network.azure.com/v1api20220701

"2022-07-01"

Data: Certificate public data.

Name: Name of the authentication certificate that is unique within an Application Gateway.

Id: Resource ID.

MaxCapacity: Upper bound on number of Application Gateway capacity.

MinCapacity: Lower bound on number of Application Gateway capacity.

MaxCapacity: Upper bound on number of Application Gateway capacity.

MinCapacity: Lower bound on number of Application Gateway capacity.

Fqdn: Fully qualified domain name (FQDN).

IpAddress: IP address.

BackendAddresses: Backend addresses.

Name: Name of the backend address pool that is unique within an Application Gateway.

Id: Resource ID.

AffinityCookieName: Cookie name to use for the affinity cookie.

AuthenticationCertificates: Array of references to application gateway authentication certificates.

ConnectionDraining: Connection draining of the backend http settings resource.

CookieBasedAffinity: Cookie based affinity.

HostName: Host header to be sent to the backend servers.

Name: Name of the backend http settings that is unique within an Application Gateway.

Path: Path which should be used as a prefix for all HTTP requests. Null means no path will be prefixed. Default value is null.

PickHostNameFromBackendAddress: Whether to pick host header should be picked from the host name of the backend server. Default value is false.

Port: The destination port on the backend.

Probe: Probe resource of an application gateway.

ProbeEnabled: Whether the probe is enabled. Default value is false.

Protocol: The protocol used to communicate with the backend.

RequestTimeout: Request timeout in seconds. Application Gateway will fail the request if response is not received within RequestTimeout. Acceptable values are from 1 second to 86400 seconds.

TrustedRootCertificates: Array of references to application gateway trusted root certificates.

"Disabled"

"Enabled"

Id: Resource ID.

HostName: Server name indication to be sent to the backend servers for Tls protocol.

Name: Name of the backend settings that is unique within an Application Gateway.

PickHostNameFromBackendAddress: Whether to pick server name indication from the host name of the backend server for Tls protocol. Default value is false.

Port: The destination port on the backend.

Probe: Probe resource of an application gateway.

Protocol: The protocol used to communicate with the backend.

Timeout: Connection timeout in seconds. Application Gateway will fail the request if response is not received within ConnectionTimeout. Acceptable values are from 1 second to 86400 seconds.

TrustedRootCertificates: Array of references to application gateway trusted root certificates.

Id: Resource ID.

VerifyClientCertIssuerDN: Verify client certificate issuer name on the application gateway.

VerifyClientRevocation: Verify client certificate revocation status.

"None"

"OCSP"

DrainTimeoutInSec: The number of seconds connection draining is active. Acceptable values are from 1 second to 3600 seconds.

Enabled: Whether connection draining is enabled or not.

CustomErrorPageUrl: Error page URL of the application gateway customer error.

StatusCode: Status code of the application gateway customer error.

CustomErrorPageUrl: Error page URL of the application gateway customer error.

StatusCode: Status code of the application gateway customer error.

"HttpStatus403"

"HttpStatus502"

"HttpStatus403"

"HttpStatus502"

RuleGroupName: The name of the rule group that will be disabled.

Rules: The list of rules that will be disabled. If null, all rules of the rule group will be disabled.

RuleGroupName: The name of the rule group that will be disabled.

Rules: The list of rules that will be disabled. If null, all rules of the rule group will be disabled.

MatchVariable: The variable to be excluded.

Selector: When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.

SelectorMatchOperator: When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.

MatchVariable: The variable to be excluded.

Selector: When matchVariable is a collection, operator used to specify which elements in the collection this exclusion applies to.

SelectorMatchOperator: When matchVariable is a collection, operate on the selector to specify which elements in the collection this exclusion applies to.

Name: Name of the frontend IP configuration that is unique within an Application Gateway.

PrivateIPAddress: PrivateIPAddress of the network interface IP Configuration.

PrivateIPAllocationMethod: The private IP address allocation method.

PrivateLinkConfiguration: Reference to the application gateway private link configuration.

PublicIPAddress: Reference to the PublicIP resource.

Subnet: Reference to the subnet resource.

Id: Resource ID.

Name: Name of the frontend port that is unique within an Application Gateway.

Port: Frontend port.

Id: Resource ID.

EnableRequestBuffering: Enable request buffering.

EnableResponseBuffering: Enable response buffering.

EnableRequestBuffering: Enable request buffering.

EnableResponseBuffering: Enable response buffering.

HeaderName: Header name of the header configuration.

HeaderValue: Header value of the header configuration.

CustomErrorConfigurations: Custom error configurations of the HTTP listener.

FirewallPolicy: Reference to the FirewallPolicy resource.

FrontendIPConfiguration: Frontend IP configuration resource of an application gateway.

FrontendPort: Frontend port resource of an application gateway.

HostName: Host name of HTTP listener.

HostNames: List of Host names for HTTP Listener that allows special wildcard characters as well.

Name: Name of the HTTP listener that is unique within an Application Gateway.

Protocol: Protocol of the HTTP listener.

RequireServerNameIndication: Applicable only if protocol is https. Enables SNI for multi-hosting.

SslCertificate: SSL certificate resource of an application gateway.

SslProfile: SSL profile resource of the application gateway.

Id: Resource ID.

Name: Name of the IP configuration that is unique within an Application Gateway.

Subnet: Reference to the subnet resource. A subnet from where application gateway gets its private address.

Id: Resource ID.

FrontendIPConfiguration: Frontend IP configuration resource of an application gateway.

FrontendPort: Frontend port resource of an application gateway.

Name: Name of the listener that is unique within an Application Gateway.

Protocol: Protocol of the listener.

SslCertificate: SSL certificate resource of an application gateway.

SslProfile: SSL profile resource of the application gateway.

Id: Resource ID.

"IpHash"

"LeastConnections"

"RoundRobin"

LoadDistributionAlgorithm: Load Distribution Targets resource of an application gateway.

LoadDistributionTargets: Load Distribution Targets resource of an application gateway.

Name: Name of the load distribution policy that is unique within an Application Gateway.

Id: Resource ID.

Reference: Resource ID.

ConfigMapExpressions: configures where to place operator written dynamic ConfigMaps (created with CEL expressions).

SecretExpressions: configures where to place operator written dynamic secrets (created with CEL expressions).

Reference: Resource ID.

Id: Resource ID.

IpConfigurations: An array of application gateway private link ip configurations.

Name: Name of the private link configuration that is unique within an Application Gateway.

Id: Resource ID.

Reference: Resource ID.

Host: Host name to send the probe to.

Interval: The probing interval in seconds. This is the time interval between two consecutive probes. Acceptable values are from 1 second to 86400 seconds.

Match: Criterion for classifying a healthy probe response.

MinServers: Minimum number of servers that are always marked healthy. Default value is 0.

Name: Name of the probe that is unique within an Application Gateway.

Path: Relative path of probe. Valid path starts from ‘/’. Probe is sent to ://:.

PickHostNameFromBackendHttpSettings: Whether the host header should be picked from the backend http settings. Default value is false.

PickHostNameFromBackendSettings: Whether the server name indication should be picked from the backend settings for Tls protocol. Default value is false.

Port: Custom port which will be used for probing the backend servers. The valid value ranges from 1 to 65535. In case not set, port from http settings will be used. This property is valid for Standard_v2 and WAF_v2 only.

Protocol: The protocol used for the probe.

Timeout: The probe timeout in seconds. Probe marked as failed if valid response is not received with this timeout period. Acceptable values are from 1 second to 86400 seconds.

UnhealthyThreshold: The probe retry count. Backend server is marked down after consecutive probe failure count reaches UnhealthyThreshold. Acceptable values are from 1 second to 20.

Body: Body that must be contained in the health response. Default value is empty.

StatusCodes: Allowed ranges of healthy status codes. Default range of healthy status codes is 200-399.

Id: Resource ID.

"Running"

"Starting"

"Stopped"

"Stopping"

"Http"

"Https"

"Tcp"

"Tls"

"Deleting"

"Failed"

"Succeeded"

"Updating"

IncludePath: Include path in the redirected url.

IncludeQueryString: Include query string in the redirected url.

Name: Name of the redirect configuration that is unique within an Application Gateway.

PathRules: Path rules specifying redirect configuration.

RedirectType: HTTP redirection type.

RequestRoutingRules: Request routing specifying redirect configuration.

TargetListener: Reference to a listener to redirect the request to.

TargetUrl: Url to redirect the request to.

UrlPathMaps: Url path maps specifying default redirect configuration.

Id: Resource ID.

BackendAddressPool: Backend address pool resource of the application gateway.

BackendHttpSettings: Backend http settings resource of the application gateway.

HttpListener: Http listener resource of the application gateway.

LoadDistributionPolicy: Load Distribution Policy resource of the application gateway.

Name: Name of the request routing rule that is unique within an Application Gateway.

Priority: Priority of the request routing rule.

RedirectConfiguration: Redirect configuration resource of the application gateway.

RewriteRuleSet: Rewrite Rule Set resource in Basic rule of the application gateway.

RuleType: Rule type.

UrlPathMap: URL path map resource of the application gateway.

"Basic"

"PathBasedRouting"

Id: Resource ID.

ActionSet: Set of actions to be done as part of the rewrite Rule.

Conditions: Conditions based on which the action set execution will be evaluated.

Name: Name of the rewrite rule that is unique within an Application Gateway.

RuleSequence: Rule Sequence of the rewrite rule that determines the order of execution of a particular rule in a RewriteRuleSet.

RequestHeaderConfigurations: Request Header Actions in the Action Set.

ResponseHeaderConfigurations: Response Header Actions in the Action Set.

UrlConfiguration: Url Configuration Action in the Action Set.

IgnoreCase: Setting this parameter to truth value with force the pattern to do a case in-sensitive comparison.

Negate: Setting this value as truth will force to check the negation of the condition given by the user.

Pattern: The pattern, either fixed string or regular expression, that evaluates the truthfulness of the condition.

Variable: The condition parameter of the RewriteRuleCondition.

Name: Name of the rewrite rule set that is unique within an Application Gateway.

RewriteRules: Rewrite rules in the rewrite rule set.

Id: Resource ID.

BackendAddressPool: Backend address pool resource of the application gateway.

BackendSettings: Backend settings resource of the application gateway.

Listener: Listener resource of the application gateway.

Name: Name of the routing rule that is unique within an Application Gateway.

Priority: Priority of the routing rule.

RuleType: Rule type.

"Basic"

"PathBasedRouting"

Id: Resource ID.

Capacity: Capacity (instance count) of an application gateway.

Name: Name of an application gateway SKU.

Tier: Tier of an application gateway.

"Standard_Large"

"Standard_Medium"

"Standard_Small"

"Standard_v2"

"WAF_Large"

"WAF_Medium"

"WAF_v2"

"Standard_Large"

"Standard_Medium"

"Standard_Small"

"Standard_v2"

"WAF_Large"

"WAF_Medium"

"WAF_v2"

Capacity: Capacity (instance count) of an application gateway.

Name: Name of an application gateway SKU.

Tier: Tier of an application gateway.

"Standard"

"Standard_v2"

"WAF"

"WAF_v2"

"Standard"

"Standard_v2"

"WAF"

"WAF_v2"

Data: Base-64 encoded pfx certificate. Only applicable in PUT Request.

KeyVaultSecretId: Secret Id of (base-64 encoded unencrypted pfx) ‘Secret’ or ‘Certificate’ object stored in KeyVault.

Name: Name of the SSL certificate that is unique within an Application Gateway.

Password: Password for the pfx file specified in data. Only applicable in PUT request.

Id: Resource ID.

CipherSuites: Ssl cipher suites to be enabled in the specified order to application gateway.

DisabledSslProtocols: Ssl protocols to be disabled on application gateway.

MinProtocolVersion: Minimum version of Ssl protocol to be supported on application gateway.

PolicyName: Name of Ssl predefined policy.

PolicyType: Type of Ssl Policy.

"Custom"

"CustomV2"

"Predefined"

"Custom"

"CustomV2"

"Predefined"

CipherSuites: Ssl cipher suites to be enabled in the specified order to application gateway.

DisabledSslProtocols: Ssl protocols to be disabled on application gateway.

MinProtocolVersion: Minimum version of Ssl protocol to be supported on application gateway.

PolicyName: Name of Ssl predefined policy.

PolicyType: Type of Ssl Policy.

ClientAuthConfiguration: Client authentication configuration of the application gateway resource.

Name: Name of the SSL profile that is unique within an Application Gateway.

SslPolicy: SSL policy of the application gateway resource.

TrustedClientCertificates: Array of references to application gateway trusted client certificates.

Id: Resource ID.

Data: Certificate public data.

Name: Name of the trusted client certificate that is unique within an Application Gateway.

Id: Resource ID.

Data: Certificate public data.

KeyVaultSecretId: Secret Id of (base-64 encoded unencrypted pfx) ‘Secret’ or ‘Certificate’ object stored in KeyVault.

Name: Name of the trusted root certificate that is unique within an Application Gateway.

Id: Resource ID.

ModifiedPath: Url path which user has provided for url rewrite. Null means no path will be updated. Default value is null.

ModifiedQueryString: Query string which user has provided for url rewrite. Null means no query string will be updated. Default value is null.

Reroute: If set as true, it will re-evaluate the url path map provided in path based request routing rules using modified path. Default value is false.

DefaultBackendAddressPool: Default backend address pool resource of URL path map.

DefaultBackendHttpSettings: Default backend http settings resource of URL path map.

DefaultLoadDistributionPolicy: Default Load Distribution Policy resource of URL path map.

DefaultRedirectConfiguration: Default redirect configuration resource of URL path map.

DefaultRewriteRuleSet: Default Rewrite rule set resource of URL path map.

Name: Name of the URL path map that is unique within an Application Gateway.

PathRules: Path rule of URL path map resource.

Id: Resource ID.

DisabledRuleGroups: The disabled rule groups.

Enabled: Whether the web application firewall is enabled or not.

Exclusions: The exclusion list.

FileUploadLimitInMb: Maximum file upload size in Mb for WAF.

FirewallMode: Web application firewall mode.

MaxRequestBodySize: Maximum request body size for WAF.

MaxRequestBodySizeInKb: Maximum request body size in Kb for WAF.

RequestBodyCheck: Whether allow WAF to check request Body.

RuleSetType: The type of the web application firewall rule set. Possible values are: ‘OWASP’.

RuleSetVersion: The version of the rule set type.

"Detection"

"Prevention"

"Detection"

"Prevention"

DisabledRuleGroups: The disabled rule groups.

Enabled: Whether the web application firewall is enabled or not.

Exclusions: The exclusion list.

FileUploadLimitInMb: Maximum file upload size in Mb for WAF.

FirewallMode: Web application firewall mode.

MaxRequestBodySize: Maximum request body size for WAF.

MaxRequestBodySizeInKb: Maximum request body size in Kb for WAF.

RequestBodyCheck: Whether allow WAF to check request Body.

RuleSetType: The type of the web application firewall rule set. Possible values are: ‘OWASP’.

RuleSetVersion: The version of the rule set type.

AuthenticationCertificates: Authentication certificates of the application gateway resource. For default limits, see Application Gateway limits.

AutoscaleConfiguration: Autoscale Configuration.

BackendAddressPools: Backend address pool of the application gateway resource. For default limits, see Application Gateway limits.

BackendHttpSettingsCollection: Backend http settings of the application gateway resource. For default limits, see Application Gateway limits.

BackendSettingsCollection: Backend settings of the application gateway resource. For default limits, see Application Gateway limits.

Conditions: The observed state of the resource

CustomErrorConfigurations: Custom error configurations of the application gateway resource.

EnableFips: Whether FIPS is enabled on the application gateway resource.

EnableHttp2: Whether HTTP2 is enabled on the application gateway resource.

Etag: A unique read-only string that changes whenever the resource is updated.

FirewallPolicy: Reference to the FirewallPolicy resource.

ForceFirewallPolicyAssociation: If true, associates a firewall policy with an application gateway regardless whether the policy differs from the WAF Config.

FrontendIPConfigurations: Frontend IP addresses of the application gateway resource. For default limits, see Application Gateway limits.

FrontendPorts: Frontend ports of the application gateway resource. For default limits, see Application Gateway limits.

GatewayIPConfigurations: Subnets of the application gateway resource. For default limits, see Application Gateway limits.

GlobalConfiguration: Global Configuration.

HttpListeners: Http listeners of the application gateway resource. For default limits, see Application Gateway limits.

Id: Resource ID.

Identity: The identity of the application gateway, if configured.

Listeners: Listeners of the application gateway resource. For default limits, see Application Gateway limits.

LoadDistributionPolicies: Load distribution policies of the application gateway resource.

Location: Resource location.

Name: Resource name.

OperationalState: Operational state of the application gateway resource.

PrivateEndpointConnections: Private Endpoint connections on application gateway.

PrivateLinkConfigurations: PrivateLink configurations on application gateway.

Probes: Probes of the application gateway resource.

ProvisioningState: The provisioning state of the application gateway resource.

RedirectConfigurations: Redirect configurations of the application gateway resource. For default limits, see Application Gateway limits.

RequestRoutingRules: Request routing rules of the application gateway resource.

ResourceGuid: The resource GUID property of the application gateway resource.

RewriteRuleSets: Rewrite rules for the application gateway resource.

RoutingRules: Routing rules of the application gateway resource.

Sku: SKU of the application gateway resource.

SslCertificates: SSL certificates of the application gateway resource. For default limits, see Application Gateway limits.

SslPolicy: SSL policy of the application gateway resource.

SslProfiles: SSL profiles of the application gateway resource. For default limits, see Application Gateway limits.

Tags: Resource tags.

TrustedClientCertificates: Trusted client certificates of the application gateway resource. For default limits, see Application Gateway limits.

TrustedRootCertificates: Trusted Root certificates of the application gateway resource. For default limits, see Application Gateway limits.

Type: Resource type.

UrlPathMaps: URL path map of the application gateway resource. For default limits, see Application Gateway limits.

WebApplicationFirewallConfiguration: Web application firewall configuration.

Zones: A list of availability zones denoting where the resource needs to come from.

AuthenticationCertificates: Authentication certificates of the application gateway resource. For default limits, see Application Gateway limits.

AutoscaleConfiguration: Autoscale Configuration.

AzureName: The name of the resource in Azure. This is often the same as the name of the resource in Kubernetes but it doesn’t have to be.

BackendAddressPools: Backend address pool of the application gateway resource. For default limits, see Application Gateway limits.

BackendHttpSettingsCollection: Backend http settings of the application gateway resource. For default limits, see Application Gateway limits.

BackendSettingsCollection: Backend settings of the application gateway resource. For default limits, see Application Gateway limits.

CustomErrorConfigurations: Custom error configurations of the application gateway resource.

EnableFips: Whether FIPS is enabled on the application gateway resource.

EnableHttp2: Whether HTTP2 is enabled on the application gateway resource.

FirewallPolicy: Reference to the FirewallPolicy resource.

ForceFirewallPolicyAssociation: If true, associates a firewall policy with an application gateway regardless whether the policy differs from the WAF Config.

FrontendIPConfigurations: Frontend IP addresses of the application gateway resource. For default limits, see Application Gateway limits.

FrontendPorts: Frontend ports of the application gateway resource. For default limits, see Application Gateway limits.

GatewayIPConfigurations: Subnets of the application gateway resource. For default limits, see Application Gateway limits.

GlobalConfiguration: Global Configuration.

HttpListeners: Http listeners of the application gateway resource. For default limits, see Application Gateway limits.

Identity: The identity of the application gateway, if configured.

Listeners: Listeners of the application gateway resource. For default limits, see Application Gateway limits.

LoadDistributionPolicies: Load distribution policies of the application gateway resource.

Location: Resource location.

OperatorSpec: The specification for configuring operator behavior. This field is interpreted by the operator and not passed directly to Azure

Owner: The owner of the resource. The owner controls where the resource goes when it is deployed. The owner also controls the resources lifecycle. When the owner is deleted the resource will also be deleted. Owner is expected to be a reference to a resources.azure.com/ResourceGroup resource

PrivateLinkConfigurations: PrivateLink configurations on application gateway.

Probes: Probes of the application gateway resource.

RedirectConfigurations: Redirect configurations of the application gateway resource. For default limits, see Application Gateway limits.

RequestRoutingRules: Request routing rules of the application gateway resource.

RewriteRuleSets: Rewrite rules for the application gateway resource.

RoutingRules: Routing rules of the application gateway resource.

Sku: SKU of the application gateway resource.

SslCertificates: SSL certificates of the application gateway resource. For default limits, see Application Gateway limits.

SslPolicy: SSL policy of the application gateway resource.

SslProfiles: SSL profiles of the application gateway resource. For default limits, see Application Gateway limits.

Tags: Resource tags.

TrustedClientCertificates: Trusted client certificates of the application gateway resource. For default limits, see Application Gateway limits.

TrustedRootCertificates: Trusted Root certificates of the application gateway resource. For default limits, see Application Gateway limits.

UrlPathMaps: URL path map of the application gateway resource. For default limits, see Application Gateway limits.

WebApplicationFirewallConfiguration: Web application firewall configuration.

Zones: A list of availability zones denoting where the resource needs to come from.

Reference: Resource ID.

Id: Resource ID.

Name: Name of the resource that is unique within a resource group. This name can be used to access the resource.

PrivateIPAllocationMethod: Private IP allocation method.

PublicIPAddress: Reference of the PublicIP resource.

Subnet: Reference of the subnet resource.

Id: Resource ID.

ConfigMapExpressions: configures where to place operator written dynamic ConfigMaps (created with CEL expressions).

SecretExpressions: configures where to place operator written dynamic secrets (created with CEL expressions).

"Deleting"

"Failed"

"Succeeded"

"Updating"

Conditions: The observed state of the resource

DisableCopyPaste: Enable/Disable Copy/Paste feature of the Bastion Host resource.

DnsName: FQDN for the endpoint on which bastion host is accessible.

EnableFileCopy: Enable/Disable File Copy feature of the Bastion Host resource.

EnableIpConnect: Enable/Disable IP Connect feature of the Bastion Host resource.

EnableShareableLink: Enable/Disable Shareable Link of the Bastion Host resource.

EnableTunneling: Enable/Disable Tunneling feature of the Bastion Host resource.

Etag: A unique read-only string that changes whenever the resource is updated.

Id: Resource ID.

IpConfigurations: IP configuration of the Bastion Host resource.

Location: Resource location.

Name: Resource name.

ProvisioningState: The provisioning state of the bastion host resource.

ScaleUnits: The scale units for the Bastion Host resource.

Sku: The sku of this Bastion Host.

Tags: Resource tags.

Type: Resource type.

AzureName: The name of the resource in Azure. This is often the same as the name of the resource in Kubernetes but it doesn’t have to be.

DisableCopyPaste: Enable/Disable Copy/Paste feature of the Bastion Host resource.

DnsName: FQDN for the endpoint on which bastion host is accessible.

EnableFileCopy: Enable/Disable File Copy feature of the Bastion Host resource.

EnableIpConnect: Enable/Disable IP Connect feature of the Bastion Host resource.

EnableShareableLink: Enable/Disable Shareable Link of the Bastion Host resource.

EnableTunneling: Enable/Disable Tunneling feature of the Bastion Host resource.

IpConfigurations: IP configuration of the Bastion Host resource.

Location: Resource location.

OperatorSpec: The specification for configuring operator behavior. This field is interpreted by the operator and not passed directly to Azure

Owner: The owner of the resource. The owner controls where the resource goes when it is deployed. The owner also controls the resources lifecycle. When the owner is deleted the resource will also be deleted. Owner is expected to be a reference to a resources.azure.com/ResourceGroup resource

ScaleUnits: The scale units for the Bastion Host resource.

Sku: The sku of this Bastion Host.

Tags: Resource tags.

"TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA"

"TLS_DHE_DSS_WITH_AES_128_CBC_SHA"

"TLS_DHE_DSS_WITH_AES_128_CBC_SHA256"

"TLS_DHE_DSS_WITH_AES_256_CBC_SHA"

"TLS_DHE_DSS_WITH_AES_256_CBC_SHA256"

"TLS_DHE_RSA_WITH_AES_128_CBC_SHA"

"TLS_DHE_RSA_WITH_AES_128_GCM_SHA256"

"TLS_DHE_RSA_WITH_AES_256_CBC_SHA"

"TLS_DHE_RSA_WITH_AES_256_GCM_SHA384"

"TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA"

"TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256"

"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256"

"TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA"

"TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384"

"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384"

"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA"

"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256"

"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"

"TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA"

"TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384"

"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384"

"TLS_RSA_WITH_3DES_EDE_CBC_SHA"

"TLS_RSA_WITH_AES_128_CBC_SHA"

"TLS_RSA_WITH_AES_128_CBC_SHA256"

"TLS_RSA_WITH_AES_128_GCM_SHA256"

"TLS_RSA_WITH_AES_256_CBC_SHA"

"TLS_RSA_WITH_AES_256_CBC_SHA256"

"TLS_RSA_WITH_AES_256_GCM_SHA384"

"TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA"

"TLS_DHE_DSS_WITH_AES_128_CBC_SHA"

"TLS_DHE_DSS_WITH_AES_128_CBC_SHA256"

"TLS_DHE_DSS_WITH_AES_256_CBC_SHA"

"TLS_DHE_DSS_WITH_AES_256_CBC_SHA256"

"TLS_DHE_RSA_WITH_AES_128_CBC_SHA"

"TLS_DHE_RSA_WITH_AES_128_GCM_SHA256"

"TLS_DHE_RSA_WITH_AES_256_CBC_SHA"

"TLS_DHE_RSA_WITH_AES_256_GCM_SHA384"

"TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA"

"TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256"

"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256"

"TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA"

"TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384"

"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384"

"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA"

"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256"

"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"

"TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA"

"TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384"

"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384"

"TLS_RSA_WITH_3DES_EDE_CBC_SHA"

"TLS_RSA_WITH_AES_128_CBC_SHA"

"TLS_RSA_WITH_AES_128_CBC_SHA256"

"TLS_RSA_WITH_AES_128_GCM_SHA256"

"TLS_RSA_WITH_AES_256_CBC_SHA"

"TLS_RSA_WITH_AES_256_CBC_SHA256"

"TLS_RSA_WITH_AES_256_GCM_SHA384"

Fqdn: Fqdn that resolves to private endpoint ip address.

IpAddresses: A list of private ip addresses of the private endpoint.

ConfigMapExpressions: configures where to place operator written dynamic ConfigMaps (created with CEL expressions).

SecretExpressions: configures where to place operator written dynamic secrets (created with CEL expressions).

Conditions: The observed state of the resource

DomainName: The domain name for the forwarding rule.

Etag: ETag of the forwarding rule.

ForwardingRuleState: The state of forwarding rule.

Id: Fully qualified resource ID for the resource. Ex - /​subscriptions/​{subscriptionId}/​resourceGroups/​{resourceGroupName}/​providers/​{resourceProviderNamespace}/​{resourceType}/​{resourceName}

Metadata: Metadata attached to the forwarding rule.

Name: The name of the resource

ProvisioningState: The current provisioning state of the forwarding rule. This is a read-only property and any attempt to set this value will be ignored.

SystemData: Metadata pertaining to creation and last modification of the resource.

TargetDnsServers: DNS servers to forward the DNS query to.

Type: The type of the resource. E.g. “Microsoft.Compute/virtualMachines” or “Microsoft.Storage/storageAccounts”

AzureName: The name of the resource in Azure. This is often the same as the name of the resource in Kubernetes but it doesn’t have to be.

DomainName: The domain name for the forwarding rule.

ForwardingRuleState: The state of forwarding rule.

Metadata: Metadata attached to the forwarding rule.

OperatorSpec: The specification for configuring operator behavior. This field is interpreted by the operator and not passed directly to Azure

Owner: The owner of the resource. The owner controls where the resource goes when it is deployed. The owner also controls the resources lifecycle. When the owner is deleted the resource will also be deleted. Owner is expected to be a reference to a network.azure.com/DnsForwardingRuleset resource

TargetDnsServers: DNS servers to forward the DNS query to.

ConfigMapExpressions: configures where to place operator written dynamic ConfigMaps (created with CEL expressions).

SecretExpressions: configures where to place operator written dynamic secrets (created with CEL expressions).

Conditions: The observed state of the resource

Etag: ETag of the virtual network link.

Id: Fully qualified resource ID for the resource. Ex - /​subscriptions/​{subscriptionId}/​resourceGroups/​{resourceGroupName}/​providers/​{resourceProviderNamespace}/​{resourceType}/​{resourceName}

Metadata: Metadata attached to the virtual network link.

Name: The name of the resource

ProvisioningState: The current provisioning state of the virtual network link. This is a read-only property and any attempt to set this value will be ignored.

SystemData: Metadata pertaining to creation and last modification of the resource.

Type: The type of the resource. E.g. “Microsoft.Compute/virtualMachines” or “Microsoft.Storage/storageAccounts”

VirtualNetwork: The reference to the virtual network. This cannot be changed after creation.

AzureName: The name of the resource in Azure. This is often the same as the name of the resource in Kubernetes but it doesn’t have to be.

Metadata: Metadata attached to the virtual network link.

OperatorSpec: The specification for configuring operator behavior. This field is interpreted by the operator and not passed directly to Azure

Owner: The owner of the resource. The owner controls where the resource goes when it is deployed. The owner also controls the resources lifecycle. When the owner is deleted the resource will also be deleted. Owner is expected to be a reference to a network.azure.com/DnsForwardingRuleset resource

VirtualNetwork: The reference to the virtual network. This cannot be changed after creation.

ConfigMapExpressions: configures where to place operator written dynamic ConfigMaps (created with CEL expressions).

SecretExpressions: configures where to place operator written dynamic secrets (created with CEL expressions).

Conditions: The observed state of the resource

DnsResolverOutboundEndpoints: The reference to the DNS resolver outbound endpoints that are used to route DNS queries matching the forwarding rules in the ruleset to the target DNS servers.

Etag: ETag of the DNS forwarding ruleset.

Id: Fully qualified resource ID for the resource. Ex - /​subscriptions/​{subscriptionId}/​resourceGroups/​{resourceGroupName}/​providers/​{resourceProviderNamespace}/​{resourceType}/​{resourceName}

Location: The geo-location where the resource lives

Name: The name of the resource

ProvisioningState: The current provisioning state of the DNS forwarding ruleset. This is a read-only property and any attempt to set this value will be ignored.

ResourceGuid: The resourceGuid for the DNS forwarding ruleset.

SystemData: Metadata pertaining to creation and last modification of the resource.

Tags: Resource tags.

Type: The type of the resource. E.g. “Microsoft.Compute/virtualMachines” or “Microsoft.Storage/storageAccounts”

AzureName: The name of the resource in Azure. This is often the same as the name of the resource in Kubernetes but it doesn’t have to be.

DnsResolverOutboundEndpoints: The reference to the DNS resolver outbound endpoints that are used to route DNS queries matching the forwarding rules in the ruleset to the target DNS servers.

Location: The geo-location where the resource lives

OperatorSpec: The specification for configuring operator behavior. This field is interpreted by the operator and not passed directly to Azure

Owner: The owner of the resource. The owner controls where the resource goes when it is deployed. The owner also controls the resources lifecycle. When the owner is deleted the resource will also be deleted. Owner is expected to be a reference to a resources.azure.com/ResourceGroup resource

Tags: Resource tags.

ConfigMapExpressions: configures where to place operator written dynamic ConfigMaps (created with CEL expressions).

SecretExpressions: configures where to place operator written dynamic secrets (created with CEL expressions).

"Connected"

"Disconnected"

Conditions: The observed state of the resource

DnsResolverState: The current status of the DNS resolver. This is a read-only property and any attempt to set this value will be ignored.

Etag: ETag of the DNS resolver.

Id: Fully qualified resource ID for the resource. Ex - /​subscriptions/​{subscriptionId}/​resourceGroups/​{resourceGroupName}/​providers/​{resourceProviderNamespace}/​{resourceType}/​{resourceName}

Location: The geo-location where the resource lives

Name: The name of the resource

ProvisioningState: The current provisioning state of the DNS resolver. This is a read-only property and any attempt to set this value will be ignored.

ResourceGuid: The resourceGuid property of the DNS resolver resource.

SystemData: Metadata pertaining to creation and last modification of the resource.

Tags: Resource tags.

Type: The type of the resource. E.g. “Microsoft.Compute/virtualMachines” or “Microsoft.Storage/storageAccounts”

VirtualNetwork: The reference to the virtual network. This cannot be changed after creation.

AzureName: The name of the resource in Azure. This is often the same as the name of the resource in Kubernetes but it doesn’t have to be.

Location: The geo-location where the resource lives

OperatorSpec: The specification for configuring operator behavior. This field is interpreted by the operator and not passed directly to Azure

Owner: The owner of the resource. The owner controls where the resource goes when it is deployed. The owner also controls the resources lifecycle. When the owner is deleted the resource will also be deleted. Owner is expected to be a reference to a resources.azure.com/ResourceGroup resource

Tags: Resource tags.

VirtualNetwork: The reference to the virtual network. This cannot be changed after creation.

ConfigMapExpressions: configures where to place operator written dynamic ConfigMaps (created with CEL expressions).

SecretExpressions: configures where to place operator written dynamic secrets (created with CEL expressions).

Conditions: The observed state of the resource

Etag: ETag of the inbound endpoint.

Id: Fully qualified resource ID for the resource. Ex - /​subscriptions/​{subscriptionId}/​resourceGroups/​{resourceGroupName}/​providers/​{resourceProviderNamespace}/​{resourceType}/​{resourceName}

IpConfigurations: IP configurations for the inbound endpoint.

Location: The geo-location where the resource lives

Name: The name of the resource

ProvisioningState: The current provisioning state of the inbound endpoint. This is a read-only property and any attempt to set this value will be ignored.

ResourceGuid: The resourceGuid property of the inbound endpoint resource.

SystemData: Metadata pertaining to creation and last modification of the resource.

Tags: Resource tags.

Type: The type of the resource. E.g. “Microsoft.Compute/virtualMachines” or “Microsoft.Storage/storageAccounts”

AzureName: The name of the resource in Azure. This is often the same as the name of the resource in Kubernetes but it doesn’t have to be.

IpConfigurations: IP configurations for the inbound endpoint.

Location: The geo-location where the resource lives

OperatorSpec: The specification for configuring operator behavior. This field is interpreted by the operator and not passed directly to Azure

Owner: The owner of the resource. The owner controls where the resource goes when it is deployed. The owner also controls the resources lifecycle. When the owner is deleted the resource will also be deleted. Owner is expected to be a reference to a network.azure.com/DnsResolver resource

Tags: Resource tags.

ConfigMapExpressions: configures where to place operator written dynamic ConfigMaps (created with CEL expressions).

SecretExpressions: configures where to place operator written dynamic secrets (created with CEL expressions).

Conditions: The observed state of the resource

Etag: ETag of the outbound endpoint.

Id: Fully qualified resource ID for the resource. Ex - /​subscriptions/​{subscriptionId}/​resourceGroups/​{resourceGroupName}/​providers/​{resourceProviderNamespace}/​{resourceType}/​{resourceName}

Location: The geo-location where the resource lives

Name: The name of the resource

ProvisioningState: The current provisioning state of the outbound endpoint. This is a read-only property and any attempt to set this value will be ignored.

ResourceGuid: The resourceGuid property of the outbound endpoint resource.

Subnet: The reference to the subnet used for the outbound endpoint.

SystemData: Metadata pertaining to creation and last modification of the resource.

Tags: Resource tags.

Type: The type of the resource. E.g. “Microsoft.Compute/virtualMachines” or “Microsoft.Storage/storageAccounts”

AzureName: The name of the resource in Azure. This is often the same as the name of the resource in Kubernetes but it doesn’t have to be.

Location: The geo-location where the resource lives

OperatorSpec: The specification for configuring operator behavior. This field is interpreted by the operator and not passed directly to Azure

Owner: The owner of the resource. The owner controls where the resource goes when it is deployed. The owner also controls the resources lifecycle. When the owner is deleted the resource will also be deleted. Owner is expected to be a reference to a network.azure.com/DnsResolver resource

Subnet: The reference to the subnet used for the outbound endpoint.

Tags: Resource tags.

"Canceled"

"Creating"

"Deleting"

"Failed"

"Succeeded"

"Updating"

Name: The name of the extended location.

Type: The type of the extended location.

"EdgeZone"

"EdgeZone"

Name: The name of the extended location.

Type: The type of the extended location.

"Disabled"

"Enabled"

"Disabled"

"Enabled"

Reference: Resource ID.

Id: Resource ID.

"Dynamic"

"Static"

"Dynamic"

"Static"

"IPv4"

"IPv6"

"IPv4"

"IPv6"

PrivateIpAddress: Private IP address of the IP configuration.

PrivateIpAllocationMethod: Private IP address allocation method.

Subnet: The reference to the subnet bound to the IP configuration.

"Dynamic"

"Static"

"Dynamic"

"Static"

PrivateIpAddress: Private IP address of the IP configuration.

PrivateIpAllocationMethod: Private IP address allocation method.

Subnet: The reference to the subnet bound to the IP configuration.

IpTagType: The IP tag type. Example: FirstPartyUsage.

Tag: The value of the IP tag associated with the public IP. Example: SQL.

IpTagType: The IP tag type. Example: FirstPartyUsage.

Tag: The value of the IP tag associated with the public IP. Example: SQL.

Type: The type of identity used for the resource. The type ‘SystemAssigned, UserAssigned’ includes both an implicitly created identity and a set of user assigned identities. The type ‘None’ will remove any identities from the virtual machine.

UserAssignedIdentities: The list of user identities associated with resource. The user identity dictionary key references will be ARM resource ids in the form: ‘/​subscriptions/​{subscriptionId}/​resourceGroups/​{resourceGroupName}/​providers/​Microsoft.ManagedIdentity/​userAssignedIdentities/​{identityName}’.

PrincipalId: The principal id of the system assigned identity. This property will only be provided for a system assigned identity.

TenantId: The tenant id of the system assigned identity. This property will only be provided for a system assigned identity.

Type: The type of identity used for the resource. The type ‘SystemAssigned, UserAssigned’ includes both an implicitly created identity and a set of user assigned identities. The type ‘None’ will remove any identities from the virtual machine.

UserAssignedIdentities: The list of user identities associated with resource. The user identity dictionary key references will be ARM resource ids in the form: ‘/​subscriptions/​{subscriptionId}/​resourceGroups/​{resourceGroupName}/​providers/​Microsoft.ManagedIdentity/​userAssignedIdentities/​{identityName}’.

"None"

"SystemAssigned"

"SystemAssigned, UserAssigned"

"UserAssigned"

"None"

"SystemAssigned"

"SystemAssigned, UserAssigned"

"UserAssigned"

ClientId: The client id of user assigned identity.

PrincipalId: The principal id of user assigned identity.

ConfigMapExpressions: configures where to place operator written dynamic ConfigMaps (created with CEL expressions).

SecretExpressions: configures where to place operator written dynamic secrets (created with CEL expressions).

Name: Name of Nat Gateway SKU.

"Standard"

"Standard"

Name: Name of Nat Gateway SKU.

Reference: Resource ID.

Conditions: The observed state of the resource

Etag: A unique read-only string that changes whenever the resource is updated.

Id: Resource ID.

IdleTimeoutInMinutes: The idle timeout of the nat gateway.

Location: Resource location.

Name: Resource name.

ProvisioningState: The provisioning state of the NAT gateway resource.

PublicIpAddresses: An array of public ip addresses associated with the nat gateway resource.

PublicIpPrefixes: An array of public ip prefixes associated with the nat gateway resource.

ResourceGuid: The resource GUID property of the NAT gateway resource.

Sku: The nat gateway SKU.

Subnets: An array of references to the subnets using this nat gateway resource.

Tags: Resource tags.

Type: Resource type.

Zones: A list of availability zones denoting the zone in which Nat Gateway should be deployed.

Id: Resource ID.

AzureName: The name of the resource in Azure. This is often the same as the name of the resource in Kubernetes but it doesn’t have to be.

IdleTimeoutInMinutes: The idle timeout of the nat gateway.

Location: Resource location.

OperatorSpec: The specification for configuring operator behavior. This field is interpreted by the operator and not passed directly to Azure

Owner: The owner of the resource. The owner controls where the resource goes when it is deployed. The owner also controls the resources lifecycle. When the owner is deleted the resource will also be deleted. Owner is expected to be a reference to a resources.azure.com/ResourceGroup resource

PublicIpAddresses: An array of public ip addresses associated with the nat gateway resource.

PublicIpPrefixes: An array of public ip prefixes associated with the nat gateway resource.

Sku: The nat gateway SKU.

Tags: Resource tags.

Zones: A list of availability zones denoting the zone in which Nat Gateway should be deployed.

Id: Resource ID.

Id: Resource ID.

"AppGwSslPolicy20150501"

"AppGwSslPolicy20170401"

"AppGwSslPolicy20170401S"

"AppGwSslPolicy20220101"

"AppGwSslPolicy20220101S"

"AppGwSslPolicy20150501"

"AppGwSslPolicy20170401"

"AppGwSslPolicy20170401S"

"AppGwSslPolicy20220101"

"AppGwSslPolicy20220101S"

Name: Name of the resource that is unique within a resource group. This name can be used to access the resource.

PrivateDnsZoneReference: The resource id of the private dns zone.

Name: Name of the resource that is unique within a resource group. This name can be used to access the resource.

PrivateDnsZoneId: The resource id of the private dns zone.

RecordSets: A collection of information regarding a recordSet, holding information to identify private resources.

Id: Resource ID.

GroupId: The ID of a group obtained from the remote resource that this private endpoint should connect to.

MemberName: The member name of a group obtained from the remote resource that this private endpoint should connect to.

Name: The name of the resource that is unique within a resource group.

PrivateIPAddress: A private ip address obtained from the private endpoint’s subnet.

Etag: A unique read-only string that changes whenever the resource is updated.

GroupId: The ID of a group obtained from the remote resource that this private endpoint should connect to.

MemberName: The member name of a group obtained from the remote resource that this private endpoint should connect to.

Name: The name of the resource that is unique within a resource group.

PrivateIPAddress: A private ip address obtained from the private endpoint’s subnet.

Type: The resource type.

PrimaryNicPrivateIpAddress: indicates where the PrimaryNicPrivateIpAddress config map should be placed. If omitted, no config map will be created.

ConfigMapExpressions: configures where to place operator written dynamic ConfigMaps (created with CEL expressions).

ConfigMaps: configures where to place operator written ConfigMaps.

SecretExpressions: configures where to place operator written dynamic secrets (created with CEL expressions).

"Deleting"

"Failed"