicas: Optional. Maximum number of container replicas. Defaults to 10 if not set.

MinReplicas: Optional. Minimum number of container replicas.

Rules: Scaling rules.

AzureQueue: Azure Queue based scaling.

Custom: Custom scale rule.

Http: HTTP requests based scaling.

Name: Scale Rule Name

Tcp: Tcp requests based scaling.

SecretRef: Name of the secret from which to pull the auth params.

TriggerParameter: Trigger Parameter that uses the secret

SecretRef: Name of the secret from which to pull the auth params.

TriggerParameter: Trigger Parameter that uses the secret

AzureQueue: Azure Queue based scaling.

Custom: Custom scale rule.

Http: HTTP requests based scaling.

Name: Scale Rule Name

Tcp: Tcp requests based scaling.