network.azure.com/v1api20201101

"2020-11-01"

AddressPrefixes: A list of address blocks reserved for this virtual network in CIDR notation.

AddressPrefixes: A list of address blocks reserved for this virtual network in CIDR notation.

Reference: Resource ID.

Id: Resource ID.

Id: Resource ID.

Reference: Resource ID.

Reference: Resource ID.

Reference: Resource ID.

Id: Resource ID.

Id: Resource ID.

LoadBalancerBackendAddresses: An array of backend addresses.

Name: The name of the resource that is unique within the set of backend address pools used by the load balancer. This name can be used to access the resource.

Reference: Resource ID.

BackendIPConfigurations: An array of references to IP addresses defined in network interfaces.

Etag: A unique read-only string that changes whenever the resource is updated.

Id: Resource ID.

LoadBalancerBackendAddresses: An array of backend addresses.

LoadBalancingRules: An array of references to load balancing rules that use this backend address pool.

Name: The name of the resource that is unique within the set of backend address pools used by the load balancer. This name can be used to access the resource.

OutboundRule: A reference to an outbound rule that uses this backend address pool.

OutboundRules: An array of references to outbound rules that use this backend address pool.

ProvisioningState: The provisioning state of the backend address pool resource.

Type: Type of the resource.

Id: Resource ID.

Asn: The BGP speaker’s ASN.

BgpPeeringAddress: The BGP peering address and BGP identifier of this BGP speaker.

BgpPeeringAddresses: BGP peering address with IP configuration ID for virtual network gateway.

PeerWeight: The weight added to routes learned from this BGP speaker.

Asn: The BGP speaker’s ASN.

BgpPeeringAddress: The BGP peering address and BGP identifier of this BGP speaker.

BgpPeeringAddresses: BGP peering address with IP configuration ID for virtual network gateway.

PeerWeight: The weight added to routes learned from this BGP speaker.

DdosCustomPolicy: The DDoS custom policy associated with the public IP.

ProtectedIP: Enables DDoS protection on the public IP.

ProtectionCoverage: The DDoS protection policy customizability of the public IP. Only standard coverage will have the ability to be customized.

"Basic"

"Standard"

"Basic"

"Standard"

DdosCustomPolicy: The DDoS custom policy associated with the public IP.

ProtectedIP: Enables DDoS protection on the public IP.

ProtectionCoverage: The DDoS protection policy customizability of the public IP. Only standard coverage will have the ability to be customized.

Name: The name of the resource that is unique within a subnet. This name can be used to access the resource.

ServiceName: The name of the service to whom the subnet should be delegated (e.g. Microsoft.Sql/servers).

Actions: The actions permitted to the service upon delegation.

Etag: A unique read-only string that changes whenever the resource is updated.

Id: Resource ID.

Name: The name of the resource that is unique within a subnet. This name can be used to access the resource.

ProvisioningState: The provisioning state of the service delegation resource.

ServiceName: The name of the service to whom the subnet should be delegated (e.g. Microsoft.Sql/servers).

Type: Resource type.

"DHGroup1"

"DHGroup14"

"DHGroup2"

"DHGroup2048"

"DHGroup24"

"ECP256"

"ECP384"

"None"

"DHGroup1"

"DHGroup14"

"DHGroup2"

"DHGroup2048"

"DHGroup24"

"ECP256"

"ECP384"

"None"

DnsServers: The list of DNS servers IP addresses.

DnsServers: The list of DNS servers IP addresses.

Name: The name of the extended location.

Type: The type of the extended location.

"EdgeZone"

"EdgeZone"

Name: The name of the extended location.

Type: The type of the extended location.

Id: Resource ID.

Name: The name of the resource that is unique within the set of frontend IP configurations used by the load balancer. This name can be used to access the resource.

PrivateIPAddress: The private IP address of the IP configuration.

PrivateIPAddressVersion: Whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4.

PrivateIPAllocationMethod: The Private IP allocation method.

PublicIPAddress: The reference to the Public IP resource.

PublicIPPrefix: The reference to the Public IP Prefix resource.

Subnet: The reference to the subnet resource.

Zones: A list of availability zones denoting the IP allocated for the resource needs to come from.

Etag: A unique read-only string that changes whenever the resource is updated.

Id: Resource ID.

InboundNatPools: An array of references to inbound pools that use this frontend IP.

InboundNatRules: An array of references to inbound rules that use this frontend IP.

LoadBalancingRules: An array of references to load balancing rules that use this frontend IP.

Name: The name of the resource that is unique within the set of frontend IP configurations used by the load balancer. This name can be used to access the resource.

OutboundRules: An array of references to outbound rules that use this frontend IP.

PrivateIPAddress: The private IP address of the IP configuration.

PrivateIPAddressVersion: Whether the specific ipconfiguration is IPv4 or IPv6. Default is taken as IPv4.

PrivateIPAllocationMethod: The Private IP allocation method.

ProvisioningState: The provisioning state of the frontend IP configuration resource.

PublicIPAddress: The reference to the Public IP resource.

PublicIPPrefix: The reference to the Public IP Prefix resource.

Subnet: The reference to the subnet resource.

Type: Type of the resource.

Zones: A list of availability zones denoting the IP allocated for the resource needs to come from.

"Dynamic"

"Static"

"Dynamic"

"Static"

CustomBgpIpAddresses: The list of custom BGP peering addresses which belong to IP configuration.

IpconfigurationId: The ID of IP configuration which belongs to gateway.

CustomBgpIpAddresses: The list of custom BGP peering addresses which belong to IP configuration.

DefaultBgpIpAddresses: The list of default BGP peering addresses which belong to IP configuration.

IpconfigurationId: The ID of IP configuration which belongs to gateway.

TunnelIpAddresses: The list of tunnel public IP addresses which belong to IP configuration.

Id: Resource ID.

Id: Resource ID.

Id: Resource ID.

"IPv4"

"IPv6"

"IPv4"

"IPv6"

"AES128"

"AES192"

"AES256"

"DES"

"DES3"

"GCMAES128"

"GCMAES256"

"AES128"

"AES192"

"AES256"

"DES"

"DES3"

"GCMAES128"

"GCMAES256"

"GCMAES128"

"GCMAES256"

"MD5"

"SHA1"

"SHA256"

"SHA384"

"GCMAES128"

"GCMAES256"

"MD5"

"SHA1"

"SHA256"

"SHA384"

BackendPort: The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535.

EnableFloatingIP: Configures a virtual machine’s endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can’t be changed after you create the endpoint.

EnableTcpReset: Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.

FrontendIPConfiguration: A reference to frontend IP addresses.

FrontendPortRangeEnd: The last port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65535.

FrontendPortRangeStart: The first port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65534.

IdleTimeoutInMinutes: The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.

Name: The name of the resource that is unique within the set of inbound NAT pools used by the load balancer. This name can be used to access the resource.

Protocol: The reference to the transport protocol used by the inbound NAT pool.

BackendPort: The port used for internal connections on the endpoint. Acceptable values are between 1 and 65535.

EnableFloatingIP: Configures a virtual machine’s endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can’t be changed after you create the endpoint.

EnableTcpReset: Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.

Etag: A unique read-only string that changes whenever the resource is updated.

FrontendIPConfiguration: A reference to frontend IP addresses.

FrontendPortRangeEnd: The last port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65535.

FrontendPortRangeStart: The first port number in the range of external ports that will be used to provide Inbound Nat to NICs associated with a load balancer. Acceptable values range between 1 and 65534.

Id: Resource ID.

IdleTimeoutInMinutes: The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.

Name: The name of the resource that is unique within the set of inbound NAT pools used by the load balancer. This name can be used to access the resource.

Protocol: The reference to the transport protocol used by the inbound NAT pool.

ProvisioningState: The provisioning state of the inbound NAT pool resource.

Type: Type of the resource.

BackendPort: The port used for the internal endpoint. Acceptable values range from 1 to 65535.

EnableFloatingIP: Configures a virtual machine’s endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can’t be changed after you create the endpoint.

EnableTcpReset: Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.

FrontendIPConfiguration: A reference to frontend IP addresses.

FrontendPort: The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534.

IdleTimeoutInMinutes: The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.

Name: The name of the resource that is unique within the set of inbound NAT rules used by the load balancer. This name can be used to access the resource.

Protocol: The reference to the transport protocol used by the load balancing rule.

Reference: Resource ID.

BackendIPConfiguration: A reference to a private IP address defined on a network interface of a VM. Traffic sent to the frontend port of each of the frontend IP configurations is forwarded to the backend IP.

BackendPort: The port used for the internal endpoint. Acceptable values range from 1 to 65535.

EnableFloatingIP: Configures a virtual machine’s endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can’t be changed after you create the endpoint.

EnableTcpReset: Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.

Etag: A unique read-only string that changes whenever the resource is updated.

FrontendIPConfiguration: A reference to frontend IP addresses.

FrontendPort: The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534.

Id: Resource ID.

IdleTimeoutInMinutes: The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.

Name: The name of the resource that is unique within the set of inbound NAT rules used by the load balancer. This name can be used to access the resource.

Protocol: The reference to the transport protocol used by the load balancing rule.

ProvisioningState: The provisioning state of the inbound NAT rule resource.

Type: Type of the resource.

Id: Resource ID.

IpTagType: The IP tag type. Example: FirstPartyUsage.

Tag: The value of the IP tag associated with the public IP. Example: SQL.

IpTagType: The IP tag type. Example: FirstPartyUsage.

Tag: The value of the IP tag associated with the public IP. Example: SQL.

"AES128"

"AES192"

"AES256"

"DES"

"DES3"

"GCMAES128"

"GCMAES192"

"GCMAES256"

"None"

"AES128"

"AES192"

"AES256"

"DES"

"DES3"

"GCMAES128"

"GCMAES192"

"GCMAES256"

"None"

"GCMAES128"

"GCMAES192"

"GCMAES256"

"MD5"

"SHA1"

"SHA256"

"GCMAES128"

"GCMAES192"

"GCMAES256"

"MD5"

"SHA1"

"SHA256"

DhGroup: The DH Group used in IKE Phase 1 for initial SA.

IkeEncryption: The IKE encryption algorithm (IKE phase 2).

IkeIntegrity: The IKE integrity algorithm (IKE phase 2).

IpsecEncryption: The IPSec encryption algorithm (IKE phase 1).

IpsecIntegrity: The IPSec integrity algorithm (IKE phase 1).

PfsGroup: The Pfs Group used in IKE Phase 2 for new child SA.

SaDataSizeKilobytes: The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel.

SaLifeTimeSeconds: The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel.

DhGroup: The DH Group used in IKE Phase 1 for initial SA.

IkeEncryption: The IKE encryption algorithm (IKE phase 2).

IkeIntegrity: The IKE integrity algorithm (IKE phase 2).

IpsecEncryption: The IPSec encryption algorithm (IKE phase 1).

IpsecIntegrity: The IPSec integrity algorithm (IKE phase 1).

PfsGroup: The Pfs Group used in IKE Phase 2 for new child SA.

SaDataSizeKilobytes: The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for a site to site VPN tunnel.

SaLifeTimeSeconds: The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for a site to site VPN tunnel.

IpAddress: IP Address belonging to the referenced virtual network.

LoadBalancerFrontendIPConfiguration: Reference to the frontend ip address configuration defined in regional loadbalancer.

Name: Name of the backend address.

Subnet: Reference to an existing subnet.

VirtualNetwork: Reference to an existing virtual network.

IpAddress: IP Address belonging to the referenced virtual network.

LoadBalancerFrontendIPConfiguration: Reference to the frontend ip address configuration defined in regional loadbalancer.

Name: Name of the backend address.

NetworkInterfaceIPConfiguration: Reference to IP address defined in network interfaces.

Subnet: Reference to an existing subnet.

VirtualNetwork: Reference to an existing virtual network.

ConfigMapExpressions: configures where to place operator written dynamic ConfigMaps (created with CEL expressions).

SecretExpressions: configures where to place operator written dynamic secrets (created with CEL expressions).

Name: Name of a load balancer SKU.

Tier: Tier of a load balancer SKU.

"Basic"

"Standard"

"Basic"

"Standard"

Name: Name of a load balancer SKU.

Tier: Tier of a load balancer SKU.

"Global"

"Regional"

"Global"

"Regional"

BackendAddressPools: Collection of backend address pools used by a load balancer.

Conditions: The observed state of the resource

Etag: A unique read-only string that changes whenever the resource is updated.

ExtendedLocation: The extended location of the load balancer.

FrontendIPConfigurations: Object representing the frontend IPs to be used for the load balancer.

Id: Resource ID.

InboundNatPools: Defines an external port range for inbound NAT to a single backend port on NICs associated with a load balancer. Inbound NAT rules are created automatically for each NIC associated with the Load Balancer using an external port from this range. Defining an Inbound NAT pool on your Load Balancer is mutually exclusive with defining inbound Nat rules. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an inbound NAT pool. They have to reference individual inbound NAT rules.

InboundNatRules: Collection of inbound NAT Rules used by a load balancer. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an Inbound NAT pool. They have to reference individual inbound NAT rules.

LoadBalancingRules: Object collection representing the load balancing rules Gets the provisioning.

Location: Resource location.

Name: Resource name.

OutboundRules: The outbound rules.

Probes: Collection of probe objects used in the load balancer.

ProvisioningState: The provisioning state of the load balancer resource.

ResourceGuid: The resource GUID property of the load balancer resource.

Sku: The load balancer SKU.

Tags: Resource tags.

Type: Resource type.

AzureName: The name of the resource in Azure. This is often the same as the name of the resource in Kubernetes but it doesn’t have to be.

BackendAddressPools: Collection of backend address pools used by a load balancer.

ExtendedLocation: The extended location of the load balancer.

FrontendIPConfigurations: Object representing the frontend IPs to be used for the load balancer.

InboundNatPools: Defines an external port range for inbound NAT to a single backend port on NICs associated with a load balancer. Inbound NAT rules are created automatically for each NIC associated with the Load Balancer using an external port from this range. Defining an Inbound NAT pool on your Load Balancer is mutually exclusive with defining inbound Nat rules. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an inbound NAT pool. They have to reference individual inbound NAT rules.

InboundNatRules: Collection of inbound NAT Rules used by a load balancer. Defining inbound NAT rules on your load balancer is mutually exclusive with defining an inbound NAT pool. Inbound NAT pools are referenced from virtual machine scale sets. NICs that are associated with individual virtual machines cannot reference an Inbound NAT pool. They have to reference individual inbound NAT rules.

LoadBalancingRules: Object collection representing the load balancing rules Gets the provisioning.

Location: Resource location.

OperatorSpec: The specification for configuring operator behavior. This field is interpreted by the operator and not passed directly to Azure

OutboundRules: The outbound rules.

Owner: The owner of the resource. The owner controls where the resource goes when it is deployed. The owner also controls the resources lifecycle. When the owner is deleted the resource will also be deleted. Owner is expected to be a reference to a resources.azure.com/ResourceGroup resource

Probes: Collection of probe objects used in the load balancer.

Sku: The load balancer SKU.

Tags: Resource tags.

ConfigMapExpressions: configures where to place operator written dynamic ConfigMaps (created with CEL expressions).

SecretExpressions: configures where to place operator written dynamic secrets (created with CEL expressions).

BackendIPConfiguration: A reference to a private IP address defined on a network interface of a VM. Traffic sent to the frontend port of each of the frontend IP configurations is forwarded to the backend IP.

BackendPort: The port used for the internal endpoint. Acceptable values range from 1 to 65535.

Conditions: The observed state of the resource

EnableFloatingIP: Configures a virtual machine’s endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can’t be changed after you create the endpoint.

EnableTcpReset: Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.

Etag: A unique read-only string that changes whenever the resource is updated.

FrontendIPConfiguration: A reference to frontend IP addresses.

FrontendPort: The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534.

Id: Resource ID.

IdleTimeoutInMinutes: The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.

Name: The name of the resource that is unique within the set of inbound NAT rules used by the load balancer. This name can be used to access the resource.

Protocol: The reference to the transport protocol used by the load balancing rule.

ProvisioningState: The provisioning state of the inbound NAT rule resource.

Type: Type of the resource.

AzureName: The name of the resource in Azure. This is often the same as the name of the resource in Kubernetes but it doesn’t have to be.

BackendPort: The port used for the internal endpoint. Acceptable values range from 1 to 65535.

EnableFloatingIP: Configures a virtual machine’s endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can’t be changed after you create the endpoint.

EnableTcpReset: Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.

FrontendIPConfiguration: A reference to frontend IP addresses.

FrontendPort: The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values range from 1 to 65534.

IdleTimeoutInMinutes: The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.

OperatorSpec: The specification for configuring operator behavior. This field is interpreted by the operator and not passed directly to Azure

Owner: The owner of the resource. The owner controls where the resource goes when it is deployed. The owner also controls the resources lifecycle. When the owner is deleted the resource will also be deleted. Owner is expected to be a reference to a network.azure.com/LoadBalancer resource

Protocol: The reference to the transport protocol used by the load balancing rule.

BackendAddressPool: A reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs.

BackendPort: The port used for internal connections on the endpoint. Acceptable values are between 0 and 65535. Note that value 0 enables “Any Port”.

DisableOutboundSnat: Configures SNAT for the VMs in the backend pool to use the publicIP address specified in the frontend of the load balancing rule.

EnableFloatingIP: Configures a virtual machine’s endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can’t be changed after you create the endpoint.

EnableTcpReset: Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.

FrontendIPConfiguration: A reference to frontend IP addresses.

FrontendPort: The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 0 and 65534. Note that value 0 enables “Any Port”.

IdleTimeoutInMinutes: The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.

LoadDistribution: The load distribution policy for this rule.

Name: The name of the resource that is unique within the set of load balancing rules used by the load balancer. This name can be used to access the resource.

Probe: The reference to the load balancer probe used by the load balancing rule.

Protocol: The reference to the transport protocol used by the load balancing rule.

"Default"

"SourceIP"

"SourceIPProtocol"

"Default"

"SourceIP"

"SourceIPProtocol"

BackendAddressPool: A reference to a pool of DIPs. Inbound traffic is randomly load balanced across IPs in the backend IPs.

BackendPort: The port used for internal connections on the endpoint. Acceptable values are between 0 and 65535. Note that value 0 enables “Any Port”.

DisableOutboundSnat: Configures SNAT for the VMs in the backend pool to use the publicIP address specified in the frontend of the load balancing rule.

EnableFloatingIP: Configures a virtual machine’s endpoint for the floating IP capability required to configure a SQL AlwaysOn Availability Group. This setting is required when using the SQL AlwaysOn Availability Groups in SQL server. This setting can’t be changed after you create the endpoint.

EnableTcpReset: Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.

Etag: A unique read-only string that changes whenever the resource is updated.

FrontendIPConfiguration: A reference to frontend IP addresses.

FrontendPort: The port for the external endpoint. Port numbers for each rule must be unique within the Load Balancer. Acceptable values are between 0 and 65534. Note that value 0 enables “Any Port”.

Id: Resource ID.

IdleTimeoutInMinutes: The timeout for the TCP idle connection. The value can be set between 4 and 30 minutes. The default value is 4 minutes. This element is only used when the protocol is set to TCP.

LoadDistribution: The load distribution policy for this rule.

Name: The name of the resource that is unique within the set of load balancing rules used by the load balancer. This name can be used to access the resource.

Probe: The reference to the load balancer probe used by the load balancing rule.

Protocol: The reference to the transport protocol used by the load balancing rule.

ProvisioningState: The provisioning state of the load balancing rule resource.

Type: Type of the resource.

Reference: Resource ID.

Id: Resource ID.

DnsServers: List of DNS servers IP addresses. Use ‘AzureProvidedDNS’ to switch to azure provided DNS resolution. ‘AzureProvidedDNS’ value cannot be combined with other IPs, it must be the only value in dnsServers collection.

InternalDnsNameLabel: Relative DNS name for this NIC used for internal communications between VMs in the same virtual network.

AppliedDnsServers: If the VM that uses this NIC is part of an Availability Set, then this list will have the union of all DNS servers from all NICs that are part of the Availability Set. This property is what is configured on each of those VMs.

DnsServers: List of DNS servers IP addresses. Use ‘AzureProvidedDNS’ to switch to azure provided DNS resolution. ‘AzureProvidedDNS’ value cannot be combined with other IPs, it must be the only value in dnsServers collection.

InternalDnsNameLabel: Relative DNS name for this NIC used for internal communications between VMs in the same virtual network.

InternalDomainNameSuffix: Even if internalDnsNameLabel is not specified, a DNS entry is created for the primary NIC of the VM. This DNS name can be constructed by concatenating the VM name with the value of internalDomainNameSuffix.

InternalFqdn: Fully qualified DNS name supporting internal communications between VMs in the same virtual network.

Fqdns: List of FQDNs for current private link connection.

GroupId: The group ID for current private link connection.

RequiredMemberName: The required member name for current private link connection.

ApplicationGatewayBackendAddressPools: The reference to ApplicationGatewayBackendAddressPool resource.

ApplicationSecurityGroups: Application security groups in which the IP configuration is included.

LoadBalancerBackendAddressPools: The reference to LoadBalancerBackendAddressPool resource.

LoadBalancerInboundNatRules: A list of references of LoadBalancerInboundNatRules.

Name: The name of the resource that is unique within a resource group. This name can be used to access the resource.

Primary: Whether this is a primary customer address on the network interface.

PrivateIPAddress: Private IP address of the IP configuration.

PrivateIPAddressVersion: Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4.

PrivateIPAllocationMethod: The private IP address allocation method.

PublicIPAddress: Public IP address bound to the IP configuration.

Subnet: Subnet bound to the IP configuration.

VirtualNetworkTaps: The reference to Virtual Network Taps.

Id: Resource ID.

Id: Resource ID.

ApplicationGatewayBackendAddressPools: The reference to ApplicationGatewayBackendAddressPool resource.

ApplicationSecurityGroups: Application security groups in which the IP configuration is included.

Etag: A unique read-only string that changes whenever the resource is updated.

Id: Resource ID.

LoadBalancerBackendAddressPools: The reference to LoadBalancerBackendAddressPool resource.

LoadBalancerInboundNatRules: A list of references of LoadBalancerInboundNatRules.

Name: The name of the resource that is unique within a resource group. This name can be used to access the resource.

Primary: Whether this is a primary customer address on the network interface.

PrivateIPAddress: Private IP address of the IP configuration.

PrivateIPAddressVersion: Whether the specific IP configuration is IPv4 or IPv6. Default is IPv4.

PrivateIPAllocationMethod: The private IP address allocation method.

PrivateLinkConnectionProperties: PrivateLinkConnection properties for the network interface.

ProvisioningState: The provisioning state of the network interface IP configuration.

PublicIPAddress: Public IP address bound to the IP configuration.

Subnet: Subnet bound to the IP configuration.

Type: Resource type.

VirtualNetworkTaps: The reference to Virtual Network Taps.

ConfigMapExpressions: configures where to place operator written dynamic ConfigMaps (created with CEL expressions).

SecretExpressions: configures where to place operator written dynamic secrets (created with CEL expressions).

"Abort"

"Commit"

"Committed"

"None"

"Prepare"

"Elastic"

"Standard"

"Elastic"

"Standard"

Id: Resource ID.

Conditions: The observed state of the resource

DnsSettings: The DNS settings in network interface.

DscpConfiguration: A reference to the dscp configuration to which the network interface is linked.

EnableAcceleratedNetworking: If the network interface is accelerated networking enabled.

EnableIPForwarding: Indicates whether IP forwarding is enabled on this network interface.

Etag: A unique read-only string that changes whenever the resource is updated.

ExtendedLocation: The extended location of the network interface.

HostedWorkloads: A list of references to linked BareMetal resources.

Id: Resource ID.

IpConfigurations: A list of IPConfigurations of the network interface.

Location: Resource location.

MacAddress: The MAC address of the network interface.

MigrationPhase: Migration phase of Network Interface resource.

Name: Resource name.

NetworkSecurityGroup: The reference to the NetworkSecurityGroup resource.

NicType: Type of Network Interface resource.

Primary: Whether this is a primary network interface on a virtual machine.

PrivateEndpoint: A reference to the private endpoint to which the network interface is linked.

PrivateLinkService: Privatelinkservice of the network interface resource.

ProvisioningState: The provisioning state of the network interface resource.

ResourceGuid: The resource GUID property of the network interface resource.

Tags: Resource tags.

TapConfigurations: A list of TapConfigurations of the network interface.

Type: Resource type.

VirtualMachine: The reference to a virtual machine.

Id: Resource ID.

AzureName: The name of the resource in Azure. This is often the same as the name of the resource in Kubernetes but it doesn’t have to be.

DnsSettings: The DNS settings in network interface.

EnableAcceleratedNetworking: If the network interface is accelerated networking enabled.

EnableIPForwarding: Indicates whether IP forwarding is enabled on this network interface.

ExtendedLocation: The extended location of the network interface.

IpConfigurations: A list of IPConfigurations of the network interface.

Location: Resource location.

NetworkSecurityGroup: The reference to the NetworkSecurityGroup resource.

NicType: Type of Network Interface resource.

OperatorSpec: The specification for configuring operator behavior. This field is interpreted by the operator and not passed directly to Azure

Owner: The owner of the resource. The owner controls where the resource goes when it is deployed. The owner also controls the resources lifecycle. When the owner is deleted the resource will also be deleted. Owner is expected to be a reference to a resources.azure.com/ResourceGroup resource

PrivateLinkService: Privatelinkservice of the network interface resource.

Tags: Resource tags.

ConfigMapExpressions: configures where to place operator written dynamic ConfigMaps (created with CEL expressions).

SecretExpressions: configures where to place operator written dynamic secrets (created with CEL expressions).

Reference: Resource ID.

Reference: Resource ID.

Id: Resource ID.

Conditions: The observed state of the resource

DefaultSecurityRules: The default security rules of network security group.

Etag: A unique read-only string that changes whenever the resource is updated.

FlowLogs: A collection of references to flow log resources.

Id: Resource ID.

Location: Resource location.

Name: Resource name.

NetworkInterfaces: A collection of references to network interfaces.

ProvisioningState: The provisioning state of the network security group resource.

ResourceGuid: The resource GUID property of the network security group resource.

Subnets: A collection of references to subnets.

Tags: Resource tags.

Type: Resource type.

Id: Resource ID.

AzureName: The name of the resource in Azure. This is often the same as the name of the resource in Kubernetes but it doesn’t have to be.

Location: Resource location.

OperatorSpec: The specification for configuring operator behavior. This field is interpreted by the operator and not passed directly to Azure

Owner: The owner of the resource. The owner controls where the resource goes when it is deployed. The owner also controls the resources lifecycle. When the owner is deleted the resource will also be deleted. Owner is expected to be a reference to a resources.azure.com/ResourceGroup resource

Tags: Resource tags.

ConfigMapExpressions: configures where to place operator written dynamic ConfigMaps (created with CEL expressions).

SecretExpressions: configures where to place operator written dynamic secrets (created with CEL expressions).

Access: The network traffic is allowed or denied.

Conditions: The observed state of the resource

Description: A description for this rule. Restricted to 140 chars.

DestinationAddressPrefix: The destination address prefix. CIDR or destination IP range. Asterisk ‘*’ can also be used to match all source IPs. Default tags such as ‘VirtualNetwork’, ‘AzureLoadBalancer’ and ‘Internet’ can also be used.

DestinationAddressPrefixes: The destination address prefixes. CIDR or destination IP ranges.

DestinationApplicationSecurityGroups: The application security group specified as destination.

DestinationPortRange: The destination port or range. Integer or range between 0 and 65535. Asterisk ‘*’ can also be used to match all ports.

DestinationPortRanges: The destination port ranges.

Direction: The direction of the rule. The direction specifies if rule will be evaluated on incoming or outgoing traffic.

Etag: A unique read-only string that changes whenever the resource is updated.

Id: Resource ID.

Name: The name of the resource that is unique within a resource group. This name can be used to access the resource.

Priority: The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.

Protocol: Network protocol this rule applies to.

ProvisioningState: The provisioning state of the security rule resource.

SourceAddressPrefix: The CIDR or source IP range. Asterisk ‘*’ can also be used to match all source IPs. Default tags such as ‘VirtualNetwork’, ‘AzureLoadBalancer’ and ‘Internet’ can also be used. If this is an ingress rule, specifies where network traffic originates from.

SourceAddressPrefixes: The CIDR or source IP ranges.

SourceApplicationSecurityGroups: The application security group specified as source.

SourcePortRange: The source port or range. Integer or range between 0 and 65535. Asterisk ‘*’ can also be used to match all ports.

SourcePortRanges: The source port ranges.

Type: The type of the resource.

Access: The network traffic is allowed or denied.

AzureName: The name of the resource in Azure. This is often the same as the name of the resource in Kubernetes but it doesn’t have to be.

Description: A description for this rule. Restricted to 140 chars.

DestinationAddressPrefix: The destination address prefix. CIDR or destination IP range. Asterisk ‘*’ can also be used to match all source IPs. Default tags such as ‘VirtualNetwork’, ‘AzureLoadBalancer’ and ‘Internet’ can also be used.

DestinationAddressPrefixes: The destination address prefixes. CIDR or destination IP ranges.

DestinationApplicationSecurityGroups: The application security group specified as destination.

DestinationPortRange: The destination port or range. Integer or range between 0 and 65535. Asterisk ‘*’ can also be used to match all ports.

DestinationPortRanges: The destination port ranges.

Direction: The direction of the rule. The direction specifies if rule will be evaluated on incoming or outgoing traffic.

OperatorSpec: The specification for configuring operator behavior. This field is interpreted by the operator and not passed directly to Azure

Owner: The owner of the resource. The owner controls where the resource goes when it is deployed. The owner also controls the resources lifecycle. When the owner is deleted the resource will also be deleted. Owner is expected to be a reference to a network.azure.com/NetworkSecurityGroup resource

Priority: The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.

Protocol: Network protocol this rule applies to.

SourceAddressPrefix: The CIDR or source IP range. Asterisk ‘*’ can also be used to match all source IPs. Default tags such as ‘VirtualNetwork’, ‘AzureLoadBalancer’ and ‘Internet’ can also be used. If this is an ingress rule, specifies where network traffic originates from.

SourceAddressPrefixes: The CIDR or source IP ranges.

SourceApplicationSecurityGroups: The application security group specified as source.

SourcePortRange: The source port or range. Integer or range between 0 and 65535. Asterisk ‘*’ can also be used to match all ports.

SourcePortRanges: The source port ranges.

AllocatedOutboundPorts: The number of outbound ports to be used for NAT.

BackendAddressPool: A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs.

EnableTcpReset: Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.

FrontendIPConfigurations: The Frontend IP addresses of the load balancer.

IdleTimeoutInMinutes: The timeout for the TCP idle connection.

Name: The name of the resource that is unique within the set of outbound rules used by the load balancer. This name can be used to access the resource.

Protocol: The protocol for the outbound rule in load balancer.

"All"

"Tcp"

"Udp"

"All"

"Tcp"

"Udp"

AllocatedOutboundPorts: The number of outbound ports to be used for NAT.

BackendAddressPool: A reference to a pool of DIPs. Outbound traffic is randomly load balanced across IPs in the backend IPs.

EnableTcpReset: Receive bidirectional TCP Reset on TCP flow idle timeout or unexpected connection termination. This element is only used when the protocol is set to TCP.

Etag: A unique read-only string that changes whenever the resource is updated.

FrontendIPConfigurations: The Frontend IP addresses of the load balancer.

Id: Resource ID.

IdleTimeoutInMinutes: The timeout for the TCP idle connection.

Name: The name of the resource that is unique within the set of outbound rules used by the load balancer. This name can be used to access the resource.

Protocol: The protocol for the outbound rule in load balancer.

ProvisioningState: The provisioning state of the outbound rule resource.

Type: Type of the resource.

"ECP256"

"ECP384"

"None"

"PFS1"

"PFS14"

"PFS2"

"PFS2048"

"PFS24"

"PFSMM"

"ECP256"

"ECP384"

"None"

"PFS1"

"PFS14"

"PFS2"

"PFS2048"

"PFS24"

"PFSMM"

Id: Resource ID.

Id: Resource ID.

Reference: Resource ID.

Id: Resource ID.

IntervalInSeconds: The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5.

Name: The name of the resource that is unique within the set of probes used by the load balancer. This name can be used to access the resource.

NumberOfProbes: The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure.

Port: The port for communicating the probe. Possible values range from 1 to 65535, inclusive.

Protocol: The protocol of the end point. If ‘Tcp’ is specified, a received ACK is required for the probe to be successful. If ‘Http’ or ‘Https’ is specified, a 200 OK response from the specifies URI is required for the probe to be successful.

RequestPath: The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value.

"Http"

"Https"

"Tcp"

"Http"

"Https"

"Tcp"

Etag: A unique read-only string that changes whenever the resource is updated.

Id: Resource ID.

IntervalInSeconds: The interval, in seconds, for how frequently to probe the endpoint for health status. Typically, the interval is slightly less than half the allocated timeout period (in seconds) which allows two full probes before taking the instance out of rotation. The default value is 15, the minimum value is 5.

LoadBalancingRules: The load balancer rules that use this probe.

Name: The name of the resource that is unique within the set of probes used by the load balancer. This name can be used to access the resource.

NumberOfProbes: The number of probes where if no response, will result in stopping further traffic from being delivered to the endpoint. This values allows endpoints to be taken out of rotation faster or slower than the typical times used in Azure.

Port: The port for communicating the probe. Possible values range from 1 to 65535, inclusive.

Protocol: The protocol of the end point. If ‘Tcp’ is specified, a received ACK is required for the probe to be successful. If ‘Http’ or ‘Https’ is specified, a 200 OK response from the specifies URI is required for the probe to be successful.

ProvisioningState: The provisioning state of the probe resource.

RequestPath: The URI used for requesting health status from the VM. Path is required if a protocol is set to http. Otherwise, it is not allowed. There is no default value.

Type: Type of the resource.

"Deleting"

"Failed"

"Succeeded"

"Updating"

DomainNameLabel: The domain name label. The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system.

Fqdn: The Fully Qualified Domain Name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone.

ReverseFqdn: The reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN.

DomainNameLabel: The domain name label. The concatenation of the domain name label and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address. If a domain name label is specified, an A DNS record is created for the public IP in the Microsoft Azure DNS system.

Fqdn: The Fully Qualified Domain Name of the A DNS record associated with the public IP. This is the concatenation of the domainNameLabel and the regionalized DNS zone.

ReverseFqdn: The reverse FQDN. A user-visible, fully qualified domain name that resolves to this public IP address. If the reverseFqdn is specified, then a PTR DNS record is created pointing from the IP address in the in-addr.arpa domain to the reverse FQDN.

ConfigMapExpressions: configures where to place operator written dynamic ConfigMaps (created with CEL expressions).

SecretExpressions: configures where to place operator written dynamic secrets (created with CEL expressions).

"Abort"

"Commit"

"Committed"

"None"

"Prepare"

Name: Name of a public IP address SKU.

Tier: Tier of a public IP address SKU.

"Basic"

"Standard"

"Basic"

"Standard"

Name: Name of a public IP address SKU.

Tier: Tier of a public IP address SKU.

"Global"

"Regional"

"Global"

"Regional"

Reference: Resource ID.

Reference: Resource ID.

Reference: Resource ID.

Conditions: The observed state of the resource

DdosSettings: The DDoS protection custom policy associated with the public IP address.

DnsSettings: The FQDN of the DNS record associated with the public IP address.

Etag: A unique read-only string that changes whenever the resource is updated.

ExtendedLocation: The extended location of the public ip address.

Id: Resource ID.

IdleTimeoutInMinutes: The idle timeout of the public IP address.

IpAddress: The IP address associated with the public IP address resource.

IpConfiguration: The IP configuration associated with the public IP address.

IpTags: The list of tags associated with the public IP address.

Location: Resource location.

MigrationPhase: Migration phase of Public IP Address.

Name: Resource name.

NatGateway: The NatGateway for the Public IP address.

ProvisioningState: The provisioning state of the public IP address resource.

PublicIPAddressVersion: The public IP address version.

PublicIPAllocationMethod: The public IP address allocation method.

PublicIPPrefix: The Public IP Prefix this Public IP Address should be allocated from.

ResourceGuid: The resource GUID property of the public IP address resource.

Sku: The public IP address SKU.

Tags: Resource tags.

Type: Resource type.

Zones: A list of availability zones denoting the IP allocated for the resource needs to come from.

Id: Resource ID.

Id: Resource ID.

AzureName: The name of the resource in Azure. This is often the same as the name of the resource in Kubernetes but it doesn’t have to be.

DdosSettings: The DDoS protection custom policy associated with the public IP address.

DnsSettings: The FQDN of the DNS record associated with the public IP address.

ExtendedLocation: The extended location of the public ip address.

IdleTimeoutInMinutes: The idle timeout of the public IP address.

IpAddress: The IP address associated with the public IP address resource.

IpTags: The list of tags associated with the public IP address.

LinkedPublicIPAddress: The linked public IP address of the public IP address resource.

Location: Resource location.

NatGateway: The NatGateway for the Public IP address.

OperatorSpec: The specification for configuring operator behavior. This field is interpreted by the operator and not passed directly to Azure

Owner: The owner of the resource. The owner controls where the resource goes when it is deployed. The owner also controls the resources lifecycle. When the owner is deleted the resource will also be deleted. Owner is expected to be a reference to a resources.azure.com/ResourceGroup resource

PublicIPAddressVersion: The public IP address version.

PublicIPAllocationMethod: The public IP address allocation method.

PublicIPPrefix: The Public IP Prefix this Public IP Address should be allocated from.

ServicePublicIPAddress: The service public IP address of the public IP address resource.

Sku: The public IP address SKU.

Tags: Resource tags.

Zones: A list of availability zones denoting the IP allocated for the resource needs to come from.

RadiusServerAddress: The address of this radius server.

RadiusServerScore: The initial score assigned to this radius server.

RadiusServerSecret: The secret used for this radius server.

RadiusServerAddress: The address of this radius server.

RadiusServerScore: The initial score assigned to this radius server.

RadiusServerSecret: The secret used for this radius server.

Id: Resource navigation link identifier.

"Internet"

"None"

"VirtualAppliance"

"VirtualNetworkGateway"

"VnetLocal"

"Internet"

"None"

"VirtualAppliance"

"VirtualNetworkGateway"

"VnetLocal"

ConfigMapExpressions: configures where to place operator written dynamic ConfigMaps (created with CEL expressions).

SecretExpressions: configures where to place operator written dynamic secrets (created with CEL expressions).

Reference: Resource ID.

Conditions: The observed state of the resource

DisableBgpRoutePropagation: Whether to disable the routes learned by BGP on that route table. True means disable.

Etag: A unique read-only string that changes whenever the resource is updated.

Id: Resource ID.

Location: Resource location.

Name: Resource name.

ProvisioningState: The provisioning state of the route table resource.

ResourceGuid: The resource GUID property of the route table.

Tags: Resource tags.

Type: Resource type.

Id: Resource ID.

AzureName: The name of the resource in Azure. This is often the same as the name of the resource in Kubernetes but it doesn’t have to be.

DisableBgpRoutePropagation: Whether to disable the routes learned by BGP on that route table. True means disable.

Location: Resource location.

OperatorSpec: The specification for configuring operator behavior. This field is interpreted by the operator and not passed directly to Azure

Owner: The owner of the resource. The owner controls where the resource goes when it is deployed. The owner also controls the resources lifecycle. When the owner is deleted the resource will also be deleted. Owner is expected to be a reference to a resources.azure.com/ResourceGroup resource

Tags: Resource tags.

ConfigMapExpressions: configures where to place operator written dynamic ConfigMaps (created with CEL expressions).

SecretExpressions: configures where to place operator written dynamic secrets (created with CEL expressions).

AddressPrefix: The destination CIDR to which the route applies.

Conditions: The observed state of the resource

Etag: A unique read-only string that changes whenever the resource is updated.

HasBgpOverride: A value indicating whether this route overrides overlapping BGP routes regardless of LPM.

Id: Resource ID.

Name: The name of the resource that is unique within a resource group. This name can be used to access the resource.

NextHopIpAddress: The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance.

NextHopType: The type of Azure hop the packet should be sent to.

ProvisioningState: The provisioning state of the route resource.

Type: The type of the resource.

AddressPrefix: The destination CIDR to which the route applies.

AzureName: The name of the resource in Azure. This is often the same as the name of the resource in Kubernetes but it doesn’t have to be.

NextHopIpAddress: The IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is VirtualAppliance.

NextHopType: The type of Azure hop the packet should be sent to.

OperatorSpec: The specification for configuring operator behavior. This field is interpreted by the operator and not passed directly to Azure

Owner: The owner of the resource. The owner controls where the resource goes when it is deployed. The owner also controls the resources lifecycle. When the owner is deleted the resource will also be deleted. Owner is expected to be a reference to a network.azure.com/RouteTable resource

"Allow"

"Deny"

"Allow"

"Deny"

"Inbound"

"Outbound"

"Inbound"

"Outbound"

"Ah"

"Esp"

"Icmp"

"*"

"Tcp"

"Udp"

"Ah"

"Esp"

"Icmp"

"*"

"Tcp"

"Udp"

Id: Resource ID.

Id: Resource ID.

Reference: Resource ID.

Id: Resource ID.

Locations: A list of locations.

Service: The type of the endpoint service.

Locations: A list of locations.

ProvisioningState: The provisioning state of the service endpoint resource.

Service: The type of the endpoint service.

Reference: Resource ID.

Id: Resource ID.

"Disabled"

"Enabled"

"Disabled"

"Enabled"