containerservice.azure.com/v1api20210501

"2021-05-01"

"System"

"User"

"System"

"User"

"AvailabilitySet"

"VirtualMachineScaleSets"

"AvailabilitySet"

"VirtualMachineScaleSets"

MaxSurge: This can either be set to an integer (e.g. ‘5’) or a percentage (e.g. ‘50%’). If a percentage is specified, it is the percentage of the total agent pool size at the time of the upgrade. For percentages, fractional nodes are rounded up. If not specified, the default is 1. For more information, including best practices, see: https://docs.microsoft.com/azure/aks/upgrade-cluster#customize-node-surge-upgrade

MaxSurge: This can either be set to an integer (e.g. ‘5’) or a percentage (e.g. ‘50%’). If a percentage is specified, it is the percentage of the total agent pool size at the time of the upgrade. For percentages, fractional nodes are rounded up. If not specified, the default is 1. For more information, including best practices, see: https://docs.microsoft.com/azure/aks/upgrade-cluster#customize-node-surge-upgrade

AdminUsername: The administrator username to use for Linux VMs.

Ssh: The SSH configuration for Linux-based VMs running on Azure.

AdminUsername: The administrator username to use for Linux VMs.

Ssh: The SSH configuration for Linux-based VMs running on Azure.

DnsServiceIP: An IP address assigned to the Kubernetes DNS service. It must be within the Kubernetes service address range specified in serviceCidr.

DockerBridgeCidr: A CIDR notation IP range assigned to the Docker bridge network. It must not overlap with any Subnet IP ranges or the Kubernetes service address range.

LoadBalancerProfile: Profile of the cluster load balancer.

LoadBalancerSku: The default is ‘standard’. See Azure Load Balancer SKUs for more information about the differences between load balancer SKUs.

NetworkMode: This cannot be specified if networkPlugin is anything other than ‘azure’.

NetworkPlugin: Network plugin used for building the Kubernetes network.

NetworkPolicy: Network policy used for building the Kubernetes network.

OutboundType: This can only be set at cluster creation time and cannot be changed later. For more information see egress outbound type.

PodCidr: A CIDR notation IP range from which to assign pod IPs when kubenet is used.

ServiceCidr: A CIDR notation IP range from which to assign service cluster IPs. It must not overlap with any Subnet IP ranges.

"basic"

"standard"

"basic"

"standard"

"bridge"

"transparent"

"bridge"

"transparent"

"azure"

"kubenet"

"azure"

"kubenet"

"azure"

"calico"

"azure"

"calico"

"loadBalancer"

"userDefinedRouting"

"loadBalancer"

"userDefinedRouting"

DnsServiceIP: An IP address assigned to the Kubernetes DNS service. It must be within the Kubernetes service address range specified in serviceCidr.

DockerBridgeCidr: A CIDR notation IP range assigned to the Docker bridge network. It must not overlap with any Subnet IP ranges or the Kubernetes service address range.

LoadBalancerProfile: Profile of the cluster load balancer.

LoadBalancerSku: The default is ‘standard’. See Azure Load Balancer SKUs for more information about the differences between load balancer SKUs.

NetworkMode: This cannot be specified if networkPlugin is anything other than ‘azure’.

NetworkPlugin: Network plugin used for building the Kubernetes network.

NetworkPolicy: Network policy used for building the Kubernetes network.

OutboundType: This can only be set at cluster creation time and cannot be changed later. For more information see egress outbound type.

PodCidr: A CIDR notation IP range from which to assign pod IPs when kubenet is used.

ServiceCidr: A CIDR notation IP range from which to assign service cluster IPs. It must not overlap with any Subnet IP ranges.

PublicKeys: The list of SSH public keys used to authenticate with Linux-based VMs. A maximum of 1 key may be specified.

PublicKeys: The list of SSH public keys used to authenticate with Linux-based VMs. A maximum of 1 key may be specified.

KeyData: Certificate public key used to authenticate with VMs through SSH. The certificate must be in PEM format with or without headers.

KeyData: Certificate public key used to authenticate with VMs through SSH. The certificate must be in PEM format with or without headers.

Name: The name of the extended location.

Type: The type of the extended location.

"EdgeZone"

"EdgeZone"

Name: The name of the extended location.

Type: The type of the extended location.

"MIG1g"

"MIG2g"

"MIG3g"

"MIG4g"

"MIG7g"

"MIG1g"

"MIG2g"

"MIG3g"

"MIG4g"

"MIG7g"

AllowedUnsafeSysctls: Allowed list of unsafe sysctls or unsafe sysctl patterns (ending in *).

ContainerLogMaxFiles: The maximum number of container log files that can be present for a container. The number must be ≥ 2.

ContainerLogMaxSizeMB: The maximum size (e.g. 10Mi) of container log file before it is rotated.

CpuCfsQuota: The default is true.

CpuCfsQuotaPeriod: The default is ‘100ms.’ Valid values are a sequence of decimal numbers with an optional fraction and a unit suffix. For example: ‘300ms’, ‘2h45m’. Supported units are ‘ns’, ‘us’, ‘ms’, ’s’, ’m’, and ‘h’.

CpuManagerPolicy: The default is ‘none’. See Kubernetes CPU management policies for more information. Allowed values are ‘none’ and ‘static’.

FailSwapOn: If set to true it will make the Kubelet fail to start if swap is enabled on the node.

ImageGcHighThreshold: To disable image garbage collection, set to 100. The default is 85%

ImageGcLowThreshold: This cannot be set higher than imageGcHighThreshold. The default is 80%

PodMaxPids: The maximum number of processes per pod.

TopologyManagerPolicy: For more information see Kubernetes Topology Manager. The default is ‘none’. Allowed values are ‘none’, ‘best-effort’, ‘restricted’, and ‘single-numa-node’.

AllowedUnsafeSysctls: Allowed list of unsafe sysctls or unsafe sysctl patterns (ending in *).

ContainerLogMaxFiles: The maximum number of container log files that can be present for a container. The number must be ≥ 2.

ContainerLogMaxSizeMB: The maximum size (e.g. 10Mi) of container log file before it is rotated.

CpuCfsQuota: The default is true.

CpuCfsQuotaPeriod: The default is ‘100ms.’ Valid values are a sequence of decimal numbers with an optional fraction and a unit suffix. For example: ‘300ms’, ‘2h45m’. Supported units are ‘ns’, ‘us’, ‘ms’, ’s’, ’m’, and ‘h’.

CpuManagerPolicy: The default is ‘none’. See Kubernetes CPU management policies for more information. Allowed values are ‘none’ and ‘static’.

FailSwapOn: If set to true it will make the Kubelet fail to start if swap is enabled on the node.

ImageGcHighThreshold: To disable image garbage collection, set to 100. The default is 85%

ImageGcLowThreshold: This cannot be set higher than imageGcHighThreshold. The default is 80%

PodMaxPids: The maximum number of processes per pod.

TopologyManagerPolicy: For more information see Kubernetes Topology Manager. The default is ‘none’. Allowed values are ‘none’, ‘best-effort’, ‘restricted’, and ‘single-numa-node’.

"OS"

"Temporary"

"OS"

"Temporary"

SwapFileSizeMB: The size in MB of a swap file that will be created on each node.

Sysctls: Sysctl settings for Linux agent nodes.

TransparentHugePageDefrag: Valid values are ‘always’, ‘defer’, ‘defer+madvise’, ‘madvise’ and ‘never’. The default is ‘madvise’. For more information see Transparent Hugepages.

TransparentHugePageEnabled: Valid values are ‘always’, ‘madvise’, and ‘never’. The default is ‘always’. For more information see Transparent Hugepages.

SwapFileSizeMB: The size in MB of a swap file that will be created on each node.

Sysctls: Sysctl settings for Linux agent nodes.

TransparentHugePageDefrag: Valid values are ‘always’, ‘defer’, ‘defer+madvise’, ‘madvise’ and ‘never’. The default is ‘madvise’. For more information see Transparent Hugepages.

TransparentHugePageEnabled: Valid values are ‘always’, ‘madvise’, and ‘never’. The default is ‘always’. For more information see Transparent Hugepages.

AdminGroupObjectIDs: The list of AAD group object IDs that will have admin role of the cluster.

ClientAppID: The client AAD application ID.

EnableAzureRBAC: Whether to enable Azure RBAC for Kubernetes authorization.

Managed: Whether to enable managed AAD.

ServerAppID: The server AAD application ID.

ServerAppSecret: The server AAD application secret.

TenantID: The AAD tenant ID to use for authentication. If not specified, will use the tenant of the deployment subscription.

AdminGroupObjectIDs: The list of AAD group object IDs that will have admin role of the cluster.

ClientAppID: The client AAD application ID.

EnableAzureRBAC: Whether to enable Azure RBAC for Kubernetes authorization.

Managed: Whether to enable managed AAD.

ServerAppID: The server AAD application ID.

ServerAppSecret: The server AAD application secret.

TenantID: The AAD tenant ID to use for authentication. If not specified, will use the tenant of the deployment subscription.

AuthorizedIPRanges: IP ranges are specified in CIDR format, e.g. 137.117.106.⁸⁸⁄₂₉. This feature is not compatible with clusters that use Public IP Per Node, or clusters that are using a Basic Load Balancer. For more information see API server authorized IP ranges.

EnablePrivateCluster: For more details, see Creating a private AKS cluster.

EnablePrivateClusterPublicFQDN: Whether to create additional public FQDN for private cluster or not.

PrivateDNSZone: The default is System. For more details see configure private DNS zone. Allowed values are ‘system’ and ‘none’.

AuthorizedIPRanges: IP ranges are specified in CIDR format, e.g. 137.117.106.⁸⁸⁄₂₉. This feature is not compatible with clusters that use Public IP Per Node, or clusters that are using a Basic Load Balancer. For more information see API server authorized IP ranges.

EnablePrivateCluster: For more details, see Creating a private AKS cluster.

EnablePrivateClusterPublicFQDN: Whether to create additional public FQDN for private cluster or not.

PrivateDNSZone: The default is System. For more details see configure private DNS zone. Allowed values are ‘system’ and ‘none’.

Config: Key-value pairs for configuring an add-on.

Enabled: Whether the add-on is enabled or not.

Config: Key-value pairs for configuring an add-on.

Enabled: Whether the add-on is enabled or not.

Identity: Information of user assigned identity used by this add-on.

AvailabilityZones: The list of Availability zones to use for nodes. This can only be specified if the AgentPoolType property is ‘VirtualMachineScaleSets’.

Count: Number of agents (VMs) to host docker containers. Allowed values must be in the range of 0 to 1000 (inclusive) for user pools and in the range of 1 to 1000 (inclusive) for system pools. The default value is 1.

EnableAutoScaling: Whether to enable auto-scaler

EnableEncryptionAtHost: This is only supported on certain VM sizes and in certain Azure regions. For more information, see: https://docs.microsoft.com/azure/aks/enable-host-encryption

EnableFIPS: See Add a FIPS-enabled node pool for more details.

EnableNodePublicIP: Some scenarios may require nodes in a node pool to receive their own dedicated public IP addresses. A common scenario is for gaming workloads, where a console needs to make a direct connection to a cloud virtual machine to minimize hops. For more information see assigning a public IP per node. The default is false.

EnableUltraSSD: Whether to enable UltraSSD

GpuInstanceProfile: GPUInstanceProfile to be used to specify GPU MIG instance profile for supported GPU VM SKU.

KubeletConfig: The Kubelet configuration on the agent pool nodes.

KubeletDiskType: Determines the placement of emptyDir volumes, container runtime data root, and Kubelet ephemeral storage.

LinuxOSConfig: The OS configuration of Linux agent nodes.

MaxCount: The maximum number of nodes for auto-scaling

MaxPods: The maximum number of pods that can run on a node.

MinCount: The minimum number of nodes for auto-scaling

Mode: A cluster must have at least one ‘System’ Agent Pool at all times. For additional information on agent pool restrictions and best practices, see: https://docs.microsoft.com/azure/aks/use-system-pools

Name: Windows agent pool names must be 6 characters or less.

NodeLabels: The node labels to be persisted across all nodes in agent pool.

NodePublicIPPrefixIDReference: This is of the form: /​subscriptions/​{subscriptionId}/​resourceGroups/​{resourceGroupName}/​providers/​Microsoft.Network/​publicIPPrefixes/​{publicIPPrefixName}

NodeTaints: The taints added to new nodes during node pool create and scale. For example, key=value:NoSchedule.

OrchestratorVersion: As a best practice, you should upgrade all node pools in an AKS cluster to the same Kubernetes version. The node pool version must have the same major version as the control plane. The node pool minor version must be within two minor versions of the control plane version. The node pool version cannot be greater than the control plane version. For more information see upgrading a node pool.

OsDiskType: The default is ‘Ephemeral’ if the VM supports it and has a cache disk larger than the requested OSDiskSizeGB. Otherwise, defaults to ‘Managed’. May not be changed after creation. For more information see Ephemeral OS.

OsSKU: Specifies an OS SKU. This value must not be specified if OSType is Windows.

OsType: The operating system type. The default is Linux.

PodSubnetIDReference: If omitted, pod IPs are statically assigned on the node subnet (see vnetSubnetID for more details). This is of the form: /​subscriptions/​{subscriptionId}/​resourceGroups/​{resourceGroupName}/​providers/​Microsoft.Network/​virtualNetworks/​{virtualNetworkName}/​subnets/​{subnetName}

ProximityPlacementGroupID: The ID for Proximity Placement Group.

ScaleSetEvictionPolicy: This cannot be specified unless the scaleSetPriority is ‘Spot’. If not specified, the default is ‘Delete’.

ScaleSetPriority: The Virtual Machine Scale Set priority. If not specified, the default is ‘Regular’.

SpotMaxPrice: Possible values are any decimal value greater than zero or -1 which indicates the willingness to pay any on-demand price. For more details on spot pricing, see spot VMs pricing

Tags: The tags to be persisted on the agent pool virtual machine scale set.

Type: The type of Agent Pool.

UpgradeSettings: Settings for upgrading the agentpool

VmSize: VM size availability varies by region. If a node contains insufficient compute resources (memory, cpu, etc) pods might fail to run correctly. For more details on restricted VM sizes, see: https://docs.microsoft.com/azure/aks/quotas-skus-regions

VnetSubnetIDReference: If this is not specified, a VNET and subnet will be generated and used. If no podSubnetID is specified, this applies to nodes and pods, otherwise it applies to just nodes. This is of the form: /​subscriptions/​{subscriptionId}/​resourceGroups/​{resourceGroupName}/​providers/​Microsoft.Network/​virtualNetworks/​{virtualNetworkName}/​subnets/​{subnetName}

AvailabilityZones: The list of Availability zones to use for nodes. This can only be specified if the AgentPoolType property is ‘VirtualMachineScaleSets’.

Count: Number of agents (VMs) to host docker containers. Allowed values must be in the range of 0 to 1000 (inclusive) for user pools and in the range of 1 to 1000 (inclusive) for system pools. The default value is 1.

EnableAutoScaling: Whether to enable auto-scaler

EnableEncryptionAtHost: This is only supported on certain VM sizes and in certain Azure regions. For more information, see: https://docs.microsoft.com/azure/aks/enable-host-encryption

EnableFIPS: See Add a FIPS-enabled node pool for more details.

EnableNodePublicIP: Some scenarios may require nodes in a node pool to receive their own dedicated public IP addresses. A common scenario is for gaming workloads, where a console needs to make a direct connection to a cloud virtual machine to minimize hops. For more information see assigning a public IP per node. The default is false.

EnableUltraSSD: Whether to enable UltraSSD

GpuInstanceProfile: GPUInstanceProfile to be used to specify GPU MIG instance profile for supported GPU VM SKU.

KubeletConfig: The Kubelet configuration on the agent pool nodes.

KubeletDiskType: Determines the placement of emptyDir volumes, container runtime data root, and Kubelet ephemeral storage.

LinuxOSConfig: The OS configuration of Linux agent nodes.

MaxCount: The maximum number of nodes for auto-scaling

MaxPods: The maximum number of pods that can run on a node.

MinCount: The minimum number of nodes for auto-scaling

Mode: A cluster must have at least one ‘System’ Agent Pool at all times. For additional information on agent pool restrictions and best practices, see: https://docs.microsoft.com/azure/aks/use-system-pools

Name: Windows agent pool names must be 6 characters or less.

NodeImageVersion: The version of node image

NodeLabels: The node labels to be persisted across all nodes in agent pool.

NodePublicIPPrefixID: This is of the form: /​subscriptions/​{subscriptionId}/​resourceGroups/​{resourceGroupName}/​providers/​Microsoft.Network/​publicIPPrefixes/​{publicIPPrefixName}

NodeTaints: The taints added to new nodes during node pool create and scale. For example, key=value:NoSchedule.

OrchestratorVersion: As a best practice, you should upgrade all node pools in an AKS cluster to the same Kubernetes version. The node pool version must have the same major version as the control plane. The node pool minor version must be within two minor versions of the control plane version. The node pool version cannot be greater than the control plane version. For more information see upgrading a node pool.

OsDiskType: The default is ‘Ephemeral’ if the VM supports it and has a cache disk larger than the requested OSDiskSizeGB. Otherwise, defaults to ‘Managed’. May not be changed after creation. For more information see Ephemeral OS.

OsSKU: Specifies an OS SKU. This value must not be specified if OSType is Windows.

OsType: The operating system type. The default is Linux.

PodSubnetID: If omitted, pod IPs are statically assigned on the node subnet (see vnetSubnetID for more details). This is of the form: /​subscriptions/​{subscriptionId}/​resourceGroups/​{resourceGroupName}/​providers/​Microsoft.Network/​virtualNetworks/​{virtualNetworkName}/​subnets/​{subnetName}

PowerState: Describes whether the Agent Pool is Running or Stopped

ProvisioningState: The current deployment or provisioning state.

ProximityPlacementGroupID: The ID for Proximity Placement Group.

ScaleSetEvictionPolicy: This cannot be specified unless the scaleSetPriority is ‘Spot’. If not specified, the default is ‘Delete’.

ScaleSetPriority: The Virtual Machine Scale Set priority. If not specified, the default is ‘Regular’.

SpotMaxPrice: Possible values are any decimal value greater than zero or -1 which indicates the willingness to pay any on-demand price. For more details on spot pricing, see spot VMs pricing

Tags: The tags to be persisted on the agent pool virtual machine scale set.

Type: The type of Agent Pool.

UpgradeSettings: Settings for upgrading the agentpool

VmSize: VM size availability varies by region. If a node contains insufficient compute resources (memory, cpu, etc) pods might fail to run correctly. For more details on restricted VM sizes, see: https://docs.microsoft.com/azure/aks/quotas-skus-regions

VnetSubnetID: If this is not specified, a VNET and subnet will be generated and used. If no podSubnetID is specified, this applies to nodes and pods, otherwise it applies to just nodes. This is of the form: /​subscriptions/​{subscriptionId}/​resourceGroups/​{resourceGroupName}/​providers/​Microsoft.Network/​virtualNetworks/​{virtualNetworkName}/​subnets/​{subnetName}

UpgradeChannel: For more information see setting the AKS cluster auto-upgrade channel.

UpgradeChannel: For more information see setting the AKS cluster auto-upgrade channel.

"node-image"

"none"

"patch"

"rapid"

"stable"

"node-image"

"none"

"patch"

"rapid"

"stable"

HttpProxy: The HTTP proxy server endpoint to use.

HttpsProxy: The HTTPS proxy server endpoint to use.

NoProxy: The endpoints that should not go through proxy.

TrustedCa: Alternative CA cert to use for connecting to proxy servers.

HttpProxy: The HTTP proxy server endpoint to use.

HttpsProxy: The HTTPS proxy server endpoint to use.

NoProxy: The endpoints that should not go through proxy.

TrustedCa: Alternative CA cert to use for connecting to proxy servers.

Type: For more information see use managed identities in AKS.

UserAssignedIdentities: The keys must be ARM resource IDs in the form: ‘/​subscriptions/​{subscriptionId}/​resourceGroups/​{resourceGroupName}/​providers/​Microsoft.ManagedIdentity/​userAssignedIdentities/​{identityName}’.

PrincipalId: The principal id of the system assigned identity which is used by master components.

TenantId: The tenant id of the system assigned identity which is used by master components.

Type: For more information see use managed identities in AKS.

UserAssignedIdentities: The keys must be ARM resource IDs in the form: ‘/​subscriptions/​{subscriptionId}/​resourceGroups/​{resourceGroupName}/​providers/​Microsoft.ManagedIdentity/​userAssignedIdentities/​{identityName}’.

"None"

"SystemAssigned"

"UserAssigned"

"None"

"SystemAssigned"

"UserAssigned"

ClientId: The client id of user assigned identity.

PrincipalId: The principal id of user assigned identity.

AllocatedOutboundPorts: The desired number of allocated SNAT ports per VM. Allowed values are in the range of 0 to 64000 (inclusive). The default value is 0 which results in Azure dynamically allocating ports.

EffectiveOutboundIPs: The effective outbound IP resources of the cluster load balancer.

IdleTimeoutInMinutes: Desired outbound flow idle timeout in minutes. Allowed values are in the range of 4 to 120 (inclusive). The default value is 30 minutes.

ManagedOutboundIPs: Desired managed outbound IPs for the cluster load balancer.

OutboundIPPrefixes: Desired outbound IP Prefix resources for the cluster load balancer.

OutboundIPs: Desired outbound IP resources for the cluster load balancer.

Count: The desired number of outbound IPs created/managed by Azure for the cluster load balancer. Allowed values must be in the range of 1 to 100 (inclusive). The default value is 1.

Count: The desired number of outbound IPs created/managed by Azure for the cluster load balancer. Allowed values must be in the range of 1 to 100 (inclusive). The default value is 1.

PublicIPPrefixes: A list of public IP prefix resources.

PublicIPPrefixes: A list of public IP prefix resources.

PublicIPs: A list of public IP resources.

PublicIPs: A list of public IP resources.

AllocatedOutboundPorts: The desired number of allocated SNAT ports per VM. Allowed values are in the range of 0 to 64000 (inclusive). The default value is 0 which results in Azure dynamically allocating ports.

EffectiveOutboundIPs: The effective outbound IP resources of the cluster load balancer.

IdleTimeoutInMinutes: Desired outbound flow idle timeout in minutes. Allowed values are in the range of 4 to 120 (inclusive). The default value is 30 minutes.

ManagedOutboundIPs: Desired managed outbound IPs for the cluster load balancer.

OutboundIPPrefixes: Desired outbound IP Prefix resources for the cluster load balancer.

OutboundIPs: Desired outbound IP resources for the cluster load balancer.

AdminCredentials: indicates where the AdminCredentials secret should be placed. If omitted, the secret will not be retrieved from Azure.

UserCredentials: indicates where the UserCredentials secret should be placed. If omitted, the secret will not be retrieved from Azure.

Secrets: configures where to place Azure generated secrets.

BindingSelector: The binding selector to use for the AzureIdentityBinding resource.

Identity: The user assigned identity details.

Name: The name of the pod identity.

Namespace: The namespace of the pod identity.

Name: The name of the pod identity exception.

Namespace: The namespace of the pod identity exception.

PodLabels: The pod labels to match.

Name: The name of the pod identity exception.

Namespace: The namespace of the pod identity exception.

PodLabels: The pod labels to match.

AllowNetworkPluginKubenet: Running in Kubenet is disabled by default due to the security related nature of AAD Pod Identity and the risks of IP spoofing. See using Kubenet network plugin with AAD Pod Identity for more information.

Enabled: Whether the pod identity addon is enabled.

UserAssignedIdentities: The pod identities to use in the cluster.

UserAssignedIdentityExceptions: The pod identity exceptions to allow.

AllowNetworkPluginKubenet: Running in Kubenet is disabled by default due to the security related nature of AAD Pod Identity and the risks of IP spoofing. See using Kubenet network plugin with AAD Pod Identity for more information.

Enabled: Whether the pod identity addon is enabled.

UserAssignedIdentities: The pod identities to use in the cluster.

UserAssignedIdentityExceptions: The pod identity exceptions to allow.

Code: An identifier for the error. Codes are invariant and are intended to be consumed programmatically.

Details: A list of additional details about the error.

Message: A message describing the error, intended to be suitable for display in a user interface.

Target: The target of the particular error. For example, the name of the property in error.

Code: An identifier for the error. Codes are invariant and are intended to be consumed programmatically.

Message: A message describing the error, intended to be suitable for display in a user interface.

Target: The target of the particular error. For example, the name of the property in error.

Error: Details about the error.

Error: Pod identity assignment error (if any).

"Assigned"

"Deleting"

"Failed"

"Updating"

BindingSelector: The binding selector to use for the AzureIdentityBinding resource.

Identity: The user assigned identity details.

Name: The name of the pod identity.

Namespace: The namespace of the pod identity.

ProvisioningState: The current provisioning state of the pod identity.

BalanceSimilarNodeGroups: Valid values are ‘true’ and ‘false’

Expander: If not specified, the default is ‘random’. See expanders for more information.

MaxEmptyBulkDelete: The default is 10.

MaxGracefulTerminationSec: The default is 600.

MaxNodeProvisionTime: The default is ‘15m’. Values must be an integer followed by an ’m’. No unit of time other than minutes (m) is supported.

MaxTotalUnreadyPercentage: The default is 45. The maximum is 100 and the minimum is 0.

NewPodScaleUpDelay: For scenarios like burst/batch scale where you don’t want CA to act before the kubernetes scheduler could schedule all the pods, you can tell CA to ignore unscheduled pods before they’re a certain age. The default is ‘0s’. Values must be an integer followed by a unit (’s’ for seconds, ’m’ for minutes, ‘h’ for hours, etc).

OkTotalUnreadyCount: This must be an integer. The default is 3.

ScaleDownDelayAfterAdd: The default is ‘10m’. Values must be an integer followed by an ’m’. No unit of time other than minutes (m) is supported.

ScaleDownDelayAfterDelete: The default is the scan-interval. Values must be an integer followed by an ’m’. No unit of time other than minutes (m) is supported.

ScaleDownDelayAfterFailure: The default is ‘3m’. Values must be an integer followed by an ’m’. No unit of time other than minutes (m) is supported.

ScaleDownUnneededTime: The default is ‘10m’. Values must be an integer followed by an ’m’. No unit of time other than minutes (m) is supported.

ScaleDownUnreadyTime: The default is ‘20m’. Values must be an integer followed by an ’m’. No unit of time other than minutes (m) is supported.

ScaleDownUtilizationThreshold: The default is ‘0.5’.

ScanInterval: The default is ‘10’. Values must be an integer number of seconds.

SkipNodesWithLocalStorage: The default is true.

SkipNodesWithSystemPods: The default is true.

"least-waste"

"most-pods"

"priority"

"random"

"least-waste"

"most-pods"

"priority"

"random"

BalanceSimilarNodeGroups: Valid values are ‘true’ and ‘false’

Expander: If not specified, the default is ‘random’. See expanders for more information.

MaxEmptyBulkDelete: The default is 10.

MaxGracefulTerminationSec: The default is 600.

MaxNodeProvisionTime: The default is ‘15m’. Values must be an integer followed by an ’m’. No unit of time other than minutes (m) is supported.

MaxTotalUnreadyPercentage: The default is 45. The maximum is 100 and the minimum is 0.

NewPodScaleUpDelay: For scenarios like burst/batch scale where you don’t want CA to act before the kubernetes scheduler could schedule all the pods, you can tell CA to ignore unscheduled pods before they’re a certain age. The default is ‘0s’. Values must be an integer followed by a unit (’s’ for seconds, ’m’ for minutes, ‘h’ for hours, etc).

OkTotalUnreadyCount: This must be an integer. The default is 3.

ScaleDownDelayAfterAdd: The default is ‘10m’. Values must be an integer followed by an ’m’. No unit of time other than minutes (m) is supported.

ScaleDownDelayAfterDelete: The default is the scan-interval. Values must be an integer followed by an ’m’. No unit of time other than minutes (m) is supported.

ScaleDownDelayAfterFailure: The default is ‘3m’. Values must be an integer followed by an ’m’. No unit of time other than minutes (m) is supported.

ScaleDownUnneededTime: The default is ‘10m’. Values must be an integer followed by an ’m’. No unit of time other than minutes (m) is supported.

ScaleDownUnreadyTime: The default is ‘20m’. Values must be an integer followed by an ’m’. No unit of time other than minutes (m) is supported.

ScaleDownUtilizationThreshold: The default is ‘0.5’.

ScanInterval: The default is ‘10’. Values must be an integer number of seconds.

SkipNodesWithLocalStorage: The default is true.

SkipNodesWithSystemPods: The default is true.

Name: The name of a managed cluster SKU.

Tier: If not specified, the default is ‘Free’. See uptime SLA for more details.

"Basic"

"Basic"

Name: The name of a managed cluster SKU.

Tier: If not specified, the default is ‘Free’. See uptime SLA for more details.

"Free"

"Paid"

"Free"

"Paid"

ClientId: The ID for the service principal.

Secret: The secret password associated with the service principal in plain text.

ClientId: The ID for the service principal.

AdminPassword: Specifies the password of the administrator account. Minimum-length: 8 characters Max-length: 123 characters Complexity requirements: 3 out of 4 conditions below need to be fulfilled Has lower characters Has upper characters Has a digit Has a special character (Regex match [\W_]) Disallowed values: “abc@123”, “P@$$w0rd”, “P@ssw0rd”, “P@ssword123”, “Pa$$word”, “pass@word1”, “Password!”, “Password1”, “Password22”, “iloveyou!”

AdminUsername: Specifies the name of the administrator account. Restriction: Cannot end in “.” Disallowed values: “administrator”, “admin”, “user”, “user1”, “test”, “user2”, “test1”, “user3”, “admin1”, “1”, “123”, “a”, “actuser”, “adm”, “admin2”, “aspnet”, “backup”, “console”, “david”, “guest”, “john”, “owner”, “root”, “server”, “sql”, “support”, “support_388945a0”, “sys”, “test2”, “test3”, “user4”, “user5”. Minimum-length: 1 character Max-length: 20 characters

EnableCSIProxy: For more details on CSI proxy, see the CSI proxy GitHub repo.

LicenseType: The license type to use for Windows VMs. See Azure Hybrid User Benefits for more details.

"None"

"Windows_Server"

"None"

"Windows_Server"

AdminUsername: Specifies the name of the administrator account. Restriction: Cannot end in “.” Disallowed values: “administrator”, “admin”, “user”, “user1”, “test”, “user2”, “test1”, “user3”, “admin1”, “1”, “123”, “a”, “actuser”, “adm”, “admin2”, “aspnet”, “backup”, “console”, “david”, “guest”, “john”, “owner”, “root”, “server”, “sql”, “support”, “support_388945a0”, “sys”, “test2”, “test3”, “user4”, “user5”. Minimum-length: 1 character Max-length: 20 characters

EnableCSIProxy: For more details on CSI proxy, see the CSI proxy GitHub repo.

LicenseType: The license type to use for Windows VMs. See Azure Hybrid User Benefits for more details.

AadProfile: The Azure Active Directory configuration.

AddonProfiles: The profile of managed cluster add-on.

AgentPoolProfiles: The agent pool properties.

ApiServerAccessProfile: The access profile for managed cluster API server.

AutoScalerProfile: Parameters to be applied to the cluster-autoscaler when enabled

AutoUpgradeProfile: The auto upgrade configuration.

AzurePortalFQDN: The Azure Portal requires certain Cross-Origin Resource Sharing (CORS) headers to be sent in some responses, which Kubernetes APIServer doesn’t handle by default. This special FQDN supports CORS, allowing the Azure Portal to function properly.

Conditions: The observed state of the resource

DisableLocalAccounts: If set to true, getting static credentials will be disabled for this cluster. This must only be used on Managed Clusters that are AAD enabled. For more details see disable local accounts.

DiskEncryptionSetID: This is of the form: ‘/​subscriptions/​{subscriptionId}/​resourceGroups/​{resourceGroupName}/​providers/​Microsoft.Compute/​diskEncryptionSets/​{encryptionSetName}’

DnsPrefix: This cannot be updated once the Managed Cluster has been created.

EnablePodSecurityPolicy: (DEPRECATING) Whether to enable Kubernetes pod security policy (preview). This feature is set for removal on October 15th, 2020. Learn more at aka.ms/aks/azpodpolicy.

EnableRBAC: Whether to enable Kubernetes Role-Based Access Control.

ExtendedLocation: The extended location of the Virtual Machine.

Fqdn: The FQDN of the master pool.

FqdnSubdomain: This cannot be updated once the Managed Cluster has been created.

HttpProxyConfig: Configurations for provisioning the cluster with HTTP proxy servers.

Id: Resource Id

Identity: The identity of the managed cluster, if configured.

IdentityProfile: Identities associated with the cluster.

KubernetesVersion: When you upgrade a supported AKS cluster, Kubernetes minor versions cannot be skipped. All upgrades must be performed sequentially by major version number. For example, upgrades between 1.14.x -> 1.15.x or 1.15.x -> 1.16.x are allowed, however 1.14.x -> 1.16.x is not allowed. See upgrading an AKS cluster for more details.

LinuxProfile: The profile for Linux VMs in the Managed Cluster.

Location: Resource location

MaxAgentPools: The max number of agent pools for the managed cluster.

Name: Resource name

NetworkProfile: The network configuration profile.

NodeResourceGroup: The name of the resource group containing agent pool nodes.

PodIdentityProfile: See use AAD pod identity for more details on AAD pod identity integration.

PowerState: The Power State of the cluster.

PrivateFQDN: The FQDN of private cluster.

PrivateLinkResources: Private link resources associated with the cluster.

ProvisioningState: The current provisioning state.

ServicePrincipalProfile: Information about a service principal identity for the cluster to use for manipulating Azure APIs.

Sku: The managed cluster SKU.

Tags: Resource tags

Type: Resource type

WindowsProfile: The profile for Windows VMs in the Managed Cluster.

AadProfile: The Azure Active Directory configuration.

AddonProfiles: The profile of managed cluster add-on.

AgentPoolProfiles: The agent pool properties.

ApiServerAccessProfile: The access profile for managed cluster API server.

AutoScalerProfile: Parameters to be applied to the cluster-autoscaler when enabled

AutoUpgradeProfile: The auto upgrade configuration.

AzureName: The name of the resource in Azure. This is often the same as the name of the resource in Kubernetes but it doesn’t have to be.

DisableLocalAccounts: If set to true, getting static credentials will be disabled for this cluster. This must only be used on Managed Clusters that are AAD enabled. For more details see disable local accounts.

DiskEncryptionSetIDReference: This is of the form: ‘/​subscriptions/​{subscriptionId}/​resourceGroups/​{resourceGroupName}/​providers/​Microsoft.Compute/​diskEncryptionSets/​{encryptionSetName}’

DnsPrefix: This cannot be updated once the Managed Cluster has been created.

EnablePodSecurityPolicy: (DEPRECATING) Whether to enable Kubernetes pod security policy (preview). This feature is set for removal on October 15th, 2020. Learn more at aka.ms/aks/azpodpolicy.

EnableRBAC: Whether to enable Kubernetes Role-Based Access Control.

ExtendedLocation: The extended location of the Virtual Machine.

FqdnSubdomain: This cannot be updated once the Managed Cluster has been created.

HttpProxyConfig: Configurations for provisioning the cluster with HTTP proxy servers.

Identity: The identity of the managed cluster, if configured.

IdentityProfile: Identities associated with the cluster.

KubernetesVersion: When you upgrade a supported AKS cluster, Kubernetes minor versions cannot be skipped. All upgrades must be performed sequentially by major version number. For example, upgrades between 1.14.x -> 1.15.x or 1.15.x -> 1.16.x are allowed, however 1.14.x -> 1.16.x is not allowed. See upgrading an AKS cluster for more details.

LinuxProfile: The profile for Linux VMs in the Managed Cluster.

Location: Resource location

NetworkProfile: The network configuration profile.

NodeResourceGroup: The name of the resource group containing agent pool nodes.

OperatorSpec: The specification for configuring operator behavior. This field is interpreted by the operator and not passed directly to Azure

Owner: The owner of the resource. The owner controls where the resource goes when it is deployed. The owner also controls the resources lifecycle. When the owner is deleted the resource will also be deleted. Owner is expected to be a reference to a resources.azure.com/ResourceGroup resource

PodIdentityProfile: See use AAD pod identity for more details on AAD pod identity integration.

PrivateLinkResources: Private link resources associated with the cluster.

ServicePrincipalProfile: Information about a service principal identity for the cluster to use for manipulating Azure APIs.

Sku: The managed cluster SKU.

Tags: Resource tags

WindowsProfile: The profile for Windows VMs in the Managed Cluster.

AvailabilityZones: The list of Availability zones to use for nodes. This can only be specified if the AgentPoolType property is ‘VirtualMachineScaleSets’.

Conditions: The observed state of the resource

Count: Number of agents (VMs) to host docker containers. Allowed values must be in the range of 0 to 1000 (inclusive) for user pools and in the range of 1 to 1000 (inclusive) for system pools. The default value is 1.

EnableAutoScaling: Whether to enable auto-scaler

EnableEncryptionAtHost: This is only supported on certain VM sizes and in certain Azure regions. For more information, see: https://docs.microsoft.com/azure/aks/enable-host-encryption

EnableFIPS: See Add a FIPS-enabled node pool for more details.

EnableNodePublicIP: Some scenarios may require nodes in a node pool to receive their own dedicated public IP addresses. A common scenario is for gaming workloads, where a console needs to make a direct connection to a cloud virtual machine to minimize hops. For more information see assigning a public IP per node. The default is false.

EnableUltraSSD: Whether to enable UltraSSD

GpuInstanceProfile: GPUInstanceProfile to be used to specify GPU MIG instance profile for supported GPU VM SKU.

Id: Resource ID.

KubeletConfig: The Kubelet configuration on the agent pool nodes.

KubeletDiskType: Determines the placement of emptyDir volumes, container runtime data root, and Kubelet ephemeral storage.

LinuxOSConfig: The OS configuration of Linux agent nodes.

MaxCount: The maximum number of nodes for auto-scaling

MaxPods: The maximum number of pods that can run on a node.

MinCount: The minimum number of nodes for auto-scaling

Mode: A cluster must have at least one ‘System’ Agent Pool at all times. For additional information on agent pool restrictions and best practices, see: https://docs.microsoft.com/azure/aks/use-system-pools

Name: The name of the resource that is unique within a resource group. This name can be used to access the resource.

NodeImageVersion: The version of node image

NodeLabels: The node labels to be persisted across all nodes in agent pool.

NodePublicIPPrefixID: This is of the form: /​subscriptions/​{subscriptionId}/​resourceGroups/​{resourceGroupName}/​providers/​Microsoft.Network/​publicIPPrefixes/​{publicIPPrefixName}

NodeTaints: The taints added to new nodes during node pool create and scale. For example, key=value:NoSchedule.

OrchestratorVersion: As a best practice, you should upgrade all node pools in an AKS cluster to the same Kubernetes version. The node pool version must have the same major version as the control plane. The node pool minor version must be within two minor versions of the control plane version. The node pool version cannot be greater than the control plane version. For more information see upgrading a node pool.

OsDiskType: The default is ‘Ephemeral’ if the VM supports it and has a cache disk larger than the requested OSDiskSizeGB. Otherwise, defaults to ‘Managed’. May not be changed after creation. For more information see Ephemeral OS.

OsSKU: Specifies an OS SKU. This value must not be specified if OSType is Windows.

OsType: The operating system type. The default is Linux.

PodSubnetID: If omitted, pod IPs are statically assigned on the node subnet (see vnetSubnetID for more details). This is of the form: /​subscriptions/​{subscriptionId}/​resourceGroups/​{resourceGroupName}/​providers/​Microsoft.Network/​virtualNetworks/​{virtualNetworkName}/​subnets/​{subnetName}

PowerState: Describes whether the Agent Pool is Running or Stopped

PropertiesType: The type of Agent Pool.

ProvisioningState: The current deployment or provisioning state.

ProximityPlacementGroupID: The ID for Proximity Placement Group.

ScaleSetEvictionPolicy: This cannot be specified unless the scaleSetPriority is ‘Spot’. If not specified, the default is ‘Delete’.

ScaleSetPriority: The Virtual Machine Scale Set priority. If not specified, the default is ‘Regular’.

SpotMaxPrice: Possible values are any decimal value greater than zero or -1 which indicates the willingness to pay any on-demand price. For more details on spot pricing, see spot VMs pricing

Tags: The tags to be persisted on the agent pool virtual machine scale set.

Type: Resource type

UpgradeSettings: Settings for upgrading the agentpool

VmSize: VM size availability varies by region. If a node contains insufficient compute resources (memory, cpu, etc) pods might fail to run correctly. For more details on restricted VM sizes, see: https://docs.microsoft.com/azure/aks/quotas-skus-regions

VnetSubnetID: If this is not specified, a VNET and subnet will be generated and used. If no podSubnetID is specified, this applies to nodes and pods, otherwise it applies to just nodes. This is of the form: /​subscriptions/​{subscriptionId}/​resourceGroups/​{resourceGroupName}/​providers/​Microsoft.Network/​virtualNetworks/​{virtualNetworkName}/​subnets/​{subnetName}

AvailabilityZones: The list of Availability zones to use for nodes. This can only be specified if the AgentPoolType property is ‘VirtualMachineScaleSets’.

AzureName: The name of the resource in Azure. This is often the same as the name of the resource in Kubernetes but it doesn’t have to be.

Count: Number of agents (VMs) to host docker containers. Allowed values must be in the range of 0 to 1000 (inclusive) for user pools and in the range of 1 to 1000 (inclusive) for system pools. The default value is 1.

EnableAutoScaling: Whether to enable auto-scaler

EnableEncryptionAtHost: This is only supported on certain VM sizes and in certain Azure regions. For more information, see: https://docs.microsoft.com/azure/aks/enable-host-encryption

EnableFIPS: See Add a FIPS-enabled node pool for more details.

EnableNodePublicIP: Some scenarios may require nodes in a node pool to receive their own dedicated public IP addresses. A common scenario is for gaming workloads, where a console needs to make a direct connection to a cloud virtual machine to minimize hops. For more information see assigning a public IP per node. The default is false.

EnableUltraSSD: Whether to enable UltraSSD

GpuInstanceProfile: GPUInstanceProfile to be used to specify GPU MIG instance profile for supported GPU VM SKU.

KubeletConfig: The Kubelet configuration on the agent pool nodes.

KubeletDiskType: Determines the placement of emptyDir volumes, container runtime data root, and Kubelet ephemeral storage.

LinuxOSConfig: The OS configuration of Linux agent nodes.

MaxCount: The maximum number of nodes for auto-scaling

MaxPods: The maximum number of pods that can run on a node.

MinCount: The minimum number of nodes for auto-scaling

Mode: A cluster must have at least one ‘System’ Agent Pool at all times. For additional information on agent pool restrictions and best practices, see: https://docs.microsoft.com/azure/aks/use-system-pools

NodeLabels: The node labels to be persisted across all nodes in agent pool.

NodePublicIPPrefixIDReference: This is of the form: /​subscriptions/​{subscriptionId}/​resourceGroups/​{resourceGroupName}/​providers/​Microsoft.Network/​publicIPPrefixes/​{publicIPPrefixName}

NodeTaints: The taints added to new nodes during node pool create and scale. For example, key=value:NoSchedule.

OrchestratorVersion: As a best practice, you should upgrade all node pools in an AKS cluster to the same Kubernetes version. The node pool version must have the same major version as the control plane. The node pool minor version must be within two minor versions of the control plane version. The node pool version cannot be greater than the control plane version. For more information see upgrading a node pool.

OsDiskType: The default is ‘Ephemeral’ if the VM supports it and has a cache disk larger than the requested OSDiskSizeGB. Otherwise, defaults to ‘Managed’. May not be changed after creation. For more information see Ephemeral OS.

OsSKU: Specifies an OS SKU. This value must not be specified if OSType is Windows.

OsType: The operating system type. The default is Linux.

Owner: The owner of the resource. The owner controls where the resource goes when it is deployed. The owner also controls the resources lifecycle. When the owner is deleted the resource will also be deleted. Owner is expected to be a reference to a containerservice.azure.com/ManagedCluster resource

PodSubnetIDReference: If omitted, pod IPs are statically assigned on the node subnet (see vnetSubnetID for more details). This is of the form: /​subscriptions/​{subscriptionId}/​resourceGroups/​{resourceGroupName}/​providers/​Microsoft.Network/​virtualNetworks/​{virtualNetworkName}/​subnets/​{subnetName}

ProximityPlacementGroupID: The ID for Proximity Placement Group.

ScaleSetEvictionPolicy: This cannot be specified unless the scaleSetPriority is ‘Spot’. If not specified, the default is ‘Delete’.

ScaleSetPriority: The Virtual Machine Scale Set priority. If not specified, the default is ‘Regular’.

SpotMaxPrice: Possible values are any decimal value greater than zero or -1 which indicates the willingness to pay any on-demand price. For more details on spot pricing, see spot VMs pricing

Tags: The tags to be persisted on the agent pool virtual machine scale set.

Type: The type of Agent Pool.

UpgradeSettings: Settings for upgrading the agentpool

VmSize: VM size availability varies by region. If a node contains insufficient compute resources (memory, cpu, etc) pods might fail to run correctly. For more details on restricted VM sizes, see: https://docs.microsoft.com/azure/aks/quotas-skus-regions

VnetSubnetIDReference: If this is not specified, a VNET and subnet will be generated and used. If no podSubnetID is specified, this applies to nodes and pods, otherwise it applies to just nodes. This is of the form: /​subscriptions/​{subscriptionId}/​resourceGroups/​{resourceGroupName}/​providers/​Microsoft.Network/​virtualNetworks/​{virtualNetworkName}/​subnets/​{subnetName}

"Ephemeral"

"Managed"

"Ephemeral"

"Managed"

"CBLMariner"

"Ubuntu"

"CBLMariner"

"Ubuntu"

"Linux"

"Windows"

"Linux"

"Windows"

"Running"

"Stopped"

Code: Tells whether the cluster is Running or Stopped

GroupId: The group ID of the resource.

Name: The name of the private link resource.

Reference: The ID of the private link resource.

RequiredMembers: The RequiredMembers of the resource

Type: The resource type.

GroupId: The group ID of the resource.

Id: The ID of the private link resource.

Name: The name of the private link resource.

PrivateLinkServiceID: The private link service ID of the resource, this field is exposed only to NRP internally.

RequiredMembers: The RequiredMembers of the resource

Type: The resource type.

Reference: The fully qualified Azure resource id.

Id: The fully qualified Azure resource id.

"Deallocate"

"Delete"

"Deallocate"

"Delete"

"Regular"

"Spot"

"Regular"

"Spot"

FsAioMaxNr: Sysctl setting fs.aio-max-nr.

FsFileMax: Sysctl setting fs.file-max.

FsInotifyMaxUserWatches: Sysctl setting fs.inotify.max_user_watches.

FsNrOpen: Sysctl setting fs.nr_open.

KernelThreadsMax: Sysctl setting kernel.threads-max.

NetCoreNetdevMaxBacklog: Sysctl setting net.core.netdev_max_backlog.

NetCoreOptmemMax: Sysctl setting net.core.optmem_max.

NetCoreRmemDefault: Sysctl setting net.core.rmem_default.

NetCoreRmemMax: Sysctl setting net.core.rmem_max.

NetCoreSomaxconn: Sysctl setting net.core.somaxconn.

NetCoreWmemDefault: Sysctl setting net.core.wmem_default.

NetCoreWmemMax: Sysctl setting net.core.wmem_max.

NetIpv4IpLocalPortRange: Sysctl setting net.ipv4.ip_local_port_range.

NetIpv4NeighDefaultGcThresh1: Sysctl setting net.ipv4.neigh.default.gc_thresh1.

NetIpv4NeighDefaultGcThresh2: Sysctl setting net.ipv4.neigh.default.gc_thresh2.

NetIpv4NeighDefaultGcThresh3: Sysctl setting net.ipv4.neigh.default.gc_thresh3.

NetIpv4TcpFinTimeout: Sysctl setting net.ipv4.tcp_fin_timeout.

NetIpv4TcpKeepaliveProbes: Sysctl setting net.ipv4.tcp_keepalive_probes.

NetIpv4TcpKeepaliveTime: Sysctl setting net.ipv4.tcp_keepalive_time.

NetIpv4TcpMaxSynBacklog: Sysctl setting net.ipv4.tcp_max_syn_backlog.

NetIpv4TcpMaxTwBuckets: Sysctl setting net.ipv4.tcp_max_tw_buckets.

NetIpv4TcpTwReuse: Sysctl setting net.ipv4.tcp_tw_reuse.

NetIpv4TcpkeepaliveIntvl: Sysctl setting net.ipv4.tcp_keepalive_intvl.

NetNetfilterNfConntrackBuckets: Sysctl setting net.netfilter.nf_conntrack_buckets.

NetNetfilterNfConntrackMax: Sysctl setting net.netfilter.nf_conntrack_max.

VmMaxMapCount: Sysctl setting vm.max_map_count.

VmSwappiness: Sysctl setting vm.swappiness.

VmVfsCachePressure: Sysctl setting vm.vfs_cache_pressure.

FsAioMaxNr: Sysctl setting fs.aio-max-nr.

FsFileMax: Sysctl setting fs.file-max.

FsInotifyMaxUserWatches: Sysctl setting fs.inotify.max_user_watches.

FsNrOpen: Sysctl setting fs.nr_open.

KernelThreadsMax: Sysctl setting kernel.threads-max.

NetCoreNetdevMaxBacklog: Sysctl setting net.core.netdev_max_backlog.

NetCoreOptmemMax: Sysctl setting net.core.optmem_max.

NetCoreRmemDefault: Sysctl setting net.core.rmem_default.

NetCoreRmemMax: Sysctl setting net.core.rmem_max.

NetCoreSomaxconn: Sysctl setting net.core.somaxconn.

NetCoreWmemDefault: Sysctl setting net.core.wmem_default.

NetCoreWmemMax: Sysctl setting net.core.wmem_max.

NetIpv4IpLocalPortRange: Sysctl setting net.ipv4.ip_local_port_range.

NetIpv4NeighDefaultGcThresh1: Sysctl setting net.ipv4.neigh.default.gc_thresh1.

NetIpv4NeighDefaultGcThresh2: Sysctl setting net.ipv4.neigh.default.gc_thresh2.

NetIpv4NeighDefaultGcThresh3: Sysctl setting net.ipv4.neigh.default.gc_thresh3.

NetIpv4TcpFinTimeout: Sysctl setting net.ipv4.tcp_fin_timeout.

NetIpv4TcpKeepaliveProbes: Sysctl setting net.ipv4.tcp_keepalive_probes.

NetIpv4TcpKeepaliveTime: Sysctl setting net.ipv4.tcp_keepalive_time.

NetIpv4TcpMaxSynBacklog: Sysctl setting net.ipv4.tcp_max_syn_backlog.

NetIpv4TcpMaxTwBuckets: Sysctl setting net.ipv4.tcp_max_tw_buckets.

NetIpv4TcpTwReuse: Sysctl setting net.ipv4.tcp_tw_reuse.

NetIpv4TcpkeepaliveIntvl: Sysctl setting net.ipv4.tcp_keepalive_intvl.

NetNetfilterNfConntrackBuckets: Sysctl setting net.netfilter.nf_conntrack_buckets.

NetNetfilterNfConntrackMax: Sysctl setting net.netfilter.nf_conntrack_max.

VmMaxMapCount: Sysctl setting vm.max_map_count.

VmSwappiness: Sysctl setting vm.swappiness.

VmVfsCachePressure: Sysctl setting vm.vfs_cache_pressure.

ClientId: The client ID of the user assigned identity.

ObjectId: The object ID of the user assigned identity.

ResourceReference: The resource ID of the user assigned identity.

ClientId: The client ID of the user assigned identity.

ObjectId: The object ID of the user assigned identity.

ResourceId: The resource ID of the user assigned identity.