managedClusters.json

{
  "swagger": "2.0",
  "info": {
    "title": "ContainerServiceClient",
    "description": "The Container Service Client.",
    "version": "2023-02-02-preview"
  },
  "host": "management.azure.com",
  "schemes": [
    "https"
  ],
  "consumes": [
    "application/json"
  ],
  "produces": [
    "application/json"
  ],
  "security": [
    {
      "azure_auth": [
        "user_impersonation"
      ]
    }
  ],
  "securityDefinitions": {
    "azure_auth": {
      "type": "oauth2",
      "authorizationUrl": "https://login.microsoftonline.com/common/oauth2/authorize",
      "flow": "implicit",
      "description": "Azure Active Directory OAuth2 Flow",
      "scopes": {
        "user_impersonation": "impersonate your user account"
      }
    }
  },
  "paths": {
    "/providers/Microsoft.ContainerService/operations": {
      "get": {
        "tags": [
          "ManagedClusters"
        ],
        "operationId": "Operations_List",
        "summary": "Gets a list of operations.",
        "parameters": [
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
          }
        ],
        "responses": {
          "200": {
            "description": "OK",
            "schema": {
              "$ref": "#/definitions/OperationListResult"
            }
          },
          "default": {
            "description": "Error response describing why the operation failed.",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          }
        },
        "x-ms-pageable": {
          "nextLinkName": null
        },
        "x-ms-examples": {
          "List available operations for the container service resource provider": {
            "$ref": "./examples/Operation_List.json"
          }
        }
      }
    },
    "/subscriptions/{subscriptionId}/providers/Microsoft.ContainerService/locations/{location}/osOptions/default": {
      "get": {
        "tags": [
          "ManagedClusters"
        ],
        "operationId": "ManagedClusters_GetOSOptions",
        "summary": "Gets supported OS options in the specified subscription.",
        "parameters": [
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/LocationParameter"
          },
          {
            "$ref": "#/parameters/ResourceTypeParameter"
          }
        ],
        "responses": {
          "default": {
            "description": "Error response describing why the operation failed",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          },
          "200": {
            "description": "OK",
            "schema": {
              "$ref": "#/definitions/OSOptionProfile"
            }
          }
        },
        "x-ms-examples": {
          "Get Container Service OS Options": {
            "$ref": "./examples/ContainerServiceGetOSOptions.json"
          }
        }
      }
    },
    "/subscriptions/{subscriptionId}/providers/Microsoft.ContainerService/managedClusters": {
      "get": {
        "tags": [
          "ManagedClusters"
        ],
        "operationId": "ManagedClusters_List",
        "summary": "Gets a list of managed clusters in the specified subscription.",
        "parameters": [
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
          }
        ],
        "responses": {
          "200": {
            "description": "OK",
            "schema": {
              "$ref": "#/definitions/ManagedClusterListResult"
            }
          },
          "default": {
            "description": "Error response describing why the operation failed.",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          }
        },
        "x-ms-pageable": {
          "nextLinkName": "nextLink"
        },
        "x-ms-examples": {
          "List Managed Clusters": {
            "$ref": "./examples/ManagedClustersList.json"
          }
        }
      }
    },
    "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ContainerService/managedClusters": {
      "get": {
        "tags": [
          "ManagedClusters"
        ],
        "operationId": "ManagedClusters_ListByResourceGroup",
        "summary": "Lists managed clusters in the specified subscription and resource group.",
        "parameters": [
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ResourceGroupNameParameter"
          }
        ],
        "responses": {
          "200": {
            "description": "OK",
            "schema": {
              "$ref": "#/definitions/ManagedClusterListResult"
            }
          },
          "default": {
            "description": "Error response describing why the operation failed.",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          }
        },
        "x-ms-pageable": {
          "nextLinkName": "nextLink"
        },
        "x-ms-examples": {
          "Get Managed Clusters by Resource Group": {
            "$ref": "./examples/ManagedClustersListByResourceGroup.json"
          }
        }
      }
    },
    "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ContainerService/managedClusters/{resourceName}/upgradeProfiles/default": {
      "get": {
        "tags": [
          "ManagedClusters"
        ],
        "operationId": "ManagedClusters_GetUpgradeProfile",
        "summary": "Gets the upgrade profile of a managed cluster.",
        "parameters": [
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ResourceGroupNameParameter"
          },
          {
            "$ref": "#/parameters/ResourceNameParameter"
          }
        ],
        "responses": {
          "200": {
            "description": "OK",
            "schema": {
              "$ref": "#/definitions/ManagedClusterUpgradeProfile"
            }
          },
          "default": {
            "description": "Error response describing why the operation failed.",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          }
        },
        "x-ms-examples": {
          "Get Upgrade Profile for Managed Cluster": {
            "$ref": "./examples/ManagedClustersGetUpgradeProfile.json"
          }
        }
      }
    },
    "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ContainerService/managedClusters/{resourceName}/accessProfiles/{roleName}/listCredential": {
      "post": {
        "deprecated": true,
        "tags": [
          "ManagedClusters"
        ],
        "operationId": "ManagedClusters_GetAccessProfile",
        "summary": "Gets an access profile of a managed cluster.",
        "description": "**WARNING**: This API will be deprecated. Instead use [ListClusterUserCredentials](https://docs.microsoft.com/rest/api/aks/managedclusters/listclusterusercredentials) or [ListClusterAdminCredentials](https://docs.microsoft.com/rest/api/aks/managedclusters/listclusteradmincredentials) .",
        "parameters": [
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ResourceGroupNameParameter"
          },
          {
            "$ref": "#/parameters/ResourceNameParameter"
          },
          {
            "name": "roleName",
            "in": "path",
            "required": true,
            "type": "string",
            "description": "The name of the role for managed cluster accessProfile resource."
          }
        ],
        "responses": {
          "200": {
            "description": "OK",
            "schema": {
              "$ref": "#/definitions/ManagedClusterAccessProfile"
            }
          },
          "default": {
            "description": "Error response describing why the operation failed.",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          }
        },
        "x-ms-examples": {
          "Get Managed Cluster": {
            "$ref": "./examples/ManagedClustersGetAccessProfile.json"
          }
        }
      }
    },
    "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ContainerService/managedClusters/{resourceName}/listClusterAdminCredential": {
      "post": {
        "tags": [
          "ManagedClusters"
        ],
        "operationId": "ManagedClusters_ListClusterAdminCredentials",
        "summary": "Lists the admin credentials of a managed cluster.",
        "parameters": [
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ResourceGroupNameParameter"
          },
          {
            "$ref": "#/parameters/ResourceNameParameter"
          },
          {
            "$ref": "#/parameters/ServerFqdnParameter"
          }
        ],
        "responses": {
          "200": {
            "description": "OK",
            "schema": {
              "$ref": "#/definitions/CredentialResults"
            }
          },
          "default": {
            "description": "Error response describing why the operation failed.",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          }
        },
        "x-ms-examples": {
          "Get Managed Cluster": {
            "$ref": "./examples/ManagedClustersListClusterCredentialResult.json"
          }
        }
      }
    },
    "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ContainerService/managedClusters/{resourceName}/listClusterUserCredential": {
      "post": {
        "tags": [
          "ManagedClusters"
        ],
        "operationId": "ManagedClusters_ListClusterUserCredentials",
        "summary": "Lists the user credentials of a managed cluster.",
        "parameters": [
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ResourceGroupNameParameter"
          },
          {
            "$ref": "#/parameters/ResourceNameParameter"
          },
          {
            "$ref": "#/parameters/ServerFqdnParameter"
          },
          {
            "$ref": "#/parameters/CredentialFormatParameter"
          }
        ],
        "responses": {
          "200": {
            "description": "OK",
            "schema": {
              "$ref": "#/definitions/CredentialResults"
            }
          },
          "default": {
            "description": "Error response describing why the operation failed.",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          }
        },
        "x-ms-examples": {
          "Get Managed Cluster": {
            "$ref": "./examples/ManagedClustersListClusterCredentialResult.json"
          }
        }
      }
    },
    "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ContainerService/managedClusters/{resourceName}/listClusterMonitoringUserCredential": {
      "post": {
        "tags": [
          "ManagedClusters"
        ],
        "operationId": "ManagedClusters_ListClusterMonitoringUserCredentials",
        "summary": "Lists the cluster monitoring user credentials of a managed cluster.",
        "parameters": [
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ResourceGroupNameParameter"
          },
          {
            "$ref": "#/parameters/ResourceNameParameter"
          },
          {
            "$ref": "#/parameters/ServerFqdnParameter"
          }
        ],
        "responses": {
          "200": {
            "description": "OK",
            "schema": {
              "$ref": "#/definitions/CredentialResults"
            }
          },
          "default": {
            "description": "Error response describing why the operation failed.",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          }
        },
        "x-ms-examples": {
          "Get Managed Cluster": {
            "$ref": "./examples/ManagedClustersListClusterCredentialResult.json"
          }
        }
      }
    },
    "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ContainerService/managedClusters/{resourceName}": {
      "get": {
        "tags": [
          "ManagedClusters"
        ],
        "operationId": "ManagedClusters_Get",
        "summary": "Gets a managed cluster.",
        "parameters": [
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ResourceGroupNameParameter"
          },
          {
            "$ref": "#/parameters/ResourceNameParameter"
          }
        ],
        "responses": {
          "200": {
            "description": "OK",
            "schema": {
              "$ref": "#/definitions/ManagedCluster"
            }
          },
          "default": {
            "description": "Error response describing why the operation failed.",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          }
        },
        "x-ms-examples": {
          "Get Managed Cluster": {
            "$ref": "./examples/ManagedClustersGet.json"
          }
        }
      },
      "put": {
        "tags": [
          "ManagedClusters"
        ],
        "operationId": "ManagedClusters_CreateOrUpdate",
        "summary": "Creates or updates a managed cluster.",
        "parameters": [
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ResourceGroupNameParameter"
          },
          {
            "$ref": "#/parameters/ResourceNameParameter"
          },
          {
            "name": "parameters",
            "in": "body",
            "required": true,
            "schema": {
              "$ref": "#/definitions/ManagedCluster"
            },
            "description": "The managed cluster to create or update."
          }
        ],
        "responses": {
          "200": {
            "description": "OK",
            "schema": {
              "$ref": "#/definitions/ManagedCluster"
            }
          },
          "201": {
            "description": "Created",
            "schema": {
              "$ref": "#/definitions/ManagedCluster"
            }
          },
          "default": {
            "description": "Error response describing why the operation failed.",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          }
        },
        "x-ms-long-running-operation": true,
        "x-ms-examples": {
          "Create/Update Managed Cluster": {
            "$ref": "./examples/ManagedClustersCreate_Update.json"
          },
          "Create/Update AAD Managed Cluster with EnableAzureRBAC": {
            "$ref": "./examples/ManagedClustersCreate_UpdateWithEnableAzureRBAC.json"
          },
          "Create/Update Managed Cluster with EnableNamespaceResources": {
            "$ref": "./examples/ManagedClustersCreate_UpdateWithEnableNamespaceResources.json"
          },
          "Create Managed Cluster with PPG": {
            "$ref": "./examples/ManagedClustersCreate_PPG.json"
          },
          "Create Managed Cluster with OSSKU": {
            "$ref": "./examples/ManagedClustersCreate_OSSKU.json"
          },
          "Create Managed Cluster with GPUMIG": {
            "$ref": "./examples/ManagedClustersCreate_GPUMIG.json"
          },
          "Create/Update Managed Cluster with EnableAHUB": {
            "$ref": "./examples/ManagedClustersCreate_UpdateWithAHUB.json"
          },
          "Create Managed Cluster with EncryptionAtHost enabled": {
            "$ref": "./examples/ManagedClustersCreate_EnableEncryptionAtHost.json"
          },
          "Create Managed Cluster with UltraSSD enabled": {
            "$ref": "./examples/ManagedClustersCreate_EnableUltraSSD.json"
          },
          "Create Managed Cluster with PodIdentity enabled": {
            "$ref": "./examples/ManagedClustersCreate_PodIdentity.json"
          },
          "Create Managed Private Cluster with fqdn subdomain specified": {
            "$ref": "./examples/ManagedClustersCreate_PrivateClusterFQDNSubdomain.json"
          },
          "Create Managed Private Cluster with Public FQDN specified": {
            "$ref": "./examples/ManagedClustersCreate_PrivateClusterPublicFQDN.json"
          },
          "Create Managed Cluster with RunCommand disabled": {
            "$ref": "./examples/ManagedClustersCreate_DisableRunCommand.json"
          },
          "Create Managed Cluster with Node Public IP Prefix": {
            "$ref": "./examples/ManagedClustersCreate_NodePublicIPPrefix.json"
          },
          "Create Managed Cluster with Azure KeyVault Secrets Provider Addon": {
            "$ref": "./examples/ManagedClustersCreate_AzureKeyvaultSecretsProvider.json"
          },
          "Create Managed Cluster with FIPS enabled OS": {
            "$ref": "./examples/ManagedClustersCreate_EnabledFIPS.json"
          },
          "Create Managed Cluster with HTTP proxy configured": {
            "$ref": "./examples/ManagedClustersCreate_HTTPProxy.json"
          },
          "Create Managed Cluster with Security Profile configured": {
            "$ref": "./examples/ManagedClustersCreate_SecurityProfile.json"
          },
          "Create Managed Cluster with Web App Routing Ingress Profile configured": {
            "$ref": "./examples/ManagedClustersCreate_IngressProfile_WebAppRouting.json"
          },
          "Create Managed Cluster with AKS-managed NAT gateway as outbound type": {
            "$ref": "./examples/ManagedClustersCreate_ManagedNATGateway.json"
          },
          "Create Managed Cluster with user-assigned NAT gateway as outbound type": {
            "$ref": "./examples/ManagedClustersCreate_UserAssignedNATGateway.json"
          },
          "Create Managed Cluster using an agent pool snapshot": {
            "$ref": "./examples/ManagedClustersCreate_Snapshot.json"
          },
          "Create Managed Cluster using a managed cluster snapshot": {
            "$ref": "./examples/ManagedClustersCreate_MCSnapshot.json"
          },
          "Create/Update Managed Cluster with Windows gMSA enabled": {
            "$ref": "./examples/ManagedClustersCreate_UpdateWindowsGmsa.json"
          },
          "Create/Update Managed Cluster with dual-stack networking": {
            "$ref": "./examples/ManagedClustersCreate_DualStackNetworking.json"
          },
          "Associate Managed Cluster with Capacity Reservation Group": {
            "$ref": "./examples/ManagedClustersAssociate_CRG.json"
          },
          "Create Managed Cluster with Dedicated Host Group": {
            "$ref": "./examples/ManagedClustersCreate_DedicatedHostGroup.json"
          },
          "Create Managed Cluster with CustomCATrustCertificates populated and CustomCATrust enabled": {
            "$ref": "./examples/ManagedClustersCreate_EnableCustomCATrust.json"
          }
        }
      },
      "patch": {
        "tags": [
          "ManagedClusters"
        ],
        "operationId": "ManagedClusters_UpdateTags",
        "summary": "Updates tags on a managed cluster.",
        "parameters": [
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ResourceGroupNameParameter"
          },
          {
            "$ref": "#/parameters/ResourceNameParameter"
          },
          {
            "name": "parameters",
            "in": "body",
            "required": true,
            "schema": {
              "$ref": "#/definitions/TagsObject"
            },
            "description": "Parameters supplied to the Update Managed Cluster Tags operation."
          }
        ],
        "responses": {
          "200": {
            "description": "OK",
            "schema": {
              "$ref": "#/definitions/ManagedCluster"
            }
          },
          "default": {
            "description": "Error response describing why the operation failed.",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          }
        },
        "x-ms-long-running-operation": true,
        "x-ms-examples": {
          "Update Managed Cluster Tags": {
            "$ref": "./examples/ManagedClustersUpdateTags.json"
          }
        }
      },
      "delete": {
        "tags": [
          "ManagedClusters"
        ],
        "operationId": "ManagedClusters_Delete",
        "summary": "Deletes a managed cluster.",
        "parameters": [
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ResourceGroupNameParameter"
          },
          {
            "$ref": "#/parameters/ResourceNameParameter"
          },
          {
            "$ref": "#/parameters/IgnorePodDisruptionBudgetParameter"
          }
        ],
        "responses": {
          "202": {
            "description": "Accepted",
            "headers": {
              "Location": {
                "description": "URL to query for status of the operation.",
                "type": "string"
              }
            }
          },
          "204": {
            "description": "NoContent"
          },
          "default": {
            "description": "Error response describing why the operation failed.",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          }
        },
        "x-ms-long-running-operation": true,
        "x-ms-examples": {
          "Delete Managed Cluster": {
            "$ref": "./examples/ManagedClustersDelete.json"
          }
        }
      }
    },
    "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ContainerService/managedClusters/{resourceName}/maintenanceConfigurations": {
      "get": {
        "tags": [
          "MaintenanceConfigurations"
        ],
        "operationId": "MaintenanceConfigurations_ListByManagedCluster",
        "summary": "Gets a list of maintenance configurations in the specified managed cluster.",
        "parameters": [
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ResourceGroupNameParameter"
          },
          {
            "$ref": "#/parameters/ResourceNameParameter"
          }
        ],
        "responses": {
          "200": {
            "description": "OK",
            "schema": {
              "$ref": "#/definitions/MaintenanceConfigurationListResult"
            }
          },
          "default": {
            "description": "Error response describing why the operation failed.",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          }
        },
        "x-ms-pageable": {
          "nextLinkName": "nextLink"
        },
        "x-ms-examples": {
          "List maintenance configurations by Managed Cluster": {
            "$ref": "./examples/MaintenanceConfigurationsList.json"
          },
          "List maintenance configurations configured with maintenance window by Managed Cluster": {
            "$ref": "./examples/MaintenanceConfigurationsList_MaintenanceWindow.json"
          }
        }
      }
    },
    "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ContainerService/managedClusters/{resourceName}/maintenanceConfigurations/{configName}": {
      "get": {
        "tags": [
          "MaintenanceConfigurations"
        ],
        "operationId": "MaintenanceConfigurations_Get",
        "summary": "Gets the specified maintenance configuration of a managed cluster.",
        "parameters": [
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ResourceGroupNameParameter"
          },
          {
            "$ref": "#/parameters/ResourceNameParameter"
          },
          {
            "name": "configName",
            "in": "path",
            "required": true,
            "type": "string",
            "description": "The name of the maintenance configuration."
          }
        ],
        "responses": {
          "200": {
            "description": "OK",
            "schema": {
              "$ref": "#/definitions/MaintenanceConfiguration"
            }
          },
          "default": {
            "description": "Error response describing why the operation failed.",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          }
        },
        "x-ms-examples": {
          "Get Maintenance Configuration": {
            "$ref": "./examples/MaintenanceConfigurationsGet.json"
          },
          "Get Maintenance Configuration Configured With Maintenance Window": {
            "$ref": "./examples/MaintenanceConfigurationsGet_MaintenanceWindow.json"
          }
        }
      },
      "put": {
        "tags": [
          "MaintenanceConfigurations"
        ],
        "operationId": "MaintenanceConfigurations_CreateOrUpdate",
        "summary": "Creates or updates a maintenance configuration in the specified managed cluster.",
        "parameters": [
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ResourceGroupNameParameter"
          },
          {
            "$ref": "#/parameters/ResourceNameParameter"
          },
          {
            "name": "configName",
            "in": "path",
            "required": true,
            "type": "string",
            "description": "The name of the maintenance configuration."
          },
          {
            "name": "parameters",
            "in": "body",
            "required": true,
            "schema": {
              "$ref": "#/definitions/MaintenanceConfiguration"
            },
            "description": "The maintenance configuration to create or update."
          }
        ],
        "responses": {
          "200": {
            "description": "OK",
            "schema": {
              "$ref": "#/definitions/MaintenanceConfiguration"
            }
          },
          "default": {
            "description": "Error response describing why the operation failed.",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          }
        },
        "x-ms-long-running-operation": false,
        "x-ms-examples": {
          "Create/Update Maintenance Configuration": {
            "$ref": "./examples/MaintenanceConfigurationsCreate_Update.json"
          },
          "Create/Update Maintenance Configuration with Maintenance Window": {
            "$ref": "./examples/MaintenanceConfigurationsCreate_Update_MaintenanceWindow.json"
          }
        }
      },
      "delete": {
        "tags": [
          "MaintenanceConfigurations"
        ],
        "operationId": "MaintenanceConfigurations_Delete",
        "summary": "Deletes a maintenance configuration.",
        "parameters": [
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ResourceGroupNameParameter"
          },
          {
            "$ref": "#/parameters/ResourceNameParameter"
          },
          {
            "name": "configName",
            "in": "path",
            "required": true,
            "type": "string",
            "description": "The name of the maintenance configuration."
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          },
          "204": {
            "description": "NoContent"
          },
          "default": {
            "description": "Error response describing why the operation failed.",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          }
        },
        "x-ms-long-running-operation": false,
        "x-ms-examples": {
          "Delete Maintenance Configuration": {
            "$ref": "./examples/MaintenanceConfigurationsDelete.json"
          },
          "Delete Maintenance Configuration For Node OS Upgrade": {
            "$ref": "./examples/MaintenanceConfigurationsDelete_MaintenanceWindow.json"
          }
        }
      }
    },
    "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ContainerService/managedclusters/{resourceName}/agentPools/{agentPoolName}/abort": {
      "post": {
        "tags": [
          "AgentPools"
        ],
        "operationId": "AgentPools_AbortLatestOperation",
        "summary": "Aborts last operation running on agent pool.",
        "description": "Aborts the currently running operation on the agent pool. The Agent Pool will be moved to a Canceling state and eventually to a Canceled state when cancellation finishes. If the operation completes before cancellation can take place, an error is returned.",
        "parameters": [
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ResourceGroupNameParameter"
          },
          {
            "$ref": "#/parameters/ResourceNameParameter"
          },
          {
            "name": "agentPoolName",
            "in": "path",
            "required": true,
            "type": "string",
            "pattern": "^[a-z][a-z0-9]{0,11}$",
            "minLength": 1,
            "maxLength": 12,
            "description": "The name of the agent pool."
          }
        ],
        "responses": {
          "204": {
            "description": "NoContent"
          },
          "202": {
            "description": "Accepted",
            "headers": {
              "location": {
                "description": "URL to query for status of the operation.",
                "type": "string"
              },
              "Azure-AsyncOperation": {
                "description": "URL to query for status of the operation.",
                "type": "string"
              }
            }
          },
          "default": {
            "description": "Error response describing why the operation failed.",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          }
        },
        "x-ms-long-running-operation": true,
        "x-ms-long-running-operation-options": {
          "final-state-via": "location"
        },
        "x-ms-examples": {
          "Abort operation on agent pool": {
            "$ref": "./examples/AgentPoolsAbortOperation.json"
          }
        }
      }
    },
    "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ContainerService/managedClusters/{resourceName}/agentPools": {
      "get": {
        "tags": [
          "AgentPools"
        ],
        "operationId": "AgentPools_List",
        "summary": "Gets a list of agent pools in the specified managed cluster.",
        "parameters": [
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ResourceGroupNameParameter"
          },
          {
            "$ref": "#/parameters/ResourceNameParameter"
          }
        ],
        "responses": {
          "200": {
            "description": "OK",
            "schema": {
              "$ref": "#/definitions/AgentPoolListResult"
            }
          },
          "default": {
            "description": "Error response describing why the operation failed.",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          }
        },
        "x-ms-pageable": {
          "nextLinkName": "nextLink"
        },
        "x-ms-examples": {
          "List Agent Pools by Managed Cluster": {
            "$ref": "./examples/AgentPoolsList.json"
          }
        }
      }
    },
    "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ContainerService/managedClusters/{resourceName}/agentPools/{agentPoolName}": {
      "get": {
        "tags": [
          "AgentPools"
        ],
        "operationId": "AgentPools_Get",
        "summary": "Gets the specified managed cluster agent pool.",
        "parameters": [
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ResourceGroupNameParameter"
          },
          {
            "$ref": "#/parameters/ResourceNameParameter"
          },
          {
            "name": "agentPoolName",
            "in": "path",
            "required": true,
            "type": "string",
            "pattern": "^[a-z][a-z0-9]{0,11}$",
            "minLength": 1,
            "maxLength": 12,
            "description": "The name of the agent pool."
          }
        ],
        "responses": {
          "200": {
            "description": "OK",
            "schema": {
              "$ref": "#/definitions/AgentPool"
            }
          },
          "default": {
            "description": "Error response describing why the operation failed.",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          }
        },
        "x-ms-examples": {
          "Get Agent Pool": {
            "$ref": "./examples/AgentPoolsGet.json"
          }
        }
      },
      "put": {
        "tags": [
          "AgentPools"
        ],
        "operationId": "AgentPools_CreateOrUpdate",
        "summary": "Creates or updates an agent pool in the specified managed cluster.",
        "parameters": [
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ResourceGroupNameParameter"
          },
          {
            "$ref": "#/parameters/ResourceNameParameter"
          },
          {
            "name": "agentPoolName",
            "in": "path",
            "required": true,
            "type": "string",
            "description": "The name of the agent pool."
          },
          {
            "name": "parameters",
            "in": "body",
            "required": true,
            "schema": {
              "$ref": "#/definitions/AgentPool"
            },
            "description": "The agent pool to create or update."
          }
        ],
        "responses": {
          "200": {
            "description": "OK",
            "schema": {
              "$ref": "#/definitions/AgentPool"
            }
          },
          "201": {
            "description": "Created",
            "schema": {
              "$ref": "#/definitions/AgentPool"
            }
          },
          "default": {
            "description": "Error response describing why the operation failed.",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          }
        },
        "x-ms-long-running-operation": true,
        "x-ms-examples": {
          "Create/Update Agent Pool": {
            "$ref": "./examples/AgentPoolsCreate_Update.json"
          },
          "Update Agent Pool": {
            "$ref": "./examples/AgentPools_Update.json"
          },
          "Create Spot Agent Pool": {
            "$ref": "./examples/AgentPoolsCreate_Spot.json"
          },
          "Create Agent Pool with PPG": {
            "$ref": "./examples/AgentPoolsCreate_PPG.json"
          },
          "Create Agent Pool with OSSKU": {
            "$ref": "./examples/AgentPoolsCreate_OSSKU.json"
          },
          "Create Agent Pool with Windows OSSKU": {
            "$ref": "./examples/AgentPoolsCreate_WindowsOSSKU.json"
          },
          "Create Windows Agent Pool with disabling OutboundNAT": {
            "$ref": "./examples/AgentPoolsCreate_WindowsDisableOutboundNAT.json"
          },
          "Create Agent Pool with GPUMIG": {
            "$ref": "./examples/AgentPoolsCreate_GPUMIG.json"
          },
          "Create Agent Pool with Ephemeral OS Disk": {
            "$ref": "./examples/AgentPoolsCreate_Ephemeral.json"
          },
          "Create Agent Pool with KubeletConfig and LinuxOSConfig": {
            "$ref": "./examples/AgentPoolsCreate_CustomNodeConfig.json"
          },
          "Create Agent Pool with EncryptionAtHost enabled": {
            "$ref": "./examples/AgentPoolsCreate_EnableEncryptionAtHost.json"
          },
          "Create Agent Pool with UltraSSD enabled": {
            "$ref": "./examples/AgentPoolsCreate_EnableUltraSSD.json"
          },
          "Create Agent Pool with FIPS enabled OS": {
            "$ref": "./examples/AgentPoolsCreate_EnableFIPS.json"
          },
          "Create Agent Pool using an agent pool snapshot": {
            "$ref": "./examples/AgentPoolsCreate_Snapshot.json"
          },
          "Create Agent Pool with Krustlet and the WASI runtime": {
            "$ref": "./examples/AgentPoolsCreate_WasmWasi.json"
          },
          "Create Agent Pool with Message of the Day": {
            "$ref": "./examples/AgentPoolsCreate_MessageOfTheDay.json"
          },
          "Stop Agent Pool": {
            "$ref": "./examples/AgentPools_Stop.json"
          },
          "Start Agent Pool": {
            "$ref": "./examples/AgentPools_Start.json"
          },
          "Associate Agent Pool with Capacity Reservation Group": {
            "$ref": "./examples/AgentPoolsAssociate_CRG.json"
          },
          "Create Agent Pool with Dedicated Host Group": {
            "$ref": "./examples/AgentPoolsCreate_DedicatedHostGroup.json"
          },
          "Create Agent Pool with CustomCATrust enabled": {
            "$ref": "./examples/AgentPoolsCreate_EnableCustomCATrust.json"
          }
        }
      },
      "delete": {
        "tags": [
          "AgentPools"
        ],
        "operationId": "AgentPools_Delete",
        "summary": "Deletes an agent pool in the specified managed cluster.",
        "parameters": [
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ResourceGroupNameParameter"
          },
          {
            "$ref": "#/parameters/ResourceNameParameter"
          },
          {
            "name": "agentPoolName",
            "in": "path",
            "required": true,
            "type": "string",
            "description": "The name of the agent pool."
          },
          {
            "$ref": "#/parameters/IgnorePodDisruptionBudgetParameter"
          }
        ],
        "responses": {
          "202": {
            "description": "Accepted",
            "headers": {
              "Location": {
                "description": "URL to query for status of the operation.",
                "type": "string"
              }
            }
          },
          "204": {
            "description": "NoContent"
          },
          "default": {
            "description": "Error response describing why the operation failed.",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          }
        },
        "x-ms-long-running-operation": true,
        "x-ms-examples": {
          "Delete Agent Pool": {
            "$ref": "./examples/AgentPoolsDelete.json"
          },
          "Delete Agent Pool by ignoring PodDisruptionBudget": {
            "$ref": "./examples/AgentPoolsDelete_IgnorePodDisruptionBudget.json"
          }
        }
      }
    },
    "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ContainerService/managedClusters/{resourceName}/agentPools/{agentPoolName}/upgradeProfiles/default": {
      "get": {
        "tags": [
          "AgentPools"
        ],
        "operationId": "AgentPools_GetUpgradeProfile",
        "summary": "Gets the upgrade profile for an agent pool.",
        "parameters": [
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ResourceGroupNameParameter"
          },
          {
            "$ref": "#/parameters/ResourceNameParameter"
          },
          {
            "name": "agentPoolName",
            "in": "path",
            "required": true,
            "type": "string",
            "pattern": "^[a-z][a-z0-9]{0,11}$",
            "minLength": 1,
            "maxLength": 12,
            "description": "The name of the agent pool."
          }
        ],
        "responses": {
          "200": {
            "description": "OK",
            "schema": {
              "$ref": "#/definitions/AgentPoolUpgradeProfile"
            }
          },
          "default": {
            "description": "Error response describing why the operation failed.",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          }
        },
        "x-ms-examples": {
          "Get Upgrade Profile for Agent Pool": {
            "$ref": "./examples/AgentPoolsGetUpgradeProfile.json"
          }
        }
      }
    },
    "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ContainerService/managedClusters/{resourceName}/availableAgentPoolVersions": {
      "get": {
        "tags": [
          "AgentPools"
        ],
        "operationId": "AgentPools_GetAvailableAgentPoolVersions",
        "summary": "Gets a list of supported Kubernetes versions for the specified agent pool.",
        "description": "See [supported Kubernetes versions](https://docs.microsoft.com/azure/aks/supported-kubernetes-versions) for more details about the version lifecycle.",
        "parameters": [
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ResourceGroupNameParameter"
          },
          {
            "$ref": "#/parameters/ResourceNameParameter"
          }
        ],
        "responses": {
          "200": {
            "description": "OK",
            "schema": {
              "$ref": "#/definitions/AgentPoolAvailableVersions"
            }
          },
          "default": {
            "description": "Error response describing why the operation failed.",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          }
        },
        "x-ms-examples": {
          "Get available versions for agent pool": {
            "$ref": "./examples/AgentPoolsGetAgentPoolAvailableVersions.json"
          }
        }
      }
    },
    "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ContainerService/managedClusters/{resourceName}/resetServicePrincipalProfile": {
      "post": {
        "tags": [
          "ManagedClusters"
        ],
        "operationId": "ManagedClusters_ResetServicePrincipalProfile",
        "summary": "Reset the Service Principal Profile of a managed cluster.",
        "description": "This action cannot be performed on a cluster that is not using a service principal",
        "parameters": [
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ResourceGroupNameParameter"
          },
          {
            "$ref": "#/parameters/ResourceNameParameter"
          },
          {
            "name": "parameters",
            "in": "body",
            "required": true,
            "schema": {
              "$ref": "#/definitions/ManagedClusterServicePrincipalProfile"
            },
            "description": "The service principal profile to set on the managed cluster."
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          },
          "202": {
            "description": "Accepted",
            "headers": {
              "Location": {
                "description": "URL to query for status of the operation.",
                "type": "string"
              }
            }
          },
          "default": {
            "description": "Error response describing why the operation failed. If the cluster doesn't exist, 404 (Not found) is returned.",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          }
        },
        "x-ms-long-running-operation": true,
        "x-ms-long-running-operation-options": {
          "final-state-via": "location"
        },
        "x-ms-examples": {
          "Reset Service Principal Profile": {
            "$ref": "./examples/ManagedClustersResetServicePrincipalProfile.json"
          }
        }
      }
    },
    "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ContainerService/managedClusters/{resourceName}/resetAADProfile": {
      "post": {
        "deprecated": true,
        "tags": [
          "ManagedClusters"
        ],
        "operationId": "ManagedClusters_ResetAADProfile",
        "summary": "Reset the AAD Profile of a managed cluster.",
        "description": "**WARNING**: This API will be deprecated. Please see [AKS-managed Azure Active Directory integration](https://aka.ms/aks-managed-aad) to update your cluster with AKS-managed Azure AD.",
        "parameters": [
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ResourceGroupNameParameter"
          },
          {
            "$ref": "#/parameters/ResourceNameParameter"
          },
          {
            "name": "parameters",
            "in": "body",
            "required": true,
            "schema": {
              "$ref": "#/definitions/ManagedClusterAADProfile"
            },
            "description": "The AAD profile to set on the Managed Cluster"
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          },
          "202": {
            "description": "Accepted",
            "headers": {
              "Location": {
                "description": "URL to query for status of the operation.",
                "type": "string"
              }
            }
          },
          "default": {
            "description": "Error response describing why the operation failed. If the cluster doesn't exist, 404 (Not found) is returned.",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          }
        },
        "x-ms-long-running-operation": true,
        "x-ms-long-running-operation-options": {
          "final-state-via": "location"
        },
        "x-ms-examples": {
          "Reset AAD Profile": {
            "$ref": "./examples/ManagedClustersResetAADProfile.json"
          }
        }
      }
    },
    "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ContainerService/managedclusters/{resourceName}/abort": {
      "post": {
        "tags": [
          "ManagedClusters"
        ],
        "operationId": "ManagedClusters_AbortLatestOperation",
        "summary": "Aborts last operation running on managed cluster.",
        "description": "Aborts the currently running operation on the managed cluster. The Managed Cluster will be moved to a Canceling state and eventually to a Canceled state when cancellation finishes. If the operation completes before cancellation can take place, an error is returned.",
        "parameters": [
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ResourceGroupNameParameter"
          },
          {
            "$ref": "#/parameters/ResourceNameParameter"
          }
        ],
        "responses": {
          "204": {
            "description": "NoContent"
          },
          "202": {
            "description": "Accepted",
            "headers": {
              "location": {
                "description": "URL to query for status of the operation.",
                "type": "string"
              },
              "Azure-AsyncOperation": {
                "description": "URL to query for status of the operation.",
                "type": "string"
              }
            }
          },
          "default": {
            "description": "Error response describing why the operation failed.",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          }
        },
        "x-ms-long-running-operation": true,
        "x-ms-long-running-operation-options": {
          "final-state-via": "location"
        },
        "x-ms-examples": {
          "Abort operation on managed cluster": {
            "$ref": "./examples/ManagedClustersAbortOperation.json"
          }
        }
      }
    },
    "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ContainerService/managedClusters/{resourceName}/rotateClusterCertificates": {
      "post": {
        "tags": [
          "ManagedClusters"
        ],
        "operationId": "ManagedClusters_RotateClusterCertificates",
        "summary": "Rotates the certificates of a managed cluster.",
        "description": "See [Certificate rotation](https://docs.microsoft.com/azure/aks/certificate-rotation) for more details about rotating managed cluster certificates.",
        "parameters": [
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ResourceGroupNameParameter"
          },
          {
            "$ref": "#/parameters/ResourceNameParameter"
          }
        ],
        "responses": {
          "202": {
            "description": "Accepted",
            "headers": {
              "Location": {
                "description": "URL to query for status of the operation.",
                "type": "string"
              }
            }
          },
          "204": {
            "description": "NoContent"
          },
          "default": {
            "description": "Error response describing why the operation failed. If the cluster doesn't exist, 404 (Not found) is returned.",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          }
        },
        "x-ms-long-running-operation": true,
        "x-ms-long-running-operation-options": {
          "final-state-via": "location"
        },
        "x-ms-examples": {
          "Rotate Cluster Certificates": {
            "$ref": "./examples/ManagedClustersRotateClusterCertificates.json"
          }
        }
      }
    },
    "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ContainerService/managedClusters/{resourceName}/rotateServiceAccountSigningKeys": {
      "post": {
        "tags": [
          "ManagedClusters"
        ],
        "operationId": "ManagedClusters_RotateServiceAccountSigningKeys",
        "summary": "Rotates the service account signing keys of a managed cluster.",
        "parameters": [
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ResourceGroupNameParameter"
          },
          {
            "$ref": "#/parameters/ResourceNameParameter"
          }
        ],
        "responses": {
          "202": {
            "description": "Accepted",
            "headers": {
              "Location": {
                "description": "URL to query for status of the operation.",
                "type": "string"
              }
            }
          },
          "204": {
            "description": "NoContent"
          },
          "default": {
            "description": "Error response describing why the operation failed. If the cluster doesn't exist, 404 (Not found) is returned.",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          }
        },
        "x-ms-long-running-operation": true,
        "x-ms-long-running-operation-options": {
          "final-state-via": "location"
        },
        "x-ms-examples": {
          "Rotate Cluster Service Account Signing Keys": {
            "$ref": "./examples/ManagedClustersRotateServiceAccountSigningKeys.json"
          }
        }
      }
    },
    "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ContainerService/managedClusters/{resourceName}/stop": {
      "post": {
        "tags": [
          "ManagedClusters"
        ],
        "operationId": "ManagedClusters_Stop",
        "summary": "Stops a Managed Cluster",
        "description": "This can only be performed on Azure Virtual Machine Scale set backed clusters. Stopping a cluster stops the control plane and agent nodes entirely, while maintaining all object and cluster state. A cluster does not accrue charges while it is stopped. See [stopping a cluster](https://docs.microsoft.com/azure/aks/start-stop-cluster) for more details about stopping a cluster.",
        "parameters": [
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ResourceGroupNameParameter"
          },
          {
            "$ref": "#/parameters/ResourceNameParameter"
          }
        ],
        "responses": {
          "202": {
            "description": "Accepted",
            "headers": {
              "Location": {
                "description": "URL to query for status of the operation.",
                "type": "string"
              }
            }
          },
          "204": {
            "description": "NoContent"
          },
          "default": {
            "description": "Error response describing why the operation failed. If the cluster doesn't exist, 404 (Not found) is returned.",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          }
        },
        "x-ms-long-running-operation": true,
        "x-ms-long-running-operation-options": {
          "final-state-via": "location"
        },
        "x-ms-examples": {
          "Stop Managed Cluster": {
            "$ref": "./examples/ManagedClustersStop.json"
          }
        }
      }
    },
    "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ContainerService/managedClusters/{resourceName}/start": {
      "post": {
        "tags": [
          "ManagedClusters"
        ],
        "operationId": "ManagedClusters_Start",
        "summary": "Starts a previously stopped Managed Cluster",
        "description": "See [starting a cluster](https://docs.microsoft.com/azure/aks/start-stop-cluster) for more details about starting a cluster.",
        "parameters": [
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ResourceGroupNameParameter"
          },
          {
            "$ref": "#/parameters/ResourceNameParameter"
          }
        ],
        "responses": {
          "202": {
            "description": "Accepted",
            "headers": {
              "Location": {
                "description": "URL to query for status of the operation.",
                "type": "string"
              }
            }
          },
          "204": {
            "description": "NoContent"
          },
          "default": {
            "description": "Error response describing why the operation failed. If the cluster doesn't exist, 404 (Not found) is returned.",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          }
        },
        "x-ms-long-running-operation": true,
        "x-ms-long-running-operation-options": {
          "final-state-via": "location"
        },
        "x-ms-examples": {
          "Start Managed Cluster": {
            "$ref": "./examples/ManagedClustersStart.json"
          }
        }
      }
    },
    "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ContainerService/managedClusters/{resourceName}/privateEndpointConnections": {
      "get": {
        "tags": [
          "PrivateEndpointConnections"
        ],
        "operationId": "PrivateEndpointConnections_List",
        "summary": "Gets a list of private endpoint connections in the specified managed cluster.",
        "description": "To learn more about private clusters, see: https://docs.microsoft.com/azure/aks/private-clusters",
        "parameters": [
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ResourceGroupNameParameter"
          },
          {
            "$ref": "#/parameters/ResourceNameParameter"
          }
        ],
        "responses": {
          "200": {
            "description": "OK",
            "schema": {
              "$ref": "#/definitions/PrivateEndpointConnectionListResult"
            }
          },
          "default": {
            "description": "Error response describing why the operation failed.",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          }
        },
        "x-ms-examples": {
          "List Private Endpoint Connections by Managed Cluster": {
            "$ref": "./examples/PrivateEndpointConnectionsList.json"
          }
        }
      }
    },
    "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ContainerService/managedClusters/{resourceName}/privateEndpointConnections/{privateEndpointConnectionName}": {
      "get": {
        "tags": [
          "PrivateEndpointConnections"
        ],
        "operationId": "PrivateEndpointConnections_Get",
        "summary": "Gets the specified private endpoint connection.",
        "description": "To learn more about private clusters, see: https://docs.microsoft.com/azure/aks/private-clusters",
        "parameters": [
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ResourceGroupNameParameter"
          },
          {
            "$ref": "#/parameters/ResourceNameParameter"
          },
          {
            "name": "privateEndpointConnectionName",
            "in": "path",
            "required": true,
            "type": "string",
            "description": "The name of the private endpoint connection."
          }
        ],
        "responses": {
          "200": {
            "description": "OK",
            "schema": {
              "$ref": "#/definitions/PrivateEndpointConnection"
            }
          },
          "default": {
            "description": "Error response describing why the operation failed.",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          }
        },
        "x-ms-examples": {
          "Get Private Endpoint Connection": {
            "$ref": "./examples/PrivateEndpointConnectionsGet.json"
          }
        }
      },
      "put": {
        "tags": [
          "PrivateEndpointConnections"
        ],
        "operationId": "PrivateEndpointConnections_Update",
        "summary": "Updates a private endpoint connection.",
        "parameters": [
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ResourceGroupNameParameter"
          },
          {
            "$ref": "#/parameters/ResourceNameParameter"
          },
          {
            "name": "privateEndpointConnectionName",
            "in": "path",
            "required": true,
            "type": "string",
            "description": "The name of the private endpoint connection."
          },
          {
            "name": "parameters",
            "in": "body",
            "required": true,
            "schema": {
              "$ref": "#/definitions/PrivateEndpointConnection"
            },
            "description": "The updated private endpoint connection."
          }
        ],
        "responses": {
          "200": {
            "description": "OK",
            "schema": {
              "$ref": "#/definitions/PrivateEndpointConnection"
            }
          },
          "default": {
            "description": "Error response describing why the operation failed.",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          }
        },
        "x-ms-examples": {
          "Update Private Endpoint Connection": {
            "$ref": "./examples/PrivateEndpointConnectionsUpdate.json"
          }
        }
      },
      "delete": {
        "tags": [
          "PrivateEndpointConnections"
        ],
        "operationId": "PrivateEndpointConnections_Delete",
        "summary": "Deletes a private endpoint connection.",
        "parameters": [
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ResourceGroupNameParameter"
          },
          {
            "$ref": "#/parameters/ResourceNameParameter"
          },
          {
            "name": "privateEndpointConnectionName",
            "in": "path",
            "required": true,
            "type": "string",
            "description": "The name of the private endpoint connection."
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          },
          "204": {
            "description": "No Content -- The private endpoint connection does not exist."
          },
          "default": {
            "description": "Error response describing why the operation failed.",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          }
        },
        "x-ms-long-running-operation": true,
        "x-ms-examples": {
          "Delete Private Endpoint Connection": {
            "$ref": "./examples/PrivateEndpointConnectionsDelete.json"
          }
        }
      }
    },
    "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ContainerService/managedClusters/{resourceName}/agentPools/{agentPoolName}/upgradeNodeImageVersion": {
      "post": {
        "tags": [
          "AgentPools"
        ],
        "operationId": "AgentPools_UpgradeNodeImageVersion",
        "summary": "Upgrades the node image version of an agent pool to the latest.",
        "description": "Upgrading the node image version of an agent pool applies the newest OS and runtime updates to the nodes. AKS provides one new image per week with the latest updates. For more details on node image versions, see: https://docs.microsoft.com/azure/aks/node-image-upgrade",
        "parameters": [
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ResourceGroupNameParameter"
          },
          {
            "$ref": "#/parameters/ResourceNameParameter"
          },
          {
            "name": "agentPoolName",
            "in": "path",
            "required": true,
            "type": "string",
            "pattern": "^[a-z][a-z0-9]{0,11}$",
            "minLength": 1,
            "maxLength": 12,
            "description": "The name of the agent pool."
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          },
          "202": {
            "description": "Accepted",
            "headers": {
              "Azure-AsyncOperation": {
                "description": "URL to query for status of the operation.",
                "type": "string"
              }
            },
            "schema": {
              "$ref": "#/definitions/AgentPool"
            }
          },
          "default": {
            "description": "Error response describing why the operation failed.",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          }
        },
        "x-ms-long-running-operation": true,
        "x-ms-long-running-operation-options": {
          "final-state-via": "location"
        },
        "x-ms-examples": {
          "Upgrade Agent Pool Node Image Version": {
            "$ref": "./examples/AgentPoolsUpgradeNodeImageVersion.json"
          }
        }
      }
    },
    "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ContainerService/managedClusters/{resourceName}/privateLinkResources": {
      "get": {
        "tags": [
          "privateLinkResources"
        ],
        "operationId": "PrivateLinkResources_List",
        "summary": "Gets a list of private link resources in the specified managed cluster.",
        "description": "To learn more about private clusters, see: https://docs.microsoft.com/azure/aks/private-clusters",
        "parameters": [
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ResourceGroupNameParameter"
          },
          {
            "$ref": "#/parameters/ResourceNameParameter"
          }
        ],
        "responses": {
          "200": {
            "description": "OK",
            "schema": {
              "$ref": "#/definitions/PrivateLinkResourcesListResult"
            }
          },
          "default": {
            "description": "Error response describing why the operation failed.",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          }
        },
        "x-ms-examples": {
          "List Private Link Resources by Managed Cluster": {
            "$ref": "./examples/PrivateLinkResourcesList.json"
          }
        }
      }
    },
    "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ContainerService/managedClusters/{resourceName}/resolvePrivateLinkServiceId": {
      "post": {
        "tags": [
          "resolvePrivateLinkServiceId"
        ],
        "operationId": "ResolvePrivateLinkServiceId_POST",
        "summary": "Gets the private link service ID for the specified managed cluster.",
        "parameters": [
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ResourceGroupNameParameter"
          },
          {
            "$ref": "#/parameters/ResourceNameParameter"
          },
          {
            "name": "parameters",
            "in": "body",
            "required": true,
            "schema": {
              "$ref": "#/definitions/PrivateLinkResource"
            },
            "description": "Parameters required in order to resolve a private link service ID."
          }
        ],
        "responses": {
          "200": {
            "description": "OK",
            "schema": {
              "$ref": "#/definitions/PrivateLinkResource"
            }
          },
          "default": {
            "description": "Error response describing why the operation failed.",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          }
        },
        "x-ms-examples": {
          "Resolve the Private Link Service ID for Managed Cluster": {
            "$ref": "./examples/ResolvePrivateLinkServiceId.json"
          }
        }
      }
    },
    "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ContainerService/managedClusters/{resourceName}/runCommand": {
      "post": {
        "tags": [
          "ManagedClusters"
        ],
        "operationId": "ManagedClusters_RunCommand",
        "summary": "Submits a command to run against the Managed Cluster.",
        "description": "AKS will create a pod to run the command. This is primarily useful for private clusters. For more information see [AKS Run Command](https://docs.microsoft.com/azure/aks/private-clusters#aks-run-command-preview).",
        "parameters": [
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ResourceGroupNameParameter"
          },
          {
            "$ref": "#/parameters/ResourceNameParameter"
          },
          {
            "name": "requestPayload",
            "in": "body",
            "required": true,
            "schema": {
              "$ref": "#/definitions/RunCommandRequest"
            },
            "description": "The run command request"
          }
        ],
        "responses": {
          "202": {
            "description": "Accepted",
            "headers": {
              "Location": {
                "description": "URL to query for status of the operation.",
                "type": "string"
              }
            }
          },
          "200": {
            "description": "command finished with async pattern, tracking by location header. !!! this is for autorest only, you never get 200 from this api !!!",
            "schema": {
              "$ref": "#/definitions/RunCommandResult"
            }
          },
          "default": {
            "description": "Error response describing why the operation failed. If the cluster doesn't exist, 404 (Not found) is returned.",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          }
        },
        "x-ms-long-running-operation": true,
        "x-ms-long-running-operation-options": {
          "final-state-via": "location"
        },
        "x-ms-examples": {
          "submitNewCommand": {
            "$ref": "./examples/RunCommandRequest.json"
          }
        }
      }
    },
    "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ContainerService/managedClusters/{resourceName}/commandResults/{commandId}": {
      "get": {
        "tags": [
          "ManagedClusters"
        ],
        "operationId": "ManagedClusters_GetCommandResult",
        "summary": "Gets the results of a command which has been run on the Managed Cluster.",
        "parameters": [
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ResourceGroupNameParameter"
          },
          {
            "$ref": "#/parameters/ResourceNameParameter"
          },
          {
            "name": "commandId",
            "in": "path",
            "required": true,
            "type": "string",
            "description": "Id of the command."
          }
        ],
        "responses": {
          "202": {
            "description": "command running in progress",
            "headers": {
              "Location": {
                "description": "URL to query for status of the operation.",
                "type": "string"
              }
            }
          },
          "200": {
            "description": "command finished",
            "schema": {
              "$ref": "#/definitions/RunCommandResult"
            }
          },
          "default": {
            "description": "Error response describing why the operation failed. If the cluster doesn't exist, 404 (Not found) is returned.",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          }
        },
        "x-ms-examples": {
          "commandSucceedResult": {
            "$ref": "./examples/RunCommandResultSucceed.json"
          },
          "commandFailedResult": {
            "$ref": "./examples/RunCommandResultFailed.json"
          }
        }
      }
    },
    "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ContainerService/managedClusters/{resourceName}/outboundNetworkDependenciesEndpoints": {
      "get": {
        "tags": [
          "ManagedClusters"
        ],
        "operationId": "ManagedClusters_ListOutboundNetworkDependenciesEndpoints",
        "summary": "Gets a list of egress endpoints (network endpoints of all outbound dependencies) in the specified managed cluster.",
        "description": "Gets a list of egress endpoints (network endpoints of all outbound dependencies) in the specified managed cluster. The operation returns properties of each egress endpoint.",
        "parameters": [
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ResourceGroupNameParameter"
          },
          {
            "$ref": "#/parameters/ResourceNameParameter"
          }
        ],
        "responses": {
          "200": {
            "description": "OK",
            "schema": {
              "$ref": "#/definitions/OutboundEnvironmentEndpointCollection"
            }
          },
          "default": {
            "description": "Error response describing why the operation failed.",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          }
        },
        "x-ms-examples": {
          "List OutboundNetworkDependenciesEndpoints by Managed Cluster": {
            "$ref": "./examples/OutboundNetworkDependenciesEndpointsList.json"
          }
        },
        "x-ms-pageable": {
          "nextLinkName": "nextLink"
        }
      }
    },
    "/subscriptions/{subscriptionId}/providers/Microsoft.ContainerService/snapshots": {
      "get": {
        "tags": [
          "Snapshots"
        ],
        "operationId": "Snapshots_List",
        "summary": "Gets a list of snapshots in the specified subscription.",
        "parameters": [
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
          }
        ],
        "responses": {
          "200": {
            "description": "OK",
            "schema": {
              "$ref": "#/definitions/SnapshotListResult"
            }
          },
          "default": {
            "description": "Error response describing why the operation failed.",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          }
        },
        "x-ms-pageable": {
          "nextLinkName": "nextLink"
        },
        "x-ms-examples": {
          "List Snapshots": {
            "$ref": "./examples/SnapshotsList.json"
          }
        }
      }
    },
    "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ContainerService/snapshots": {
      "get": {
        "tags": [
          "Snapshots"
        ],
        "operationId": "Snapshots_ListByResourceGroup",
        "summary": "Lists snapshots in the specified subscription and resource group.",
        "parameters": [
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ResourceGroupNameParameter"
          }
        ],
        "responses": {
          "200": {
            "description": "OK",
            "schema": {
              "$ref": "#/definitions/SnapshotListResult"
            }
          },
          "default": {
            "description": "Error response describing why the operation failed.",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          }
        },
        "x-ms-pageable": {
          "nextLinkName": "nextLink"
        },
        "x-ms-examples": {
          "List Snapshots by Resource Group": {
            "$ref": "./examples/SnapshotsListByResourceGroup.json"
          }
        }
      }
    },
    "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ContainerService/snapshots/{resourceName}": {
      "get": {
        "tags": [
          "Snapshots"
        ],
        "operationId": "Snapshots_Get",
        "summary": "Gets a snapshot.",
        "parameters": [
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ResourceGroupNameParameter"
          },
          {
            "$ref": "#/parameters/ResourceNameParameter"
          }
        ],
        "responses": {
          "200": {
            "description": "OK",
            "schema": {
              "$ref": "#/definitions/Snapshot"
            }
          },
          "default": {
            "description": "Error response describing why the operation failed.",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          }
        },
        "x-ms-examples": {
          "Get Snapshot": {
            "$ref": "./examples/SnapshotsGet.json"
          }
        }
      },
      "put": {
        "tags": [
          "Snapshots"
        ],
        "operationId": "Snapshots_CreateOrUpdate",
        "summary": "Creates or updates a snapshot.",
        "parameters": [
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ResourceGroupNameParameter"
          },
          {
            "$ref": "#/parameters/ResourceNameParameter"
          },
          {
            "name": "parameters",
            "in": "body",
            "required": true,
            "schema": {
              "$ref": "#/definitions/Snapshot"
            },
            "description": "The snapshot to create or update."
          }
        ],
        "responses": {
          "200": {
            "description": "OK",
            "schema": {
              "$ref": "#/definitions/Snapshot"
            }
          },
          "201": {
            "description": "Created",
            "schema": {
              "$ref": "#/definitions/Snapshot"
            }
          },
          "default": {
            "description": "Error response describing why the operation failed.",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          }
        },
        "x-ms-examples": {
          "Create/Update Snapshot": {
            "$ref": "./examples/SnapshotsCreate.json"
          }
        }
      },
      "patch": {
        "tags": [
          "Snapshots"
        ],
        "operationId": "Snapshots_UpdateTags",
        "summary": "Updates tags on a snapshot.",
        "parameters": [
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ResourceGroupNameParameter"
          },
          {
            "$ref": "#/parameters/ResourceNameParameter"
          },
          {
            "name": "parameters",
            "in": "body",
            "required": true,
            "schema": {
              "$ref": "#/definitions/TagsObject"
            },
            "description": "Parameters supplied to the Update snapshot Tags operation."
          }
        ],
        "responses": {
          "200": {
            "description": "OK",
            "schema": {
              "$ref": "#/definitions/Snapshot"
            }
          },
          "default": {
            "description": "Error response describing why the operation failed.",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          }
        },
        "x-ms-examples": {
          "Update Snapshot Tags": {
            "$ref": "./examples/SnapshotsUpdateTags.json"
          }
        }
      },
      "delete": {
        "tags": [
          "Snapshots"
        ],
        "operationId": "Snapshots_Delete",
        "summary": "Deletes a snapshot.",
        "parameters": [
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ResourceGroupNameParameter"
          },
          {
            "$ref": "#/parameters/ResourceNameParameter"
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          },
          "204": {
            "description": "NoContent"
          },
          "default": {
            "description": "Error response describing why the operation failed.",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          }
        },
        "x-ms-examples": {
          "Delete Snapshot": {
            "$ref": "./examples/SnapshotsDelete.json"
          }
        }
      }
    },
    "/subscriptions/{subscriptionId}/providers/Microsoft.ContainerService/managedclustersnapshots": {
      "get": {
        "tags": [
          "ManagedClusterSnapshots"
        ],
        "operationId": "ManagedClusterSnapshots_List",
        "summary": "Gets a list of managed cluster snapshots in the specified subscription.",
        "parameters": [
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
          }
        ],
        "responses": {
          "200": {
            "description": "OK",
            "schema": {
              "$ref": "#/definitions/ManagedClusterSnapshotListResult"
            }
          },
          "default": {
            "description": "Error response describing why the operation failed.",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          }
        },
        "x-ms-pageable": {
          "nextLinkName": "nextLink"
        },
        "x-ms-examples": {
          "List Managed Cluster Snapshots": {
            "$ref": "./examples/ManagedClusterSnapshotsList.json"
          }
        }
      }
    },
    "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ContainerService/managedclustersnapshots": {
      "get": {
        "tags": [
          "ManagedClusterSnapshots"
        ],
        "operationId": "ManagedClusterSnapshots_ListByResourceGroup",
        "summary": "Lists managed cluster snapshots in the specified subscription and resource group.",
        "parameters": [
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ResourceGroupNameParameter"
          }
        ],
        "responses": {
          "200": {
            "description": "OK",
            "schema": {
              "$ref": "#/definitions/ManagedClusterSnapshotListResult"
            }
          },
          "default": {
            "description": "Error response describing why the operation failed.",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          }
        },
        "x-ms-pageable": {
          "nextLinkName": "nextLink"
        },
        "x-ms-examples": {
          "List Managed Cluster Snapshots by Resource Group": {
            "$ref": "./examples/ManagedClusterSnapshotsListByResourceGroup.json"
          }
        }
      }
    },
    "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ContainerService/managedclustersnapshots/{resourceName}": {
      "get": {
        "tags": [
          "ManagedClusterSnapshots"
        ],
        "operationId": "ManagedClusterSnapshots_Get",
        "summary": "Gets a managed cluster snapshot.",
        "parameters": [
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ResourceGroupNameParameter"
          },
          {
            "$ref": "#/parameters/ResourceNameParameter"
          }
        ],
        "responses": {
          "200": {
            "description": "OK",
            "schema": {
              "$ref": "#/definitions/ManagedClusterSnapshot"
            }
          },
          "default": {
            "description": "Error response describing why the operation failed.",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          }
        },
        "x-ms-examples": {
          "Get Managed Cluster Snapshot": {
            "$ref": "./examples/ManagedClusterSnapshotsGet.json"
          }
        }
      },
      "put": {
        "tags": [
          "ManagedClusterSnapshots"
        ],
        "operationId": "ManagedClusterSnapshots_CreateOrUpdate",
        "summary": "Creates or updates a managed cluster snapshot.",
        "parameters": [
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ResourceGroupNameParameter"
          },
          {
            "$ref": "#/parameters/ResourceNameParameter"
          },
          {
            "name": "parameters",
            "in": "body",
            "required": true,
            "schema": {
              "$ref": "#/definitions/ManagedClusterSnapshot"
            },
            "description": "The managed cluster snapshot to create or update."
          }
        ],
        "responses": {
          "200": {
            "description": "OK",
            "schema": {
              "$ref": "#/definitions/ManagedClusterSnapshot"
            }
          },
          "201": {
            "description": "Created",
            "schema": {
              "$ref": "#/definitions/ManagedClusterSnapshot"
            }
          },
          "default": {
            "description": "Error response describing why the operation failed.",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          }
        },
        "x-ms-examples": {
          "Create/Update Managed Cluster Snapshot": {
            "$ref": "./examples/ManagedClusterSnapshotsCreate.json"
          }
        }
      },
      "patch": {
        "tags": [
          "ManagedClusterSnapshots"
        ],
        "operationId": "ManagedClusterSnapshots_UpdateTags",
        "summary": "Updates tags on a managed cluster snapshot.",
        "parameters": [
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ResourceGroupNameParameter"
          },
          {
            "$ref": "#/parameters/ResourceNameParameter"
          },
          {
            "name": "parameters",
            "in": "body",
            "required": true,
            "schema": {
              "$ref": "#/definitions/TagsObject"
            },
            "description": "Parameters supplied to the Update managed cluster snapshot Tags operation."
          }
        ],
        "responses": {
          "200": {
            "description": "OK",
            "schema": {
              "$ref": "#/definitions/ManagedClusterSnapshot"
            }
          },
          "default": {
            "description": "Error response describing why the operation failed.",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          }
        },
        "x-ms-examples": {
          "Update Managed Cluster Snapshot Tags": {
            "$ref": "./examples/ManagedClusterSnapshotsUpdateTags.json"
          }
        }
      },
      "delete": {
        "tags": [
          "ManagedClusterSnapshots"
        ],
        "operationId": "ManagedClusterSnapshots_Delete",
        "summary": "Deletes a managed cluster snapshot.",
        "parameters": [
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ResourceGroupNameParameter"
          },
          {
            "$ref": "#/parameters/ResourceNameParameter"
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          },
          "204": {
            "description": "NoContent"
          },
          "default": {
            "description": "Error response describing why the operation failed.",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          }
        },
        "x-ms-examples": {
          "Delete Managed Cluster Snapshot": {
            "$ref": "./examples/ManagedClusterSnapshotsDelete.json"
          }
        }
      }
    },
    "/subscriptions/{subscriptionId}/providers/Microsoft.ContainerService/locations/{location}/trustedAccessRoles": {
      "get": {
        "tags": [
          "TrustedAccess"
        ],
        "operationId": "TrustedAccessRoles_List",
        "summary": "List supported trusted access roles.",
        "parameters": [
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/LocationParameter"
          }
        ],
        "responses": {
          "200": {
            "description": "OK",
            "schema": {
              "$ref": "#/definitions/TrustedAccessRoleListResult"
            }
          },
          "default": {
            "description": "Error details",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          }
        },
        "x-ms-pageable": {
          "nextLinkName": "nextLink"
        },
        "x-ms-examples": {
          "List trusted access roles": {
            "$ref": "./examples/TrustedAccessRoles_List.json"
          }
        }
      }
    },
    "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ContainerService/managedClusters/{resourceName}/trustedAccessRoleBindings": {
      "get": {
        "tags": [
          "TrustedAccess"
        ],
        "operationId": "TrustedAccessRoleBindings_List",
        "summary": "List trusted access role bindings.",
        "parameters": [
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ResourceGroupNameParameter"
          },
          {
            "$ref": "#/parameters/ResourceNameParameter"
          }
        ],
        "responses": {
          "200": {
            "description": "OK",
            "schema": {
              "$ref": "#/definitions/TrustedAccessRoleBindingListResult"
            }
          },
          "default": {
            "description": "Error details",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          }
        },
        "x-ms-pageable": {
          "nextLinkName": "nextLink"
        },
        "x-ms-examples": {
          "List trusted access role bindings": {
            "$ref": "./examples/TrustedAccessRoleBindings_List.json"
          }
        }
      }
    },
    "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ContainerService/managedClusters/{resourceName}/trustedAccessRoleBindings/{trustedAccessRoleBindingName}": {
      "get": {
        "tags": [
          "TrustedAccess"
        ],
        "operationId": "TrustedAccessRoleBindings_Get",
        "summary": "Get a trusted access role binding.",
        "parameters": [
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ResourceGroupNameParameter"
          },
          {
            "$ref": "#/parameters/ResourceNameParameter"
          },
          {
            "$ref": "#/parameters/TrustedAccessRoleBindingNameParameter"
          }
        ],
        "responses": {
          "200": {
            "description": "OK",
            "schema": {
              "$ref": "#/definitions/TrustedAccessRoleBinding"
            }
          },
          "default": {
            "description": "Error details",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          }
        },
        "x-ms-examples": {
          "Get a trusted access role binding": {
            "$ref": "./examples/TrustedAccessRoleBindings_Get.json"
          }
        }
      },
      "put": {
        "tags": [
          "TrustedAccess"
        ],
        "operationId": "TrustedAccessRoleBindings_CreateOrUpdate",
        "summary": "Create or update a trusted access role binding",
        "parameters": [
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ResourceGroupNameParameter"
          },
          {
            "$ref": "#/parameters/ResourceNameParameter"
          },
          {
            "$ref": "#/parameters/TrustedAccessRoleBindingNameParameter"
          },
          {
            "name": "trustedAccessRoleBinding",
            "in": "body",
            "required": true,
            "schema": {
              "$ref": "#/definitions/TrustedAccessRoleBinding"
            },
            "description": "A trusted access role binding"
          }
        ],
        "responses": {
          "200": {
            "description": "OK",
            "schema": {
              "$ref": "#/definitions/TrustedAccessRoleBinding"
            }
          },
          "default": {
            "description": "Error details",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          }
        },
        "x-ms-examples": {
          "Create or update a trusted access role binding": {
            "$ref": "./examples/TrustedAccessRoleBindings_CreateOrUpdate.json"
          }
        }
      },
      "delete": {
        "tags": [
          "TrustedAccess"
        ],
        "operationId": "TrustedAccessRoleBindings_Delete",
        "summary": "Delete a trusted access role binding.",
        "parameters": [
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ApiVersionParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/SubscriptionIdParameter"
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v3/types.json#/parameters/ResourceGroupNameParameter"
          },
          {
            "$ref": "#/parameters/ResourceNameParameter"
          },
          {
            "$ref": "#/parameters/TrustedAccessRoleBindingNameParameter"
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          },
          "204": {
            "description": "NoContent"
          },
          "default": {
            "description": "Error details",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          }
        },
        "x-ms-examples": {
          "Delete a trusted access role binding": {
            "$ref": "./examples/TrustedAccessRoleBindings_Delete.json"
          }
        }
      }
    }
  },
  "definitions": {
    "OperationListResult": {
      "type": "object",
      "properties": {
        "value": {
          "type": "array",
          "readOnly": true,
          "items": {
            "$ref": "#/definitions/OperationValue"
          },
          "x-ms-identifiers": [],
          "description": "The list of operations"
        }
      },
      "description": "The List Operation response."
    },
    "OperationValue": {
      "type": "object",
      "properties": {
        "origin": {
          "type": "string",
          "readOnly": true,
          "description": "The origin of the operation."
        },
        "name": {
          "type": "string",
          "readOnly": true,
          "description": "The name of the operation."
        },
        "display": {
          "x-ms-client-flatten": true,
          "$ref": "#/definitions/OperationValueDisplay",
          "description": "Describes the properties of a Operation Value Display."
        }
      },
      "description": "Describes the properties of a Operation value."
    },
    "OperationValueDisplay": {
      "type": "object",
      "properties": {
        "operation": {
          "type": "string",
          "readOnly": true,
          "description": "The display name of the operation."
        },
        "resource": {
          "type": "string",
          "readOnly": true,
          "description": "The display name of the resource the operation applies to."
        },
        "description": {
          "type": "string",
          "readOnly": true,
          "description": "The description of the operation."
        },
        "provider": {
          "type": "string",
          "readOnly": true,
          "description": "The resource provider for the operation."
        }
      },
      "description": "Describes the properties of a Operation Value Display."
    },
    "SubResource": {
      "type": "object",
      "properties": {
        "id": {
          "readOnly": true,
          "type": "string",
          "description": "Resource ID."
        },
        "name": {
          "readOnly": true,
          "type": "string",
          "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource."
        },
        "type": {
          "readOnly": true,
          "type": "string",
          "description": "Resource type"
        }
      },
      "description": "Reference to another subresource.",
      "x-ms-azure-resource": true
    },
    "TagsObject": {
      "type": "object",
      "properties": {
        "tags": {
          "type": "object",
          "additionalProperties": {
            "type": "string"
          },
          "description": "Resource tags."
        }
      },
      "description": "Tags object for patch operations."
    },
    "ContainerServiceOSDisk": {
      "type": "integer",
      "format": "int32",
      "maximum": 2048,
      "minimum": 0,
      "description": "OS Disk Size in GB to be used to specify the disk size for every machine in the master/agent pool. If you specify 0, it will apply the default osDisk size according to the vmSize specified."
    },
    "ManagedClusterServicePrincipalProfile": {
      "type": "object",
      "properties": {
        "clientId": {
          "type": "string",
          "description": "The ID for the service principal."
        },
        "secret": {
          "type": "string",
          "x-ms-secret": true,
          "description": "The secret password associated with the service principal in plain text."
        }
      },
      "description": "Information about a service principal identity for the cluster to use for manipulating Azure APIs.",
      "required": [
        "clientId"
      ]
    },
    "ManagedClusterAgentPoolProfileProperties": {
      "type": "object",
      "properties": {
        "count": {
          "type": "integer",
          "format": "int32",
          "description": "Number of agents (VMs) to host docker containers. Allowed values must be in the range of 0 to 1000 (inclusive) for user pools and in the range of 1 to 1000 (inclusive) for system pools. The default value is 1."
        },
        "vmSize": {
          "type": "string",
          "title": "The size of the agent pool VMs.",
          "description": "VM size availability varies by region. If a node contains insufficient compute resources (memory, cpu, etc) pods might fail to run correctly. For more details on restricted VM sizes, see: https://docs.microsoft.com/azure/aks/quotas-skus-regions"
        },
        "osDiskSizeGB": {
          "$ref": "#/definitions/ContainerServiceOSDisk"
        },
        "osDiskType": {
          "$ref": "#/definitions/OSDiskType"
        },
        "kubeletDiskType": {
          "$ref": "#/definitions/KubeletDiskType"
        },
        "workloadRuntime": {
          "$ref": "#/definitions/WorkloadRuntime"
        },
        "messageOfTheDay": {
          "type": "string",
          "title": "Message of the day for Linux nodes, base64-encoded.",
          "description": "A base64-encoded string which will be written to /etc/motd after decoding. This allows customization of the message of the day for Linux nodes. It must not be specified for Windows nodes. It must be a static string (i.e., will be printed raw and not be executed as a script)."
        },
        "vnetSubnetID": {
          "type": "string",
          "format": "arm-id",
          "x-ms-arm-id-details": {
            "allowedResources": [
              {
                "type": "Microsoft.Network/virtualNetworks/subnets"
              }
            ]
          },
          "title": "The ID of the subnet which agent pool nodes and optionally pods will join on startup.",
          "description": "If this is not specified, a VNET and subnet will be generated and used. If no podSubnetID is specified, this applies to nodes and pods, otherwise it applies to just nodes. This is of the form: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/virtualNetworks/{virtualNetworkName}/subnets/{subnetName}"
        },
        "podSubnetID": {
          "type": "string",
          "format": "arm-id",
          "x-ms-arm-id-details": {
            "allowedResources": [
              {
                "type": "Microsoft.Network/virtualNetworks/subnets"
              }
            ]
          },
          "title": "The ID of the subnet which pods will join when launched.",
          "description": "If omitted, pod IPs are statically assigned on the node subnet (see vnetSubnetID for more details). This is of the form: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/virtualNetworks/{virtualNetworkName}/subnets/{subnetName}"
        },
        "maxPods": {
          "type": "integer",
          "format": "int32",
          "description": "The maximum number of pods that can run on a node."
        },
        "osType": {
          "$ref": "#/definitions/OSType"
        },
        "osSKU": {
          "$ref": "#/definitions/OSSKU"
        },
        "maxCount": {
          "type": "integer",
          "format": "int32",
          "description": "The maximum number of nodes for auto-scaling"
        },
        "minCount": {
          "type": "integer",
          "format": "int32",
          "description": "The minimum number of nodes for auto-scaling"
        },
        "enableAutoScaling": {
          "type": "boolean",
          "description": "Whether to enable auto-scaler"
        },
        "scaleDownMode": {
          "$ref": "#/definitions/ScaleDownMode",
          "title": "The scale down mode to use when scaling the Agent Pool.",
          "description": "This also effects the cluster autoscaler behavior. If not specified, it defaults to Delete."
        },
        "type": {
          "$ref": "#/definitions/AgentPoolType"
        },
        "mode": {
          "$ref": "#/definitions/AgentPoolMode"
        },
        "orchestratorVersion": {
          "type": "string",
          "title": "The version of Kubernetes specified by the user.",
          "description": "Both patch version <major.minor.patch> and <major.minor> are supported. When <major.minor> is specified, the latest supported patch version is chosen automatically. Updating the agent pool with the same <major.minor> once it has been created will not trigger an upgrade, even if a newer patch version is available. As a best practice, you should upgrade all node pools in an AKS cluster to the same Kubernetes version. The node pool version must have the same major version as the control plane. The node pool minor version must be within two minor versions of the control plane version. The node pool version cannot be greater than the control plane version. For more information see [upgrading a node pool](https://docs.microsoft.com/azure/aks/use-multiple-node-pools#upgrade-a-node-pool)."
        },
        "currentOrchestratorVersion": {
          "readOnly": true,
          "type": "string",
          "title": "The version of Kubernetes running on the Agent Pool.",
          "description": "If orchestratorVersion was a fully specified version <major.minor.patch>, this field will be exactly equal to it. If orchestratorVersion was <major.minor>, this field will contain the full <major.minor.patch> version being used."
        },
        "nodeImageVersion": {
          "readOnly": true,
          "type": "string",
          "description": "The version of node image"
        },
        "upgradeSettings": {
          "$ref": "#/definitions/AgentPoolUpgradeSettings",
          "description": "Settings for upgrading the agentpool"
        },
        "provisioningState": {
          "readOnly": true,
          "type": "string",
          "description": "The current deployment or provisioning state."
        },
        "powerState": {
          "title": "Whether the Agent Pool is running or stopped.",
          "description": "When an Agent Pool is first created it is initially Running. The Agent Pool can be stopped by setting this field to Stopped. A stopped Agent Pool stops all of its VMs and does not accrue billing charges. An Agent Pool can only be stopped if it is Running and provisioning state is Succeeded",
          "$ref": "#/definitions/PowerState"
        },
        "availabilityZones": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "description": "The list of Availability zones to use for nodes. This can only be specified if the AgentPoolType property is 'VirtualMachineScaleSets'."
        },
        "enableNodePublicIP": {
          "type": "boolean",
          "title": "Whether each node is allocated its own public IP.",
          "description": "Some scenarios may require nodes in a node pool to receive their own dedicated public IP addresses. A common scenario is for gaming workloads, where a console needs to make a direct connection to a cloud virtual machine to minimize hops. For more information see [assigning a public IP per node](https://docs.microsoft.com/azure/aks/use-multiple-node-pools#assign-a-public-ip-per-node-for-your-node-pools). The default is false."
        },
        "enableCustomCATrust": {
          "type": "boolean",
          "title": "Whether to enable Custom CA Trust feature.",
          "description": "When set to true, AKS adds a label to the node indicating that the feature is enabled and deploys a daemonset along with host services to sync custom certificate authorities from user-provided list of base64 encoded certificates into node trust stores. Defaults to false."
        },
        "nodePublicIPPrefixID": {
          "type": "string",
          "format": "arm-id",
          "x-ms-arm-id-details": {
            "allowedResources": [
              {
                "type": "Microsoft.Network/publicIPPrefixes"
              }
            ]
          },
          "title": "The public IP prefix ID which VM nodes should use IPs from.",
          "description": "This is of the form: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/publicIPPrefixes/{publicIPPrefixName}"
        },
        "scaleSetPriority": {
          "$ref": "#/definitions/ScaleSetPriority",
          "description": "The Virtual Machine Scale Set priority. If not specified, the default is 'Regular'."
        },
        "scaleSetEvictionPolicy": {
          "$ref": "#/definitions/ScaleSetEvictionPolicy",
          "title": "The Virtual Machine Scale Set eviction policy to use.",
          "description": "This cannot be specified unless the scaleSetPriority is 'Spot'. If not specified, the default is 'Delete'."
        },
        "spotMaxPrice": {
          "$ref": "#/definitions/SpotMaxPrice",
          "title": "The max price (in US Dollars) you are willing to pay for spot instances. Possible values are any decimal value greater than zero or -1 which indicates default price to be up-to on-demand.",
          "description": "Possible values are any decimal value greater than zero or -1 which indicates the willingness to pay any on-demand price. For more details on spot pricing, see [spot VMs pricing](https://docs.microsoft.com/azure/virtual-machines/spot-vms#pricing)"
        },
        "tags": {
          "type": "object",
          "additionalProperties": {
            "type": "string"
          },
          "description": "The tags to be persisted on the agent pool virtual machine scale set."
        },
        "nodeLabels": {
          "type": "object",
          "additionalProperties": {
            "type": "string"
          },
          "description": "The node labels to be persisted across all nodes in agent pool."
        },
        "nodeTaints": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "description": "The taints added to new nodes during node pool create and scale. For example, key=value:NoSchedule."
        },
        "proximityPlacementGroupID": {
          "$ref": "#/definitions/ProximityPlacementGroupID",
          "description": "The ID for Proximity Placement Group."
        },
        "kubeletConfig": {
          "$ref": "#/definitions/KubeletConfig",
          "description": "The Kubelet configuration on the agent pool nodes."
        },
        "linuxOSConfig": {
          "$ref": "#/definitions/LinuxOSConfig",
          "description": "The OS configuration of Linux agent nodes."
        },
        "enableEncryptionAtHost": {
          "type": "boolean",
          "title": "Whether to enable host based OS and data drive encryption.",
          "description": "This is only supported on certain VM sizes and in certain Azure regions. For more information, see: https://docs.microsoft.com/azure/aks/enable-host-encryption"
        },
        "enableUltraSSD": {
          "type": "boolean",
          "description": "Whether to enable UltraSSD"
        },
        "enableFIPS": {
          "type": "boolean",
          "title": "Whether to use a FIPS-enabled OS.",
          "description": "See [Add a FIPS-enabled node pool](https://docs.microsoft.com/azure/aks/use-multiple-node-pools#add-a-fips-enabled-node-pool-preview) for more details."
        },
        "gpuInstanceProfile": {
          "$ref": "#/definitions/GPUInstanceProfile",
          "description": "GPUInstanceProfile to be used to specify GPU MIG instance profile for supported GPU VM SKU."
        },
        "creationData": {
          "$ref": "#/definitions/CreationData",
          "description": "CreationData to be used to specify the source Snapshot ID if the node pool will be created/upgraded using a snapshot."
        },
        "capacityReservationGroupID": {
          "$ref": "#/definitions/CapacityReservationGroupID",
          "description": "AKS will associate the specified agent pool with the Capacity Reservation Group."
        },
        "hostGroupID": {
          "type": "string",
          "format": "arm-id",
          "x-ms-arm-id-details": {
            "allowedResources": [
              {
                "type": "Microsoft.Compute/hostGroups"
              }
            ]
          },
          "title": "The fully qualified resource ID of the Dedicated Host Group to provision virtual machines from, used only in creation scenario and not allowed to changed once set.",
          "description": "This is of the form: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Compute/hostGroups/{hostGroupName}. For more information see [Azure dedicated hosts](https://docs.microsoft.com/azure/virtual-machines/dedicated-hosts)."
        },
        "windowsProfile": {
          "$ref": "#/definitions/AgentPoolWindowsProfile",
          "description": "The Windows agent pool's specific profile."
        },
        "networkProfile": {
          "$ref": "#/definitions/AgentPoolNetworkProfile",
          "description": "Network-related settings of an agent pool."
        }
      },
      "description": "Properties for the container service agent pool profile."
    },
    "AgentPoolNetworkProfile": {
      "type": "object",
      "properties": {
        "nodePublicIPTags": {
          "$ref": "#/definitions/NodePublicIPTags",
          "description": "IPTags of instance-level public IPs."
        },
        "allowedHostPorts": {
          "type": "array",
          "description": "The port ranges that are allowed to access. The specified ranges are allowed to overlap.",
          "items": {
            "$ref": "#/definitions/PortRange"
          },
          "x-ms-identifiers": []
        },
        "applicationSecurityGroups": {
          "type": "array",
          "items": {
            "type": "string",
            "format": "arm-id",
            "x-ms-arm-id-details": {
              "allowedResources": [
                {
                  "type": "Microsoft.Network/applicationSecurityGroups"
                }
              ]
            }
          },
          "description": "The IDs of the application security groups which agent pool will associate when created."
        }
      },
      "description": "Network settings of an agent pool."
    },
    "NodePublicIPTags": {
      "type": "array",
      "items": {
        "$ref": "#/definitions/IPTag"
      },
      "x-ms-identifiers": [],
      "description": "The list of tags associated with the node public IP address."
    },
    "IPTag": {
      "type": "object",
      "properties": {
        "ipTagType": {
          "type": "string",
          "description": "The IP tag type. Example: RoutingPreference."
        },
        "tag": {
          "type": "string",
          "description": "The value of the IP tag associated with the public IP. Example: Internet."
        }
      },
      "description": "Contains the IPTag associated with the object."
    },
    "PortRange": {
      "type": "object",
      "description": "The port range.",
      "properties": {
        "portStart": {
          "type": "integer",
          "format": "int32",
          "minimum": 1,
          "maximum": 65535,
          "description": "The minimum port that is included in the range. It should be ranged from 1 to 65535, and be less than or equal to portEnd."
        },
        "portEnd": {
          "type": "integer",
          "format": "int32",
          "minimum": 1,
          "maximum": 65535,
          "description": "The maximum port that is included in the range. It should be ranged from 1 to 65535, and be greater than or equal to portStart."
        },
        "protocol": {
          "type": "string",
          "description": "The network protocol of the port.",
          "enum": [
            "TCP",
            "UDP"
          ],
          "x-ms-enum": {
            "name": "Protocol",
            "modelAsString": true,
            "values": [
              {
                "value": "TCP",
                "description": "TCP protocol."
              },
              {
                "value": "UDP",
                "description": "UDP protocol."
              }
            ]
          }
        }
      }
    },
    "ManagedClusterAgentPoolProfile": {
      "type": "object",
      "allOf": [
        {
          "$ref": "#/definitions/ManagedClusterAgentPoolProfileProperties"
        }
      ],
      "properties": {
        "name": {
          "type": "string",
          "title": "Unique name of the agent pool profile in the context of the subscription and resource group.",
          "description": "Windows agent pool names must be 6 characters or less.",
          "pattern": "^[a-z][a-z0-9]{0,11}$"
        }
      },
      "required": [
        "name"
      ],
      "description": "Profile for the container service agent pool."
    },
    "AgentPoolType": {
      "type": "string",
      "enum": [
        "VirtualMachineScaleSets",
        "AvailabilitySet"
      ],
      "x-ms-enum": {
        "name": "AgentPoolType",
        "modelAsString": true,
        "values": [
          {
            "value": "VirtualMachineScaleSets",
            "description": "Create an Agent Pool backed by a Virtual Machine Scale Set."
          },
          {
            "value": "AvailabilitySet",
            "description": "Use of this is strongly discouraged."
          }
        ]
      },
      "description": "The type of Agent Pool."
    },
    "AgentPoolMode": {
      "type": "string",
      "enum": [
        "System",
        "User"
      ],
      "x-ms-enum": {
        "name": "AgentPoolMode",
        "modelAsString": true,
        "values": [
          {
            "value": "System",
            "description": "System agent pools are primarily for hosting critical system pods such as CoreDNS and metrics-server. System agent pools osType must be Linux. System agent pools VM SKU must have at least 2vCPUs and 4GB of memory."
          },
          {
            "value": "User",
            "description": "User agent pools are primarily for hosting your application pods."
          }
        ]
      },
      "title": "The mode of an agent pool.",
      "description": "A cluster must have at least one 'System' Agent Pool at all times. For additional information on agent pool restrictions and best practices, see: https://docs.microsoft.com/azure/aks/use-system-pools"
    },
    "AgentPoolListResult": {
      "type": "object",
      "properties": {
        "value": {
          "type": "array",
          "items": {
            "$ref": "#/definitions/AgentPool"
          },
          "description": "The list of agent pools."
        },
        "nextLink": {
          "type": "string",
          "description": "The URL to get the next set of agent pool results.",
          "readOnly": true
        }
      },
      "description": "The response from the List Agent Pools operation."
    },
    "AgentPoolUpgradeSettings": {
      "type": "object",
      "properties": {
        "maxSurge": {
          "type": "string",
          "title": "The maximum number or percentage of nodes that are surged during upgrade.",
          "description": "This can either be set to an integer (e.g. '5') or a percentage (e.g. '50%'). If a percentage is specified, it is the percentage of the total agent pool size at the time of the upgrade. For percentages, fractional nodes are rounded up. If not specified, the default is 1. For more information, including best practices, see: https://docs.microsoft.com/azure/aks/upgrade-cluster#customize-node-surge-upgrade"
        }
      },
      "description": "Settings for upgrading an agentpool"
    },
    "AgentPool": {
      "type": "object",
      "allOf": [
        {
          "$ref": "#/definitions/SubResource"
        }
      ],
      "properties": {
        "properties": {
          "description": "Properties of an agent pool.",
          "$ref": "#/definitions/ManagedClusterAgentPoolProfileProperties",
          "x-ms-client-flatten": true
        }
      },
      "description": "Agent Pool."
    },
    "ManagedClusterWindowsProfile": {
      "type": "object",
      "properties": {
        "adminUsername": {
          "type": "string",
          "description": "Specifies the name of the administrator account. <br><br> **Restriction:** Cannot end in \".\" <br><br> **Disallowed values:** \"administrator\", \"admin\", \"user\", \"user1\", \"test\", \"user2\", \"test1\", \"user3\", \"admin1\", \"1\", \"123\", \"a\", \"actuser\", \"adm\", \"admin2\", \"aspnet\", \"backup\", \"console\", \"david\", \"guest\", \"john\", \"owner\", \"root\", \"server\", \"sql\", \"support\", \"support_388945a0\", \"sys\", \"test2\", \"test3\", \"user4\", \"user5\". <br><br> **Minimum-length:** 1 character <br><br> **Max-length:** 20 characters"
        },
        "adminPassword": {
          "type": "string",
          "description": "Specifies the password of the administrator account. <br><br> **Minimum-length:** 8 characters <br><br> **Max-length:** 123 characters <br><br> **Complexity requirements:** 3 out of 4 conditions below need to be fulfilled <br> Has lower characters <br>Has upper characters <br> Has a digit <br> Has a special character (Regex match [\\W_]) <br><br> **Disallowed values:** \"abc@123\", \"P@$$w0rd\", \"P@ssw0rd\", \"P@ssword123\", \"Pa$$word\", \"pass@word1\", \"Password!\", \"Password1\", \"Password22\", \"iloveyou!\""
        },
        "licenseType": {
          "type": "string",
          "enum": [
            "None",
            "Windows_Server"
          ],
          "x-ms-enum": {
            "name": "licenseType",
            "modelAsString": true,
            "values": [
              {
                "value": "None",
                "description": "No additional licensing is applied."
              },
              {
                "value": "Windows_Server",
                "description": "Enables Azure Hybrid User Benefits for Windows VMs."
              }
            ]
          },
          "description": "The license type to use for Windows VMs. See [Azure Hybrid User Benefits](https://azure.microsoft.com/pricing/hybrid-benefit/faq/) for more details."
        },
        "enableCSIProxy": {
          "type": "boolean",
          "title": "Whether to enable CSI proxy.",
          "description": "For more details on CSI proxy, see the [CSI proxy GitHub repo](https://github.com/kubernetes-csi/csi-proxy)."
        },
        "gmsaProfile": {
          "$ref": "#/definitions/WindowsGmsaProfile",
          "description": "The Windows gMSA Profile in the Managed Cluster."
        }
      },
      "required": [
        "adminUsername"
      ],
      "description": "Profile for Windows VMs in the managed cluster."
    },
    "WindowsGmsaProfile": {
      "type": "object",
      "properties": {
        "enabled": {
          "type": "boolean",
          "title": "Whether to enable Windows gMSA.",
          "description": "Specifies whether to enable Windows gMSA in the managed cluster."
        },
        "dnsServer": {
          "type": "string",
          "description": "Specifies the DNS server for Windows gMSA. <br><br> Set it to empty if you have configured the DNS server in the vnet which is used to create the managed cluster."
        },
        "rootDomainName": {
          "type": "string",
          "description": "Specifies the root domain name for Windows gMSA. <br><br> Set it to empty if you have configured the DNS server in the vnet which is used to create the managed cluster."
        }
      },
      "description": "Windows gMSA Profile in the managed cluster."
    },
    "ContainerServiceLinuxProfile": {
      "type": "object",
      "properties": {
        "adminUsername": {
          "type": "string",
          "description": "The administrator username to use for Linux VMs.",
          "pattern": "^[A-Za-z][-A-Za-z0-9_]*$"
        },
        "ssh": {
          "$ref": "#/definitions/ContainerServiceSshConfiguration",
          "description": "The SSH configuration for Linux-based VMs running on Azure."
        }
      },
      "required": [
        "adminUsername",
        "ssh"
      ],
      "description": "Profile for Linux VMs in the container service cluster."
    },
    "ManagedClusterNodeResourceGroupProfile": {
      "type": "object",
      "properties": {
        "restrictionLevel": {
          "type": "string",
          "enum": [
            "Unrestricted",
            "ReadOnly"
          ],
          "x-ms-enum": {
            "name": "RestrictionLevel",
            "modelAsString": true,
            "values": [
              {
                "value": "Unrestricted",
                "description": "All RBAC permissions are allowed on the managed node resource group"
              },
              {
                "value": "ReadOnly",
                "description": "Only */read RBAC permissions allowed on the managed node resource group"
              }
            ]
          },
          "description": "The restriction level applied to the cluster's node resource group"
        }
      },
      "description": "Node resource group lockdown profile for a managed cluster."
    },
    "ContainerServiceNetworkProfile": {
      "type": "object",
      "properties": {
        "networkPlugin": {
          "$ref": "#/definitions/NetworkPlugin",
          "description": "Network plugin used for building the Kubernetes network."
        },
        "networkPluginMode": {
          "$ref": "#/definitions/NetworkPluginMode",
          "description": "Network plugin mode used for building the Kubernetes network."
        },
        "networkPolicy": {
          "$ref": "#/definitions/NetworkPolicy",
          "description": "Network policy used for building the Kubernetes network."
        },
        "networkMode": {
          "$ref": "#/definitions/NetworkMode",
          "title": "The network mode Azure CNI is configured with.",
          "description": "This cannot be specified if networkPlugin is anything other than 'azure'."
        },
        "networkDataplane": {
          "$ref": "#/definitions/NetworkDataplane",
          "description": "Network dataplane used in the Kubernetes cluster."
        },
        "podCidr": {
          "type": "string",
          "pattern": "^([0-9]{1,3}\\.){3}[0-9]{1,3}(\\/([0-9]|[1-2][0-9]|3[0-2]))?$",
          "default": "10.244.0.0/16",
          "description": "A CIDR notation IP range from which to assign pod IPs when kubenet is used."
        },
        "serviceCidr": {
          "type": "string",
          "pattern": "^([0-9]{1,3}\\.){3}[0-9]{1,3}(\\/([0-9]|[1-2][0-9]|3[0-2]))?$",
          "default": "10.0.0.0/16",
          "description": "A CIDR notation IP range from which to assign service cluster IPs. It must not overlap with any Subnet IP ranges."
        },
        "dnsServiceIP": {
          "type": "string",
          "pattern": "^(?:(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\\.){3}(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)$",
          "default": "10.0.0.10",
          "description": "An IP address assigned to the Kubernetes DNS service. It must be within the Kubernetes service address range specified in serviceCidr."
        },
        "dockerBridgeCidr": {
          "type": "string",
          "pattern": "^([0-9]{1,3}\\.){3}[0-9]{1,3}(\\/([0-9]|[1-2][0-9]|3[0-2]))?$",
          "default": "172.17.0.1/16",
          "description": "A CIDR notation IP range assigned to the Docker bridge network. It must not overlap with any Subnet IP ranges or the Kubernetes service address range."
        },
        "outboundType": {
          "type": "string",
          "enum": [
            "loadBalancer",
            "userDefinedRouting",
            "managedNATGateway",
            "userAssignedNATGateway"
          ],
          "x-ms-enum": {
            "name": "outboundType",
            "modelAsString": true,
            "values": [
              {
                "value": "loadBalancer",
                "description": "The load balancer is used for egress through an AKS assigned public IP. This supports Kubernetes services of type 'loadBalancer'. For more information see [outbound type loadbalancer](https://docs.microsoft.com/azure/aks/egress-outboundtype#outbound-type-of-loadbalancer)."
              },
              {
                "value": "userDefinedRouting",
                "description": "Egress paths must be defined by the user. This is an advanced scenario and requires proper network configuration. For more information see [outbound type userDefinedRouting](https://docs.microsoft.com/azure/aks/egress-outboundtype#outbound-type-of-userdefinedrouting)."
              },
              {
                "value": "managedNATGateway",
                "description": "The AKS-managed NAT gateway is used for egress."
              },
              {
                "value": "userAssignedNATGateway",
                "description": "The user-assigned NAT gateway associated to the cluster subnet is used for egress. This is an advanced scenario and requires proper network configuration."
              }
            ]
          },
          "default": "loadBalancer",
          "title": "The outbound (egress) routing method.",
          "description": "This can only be set at cluster creation time and cannot be changed later. For more information see [egress outbound type](https://docs.microsoft.com/azure/aks/egress-outboundtype)."
        },
        "loadBalancerSku": {
          "$ref": "#/definitions/LoadBalancerSku",
          "title": "The load balancer sku for the managed cluster.",
          "description": "The default is 'standard'. See [Azure Load Balancer SKUs](https://docs.microsoft.com/azure/load-balancer/skus) for more information about the differences between load balancer SKUs."
        },
        "loadBalancerProfile": {
          "$ref": "#/definitions/ManagedClusterLoadBalancerProfile",
          "description": "Profile of the cluster load balancer."
        },
        "natGatewayProfile": {
          "$ref": "#/definitions/ManagedClusterNATGatewayProfile",
          "description": "Profile of the cluster NAT gateway."
        },
        "podCidrs": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "title": "The CIDR notation IP ranges from which to assign pod IPs.",
          "description": "One IPv4 CIDR is expected for single-stack networking. Two CIDRs, one for each IP family (IPv4/IPv6), is expected for dual-stack networking."
        },
        "serviceCidrs": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "title": "The CIDR notation IP ranges from which to assign service cluster IPs.",
          "description": "One IPv4 CIDR is expected for single-stack networking. Two CIDRs, one for each IP family (IPv4/IPv6), is expected for dual-stack networking. They must not overlap with any Subnet IP ranges."
        },
        "ipFamilies": {
          "type": "array",
          "items": {
            "type": "string",
            "description": "The IP version to use for cluster networking and IP assignment.",
            "enum": [
              "IPv4",
              "IPv6"
            ],
            "x-ms-enum": {
              "name": "ipFamily",
              "modelAsString": true
            }
          },
          "title": "The IP families used to specify IP versions available to the cluster.",
          "description": "IP families are used to determine single-stack or dual-stack clusters. For single-stack, the expected value is IPv4. For dual-stack, the expected values are IPv4 and IPv6."
        },
        "kubeProxyConfig": {
          "type": "object",
          "properties": {
            "enabled": {
              "type": "boolean",
              "description": "Whether to enable on kube-proxy on the cluster (if no 'kubeProxyConfig' exists, kube-proxy is enabled in AKS by default without these customizations)."
            },
            "mode": {
              "type": "string",
              "enum": [
                "IPTABLES",
                "IPVS"
              ],
              "x-ms-enum": {
                "name": "mode",
                "modelAsString": true,
                "values": [
                  {
                    "value": "IPTABLES",
                    "description": "IPTables proxy mode"
                  },
                  {
                    "value": "IPVS",
                    "description": "IPVS proxy mode. Must be using Kubernetes version >= 1.22."
                  }
                ]
              },
              "description": "Specify which proxy mode to use ('IPTABLES' or 'IPVS')"
            },
            "ipvsConfig": {
              "type": "object",
              "properties": {
                "scheduler": {
                  "type": "string",
                  "enum": [
                    "RoundRobin",
                    "LeastConnection"
                  ],
                  "x-ms-enum": {
                    "name": "ipvsScheduler",
                    "modelAsString": true,
                    "values": [
                      {
                        "value": "RoundRobin",
                        "description": "Round Robin"
                      },
                      {
                        "value": "LeastConnection",
                        "description": "Least Connection"
                      }
                    ]
                  },
                  "description": "IPVS scheduler, for more information please see http://www.linuxvirtualserver.org/docs/scheduling.html."
                },
                "tcpTimeoutSeconds": {
                  "type": "integer",
                  "format": "int32",
                  "description": "The timeout value used for idle IPVS TCP sessions in seconds. Must be a positive integer value."
                },
                "tcpFinTimeoutSeconds": {
                  "type": "integer",
                  "format": "int32",
                  "description": "The timeout value used for IPVS TCP sessions after receiving a FIN in seconds. Must be a positive integer value."
                },
                "udpTimeoutSeconds": {
                  "type": "integer",
                  "format": "int32",
                  "description": "The timeout value used for IPVS UDP packets in seconds. Must be a positive integer value."
                }
              },
              "description": "Holds configuration customizations for IPVS. May only be specified if 'mode' is set to 'IPVS'."
            }
          },
          "description": "Holds configuration customizations for kube-proxy. Any values not defined will use the kube-proxy defaulting behavior. See https://v<version>.docs.kubernetes.io/docs/reference/command-line-tools-reference/kube-proxy/ where <version> is represented by a <major version>-<minor version> string. Kubernetes version 1.23 would be '1-23'."
        }
      },
      "description": "Profile of network configuration."
    },
    "MaintenanceConfigurationListResult": {
      "type": "object",
      "properties": {
        "value": {
          "type": "array",
          "items": {
            "$ref": "#/definitions/MaintenanceConfiguration"
          },
          "description": "The list of maintenance configurations."
        },
        "nextLink": {
          "type": "string",
          "description": "The URL to get the next set of maintenance configuration results.",
          "readOnly": true
        }
      },
      "description": "The response from the List maintenance configurations operation."
    },
    "MaintenanceConfiguration": {
      "type": "object",
      "allOf": [
        {
          "$ref": "#/definitions/SubResource"
        }
      ],
      "properties": {
        "systemData": {
          "$ref": "../../../../../../common-types/resource-management/v3/types.json#/definitions/systemData",
          "readOnly": true,
          "description": "The system metadata relating to this resource."
        },
        "properties": {
          "description": "Properties of a default maintenance configuration.",
          "$ref": "#/definitions/MaintenanceConfigurationProperties",
          "x-ms-client-flatten": true
        }
      },
      "title": "Planned maintenance configuration, used to configure when updates can be deployed to a Managed Cluster.",
      "description": "See [planned maintenance](https://docs.microsoft.com/azure/aks/planned-maintenance) for more information about planned maintenance."
    },
    "MaintenanceConfigurationProperties": {
      "type": "object",
      "properties": {
        "timeInWeek": {
          "type": "array",
          "items": {
            "$ref": "#/definitions/TimeInWeek"
          },
          "title": "Time slots during the week when planned maintenance is allowed to proceed.",
          "x-ms-identifiers": [],
          "description": "If two array entries specify the same day of the week, the applied configuration is the union of times in both entries."
        },
        "notAllowedTime": {
          "type": "array",
          "items": {
            "$ref": "#/definitions/TimeSpan"
          },
          "x-ms-identifiers": [],
          "description": "Time slots on which upgrade is not allowed."
        },
        "maintenanceWindow": {
          "type": "object",
          "$ref": "#/definitions/MaintenanceWindow",
          "description": "Maintenance window for the maintenance configuration."
        }
      },
      "description": "Properties used to configure planned maintenance for a Managed Cluster."
    },
    "MaintenanceWindow": {
      "type": "object",
      "properties": {
        "schedule": {
          "$ref": "#/definitions/Schedule",
          "description": "Recurrence schedule for the maintenance window."
        },
        "durationHours": {
          "type": "integer",
          "format": "int32",
          "minimum": 4,
          "maximum": 24,
          "default": 24,
          "description": "Length of maintenance window range from 4 to 24 hours."
        },
        "utcOffset": {
          "type": "string",
          "pattern": "^(-|\\+)[0-9]{2}:[0-9]{2}$",
          "description": "The UTC offset in format +/-HH:mm. For example, '+05:30' for IST and '-07:00' for PST. If not specified, the default is '+00:00'."
        },
        "startDate": {
          "type": "string",
          "format": "date",
          "description": "The date the maintenance window activates. If the current date is before this date, the maintenance window is inactive and will not be used for upgrades. If not specified, the maintenance window will be active right away."
        },
        "startTime": {
          "type": "string",
          "pattern": "^\\d{2}:\\d{2}$",
          "description": "The start time of the maintenance window. Accepted values are from '00:00' to '23:59'. 'utcOffset' applies to this field. For example: '02:00' with 'utcOffset: +02:00' means UTC time '00:00'."
        },
        "notAllowedDates": {
          "type": "array",
          "items": {
            "$ref": "#/definitions/DateSpan"
          },
          "x-ms-identifiers": [],
          "description": "Date ranges on which upgrade is not allowed. 'utcOffset' applies to this field. For example, with 'utcOffset: +02:00' and 'dateSpan' being '2022-12-23' to '2023-01-03', maintenance will be blocked from '2022-12-22 22:00' to '2023-01-03 22:00' in UTC time."
        }
      },
      "description": "Maintenance window used to configure scheduled auto-upgrade for a Managed Cluster.",
      "required": [
        "schedule",
        "durationHours",
        "startTime"
      ]
    },
    "Schedule": {
      "type": "object",
      "properties": {
        "daily": {
          "$ref": "#/definitions/DailySchedule"
        },
        "weekly": {
          "$ref": "#/definitions/WeeklySchedule"
        },
        "absoluteMonthly": {
          "$ref": "#/definitions/AbsoluteMonthlySchedule"
        },
        "relativeMonthly": {
          "$ref": "#/definitions/RelativeMonthlySchedule"
        }
      },
      "description": "One and only one of the schedule types should be specified. Choose either 'daily', 'weekly', 'absoluteMonthly' or 'relativeMonthly' for your maintenance schedule."
    },
    "DailySchedule": {
      "type": "object",
      "properties": {
        "intervalDays": {
          "type": "integer",
          "format": "int32",
          "minimum": 1,
          "maximum": 7,
          "description": "Specifies the number of days between each set of occurrences."
        }
      },
      "description": "For schedules like: 'recur every day' or 'recur every 3 days'.",
      "required": [
        "intervalDays"
      ]
    },
    "WeeklySchedule": {
      "type": "object",
      "properties": {
        "intervalWeeks": {
          "type": "integer",
          "format": "int32",
          "minimum": 1,
          "maximum": 4,
          "description": "Specifies the number of weeks between each set of occurrences."
        },
        "dayOfWeek": {
          "$ref": "#/definitions/WeekDay",
          "description": "Specifies on which day of the week the maintenance occurs."
        }
      },
      "description": "For schedules like: 'recur every Monday' or 'recur every 3 weeks on Wednesday'.",
      "required": [
        "intervalWeeks",
        "dayOfWeek"
      ]
    },
    "AbsoluteMonthlySchedule": {
      "type": "object",
      "properties": {
        "intervalMonths": {
          "type": "integer",
          "format": "int32",
          "minimum": 1,
          "maximum": 6,
          "description": "Specifies the number of months between each set of occurrences."
        },
        "dayOfMonth": {
          "type": "integer",
          "format": "int32",
          "minimum": 1,
          "maximum": 31,
          "description": "The date of the month."
        }
      },
      "description": "For schedules like: 'recur every month on the 15th' or 'recur every 3 months on the 20th'.",
      "required": [
        "intervalMonths",
        "dayOfMonth"
      ]
    },
    "RelativeMonthlySchedule": {
      "type": "object",
      "properties": {
        "intervalMonths": {
          "type": "integer",
          "format": "int32",
          "minimum": 1,
          "maximum": 6,
          "description": "Specifies the number of months between each set of occurrences."
        },
        "weekIndex": {
          "type": "string",
          "enum": [
            "First",
            "Second",
            "Third",
            "Fourth",
            "Last"
          ],
          "x-ms-enum": {
            "name": "type",
            "modelAsString": true,
            "values": [
              {
                "value": "First",
                "description": "First."
              },
              {
                "value": "Second",
                "description": "Second."
              },
              {
                "value": "Third",
                "description": "Third."
              },
              {
                "value": "Fourth",
                "description": "Fourth."
              },
              {
                "value": "Last",
                "description": "Last."
              }
            ]
          },
          "title": "The week index.",
          "description": "Specifies on which instance of the allowed days specified in daysOfWeek the maintenance occurs."
        },
        "dayOfWeek": {
          "$ref": "#/definitions/WeekDay",
          "description": "Specifies on which day of the week the maintenance occurs."
        }
      },
      "description": "For schedules like: 'recur every month on the first Monday' or 'recur every 3 months on last Friday'.",
      "required": [
        "intervalMonths",
        "weekIndex",
        "dayOfWeek"
      ]
    },
    "DateSpan": {
      "type": "object",
      "properties": {
        "start": {
          "type": "string",
          "format": "date",
          "description": "The start date of the date span."
        },
        "end": {
          "type": "string",
          "format": "date",
          "description": "The end date of the date span."
        }
      },
      "title": "A date range.",
      "description": "For example, between '2022-12-23' and '2023-01-05'.",
      "required": [
        "start",
        "end"
      ]
    },
    "TimeInWeek": {
      "type": "object",
      "properties": {
        "day": {
          "$ref": "#/definitions/WeekDay",
          "description": "The day of the week."
        },
        "hourSlots": {
          "type": "array",
          "items": {
            "$ref": "#/definitions/HourInDay"
          },
          "title": "A list of hours in the day used to identify a time range.",
          "description": "Each integer hour represents a time range beginning at 0m after the hour ending at the next hour (non-inclusive). 0 corresponds to 00:00 UTC, 23 corresponds to 23:00 UTC. Specifying [0, 1] means the 00:00 - 02:00 UTC time range."
        }
      },
      "description": "Time in a week."
    },
    "WeekDay": {
      "type": "string",
      "enum": [
        "Sunday",
        "Monday",
        "Tuesday",
        "Wednesday",
        "Thursday",
        "Friday",
        "Saturday"
      ],
      "x-ms-enum": {
        "name": "WeekDay",
        "modelAsString": true
      },
      "description": "The weekday enum."
    },
    "HourInDay": {
      "type": "integer",
      "format": "int32",
      "maximum": 23,
      "minimum": 0,
      "description": "Hour in a day."
    },
    "TimeSpan": {
      "type": "object",
      "properties": {
        "start": {
          "type": "string",
          "format": "date-time",
          "description": "The start of a time span"
        },
        "end": {
          "type": "string",
          "format": "date-time",
          "description": "The end of a time span"
        }
      },
      "title": "A time range.",
      "description": "For example, between 2021-05-25T13:00:00Z and 2021-05-25T14:00:00Z."
    },
    "RunCommandRequest": {
      "type": "object",
      "properties": {
        "command": {
          "type": "string",
          "description": "The command to run."
        },
        "context": {
          "type": "string",
          "description": "A base64 encoded zip file containing the files required by the command."
        },
        "clusterToken": {
          "type": "string",
          "description": "AuthToken issued for AKS AAD Server App."
        }
      },
      "description": "A run command request",
      "required": [
        "command"
      ]
    },
    "RunCommandResult": {
      "type": "object",
      "properties": {
        "id": {
          "type": "string",
          "description": "The command id.",
          "readOnly": true
        },
        "properties": {
          "description": "Properties of command result.",
          "$ref": "#/definitions/CommandResultProperties",
          "x-ms-client-flatten": true
        }
      },
      "description": "run command result."
    },
    "CommandResultProperties": {
      "type": "object",
      "properties": {
        "provisioningState": {
          "type": "string",
          "readOnly": true,
          "description": "provisioning State"
        },
        "exitCode": {
          "type": "integer",
          "format": "int32",
          "readOnly": true,
          "description": "The exit code of the command"
        },
        "startedAt": {
          "type": "string",
          "format": "date-time",
          "readOnly": true,
          "description": "The time when the command started."
        },
        "finishedAt": {
          "type": "string",
          "format": "date-time",
          "readOnly": true,
          "description": "The time when the command finished."
        },
        "logs": {
          "type": "string",
          "readOnly": true,
          "description": "The command output."
        },
        "reason": {
          "type": "string",
          "readOnly": true,
          "description": "An explanation of why provisioningState is set to failed (if so)."
        }
      },
      "description": "The results of a run command"
    },
    "ManagedClusterNATGatewayProfile": {
      "type": "object",
      "properties": {
        "managedOutboundIPProfile": {
          "$ref": "#/definitions/ManagedClusterManagedOutboundIPProfile",
          "description": "Profile of the managed outbound IP resources of the cluster NAT gateway."
        },
        "effectiveOutboundIPs": {
          "type": "array",
          "items": {
            "$ref": "#/definitions/ResourceReference"
          },
          "description": "The effective outbound IP resources of the cluster NAT gateway."
        },
        "idleTimeoutInMinutes": {
          "type": "integer",
          "format": "int32",
          "maximum": 120,
          "minimum": 4,
          "description": "Desired outbound flow idle timeout in minutes. Allowed values are in the range of 4 to 120 (inclusive). The default value is 4 minutes.",
          "default": 4
        }
      },
      "description": "Profile of the managed cluster NAT gateway."
    },
    "ManagedClusterManagedOutboundIPProfile": {
      "type": "object",
      "properties": {
        "count": {
          "type": "integer",
          "format": "int32",
          "maximum": 16,
          "minimum": 1,
          "description": "The desired number of outbound IPs created/managed by Azure. Allowed values must be in the range of 1 to 16 (inclusive). The default value is 1. ",
          "default": 1
        }
      },
      "description": "Profile of the managed outbound IP resources of the managed cluster."
    },
    "ManagedClusterLoadBalancerProfile": {
      "type": "object",
      "properties": {
        "managedOutboundIPs": {
          "type": "object",
          "properties": {
            "count": {
              "type": "integer",
              "format": "int32",
              "maximum": 100,
              "minimum": 1,
              "description": "The desired number of IPv4 outbound IPs created/managed by Azure for the cluster load balancer. Allowed values must be in the range of 1 to 100 (inclusive). The default value is 1. ",
              "default": 1
            },
            "countIPv6": {
              "type": "integer",
              "format": "int32",
              "maximum": 100,
              "minimum": 0,
              "description": "The desired number of IPv6 outbound IPs created/managed by Azure for the cluster load balancer. Allowed values must be in the range of 1 to 100 (inclusive). The default value is 0 for single-stack and 1 for dual-stack. ",
              "default": 0
            }
          },
          "description": "Desired managed outbound IPs for the cluster load balancer."
        },
        "outboundIPPrefixes": {
          "type": "object",
          "properties": {
            "publicIPPrefixes": {
              "type": "array",
              "items": {
                "$ref": "#/definitions/ResourceReference"
              },
              "description": "A list of public IP prefix resources."
            }
          },
          "description": "Desired outbound IP Prefix resources for the cluster load balancer."
        },
        "outboundIPs": {
          "type": "object",
          "properties": {
            "publicIPs": {
              "type": "array",
              "items": {
                "$ref": "#/definitions/ResourceReference"
              },
              "description": "A list of public IP resources."
            }
          },
          "description": "Desired outbound IP resources for the cluster load balancer."
        },
        "effectiveOutboundIPs": {
          "type": "array",
          "items": {
            "$ref": "#/definitions/ResourceReference"
          },
          "description": "The effective outbound IP resources of the cluster load balancer."
        },
        "allocatedOutboundPorts": {
          "type": "integer",
          "format": "int32",
          "maximum": 64000,
          "minimum": 0,
          "description": "The desired number of allocated SNAT ports per VM. Allowed values are in the range of 0 to 64000 (inclusive). The default value is 0 which results in Azure dynamically allocating ports.",
          "default": 0
        },
        "idleTimeoutInMinutes": {
          "type": "integer",
          "format": "int32",
          "maximum": 120,
          "minimum": 4,
          "description": "Desired outbound flow idle timeout in minutes. Allowed values are in the range of 4 to 120 (inclusive). The default value is 30 minutes.",
          "default": 30
        },
        "enableMultipleStandardLoadBalancers": {
          "type": "boolean",
          "description": "Enable multiple standard load balancers per AKS cluster or not."
        },
        "backendPoolType": {
          "type": "string",
          "x-ms-enum": {
            "name": "BackendPoolType",
            "modelAsString": true,
            "values": [
              {
                "value": "NodeIPConfiguration",
                "description": "The type of the managed inbound Load Balancer BackendPool. https://cloud-provider-azure.sigs.k8s.io/topics/loadbalancer/#configure-load-balancer-backend."
              },
              {
                "value": "NodeIP",
                "description": "The type of the managed inbound Load Balancer BackendPool. https://cloud-provider-azure.sigs.k8s.io/topics/loadbalancer/#configure-load-balancer-backend."
              }
            ]
          },
          "enum": [
            "NodeIPConfiguration",
            "NodeIP"
          ],
          "description": "The type of the managed inbound Load Balancer BackendPool.",
          "default": "NodeIPConfiguration"
        }
      },
      "description": "Profile of the managed cluster load balancer."
    },
    "ResourceReference": {
      "type": "object",
      "properties": {
        "id": {
          "type": "string",
          "format": "arm-id",
          "description": "The fully qualified Azure resource id."
        }
      },
      "description": "A reference to an Azure resource."
    },
    "ContainerServiceSshConfiguration": {
      "type": "object",
      "properties": {
        "publicKeys": {
          "type": "array",
          "items": {
            "$ref": "#/definitions/ContainerServiceSshPublicKey"
          },
          "x-ms-identifiers": [],
          "description": "The list of SSH public keys used to authenticate with Linux-based VMs. A maximum of 1 key may be specified."
        }
      },
      "description": "SSH configuration for Linux-based VMs running on Azure.",
      "required": [
        "publicKeys"
      ]
    },
    "ContainerServiceSshPublicKey": {
      "type": "object",
      "properties": {
        "keyData": {
          "type": "string",
          "description": "Certificate public key used to authenticate with VMs through SSH. The certificate must be in PEM format with or without headers."
        }
      },
      "required": [
        "keyData"
      ],
      "description": "Contains information about SSH certificate public key data."
    },
    "ManagedClusterListResult": {
      "type": "object",
      "properties": {
        "value": {
          "type": "array",
          "items": {
            "$ref": "#/definitions/ManagedCluster"
          },
          "description": "The list of managed clusters."
        },
        "nextLink": {
          "type": "string",
          "description": "The URL to get the next set of managed cluster results.",
          "readOnly": true
        }
      },
      "description": "The response from the List Managed Clusters operation."
    },
    "ManagedCluster": {
      "type": "object",
      "properties": {
        "sku": {
          "$ref": "#/definitions/ManagedClusterSKU",
          "description": "The managed cluster SKU."
        },
        "extendedLocation": {
          "$ref": "#/definitions/ExtendedLocation",
          "description": "The extended location of the Virtual Machine."
        },
        "identity": {
          "$ref": "#/definitions/ManagedClusterIdentity",
          "description": "The identity of the managed cluster, if configured."
        },
        "properties": {
          "description": "Properties of a managed cluster.",
          "$ref": "#/definitions/ManagedClusterProperties",
          "x-ms-client-flatten": true
        }
      },
      "allOf": [
        {
          "$ref": "../../../../../../common-types/resource-management/v3/types.json#/definitions/TrackedResource"
        }
      ],
      "description": "Managed cluster."
    },
    "ManagedClusterProperties": {
      "type": "object",
      "properties": {
        "provisioningState": {
          "readOnly": true,
          "type": "string",
          "description": "The current provisioning state."
        },
        "powerState": {
          "$ref": "#/definitions/PowerState",
          "description": "The Power State of the cluster.",
          "readOnly": true
        },
        "creationData": {
          "$ref": "#/definitions/CreationData",
          "description": "CreationData to be used to specify the source Snapshot ID if the cluster will be created/upgraded using a snapshot."
        },
        "maxAgentPools": {
          "readOnly": true,
          "type": "integer",
          "format": "int32",
          "description": "The max number of agent pools for the managed cluster."
        },
        "kubernetesVersion": {
          "type": "string",
          "title": "The version of Kubernetes the Managed Cluster is requested to run.",
          "description": "When you upgrade a supported AKS cluster, Kubernetes minor versions cannot be skipped. All upgrades must be performed sequentially by major version number. For example, upgrades between 1.14.x -> 1.15.x or 1.15.x -> 1.16.x are allowed, however 1.14.x -> 1.16.x is not allowed. See [upgrading an AKS cluster](https://docs.microsoft.com/azure/aks/upgrade-cluster) for more details."
        },
        "currentKubernetesVersion": {
          "readOnly": true,
          "type": "string",
          "description": "The version of Kubernetes the Managed Cluster is running."
        },
        "dnsPrefix": {
          "type": "string",
          "title": "The DNS prefix of the Managed Cluster.",
          "description": "This cannot be updated once the Managed Cluster has been created."
        },
        "fqdnSubdomain": {
          "type": "string",
          "title": "The FQDN subdomain of the private cluster with custom private dns zone.",
          "description": "This cannot be updated once the Managed Cluster has been created."
        },
        "fqdn": {
          "readOnly": true,
          "type": "string",
          "description": "The FQDN of the master pool."
        },
        "privateFQDN": {
          "readOnly": true,
          "type": "string",
          "description": "The FQDN of private cluster."
        },
        "azurePortalFQDN": {
          "readOnly": true,
          "type": "string",
          "title": "The special FQDN used by the Azure Portal to access the Managed Cluster. This FQDN is for use only by the Azure Portal and should not be used by other clients.",
          "description": "The Azure Portal requires certain Cross-Origin Resource Sharing (CORS) headers to be sent in some responses, which Kubernetes APIServer doesn't handle by default. This special FQDN supports CORS, allowing the Azure Portal to function properly."
        },
        "agentPoolProfiles": {
          "type": "array",
          "items": {
            "$ref": "#/definitions/ManagedClusterAgentPoolProfile"
          },
          "x-ms-identifiers": [],
          "description": "The agent pool properties."
        },
        "linuxProfile": {
          "$ref": "#/definitions/ContainerServiceLinuxProfile",
          "description": "The profile for Linux VMs in the Managed Cluster."
        },
        "windowsProfile": {
          "$ref": "#/definitions/ManagedClusterWindowsProfile",
          "description": "The profile for Windows VMs in the Managed Cluster."
        },
        "servicePrincipalProfile": {
          "$ref": "#/definitions/ManagedClusterServicePrincipalProfile",
          "description": "Information about a service principal identity for the cluster to use for manipulating Azure APIs."
        },
        "addonProfiles": {
          "type": "object",
          "additionalProperties": {
            "$ref": "#/definitions/ManagedClusterAddonProfile"
          },
          "description": "The profile of managed cluster add-on."
        },
        "podIdentityProfile": {
          "$ref": "#/definitions/ManagedClusterPodIdentityProfile",
          "title": "The pod identity profile of the Managed Cluster.",
          "description": "See [use AAD pod identity](https://docs.microsoft.com/azure/aks/use-azure-ad-pod-identity) for more details on AAD pod identity integration."
        },
        "oidcIssuerProfile": {
          "$ref": "#/definitions/ManagedClusterOIDCIssuerProfile",
          "description": "The OIDC issuer profile of the Managed Cluster."
        },
        "nodeResourceGroup": {
          "type": "string",
          "description": "The name of the resource group containing agent pool nodes."
        },
        "nodeResourceGroupProfile": {
          "$ref": "#/definitions/ManagedClusterNodeResourceGroupProfile",
          "description": "The node resource group configuration profile."
        },
        "enableRBAC": {
          "type": "boolean",
          "description": "Whether to enable Kubernetes Role-Based Access Control."
        },
        "enablePodSecurityPolicy": {
          "type": "boolean",
          "description": "(DEPRECATED) Whether to enable Kubernetes pod security policy (preview). PodSecurityPolicy was deprecated in Kubernetes v1.21, and removed from Kubernetes in v1.25. Learn more at https://aka.ms/k8s/psp and https://aka.ms/aks/psp."
        },
        "enableNamespaceResources": {
          "type": "boolean",
          "title": "Enable namespace as Azure resource.",
          "description": "The default value is false. It can be enabled/disabled on creation and updating of the managed cluster. See [https://aka.ms/NamespaceARMResource](https://aka.ms/NamespaceARMResource) for more details on Namespace as a ARM Resource."
        },
        "networkProfile": {
          "$ref": "#/definitions/ContainerServiceNetworkProfile",
          "description": "The network configuration profile."
        },
        "aadProfile": {
          "$ref": "#/definitions/ManagedClusterAADProfile",
          "description": "The Azure Active Directory configuration."
        },
        "autoUpgradeProfile": {
          "$ref": "#/definitions/ManagedClusterAutoUpgradeProfile",
          "description": "The auto upgrade configuration."
        },
        "upgradeSettings": {
          "$ref": "#/definitions/ClusterUpgradeSettings",
          "description": "Settings for upgrading a cluster."
        },
        "autoScalerProfile": {
          "type": "object",
          "properties": {
            "balance-similar-node-groups": {
              "type": "string",
              "title": "Detects similar node pools and balances the number of nodes between them.",
              "description": "Valid values are 'true' and 'false'"
            },
            "expander": {
              "type": "string",
              "enum": [
                "least-waste",
                "most-pods",
                "priority",
                "random"
              ],
              "x-ms-enum": {
                "name": "expander",
                "modelAsString": true,
                "values": [
                  {
                    "value": "least-waste",
                    "description": "Selects the node group that will have the least idle CPU (if tied, unused memory) after scale-up. This is useful when you have different classes of nodes, for example, high CPU or high memory nodes, and only want to expand those when there are pending pods that need a lot of those resources."
                  },
                  {
                    "value": "most-pods",
                    "description": "Selects the node group that would be able to schedule the most pods when scaling up. This is useful when you are using nodeSelector to make sure certain pods land on certain nodes. Note that this won't cause the autoscaler to select bigger nodes vs. smaller, as it can add multiple smaller nodes at once."
                  },
                  {
                    "value": "priority",
                    "description": "Selects the node group that has the highest priority assigned by the user. It's configuration is described in more details [here](https://github.com/kubernetes/autoscaler/blob/master/cluster-autoscaler/expander/priority/readme.md)."
                  },
                  {
                    "value": "random",
                    "description": "Used when you don't have a particular need for the node groups to scale differently."
                  }
                ]
              },
              "title": "The expander to use when scaling up",
              "description": "If not specified, the default is 'random'. See [expanders](https://github.com/kubernetes/autoscaler/blob/master/cluster-autoscaler/FAQ.md#what-are-expanders) for more information."
            },
            "max-empty-bulk-delete": {
              "type": "string",
              "title": "The maximum number of empty nodes that can be deleted at the same time. This must be a positive integer.",
              "description": "The default is 10."
            },
            "max-graceful-termination-sec": {
              "type": "string",
              "title": "The maximum number of seconds the cluster autoscaler waits for pod termination when trying to scale down a node.",
              "description": "The default is 600."
            },
            "max-node-provision-time": {
              "type": "string",
              "title": "The maximum time the autoscaler waits for a node to be provisioned.",
              "description": "The default is '15m'. Values must be an integer followed by an 'm'. No unit of time other than minutes (m) is supported."
            },
            "max-total-unready-percentage": {
              "type": "string",
              "title": "The maximum percentage of unready nodes in the cluster. After this percentage is exceeded, cluster autoscaler halts operations.",
              "description": "The default is 45. The maximum is 100 and the minimum is 0."
            },
            "new-pod-scale-up-delay": {
              "type": "string",
              "title": "Ignore unscheduled pods before they're a certain age.",
              "description": "For scenarios like burst/batch scale where you don't want CA to act before the kubernetes scheduler could schedule all the pods, you can tell CA to ignore unscheduled pods before they're a certain age. The default is '0s'. Values must be an integer followed by a unit ('s' for seconds, 'm' for minutes, 'h' for hours, etc)."
            },
            "ok-total-unready-count": {
              "type": "string",
              "title": "The number of allowed unready nodes, irrespective of max-total-unready-percentage.",
              "description": "This must be an integer. The default is 3."
            },
            "scan-interval": {
              "type": "string",
              "title": "How often cluster is reevaluated for scale up or down.",
              "description": "The default is '10'. Values must be an integer number of seconds."
            },
            "scale-down-delay-after-add": {
              "type": "string",
              "title": "How long after scale up that scale down evaluation resumes",
              "description": "The default is '10m'. Values must be an integer followed by an 'm'. No unit of time other than minutes (m) is supported."
            },
            "scale-down-delay-after-delete": {
              "type": "string",
              "title": "How long after node deletion that scale down evaluation resumes.",
              "description": "The default is the scan-interval. Values must be an integer followed by an 'm'. No unit of time other than minutes (m) is supported."
            },
            "scale-down-delay-after-failure": {
              "type": "string",
              "title": "How long after scale down failure that scale down evaluation resumes.",
              "description": "The default is '3m'. Values must be an integer followed by an 'm'. No unit of time other than minutes (m) is supported."
            },
            "scale-down-unneeded-time": {
              "type": "string",
              "title": "How long a node should be unneeded before it is eligible for scale down.",
              "description": "The default is '10m'. Values must be an integer followed by an 'm'. No unit of time other than minutes (m) is supported."
            },
            "scale-down-unready-time": {
              "type": "string",
              "title": "How long an unready node should be unneeded before it is eligible for scale down",
              "description": "The default is '20m'. Values must be an integer followed by an 'm'. No unit of time other than minutes (m) is supported."
            },
            "scale-down-utilization-threshold": {
              "type": "string",
              "title": "Node utilization level, defined as sum of requested resources divided by capacity, below which a node can be considered for scale down.",
              "description": "The default is '0.5'."
            },
            "skip-nodes-with-local-storage": {
              "type": "string",
              "title": "If cluster autoscaler will skip deleting nodes with pods with local storage, for example, EmptyDir or HostPath.",
              "description": "The default is true."
            },
            "skip-nodes-with-system-pods": {
              "type": "string",
              "title": "If cluster autoscaler will skip deleting nodes with pods from kube-system (except for DaemonSet or mirror pods)",
              "description": "The default is true."
            }
          },
          "description": "Parameters to be applied to the cluster-autoscaler when enabled"
        },
        "apiServerAccessProfile": {
          "$ref": "#/definitions/ManagedClusterAPIServerAccessProfile",
          "description": "The access profile for managed cluster API server."
        },
        "diskEncryptionSetID": {
          "type": "string",
          "format": "arm-id",
          "x-ms-arm-id-details": {
            "allowedResources": [
              {
                "type": "Microsoft.Compute/diskEncryptionSets"
              }
            ]
          },
          "title": "The Resource ID of the disk encryption set to use for enabling encryption at rest.",
          "description": "This is of the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Compute/diskEncryptionSets/{encryptionSetName}'"
        },
        "identityProfile": {
          "type": "object",
          "additionalProperties": {
            "$ref": "#/definitions/UserAssignedIdentity"
          },
          "description": "Identities associated with the cluster."
        },
        "privateLinkResources": {
          "type": "array",
          "items": {
            "$ref": "#/definitions/PrivateLinkResource"
          },
          "description": "Private link resources associated with the cluster."
        },
        "disableLocalAccounts": {
          "type": "boolean",
          "title": "If local accounts should be disabled on the Managed Cluster.",
          "description": "If set to true, getting static credentials will be disabled for this cluster. This must only be used on Managed Clusters that are AAD enabled. For more details see [disable local accounts](https://docs.microsoft.com/azure/aks/managed-aad#disable-local-accounts-preview)."
        },
        "httpProxyConfig": {
          "$ref": "#/definitions/ManagedClusterHTTPProxyConfig",
          "description": "Configurations for provisioning the cluster with HTTP proxy servers."
        },
        "securityProfile": {
          "$ref": "#/definitions/ManagedClusterSecurityProfile",
          "description": "Security profile for the managed cluster."
        },
        "storageProfile": {
          "$ref": "#/definitions/ManagedClusterStorageProfile",
          "description": "Storage profile for the managed cluster."
        },
        "ingressProfile": {
          "$ref": "#/definitions/ManagedClusterIngressProfile",
          "description": "Ingress profile for the managed cluster."
        },
        "publicNetworkAccess": {
          "type": "string",
          "enum": [
            "Enabled",
            "Disabled",
            "SecuredByPerimeter"
          ],
          "x-ms-enum": {
            "name": "PublicNetworkAccess",
            "modelAsString": true,
            "values": [
              {
                "value": "Enabled",
                "description": "Inbound/Outbound to the managedCluster is allowed."
              },
              {
                "value": "Disabled",
                "description": "Inbound traffic to managedCluster is disabled, traffic from managedCluster is allowed."
              },
              {
                "value": "SecuredByPerimeter",
                "description": "Inbound/Outbound traffic is managed by Microsoft.Network/NetworkSecurityPerimeters."
              }
            ]
          },
          "title": "PublicNetworkAccess of the managedCluster",
          "description": "Allow or deny public network access for AKS"
        },
        "workloadAutoScalerProfile": {
          "$ref": "#/definitions/ManagedClusterWorkloadAutoScalerProfile"
        },
        "azureMonitorProfile": {
          "$ref": "#/definitions/ManagedClusterAzureMonitorProfile"
        },
        "guardrailsProfile": {
          "$ref": "#/definitions/GuardrailsProfile",
          "description": "The guardrails profile holds all the guardrails information for a given cluster"
        },
        "serviceMeshProfile": {
          "$ref": "#/definitions/ServiceMeshProfile"
        }
      },
      "description": "Properties of the managed cluster."
    },
    "PowerState": {
      "type": "object",
      "description": "Describes the Power State of the cluster",
      "properties": {
        "code": {
          "type": "string",
          "description": "Tells whether the cluster is Running or Stopped",
          "enum": [
            "Running",
            "Stopped"
          ],
          "x-ms-enum": {
            "name": "code",
            "modelAsString": true,
            "values": [
              {
                "value": "Running",
                "description": "The cluster is running."
              },
              {
                "value": "Stopped",
                "description": "The cluster is stopped."
              }
            ]
          }
        }
      }
    },
    "ManagedClusterAPIServerAccessProfile": {
      "type": "object",
      "properties": {
        "authorizedIPRanges": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "title": "The IP ranges authorized to access the Kubernetes API server.",
          "description": "IP ranges are specified in CIDR format, e.g. 137.117.106.88/29. This feature is not compatible with clusters that use Public IP Per Node, or clusters that are using a Basic Load Balancer. For more information see [API server authorized IP ranges](https://docs.microsoft.com/azure/aks/api-server-authorized-ip-ranges)."
        },
        "enablePrivateCluster": {
          "type": "boolean",
          "title": "Whether to create the cluster as a private cluster or not.",
          "description": "For more details, see [Creating a private AKS cluster](https://docs.microsoft.com/azure/aks/private-clusters)."
        },
        "privateDNSZone": {
          "type": "string",
          "title": "The private DNS zone mode for the cluster.",
          "description": "The default is System. For more details see [configure private DNS zone](https://docs.microsoft.com/azure/aks/private-clusters#configure-private-dns-zone). Allowed values are 'system' and 'none'."
        },
        "enablePrivateClusterPublicFQDN": {
          "type": "boolean",
          "description": "Whether to create additional public FQDN for private cluster or not."
        },
        "disableRunCommand": {
          "type": "boolean",
          "description": "Whether to disable run command for the cluster or not."
        },
        "enableVnetIntegration": {
          "type": "boolean",
          "description": "Whether to enable apiserver vnet integration for the cluster or not."
        },
        "subnetId": {
          "type": "string",
          "title": "The subnet to be used when apiserver vnet integration is enabled.",
          "description": "It is required when: 1. creating a new cluster with BYO Vnet; 2. updating an existing cluster to enable apiserver vnet integration."
        }
      },
      "description": "Access profile for managed cluster API server."
    },
    "ManagedClusterIdentity": {
      "type": "object",
      "properties": {
        "principalId": {
          "readOnly": true,
          "type": "string",
          "description": "The principal id of the system assigned identity which is used by master components."
        },
        "tenantId": {
          "readOnly": true,
          "type": "string",
          "description": "The tenant id of the system assigned identity which is used by master components."
        },
        "type": {
          "type": "string",
          "title": "The type of identity used for the managed cluster.",
          "description": "For more information see [use managed identities in AKS](https://docs.microsoft.com/azure/aks/use-managed-identity).",
          "enum": [
            "SystemAssigned",
            "UserAssigned",
            "None"
          ],
          "x-ms-enum": {
            "name": "ResourceIdentityType",
            "modelAsString": false,
            "values": [
              {
                "value": "SystemAssigned",
                "description": "Use an implicitly created system assigned managed identity to manage cluster resources. Master components in the control plane such as kube-controller-manager will use the system assigned managed identity to manipulate Azure resources."
              },
              {
                "value": "UserAssigned",
                "description": "Use a user-specified identity to manage cluster resources. Master components in the control plane such as kube-controller-manager will use the specified user assigned managed identity to manipulate Azure resources."
              },
              {
                "value": "None",
                "description": "Do not use a managed identity for the Managed Cluster, service principal will be used instead."
              }
            ]
          }
        },
        "userAssignedIdentities": {
          "type": "object",
          "additionalProperties": {
            "type": "object",
            "x-ms-client-name": "ManagedServiceIdentityUserAssignedIdentitiesValue",
            "properties": {
              "principalId": {
                "readOnly": true,
                "type": "string",
                "description": "The principal id of user assigned identity."
              },
              "clientId": {
                "readOnly": true,
                "type": "string",
                "description": "The client id of user assigned identity."
              }
            }
          },
          "title": "The user identity associated with the managed cluster. This identity will be used in control plane. Only one user assigned identity is allowed.",
          "description": "The keys must be ARM resource IDs in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'."
        }
      },
      "description": "Identity for the managed cluster."
    },
    "UserAssignedIdentity": {
      "type": "object",
      "properties": {
        "resourceId": {
          "type": "string",
          "format": "arm-id",
          "x-ms-arm-id-details": {
            "allowedResources": [
              {
                "type": "Microsoft.ManagedIdentity/userAssignedIdentities"
              }
            ]
          },
          "description": "The resource ID of the user assigned identity."
        },
        "clientId": {
          "type": "string",
          "description": "The client ID of the user assigned identity."
        },
        "objectId": {
          "type": "string",
          "description": "The object ID of the user assigned identity."
        }
      },
      "description": "Details about a user assigned identity."
    },
    "ManagedClusterAccessProfile": {
      "type": "object",
      "allOf": [
        {
          "$ref": "../../../../../../common-types/resource-management/v3/types.json#/definitions/TrackedResource"
        }
      ],
      "properties": {
        "properties": {
          "description": "AccessProfile of a managed cluster.",
          "$ref": "#/definitions/AccessProfile",
          "x-ms-client-flatten": true
        }
      },
      "description": "Managed cluster Access Profile.",
      "x-ms-azure-resource": false
    },
    "AccessProfile": {
      "type": "object",
      "properties": {
        "kubeConfig": {
          "type": "string",
          "format": "byte",
          "description": "Base64-encoded Kubernetes configuration file."
        }
      },
      "description": "Profile for enabling a user to access a managed cluster."
    },
    "ManagedClusterPoolUpgradeProfile": {
      "type": "object",
      "properties": {
        "kubernetesVersion": {
          "type": "string",
          "description": "The Kubernetes version (major.minor.patch)."
        },
        "name": {
          "type": "string",
          "description": "The Agent Pool name."
        },
        "osType": {
          "$ref": "#/definitions/OSType"
        },
        "upgrades": {
          "type": "array",
          "items": {
            "type": "object",
            "properties": {
              "kubernetesVersion": {
                "type": "string",
                "description": "The Kubernetes version (major.minor.patch)."
              },
              "isPreview": {
                "type": "boolean",
                "description": "Whether the Kubernetes version is currently in preview."
              }
            }
          },
          "x-ms-identifiers": [],
          "description": "List of orchestrator types and versions available for upgrade."
        }
      },
      "required": [
        "kubernetesVersion",
        "osType"
      ],
      "description": "The list of available upgrade versions."
    },
    "ManagedClusterUpgradeProfileProperties": {
      "type": "object",
      "properties": {
        "controlPlaneProfile": {
          "$ref": "#/definitions/ManagedClusterPoolUpgradeProfile",
          "description": "The list of available upgrade versions for the control plane."
        },
        "agentPoolProfiles": {
          "type": "array",
          "items": {
            "$ref": "#/definitions/ManagedClusterPoolUpgradeProfile"
          },
          "x-ms-identifiers": [],
          "description": "The list of available upgrade versions for agent pools."
        }
      },
      "required": [
        "controlPlaneProfile",
        "agentPoolProfiles"
      ],
      "description": "Control plane and agent pool upgrade profiles."
    },
    "ManagedClusterAutoUpgradeProfile": {
      "type": "object",
      "properties": {
        "upgradeChannel": {
          "type": "string",
          "enum": [
            "rapid",
            "stable",
            "patch",
            "node-image",
            "none"
          ],
          "x-ms-enum": {
            "name": "upgradeChannel",
            "modelAsString": true,
            "values": [
              {
                "value": "rapid",
                "description": "Automatically upgrade the cluster to the latest supported patch release on the latest supported minor version. In cases where the cluster is at a version of Kubernetes that is at an N-2 minor version where N is the latest supported minor version, the cluster first upgrades to the latest supported patch version on N-1 minor version. For example, if a cluster is running version 1.17.7 and versions 1.17.9, 1.18.4, 1.18.6, and 1.19.1 are available, your cluster first is upgraded to 1.18.6, then is upgraded to 1.19.1."
              },
              {
                "value": "stable",
                "description": "Automatically upgrade the cluster to the latest supported patch release on minor version N-1, where N is the latest supported minor version. For example, if a cluster is running version 1.17.7 and versions 1.17.9, 1.18.4, 1.18.6, and 1.19.1 are available, your cluster is upgraded to 1.18.6."
              },
              {
                "value": "patch",
                "description": "Automatically upgrade the cluster to the latest supported patch version when it becomes available while keeping the minor version the same. For example, if a cluster is running version 1.17.7 and versions 1.17.9, 1.18.4, 1.18.6, and 1.19.1 are available, your cluster is upgraded to 1.17.9."
              },
              {
                "value": "node-image",
                "description": "Automatically upgrade the node image to the latest version available. Consider using nodeOSUpgradeChannel instead as that allows you to configure node OS patching separate from Kubernetes version patching"
              },
              {
                "value": "none",
                "description": "Disables auto-upgrades and keeps the cluster at its current version of Kubernetes."
              }
            ]
          },
          "title": "The upgrade channel for auto upgrade. The default is 'none'.",
          "description": "For more information see [setting the AKS cluster auto-upgrade channel](https://docs.microsoft.com/azure/aks/upgrade-cluster#set-auto-upgrade-channel)."
        },
        "nodeOSUpgradeChannel": {
          "type": "string",
          "enum": [
            "Unmanaged",
            "None",
            "SecurityPatch",
            "NodeImage"
          ],
          "x-ms-enum": {
            "name": "NodeOSUpgradeChannel",
            "modelAsString": true,
            "values": [
              {
                "value": "None",
                "description": "No attempt to update your machines OS will be made either by OS or by rolling VHDs. This means you are responsible for your security updates"
              },
              {
                "value": "Unmanaged",
                "description": "OS updates will be applied automatically through the OS built-in patching infrastructure. Newly scaled in machines will be unpatched initially, and will be patched at some later time by the OS's infrastructure. Behavior of this option depends on the OS in question. Ubuntu and Mariner apply security patches through unattended upgrade roughly once a day around 06:00 UTC. Windows does not apply security patches automatically and so for them this option is equivalent to None till further notice"
              },
              {
                "value": "SecurityPatch",
                "description": "AKS will update the nodes VHD with patches from the image maintainer labelled \"security only\" on a regular basis. Where possible, patches will also be applied without reimaging to existing nodes. Some patches, such as kernel patches, cannot be applied to existing nodes without disruption. For such patches, the VHD will be updated, and machines will be rolling reimaged to that VHD following maintenance windows and surge settings. This option incurs the extra cost of hosting the VHDs in your node resource group."
              },
              {
                "value": "NodeImage",
                "description": "AKS will update the nodes with a newly patched VHD containing security fixes and bugfixes on a weekly cadence. With the VHD update machines will be rolling reimaged to that VHD following maintenance windows and surge settings. No extra VHD cost is incurred when choosing this option as AKS hosts the images."
              }
            ]
          },
          "title": "Manner in which the OS on your nodes is updated",
          "description": "The default is Unmanaged, but may change to either NodeImage or SecurityPatch at GA."
        }
      },
      "description": "Auto upgrade profile for a managed cluster."
    },
    "ControlPlaneUpgradeOverride": {
      "type": "string",
      "enum": [
        "IgnoreKubernetesDeprecations"
      ],
      "x-ms-enum": {
        "name": "ControlPlaneUpgradeOverride",
        "modelAsString": true,
        "values": [
          {
            "value": "IgnoreKubernetesDeprecations",
            "description": "Upgrade the cluster control plane version without checking for recent Kubernetes deprecations usage."
          }
        ]
      },
      "description": "The list of control plane upgrade override settings."
    },
    "UpgradeOverrideSettings": {
      "type": "object",
      "properties": {
        "controlPlaneOverrides": {
          "type": "array",
          "items": {
            "$ref": "#/definitions/ControlPlaneUpgradeOverride"
          },
          "x-ms-identifiers": [],
          "description": "List of upgrade overrides when upgrading a cluster's control plane."
        },
        "until": {
          "type": "string",
          "format": "date-time",
          "description": "Until when the overrides are effective. Note that this only matches the start time of an upgrade, and the effectiveness won't change once an upgrade starts even if the `until` expires as upgrade proceeds. This field is not set by default. It must be set for the overrides to take effect."
        }
      },
      "description": "Settings for overrides when upgrading a cluster."
    },
    "ClusterUpgradeSettings": {
      "type": "object",
      "properties": {
        "overrideSettings": {
          "$ref": "#/definitions/UpgradeOverrideSettings",
          "description": "Settings for overrides."
        }
      },
      "description": "Settings for upgrading a cluster."
    },
    "ManagedClusterAADProfile": {
      "type": "object",
      "properties": {
        "managed": {
          "type": "boolean",
          "description": "Whether to enable managed AAD."
        },
        "enableAzureRBAC": {
          "type": "boolean",
          "description": "Whether to enable Azure RBAC for Kubernetes authorization."
        },
        "adminGroupObjectIDs": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "description": "The list of AAD group object IDs that will have admin role of the cluster."
        },
        "clientAppID": {
          "type": "string",
          "description": "(DEPRECATED) The client AAD application ID. Learn more at https://aka.ms/aks/aad-legacy."
        },
        "serverAppID": {
          "type": "string",
          "description": "(DEPRECATED) The server AAD application ID. Learn more at https://aka.ms/aks/aad-legacy."
        },
        "serverAppSecret": {
          "type": "string",
          "description": "(DEPRECATED) The server AAD application secret. Learn more at https://aka.ms/aks/aad-legacy."
        },
        "tenantID": {
          "type": "string",
          "description": "The AAD tenant ID to use for authentication. If not specified, will use the tenant of the deployment subscription."
        }
      },
      "title": "AADProfile specifies attributes for Azure Active Directory integration.",
      "description": "For more details see [managed AAD on AKS](https://docs.microsoft.com/azure/aks/managed-aad)."
    },
    "ManagedClusterAddonProfile": {
      "type": "object",
      "properties": {
        "enabled": {
          "type": "boolean",
          "description": "Whether the add-on is enabled or not."
        },
        "config": {
          "type": "object",
          "additionalProperties": {
            "type": "string"
          },
          "description": "Key-value pairs for configuring an add-on."
        },
        "identity": {
          "readOnly": true,
          "description": "Information of user assigned identity used by this add-on.",
          "allOf": [
            {
              "$ref": "#/definitions/UserAssignedIdentity"
            }
          ]
        }
      },
      "required": [
        "enabled"
      ],
      "description": "A Kubernetes add-on profile for a managed cluster."
    },
    "ManagedClusterPodIdentity": {
      "type": "object",
      "properties": {
        "name": {
          "type": "string",
          "description": "The name of the pod identity."
        },
        "namespace": {
          "type": "string",
          "description": "The namespace of the pod identity."
        },
        "bindingSelector": {
          "type": "string",
          "description": "The binding selector to use for the AzureIdentityBinding resource."
        },
        "identity": {
          "$ref": "#/definitions/UserAssignedIdentity",
          "description": "The user assigned identity details."
        },
        "provisioningState": {
          "type": "string",
          "readOnly": true,
          "description": "The current provisioning state of the pod identity.",
          "enum": [
            "Assigned",
            "Canceled",
            "Deleting",
            "Failed",
            "Succeeded",
            "Updating"
          ],
          "x-ms-enum": {
            "name": "ManagedClusterPodIdentityProvisioningState",
            "modelAsString": true
          }
        },
        "provisioningInfo": {
          "type": "object",
          "readOnly": true,
          "properties": {
            "error": {
              "$ref": "#/definitions/ManagedClusterPodIdentityProvisioningError",
              "description": "Pod identity assignment error (if any)."
            }
          }
        }
      },
      "required": [
        "name",
        "namespace",
        "identity"
      ],
      "description": "Details about the pod identity assigned to the Managed Cluster."
    },
    "ManagedClusterPodIdentityProvisioningError": {
      "type": "object",
      "properties": {
        "error": {
          "$ref": "#/definitions/ManagedClusterPodIdentityProvisioningErrorBody",
          "description": "Details about the error."
        }
      },
      "description": "An error response from the pod identity provisioning."
    },
    "ManagedClusterPodIdentityProvisioningErrorBody": {
      "type": "object",
      "properties": {
        "code": {
          "type": "string",
          "description": "An identifier for the error. Codes are invariant and are intended to be consumed programmatically."
        },
        "message": {
          "type": "string",
          "description": "A message describing the error, intended to be suitable for display in a user interface."
        },
        "target": {
          "type": "string",
          "description": "The target of the particular error. For example, the name of the property in error."
        },
        "details": {
          "type": "array",
          "items": {
            "$ref": "#/definitions/ManagedClusterPodIdentityProvisioningErrorBody"
          },
          "x-ms-identifiers": [],
          "description": "A list of additional details about the error."
        }
      },
      "description": "An error response from the pod identity provisioning."
    },
    "ManagedClusterPodIdentityException": {
      "type": "object",
      "properties": {
        "name": {
          "type": "string",
          "description": "The name of the pod identity exception."
        },
        "namespace": {
          "type": "string",
          "description": "The namespace of the pod identity exception."
        },
        "podLabels": {
          "type": "object",
          "description": "The pod labels to match.",
          "additionalProperties": {
            "type": "string"
          }
        }
      },
      "required": [
        "name",
        "namespace",
        "podLabels"
      ],
      "title": "A pod identity exception, which allows pods with certain labels to access the Azure Instance Metadata Service (IMDS) endpoint without being intercepted by the node-managed identity (NMI) server.",
      "description": "See [disable AAD Pod Identity for a specific Pod/Application](https://azure.github.io/aad-pod-identity/docs/configure/application_exception/) for more details."
    },
    "ManagedClusterPodIdentityProfile": {
      "type": "object",
      "properties": {
        "enabled": {
          "type": "boolean",
          "description": "Whether the pod identity addon is enabled."
        },
        "allowNetworkPluginKubenet": {
          "type": "boolean",
          "title": "Whether pod identity is allowed to run on clusters with Kubenet networking.",
          "description": "Running in Kubenet is disabled by default due to the security related nature of AAD Pod Identity and the risks of IP spoofing. See [using Kubenet network plugin with AAD Pod Identity](https://docs.microsoft.com/azure/aks/use-azure-ad-pod-identity#using-kubenet-network-plugin-with-azure-active-directory-pod-managed-identities) for more information."
        },
        "userAssignedIdentities": {
          "description": "The pod identities to use in the cluster.",
          "type": "array",
          "items": {
            "$ref": "#/definitions/ManagedClusterPodIdentity"
          },
          "x-ms-identifiers": []
        },
        "userAssignedIdentityExceptions": {
          "description": "The pod identity exceptions to allow.",
          "type": "array",
          "items": {
            "$ref": "#/definitions/ManagedClusterPodIdentityException"
          },
          "x-ms-identifiers": []
        }
      },
      "title": "The pod identity profile of the Managed Cluster.",
      "description": "See [use AAD pod identity](https://docs.microsoft.com/azure/aks/use-azure-ad-pod-identity) for more details on pod identity integration."
    },
    "ManagedClusterOIDCIssuerProfile": {
      "type": "object",
      "properties": {
        "issuerURL": {
          "readOnly": true,
          "type": "string",
          "description": "The OIDC issuer url of the Managed Cluster."
        },
        "enabled": {
          "type": "boolean",
          "description": "Whether the OIDC issuer is enabled."
        }
      },
      "description": "The OIDC issuer profile of the Managed Cluster."
    },
    "ManagedClusterUpgradeProfile": {
      "type": "object",
      "properties": {
        "id": {
          "readOnly": true,
          "type": "string",
          "description": "The ID of the upgrade profile."
        },
        "name": {
          "readOnly": true,
          "type": "string",
          "description": "The name of the upgrade profile."
        },
        "type": {
          "readOnly": true,
          "type": "string",
          "description": "The type of the upgrade profile."
        },
        "properties": {
          "$ref": "#/definitions/ManagedClusterUpgradeProfileProperties",
          "description": "The properties of the upgrade profile.",
          "x-ms-client-flatten": true
        }
      },
      "required": [
        "properties"
      ],
      "description": "The list of available upgrades for compute pools."
    },
    "AgentPoolUpgradeProfile": {
      "type": "object",
      "properties": {
        "id": {
          "readOnly": true,
          "type": "string",
          "description": "The ID of the agent pool upgrade profile."
        },
        "name": {
          "readOnly": true,
          "type": "string",
          "description": "The name of the agent pool upgrade profile."
        },
        "type": {
          "readOnly": true,
          "type": "string",
          "description": "The type of the agent pool upgrade profile."
        },
        "properties": {
          "$ref": "#/definitions/AgentPoolUpgradeProfileProperties",
          "description": "The properties of the agent pool upgrade profile.",
          "x-ms-client-flatten": true
        }
      },
      "required": [
        "properties"
      ],
      "description": "The list of available upgrades for an agent pool."
    },
    "AgentPoolUpgradeProfileProperties": {
      "type": "object",
      "properties": {
        "kubernetesVersion": {
          "type": "string",
          "description": "The Kubernetes version (major.minor.patch)."
        },
        "osType": {
          "$ref": "#/definitions/OSType"
        },
        "upgrades": {
          "type": "array",
          "items": {
            "type": "object",
            "properties": {
              "kubernetesVersion": {
                "type": "string",
                "description": "The Kubernetes version (major.minor.patch)."
              },
              "isPreview": {
                "type": "boolean",
                "description": "Whether the Kubernetes version is currently in preview."
              }
            }
          },
          "x-ms-identifiers": [],
          "description": "List of orchestrator types and versions available for upgrade."
        },
        "latestNodeImageVersion": {
          "type": "string",
          "description": "The latest AKS supported node image version."
        }
      },
      "required": [
        "kubernetesVersion",
        "osType"
      ],
      "description": "The list of available upgrade versions."
    },
    "AgentPoolAvailableVersions": {
      "type": "object",
      "properties": {
        "id": {
          "readOnly": true,
          "type": "string",
          "description": "The ID of the agent pool version list."
        },
        "name": {
          "readOnly": true,
          "type": "string",
          "description": "The name of the agent pool version list."
        },
        "type": {
          "readOnly": true,
          "type": "string",
          "description": "Type of the agent pool version list."
        },
        "properties": {
          "$ref": "#/definitions/AgentPoolAvailableVersionsProperties",
          "description": "Properties of agent pool available versions.",
          "x-ms-client-flatten": true
        }
      },
      "required": [
        "properties"
      ],
      "description": "The list of available versions for an agent pool."
    },
    "AgentPoolAvailableVersionsProperties": {
      "type": "object",
      "properties": {
        "agentPoolVersions": {
          "type": "array",
          "items": {
            "type": "object",
            "properties": {
              "default": {
                "type": "boolean",
                "description": "Whether this version is the default agent pool version."
              },
              "kubernetesVersion": {
                "type": "string",
                "description": "The Kubernetes version (major.minor.patch)."
              },
              "isPreview": {
                "type": "boolean",
                "description": "Whether Kubernetes version is currently in preview."
              }
            }
          },
          "x-ms-identifiers": [],
          "description": "List of versions available for agent pool."
        }
      },
      "description": "The list of available agent pool versions."
    },
    "OSType": {
      "type": "string",
      "default": "Linux",
      "enum": [
        "Linux",
        "Windows"
      ],
      "x-ms-enum": {
        "name": "OSType",
        "modelAsString": true,
        "values": [
          {
            "value": "Linux",
            "description": "Use Linux."
          },
          {
            "value": "Windows",
            "description": "Use Windows."
          }
        ]
      },
      "description": "The operating system type. The default is Linux."
    },
    "OSSKU": {
      "type": "string",
      "enum": [
        "Ubuntu",
        "CBLMariner",
        "Mariner",
        "Windows2019",
        "Windows2022"
      ],
      "x-ms-enum": {
        "name": "OSSKU",
        "modelAsString": true
      },
      "description": "Specifies the OS SKU used by the agent pool. If not specified, the default is Ubuntu if OSType=Linux or Windows2019 if OSType=Windows. And the default Windows OSSKU will be changed to Windows2022 after Windows2019 is deprecated."
    },
    "ScaleSetPriority": {
      "type": "string",
      "default": "Regular",
      "enum": [
        "Spot",
        "Regular"
      ],
      "x-ms-enum": {
        "name": "ScaleSetPriority",
        "modelAsString": true,
        "values": [
          {
            "value": "Spot",
            "description": "Spot priority VMs will be used. There is no SLA for spot nodes. See [spot on AKS](https://docs.microsoft.com/azure/aks/spot-node-pool) for more information."
          },
          {
            "value": "Regular",
            "description": "Regular VMs will be used."
          }
        ]
      },
      "description": "The Virtual Machine Scale Set priority."
    },
    "ScaleSetEvictionPolicy": {
      "type": "string",
      "default": "Delete",
      "enum": [
        "Delete",
        "Deallocate"
      ],
      "x-ms-enum": {
        "name": "ScaleSetEvictionPolicy",
        "modelAsString": true,
        "values": [
          {
            "value": "Delete",
            "description": "Nodes in the underlying Scale Set of the node pool are deleted when they're evicted."
          },
          {
            "value": "Deallocate",
            "description": "Nodes in the underlying Scale Set of the node pool are set to the stopped-deallocated state upon eviction. Nodes in the stopped-deallocated state count against your compute quota and can cause issues with cluster scaling or upgrading."
          }
        ]
      },
      "title": "The Virtual Machine Scale Set eviction policy.",
      "description": "The eviction policy specifies what to do with the VM when it is evicted. The default is Delete. For more information about eviction see [spot VMs](https://docs.microsoft.com/azure/virtual-machines/spot-vms)"
    },
    "SpotMaxPrice": {
      "type": "number",
      "default": -1,
      "title": "The max price (in US Dollars) you are willing to pay for spot instances. Possible values are any decimal value greater than zero or -1 which indicates default price to be up-to on-demand.",
      "description": "Possible values are any decimal value greater than zero or -1 which indicates the willingness to pay any on-demand price. For more details on spot pricing, see [spot VMs pricing](https://docs.microsoft.com/azure/virtual-machines/spot-vms#pricing)"
    },
    "ScaleDownMode": {
      "type": "string",
      "enum": [
        "Delete",
        "Deallocate"
      ],
      "x-ms-enum": {
        "name": "ScaleDownMode",
        "modelAsString": true,
        "values": [
          {
            "value": "Delete",
            "description": "Create new instances during scale up and remove instances during scale down."
          },
          {
            "value": "Deallocate",
            "description": "Attempt to start deallocated instances (if they exist) during scale up and deallocate instances during scale down."
          }
        ]
      },
      "description": "Describes how VMs are added to or removed from Agent Pools. See [billing states](https://docs.microsoft.com/azure/virtual-machines/states-billing)."
    },
    "ProximityPlacementGroupID": {
      "type": "string",
      "format": "arm-id",
      "x-ms-arm-id-details": {
        "allowedResources": [
          {
            "type": "Microsoft.Compute/proximityPlacementGroups"
          }
        ]
      },
      "description": "The ID for Proximity Placement Group."
    },
    "CredentialResults": {
      "type": "object",
      "properties": {
        "kubeconfigs": {
          "type": "array",
          "readOnly": true,
          "items": {
            "$ref": "#/definitions/CredentialResult"
          },
          "x-ms-identifiers": [],
          "description": "Base64-encoded Kubernetes configuration file."
        }
      },
      "description": "The list credential result response."
    },
    "CredentialResult": {
      "type": "object",
      "properties": {
        "name": {
          "type": "string",
          "readOnly": true,
          "description": "The name of the credential."
        },
        "value": {
          "type": "string",
          "format": "byte",
          "readOnly": true,
          "description": "Base64-encoded Kubernetes configuration file."
        }
      },
      "description": "The credential result response."
    },
    "CloudError": {
      "type": "object",
      "x-ms-external": true,
      "properties": {
        "error": {
          "$ref": "#/definitions/CloudErrorBody",
          "description": "Details about the error."
        }
      },
      "description": "An error response from the Container service."
    },
    "CloudErrorBody": {
      "type": "object",
      "x-ms-external": true,
      "properties": {
        "code": {
          "type": "string",
          "description": "An identifier for the error. Codes are invariant and are intended to be consumed programmatically."
        },
        "message": {
          "type": "string",
          "description": "A message describing the error, intended to be suitable for display in a user interface."
        },
        "target": {
          "type": "string",
          "description": "The target of the particular error. For example, the name of the property in error."
        },
        "details": {
          "type": "array",
          "items": {
            "$ref": "#/definitions/CloudErrorBody"
          },
          "x-ms-identifiers": [],
          "description": "A list of additional details about the error."
        }
      },
      "description": "An error response from the Container service."
    },
    "ManagedClusterSKU": {
      "type": "object",
      "properties": {
        "name": {
          "type": "string",
          "description": "The name of a managed cluster SKU.",
          "enum": [
            "Base"
          ],
          "x-ms-enum": {
            "name": "ManagedClusterSKUName",
            "modelAsString": true,
            "values": [
              {
                "value": "Base",
                "description": "Base option for the AKS control plane."
              }
            ]
          }
        },
        "tier": {
          "type": "string",
          "title": "The tier of a managed cluster SKU.",
          "description": "If not specified, the default is 'Free'. See [AKS Pricing Tier](https://learn.microsoft.com/azure/aks/free-standard-pricing-tiers) for more details.",
          "enum": [
            "Standard",
            "Free"
          ],
          "x-ms-enum": {
            "name": "ManagedClusterSKUTier",
            "modelAsString": true,
            "values": [
              {
                "value": "Standard",
                "description": "Recommended for mission-critical and production workloads. Includes Kubernetes control plane autoscaling, workload-intensive testing, and up to 5,000 nodes per cluster. Guarantees 99.95% availability of the Kubernetes API server endpoint for clusters that use Availability Zones and 99.9% of availability for clusters that don't use Availability Zones."
              },
              {
                "value": "Free",
                "description": "The cluster management is free, but charged for VM, storage, and networking usage. Best for experimenting, learning, simple testing, or workloads with fewer than 10 nodes. Not recommended for production use cases."
              }
            ]
          }
        }
      },
      "description": "The SKU of a Managed Cluster."
    },
    "PrivateEndpointConnectionListResult": {
      "type": "object",
      "description": "A list of private endpoint connections",
      "properties": {
        "value": {
          "description": "The collection value.",
          "type": "array",
          "items": {
            "$ref": "#/definitions/PrivateEndpointConnection"
          }
        }
      }
    },
    "PrivateEndpointConnection": {
      "description": "A private endpoint connection",
      "type": "object",
      "properties": {
        "id": {
          "readOnly": true,
          "type": "string",
          "description": "The ID of the private endpoint connection."
        },
        "name": {
          "readOnly": true,
          "type": "string",
          "description": "The name of the private endpoint connection.",
          "externalDocs": {
            "url": "https://aka.ms/search-naming-rules"
          }
        },
        "type": {
          "readOnly": true,
          "type": "string",
          "description": "The resource type."
        },
        "properties": {
          "$ref": "#/definitions/PrivateEndpointConnectionProperties",
          "description": "The properties of a private endpoint connection.",
          "x-ms-client-flatten": true
        }
      },
      "x-ms-azure-resource": true
    },
    "PrivateEndpointConnectionProperties": {
      "type": "object",
      "description": "Properties of a private endpoint connection.",
      "properties": {
        "provisioningState": {
          "type": "string",
          "readOnly": true,
          "description": "The current provisioning state.",
          "enum": [
            "Canceled",
            "Creating",
            "Deleting",
            "Failed",
            "Succeeded"
          ],
          "x-ms-enum": {
            "name": "PrivateEndpointConnectionProvisioningState",
            "modelAsString": true
          }
        },
        "privateEndpoint": {
          "$ref": "#/definitions/PrivateEndpoint",
          "description": "The resource of private endpoint."
        },
        "privateLinkServiceConnectionState": {
          "$ref": "#/definitions/PrivateLinkServiceConnectionState",
          "description": "A collection of information about the state of the connection between service consumer and provider."
        }
      },
      "required": [
        "privateLinkServiceConnectionState"
      ]
    },
    "PrivateEndpoint": {
      "type": "object",
      "description": "Private endpoint which a connection belongs to.",
      "properties": {
        "id": {
          "description": "The resource ID of the private endpoint",
          "type": "string"
        }
      }
    },
    "PrivateLinkServiceConnectionState": {
      "description": "The state of a private link service connection.",
      "type": "object",
      "properties": {
        "status": {
          "enum": [
            "Pending",
            "Approved",
            "Rejected",
            "Disconnected"
          ],
          "type": "string",
          "description": "The private link service connection status.",
          "x-ms-enum": {
            "name": "ConnectionStatus",
            "modelAsString": true
          }
        },
        "description": {
          "type": "string",
          "description": "The private link service connection description."
        }
      }
    },
    "PrivateLinkResourcesListResult": {
      "type": "object",
      "description": "A list of private link resources",
      "properties": {
        "value": {
          "description": "The collection value.",
          "type": "array",
          "items": {
            "$ref": "#/definitions/PrivateLinkResource"
          }
        }
      }
    },
    "PrivateLinkResource": {
      "description": "A private link resource",
      "type": "object",
      "properties": {
        "id": {
          "type": "string",
          "description": "The ID of the private link resource."
        },
        "name": {
          "type": "string",
          "description": "The name of the private link resource.",
          "externalDocs": {
            "url": "https://aka.ms/search-naming-rules"
          }
        },
        "type": {
          "type": "string",
          "description": "The resource type."
        },
        "groupId": {
          "type": "string",
          "description": "The group ID of the resource."
        },
        "requiredMembers": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "description": "The RequiredMembers of the resource"
        },
        "privateLinkServiceID": {
          "readOnly": true,
          "type": "string",
          "format": "arm-id",
          "description": "The private link service ID of the resource, this field is exposed only to NRP internally."
        }
      }
    },
    "OSDiskType": {
      "type": "string",
      "enum": [
        "Managed",
        "Ephemeral"
      ],
      "x-ms-enum": {
        "name": "OSDiskType",
        "modelAsString": true,
        "values": [
          {
            "value": "Managed",
            "description": "Azure replicates the operating system disk for a virtual machine to Azure storage to avoid data loss should the VM need to be relocated to another host. Since containers aren't designed to have local state persisted, this behavior offers limited value while providing some drawbacks, including slower node provisioning and higher read/write latency."
          },
          {
            "value": "Ephemeral",
            "description": "Ephemeral OS disks are stored only on the host machine, just like a temporary disk. This provides lower read/write latency, along with faster node scaling and cluster upgrades."
          }
        ]
      },
      "title": "The OS disk type to be used for machines in the agent pool.",
      "description": "The default is 'Ephemeral' if the VM supports it and has a cache disk larger than the requested OSDiskSizeGB. Otherwise, defaults to 'Managed'. May not be changed after creation. For more information see [Ephemeral OS](https://docs.microsoft.com/azure/aks/cluster-configuration#ephemeral-os)."
    },
    "KubeletDiskType": {
      "type": "string",
      "enum": [
        "OS",
        "Temporary"
      ],
      "x-ms-enum": {
        "name": "KubeletDiskType",
        "modelAsString": true,
        "values": [
          {
            "value": "OS",
            "description": "Kubelet will use the OS disk for its data."
          },
          {
            "value": "Temporary",
            "description": "Kubelet will use the temporary disk for its data."
          }
        ]
      },
      "description": "Determines the placement of emptyDir volumes, container runtime data root, and Kubelet ephemeral storage."
    },
    "WorkloadRuntime": {
      "type": "string",
      "enum": [
        "OCIContainer",
        "WasmWasi",
        "KataMshvVmIsolation"
      ],
      "x-ms-enum": {
        "name": "WorkloadRuntime",
        "modelAsString": true,
        "values": [
          {
            "value": "OCIContainer",
            "description": "Nodes will use Kubelet to run standard OCI container workloads."
          },
          {
            "value": "WasmWasi",
            "description": "Nodes will use Krustlet to run WASM workloads using the WASI provider (Preview)."
          },
          {
            "value": "KataMshvVmIsolation",
            "description": "Nodes can use (Kata + Cloud Hypervisor + Hyper-V) to enable Nested VM-based pods (Preview). Due to the use Hyper-V, AKS node OS itself is a nested VM (the root OS) of Hyper-V. Thus it can only be used with VM series that support Nested Virtualization such as Dv3 series."
          }
        ]
      },
      "description": "Determines the type of workload a node can run."
    },
    "KubeletConfig": {
      "title": "Kubelet configurations of agent nodes.",
      "description": "See [AKS custom node configuration](https://docs.microsoft.com/azure/aks/custom-node-configuration) for more details.",
      "type": "object",
      "properties": {
        "cpuManagerPolicy": {
          "type": "string",
          "title": "The CPU Manager policy to use.",
          "description": "The default is 'none'. See [Kubernetes CPU management policies](https://kubernetes.io/docs/tasks/administer-cluster/cpu-management-policies/#cpu-management-policies) for more information. Allowed values are 'none' and 'static'."
        },
        "cpuCfsQuota": {
          "type": "boolean",
          "title": "If CPU CFS quota enforcement is enabled for containers that specify CPU limits.",
          "description": "The default is true."
        },
        "cpuCfsQuotaPeriod": {
          "type": "string",
          "title": "The CPU CFS quota period value.",
          "description": "The default is '100ms.' Valid values are a sequence of decimal numbers with an optional fraction and a unit suffix. For example: '300ms', '2h45m'. Supported units are 'ns', 'us', 'ms', 's', 'm', and 'h'."
        },
        "imageGcHighThreshold": {
          "type": "integer",
          "format": "int32",
          "title": "The percent of disk usage after which image garbage collection is always run.",
          "description": "To disable image garbage collection, set to 100. The default is 85%"
        },
        "imageGcLowThreshold": {
          "type": "integer",
          "format": "int32",
          "title": "The percent of disk usage before which image garbage collection is never run.",
          "description": "This cannot be set higher than imageGcHighThreshold. The default is 80%"
        },
        "topologyManagerPolicy": {
          "type": "string",
          "title": "The Topology Manager policy to use.",
          "description": "For more information see [Kubernetes Topology Manager](https://kubernetes.io/docs/tasks/administer-cluster/topology-manager). The default is 'none'. Allowed values are 'none', 'best-effort', 'restricted', and 'single-numa-node'."
        },
        "allowedUnsafeSysctls": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "description": "Allowed list of unsafe sysctls or unsafe sysctl patterns (ending in `*`)."
        },
        "failSwapOn": {
          "type": "boolean",
          "description": "If set to true it will make the Kubelet fail to start if swap is enabled on the node."
        },
        "containerLogMaxSizeMB": {
          "type": "integer",
          "format": "int32",
          "description": "The maximum size (e.g. 10Mi) of container log file before it is rotated."
        },
        "containerLogMaxFiles": {
          "type": "integer",
          "format": "int32",
          "description": "The maximum number of container log files that can be present for a container. The number must be ≥ 2.",
          "minimum": 2
        },
        "podMaxPids": {
          "type": "integer",
          "format": "int32",
          "description": "The maximum number of processes per pod."
        }
      }
    },
    "LinuxOSConfig": {
      "title": "OS configurations of Linux agent nodes.",
      "description": "See [AKS custom node configuration](https://docs.microsoft.com/azure/aks/custom-node-configuration) for more details.",
      "type": "object",
      "properties": {
        "sysctls": {
          "$ref": "#/definitions/SysctlConfig",
          "description": "Sysctl settings for Linux agent nodes."
        },
        "transparentHugePageEnabled": {
          "type": "string",
          "title": "Whether transparent hugepages are enabled.",
          "description": "Valid values are 'always', 'madvise', and 'never'. The default is 'always'. For more information see [Transparent Hugepages](https://www.kernel.org/doc/html/latest/admin-guide/mm/transhuge.html#admin-guide-transhuge)."
        },
        "transparentHugePageDefrag": {
          "type": "string",
          "title": "Whether the kernel should make aggressive use of memory compaction to make more hugepages available.",
          "description": "Valid values are 'always', 'defer', 'defer+madvise', 'madvise' and 'never'. The default is 'madvise'. For more information see [Transparent Hugepages](https://www.kernel.org/doc/html/latest/admin-guide/mm/transhuge.html#admin-guide-transhuge)."
        },
        "swapFileSizeMB": {
          "type": "integer",
          "format": "int32",
          "description": "The size in MB of a swap file that will be created on each node."
        }
      }
    },
    "AgentPoolWindowsProfile": {
      "type": "object",
      "description": "The Windows agent pool's specific profile.",
      "properties": {
        "disableOutboundNat": {
          "type": "boolean",
          "title": "Whether to disable OutboundNAT in windows nodes",
          "description": "The default value is false. Outbound NAT can only be disabled if the cluster outboundType is NAT Gateway and the Windows agent pool does not have node public IP enabled."
        }
      }
    },
    "SysctlConfig": {
      "description": "Sysctl settings for Linux agent nodes.",
      "type": "object",
      "properties": {
        "netCoreSomaxconn": {
          "type": "integer",
          "format": "int32",
          "description": "Sysctl setting net.core.somaxconn."
        },
        "netCoreNetdevMaxBacklog": {
          "type": "integer",
          "format": "int32",
          "description": "Sysctl setting net.core.netdev_max_backlog."
        },
        "netCoreRmemDefault": {
          "type": "integer",
          "format": "int32",
          "description": "Sysctl setting net.core.rmem_default."
        },
        "netCoreRmemMax": {
          "type": "integer",
          "format": "int32",
          "description": "Sysctl setting net.core.rmem_max."
        },
        "netCoreWmemDefault": {
          "type": "integer",
          "format": "int32",
          "description": "Sysctl setting net.core.wmem_default."
        },
        "netCoreWmemMax": {
          "type": "integer",
          "format": "int32",
          "description": "Sysctl setting net.core.wmem_max."
        },
        "netCoreOptmemMax": {
          "type": "integer",
          "format": "int32",
          "description": "Sysctl setting net.core.optmem_max."
        },
        "netIpv4TcpMaxSynBacklog": {
          "type": "integer",
          "format": "int32",
          "description": "Sysctl setting net.ipv4.tcp_max_syn_backlog."
        },
        "netIpv4TcpMaxTwBuckets": {
          "type": "integer",
          "format": "int32",
          "description": "Sysctl setting net.ipv4.tcp_max_tw_buckets."
        },
        "netIpv4TcpFinTimeout": {
          "type": "integer",
          "format": "int32",
          "description": "Sysctl setting net.ipv4.tcp_fin_timeout."
        },
        "netIpv4TcpKeepaliveTime": {
          "type": "integer",
          "format": "int32",
          "description": "Sysctl setting net.ipv4.tcp_keepalive_time."
        },
        "netIpv4TcpKeepaliveProbes": {
          "type": "integer",
          "format": "int32",
          "description": "Sysctl setting net.ipv4.tcp_keepalive_probes."
        },
        "netIpv4TcpkeepaliveIntvl": {
          "type": "integer",
          "format": "int32",
          "description": "Sysctl setting net.ipv4.tcp_keepalive_intvl."
        },
        "netIpv4TcpTwReuse": {
          "type": "boolean",
          "description": "Sysctl setting net.ipv4.tcp_tw_reuse."
        },
        "netIpv4IpLocalPortRange": {
          "type": "string",
          "description": "Sysctl setting net.ipv4.ip_local_port_range."
        },
        "netIpv4NeighDefaultGcThresh1": {
          "type": "integer",
          "format": "int32",
          "description": "Sysctl setting net.ipv4.neigh.default.gc_thresh1."
        },
        "netIpv4NeighDefaultGcThresh2": {
          "type": "integer",
          "format": "int32",
          "description": "Sysctl setting net.ipv4.neigh.default.gc_thresh2."
        },
        "netIpv4NeighDefaultGcThresh3": {
          "type": "integer",
          "format": "int32",
          "description": "Sysctl setting net.ipv4.neigh.default.gc_thresh3."
        },
        "netNetfilterNfConntrackMax": {
          "type": "integer",
          "format": "int32",
          "description": "Sysctl setting net.netfilter.nf_conntrack_max."
        },
        "netNetfilterNfConntrackBuckets": {
          "type": "integer",
          "format": "int32",
          "description": "Sysctl setting net.netfilter.nf_conntrack_buckets."
        },
        "fsInotifyMaxUserWatches": {
          "type": "integer",
          "format": "int32",
          "description": "Sysctl setting fs.inotify.max_user_watches."
        },
        "fsFileMax": {
          "type": "integer",
          "format": "int32",
          "description": "Sysctl setting fs.file-max."
        },
        "fsAioMaxNr": {
          "type": "integer",
          "format": "int32",
          "description": "Sysctl setting fs.aio-max-nr."
        },
        "fsNrOpen": {
          "type": "integer",
          "format": "int32",
          "description": "Sysctl setting fs.nr_open."
        },
        "kernelThreadsMax": {
          "type": "integer",
          "format": "int32",
          "description": "Sysctl setting kernel.threads-max."
        },
        "vmMaxMapCount": {
          "type": "integer",
          "format": "int32",
          "description": "Sysctl setting vm.max_map_count."
        },
        "vmSwappiness": {
          "type": "integer",
          "format": "int32",
          "description": "Sysctl setting vm.swappiness."
        },
        "vmVfsCachePressure": {
          "type": "integer",
          "format": "int32",
          "description": "Sysctl setting vm.vfs_cache_pressure."
        }
      }
    },
    "ManagedClusterHTTPProxyConfig": {
      "description": "Cluster HTTP proxy configuration.",
      "type": "object",
      "properties": {
        "httpProxy": {
          "type": "string",
          "description": "The HTTP proxy server endpoint to use."
        },
        "httpsProxy": {
          "type": "string",
          "description": "The HTTPS proxy server endpoint to use."
        },
        "noProxy": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "description": "The endpoints that should not go through proxy."
        },
        "effectiveNoProxy": {
          "type": "array",
          "readOnly": true,
          "items": {
            "type": "string"
          },
          "description": "A read-only list of all endpoints for which traffic should not be sent to the proxy. This list is a superset of noProxy and values injected by AKS."
        },
        "trustedCa": {
          "type": "string",
          "description": "Alternative CA cert to use for connecting to proxy servers."
        }
      }
    },
    "GPUInstanceProfile": {
      "type": "string",
      "enum": [
        "MIG1g",
        "MIG2g",
        "MIG3g",
        "MIG4g",
        "MIG7g"
      ],
      "x-ms-enum": {
        "name": "GPUInstanceProfile ",
        "modelAsString": true
      },
      "description": "GPUInstanceProfile to be used to specify GPU MIG instance profile for supported GPU VM SKU."
    },
    "ExtendedLocationType": {
      "type": "string",
      "description": "The type of extendedLocation.",
      "enum": [
        "EdgeZone"
      ],
      "x-ms-enum": {
        "name": "ExtendedLocationTypes",
        "modelAsString": true
      }
    },
    "ExtendedLocation": {
      "type": "object",
      "description": "The complex type of the extended location.",
      "properties": {
        "name": {
          "type": "string",
          "description": "The name of the extended location."
        },
        "type": {
          "$ref": "#/definitions/ExtendedLocationType",
          "description": "The type of the extended location."
        }
      }
    },
    "OSOptionProperty": {
      "type": "object",
      "properties": {
        "os-type": {
          "type": "string",
          "description": "The OS type."
        },
        "enable-fips-image": {
          "type": "boolean",
          "description": "Whether the image is FIPS-enabled."
        }
      },
      "required": [
        "os-type",
        "enable-fips-image"
      ],
      "description": "OS option property."
    },
    "OSOptionPropertyList": {
      "type": "object",
      "properties": {
        "osOptionPropertyList": {
          "type": "array",
          "items": {
            "$ref": "#/definitions/OSOptionProperty"
          },
          "x-ms-identifiers": [],
          "description": "The list of OS options."
        }
      },
      "required": [
        "osOptionPropertyList"
      ],
      "description": "The list of OS option properties."
    },
    "OSOptionProfile": {
      "type": "object",
      "properties": {
        "id": {
          "readOnly": true,
          "type": "string",
          "description": "The ID of the OS option resource."
        },
        "name": {
          "readOnly": true,
          "type": "string",
          "description": "The name of the OS option resource."
        },
        "type": {
          "readOnly": true,
          "type": "string",
          "description": "The type of the OS option resource."
        },
        "properties": {
          "$ref": "#/definitions/OSOptionPropertyList",
          "description": "The list of OS options.",
          "x-ms-client-flatten": true
        }
      },
      "required": [
        "properties"
      ],
      "description": "The OS option profile."
    },
    "EndpointDependency": {
      "description": "A domain name that AKS agent nodes are reaching at.",
      "type": "object",
      "properties": {
        "domainName": {
          "description": "The domain name of the dependency.",
          "type": "string"
        },
        "endpointDetails": {
          "description": "The Ports and Protocols used when connecting to domainName.",
          "type": "array",
          "items": {
            "$ref": "#/definitions/EndpointDetail"
          },
          "x-ms-identifiers": []
        }
      }
    },
    "EndpointDetail": {
      "description": "connect information from the AKS agent nodes to a single endpoint.",
      "type": "object",
      "properties": {
        "ipAddress": {
          "description": "An IP Address that Domain Name currently resolves to.",
          "type": "string"
        },
        "port": {
          "format": "int32",
          "description": "The port an endpoint is connected to.",
          "type": "integer"
        },
        "protocol": {
          "description": "The protocol used for connection",
          "type": "string"
        },
        "description": {
          "description": "Description of the detail",
          "type": "string"
        }
      }
    },
    "OutboundEnvironmentEndpoint": {
      "description": "Egress endpoints which AKS agent nodes connect to for common purpose.",
      "type": "object",
      "properties": {
        "category": {
          "description": "The category of endpoints accessed by the AKS agent node, e.g. azure-resource-management, apiserver, etc.",
          "type": "string"
        },
        "endpoints": {
          "description": "The endpoints that AKS agent nodes connect to",
          "type": "array",
          "items": {
            "$ref": "#/definitions/EndpointDependency"
          },
          "x-ms-identifiers": []
        }
      }
    },
    "OutboundEnvironmentEndpointCollection": {
      "description": "Collection of OutboundEnvironmentEndpoint",
      "required": [
        "value"
      ],
      "type": "object",
      "properties": {
        "value": {
          "description": "Collection of resources.",
          "type": "array",
          "items": {
            "$ref": "#/definitions/OutboundEnvironmentEndpoint"
          },
          "x-ms-identifiers": []
        },
        "nextLink": {
          "description": "Link to next page of resources.",
          "type": "string",
          "readOnly": true
        }
      }
    },
    "ManagedClusterSecurityProfile": {
      "type": "object",
      "properties": {
        "defender": {
          "$ref": "#/definitions/ManagedClusterSecurityProfileDefender",
          "description": "Microsoft Defender settings for the security profile."
        },
        "azureKeyVaultKms": {
          "$ref": "#/definitions/AzureKeyVaultKms",
          "description": "Azure Key Vault [key management service](https://kubernetes.io/docs/tasks/administer-cluster/kms-provider/) settings for the security profile."
        },
        "workloadIdentity": {
          "$ref": "#/definitions/ManagedClusterSecurityProfileWorkloadIdentity",
          "description": "Workload identity settings for the security profile. Workload identity enables Kubernetes applications to access Azure cloud resources securely with Azure AD. See https://aka.ms/aks/wi for more details."
        },
        "imageCleaner": {
          "$ref": "#/definitions/ManagedClusterSecurityProfileImageCleaner",
          "description": "Image Cleaner settings for the security profile."
        },
        "nodeRestriction": {
          "$ref": "#/definitions/ManagedClusterSecurityProfileNodeRestriction",
          "description": "[Node Restriction](https://kubernetes.io/docs/reference/access-authn-authz/admission-controllers/#noderestriction) settings for the security profile."
        },
        "customCATrustCertificates": {
          "$ref": "#/definitions/ManagedClusterSecurityProfileCustomCATrustCertificates",
          "description": "A list of up to 10 base64 encoded CAs that will be added to the trust store on nodes with the Custom CA Trust feature enabled. For more information see [Custom CA Trust Certificates](https://learn.microsoft.com/en-us/azure/aks/custom-certificate-authority)"
        }
      },
      "description": "Security profile for the container service cluster."
    },
    "ManagedClusterSecurityProfileDefender": {
      "type": "object",
      "properties": {
        "logAnalyticsWorkspaceResourceId": {
          "type": "string",
          "format": "arm-id",
          "x-ms-arm-id-details": {
            "allowedResources": [
              {
                "type": "Microsoft.OperationalInsights/workspaces"
              }
            ]
          },
          "description": "Resource ID of the Log Analytics workspace to be associated with Microsoft Defender. When Microsoft Defender is enabled, this field is required and must be a valid workspace resource ID. When Microsoft Defender is disabled, leave the field empty."
        },
        "securityMonitoring": {
          "$ref": "#/definitions/ManagedClusterSecurityProfileDefenderSecurityMonitoring",
          "description": "Microsoft Defender threat detection for Cloud settings for the security profile."
        }
      },
      "description": "Microsoft Defender settings for the security profile."
    },
    "ManagedClusterSecurityProfileDefenderSecurityMonitoring": {
      "type": "object",
      "properties": {
        "enabled": {
          "type": "boolean",
          "description": "Whether to enable Defender threat detection"
        }
      },
      "description": "Microsoft Defender settings for the security profile threat detection."
    },
    "ManagedClusterStorageProfile": {
      "type": "object",
      "properties": {
        "diskCSIDriver": {
          "$ref": "#/definitions/ManagedClusterStorageProfileDiskCSIDriver",
          "description": "AzureDisk CSI Driver settings for the storage profile."
        },
        "fileCSIDriver": {
          "$ref": "#/definitions/ManagedClusterStorageProfileFileCSIDriver",
          "description": "AzureFile CSI Driver settings for the storage profile."
        },
        "snapshotController": {
          "$ref": "#/definitions/ManagedClusterStorageProfileSnapshotController",
          "description": "Snapshot Controller settings for the storage profile."
        },
        "blobCSIDriver": {
          "$ref": "#/definitions/ManagedClusterStorageProfileBlobCSIDriver",
          "description": "AzureBlob CSI Driver settings for the storage profile."
        }
      },
      "description": "Storage profile for the container service cluster."
    },
    "AzureKeyVaultKms": {
      "type": "object",
      "properties": {
        "enabled": {
          "type": "boolean",
          "description": "Whether to enable Azure Key Vault key management service. The default is false."
        },
        "keyId": {
          "type": "string",
          "description": "Identifier of Azure Key Vault key. See [key identifier format](https://docs.microsoft.com/en-us/azure/key-vault/general/about-keys-secrets-certificates#vault-name-and-object-name) for more details. When Azure Key Vault key management service is enabled, this field is required and must be a valid key identifier. When Azure Key Vault key management service is disabled, leave the field empty."
        },
        "keyVaultNetworkAccess": {
          "type": "string",
          "enum": [
            "Public",
            "Private"
          ],
          "default": "Public",
          "x-ms-enum": {
            "name": "KeyVaultNetworkAccessTypes",
            "modelAsString": true
          },
          "title": "Network access of the key vault",
          "description": "Network access of key vault. The possible values are `Public` and `Private`. `Public` means the key vault allows public access from all networks. `Private` means the key vault disables public access and enables private link. The default value is `Public`."
        },
        "keyVaultResourceId": {
          "type": "string",
          "format": "arm-id",
          "x-ms-arm-id-details": {
            "allowedResources": [
              {
                "type": "Microsoft.KeyVault/vaults"
              }
            ]
          },
          "description": "Resource ID of key vault. When keyVaultNetworkAccess is `Private`, this field is required and must be a valid resource ID. When keyVaultNetworkAccess is `Public`, leave the field empty."
        }
      },
      "description": "Azure Key Vault key management service settings for the security profile."
    },
    "ManagedClusterIngressProfile": {
      "type": "object",
      "properties": {
        "webAppRouting": {
          "$ref": "#/definitions/ManagedClusterIngressProfileWebAppRouting",
          "description": "Web App Routing settings for the ingress profile."
        }
      },
      "description": "Ingress profile for the container service cluster."
    },
    "ManagedClusterIngressProfileWebAppRouting": {
      "type": "object",
      "properties": {
        "enabled": {
          "type": "boolean",
          "description": "Whether to enable Web App Routing."
        },
        "dnsZoneResourceId": {
          "type": "string",
          "format": "arm-id",
          "description": "Resource ID of the DNS Zone to be associated with the web app. Used only when Web App Routing is enabled."
        },
        "identity": {
          "readOnly": true,
          "type": "object",
          "$ref": "#/definitions/UserAssignedIdentity",
          "description": "Managed identity of the Web Application Routing add-on. This is the identity that should be granted permissions, for example, to manage the associated Azure DNS resource and get certificates from Azure Key Vault. See [this overview of the add-on](https://learn.microsoft.com/en-us/azure/aks/web-app-routing?tabs=with-osm) for more instructions."
        }
      },
      "description": "Web App Routing settings for the ingress profile."
    },
    "ManagedClusterSecurityProfileWorkloadIdentity": {
      "type": "object",
      "properties": {
        "enabled": {
          "type": "boolean",
          "description": "Whether to enable workload identity."
        }
      },
      "description": "Workload identity settings for the security profile."
    },
    "ManagedClusterSecurityProfileImageCleaner": {
      "type": "object",
      "properties": {
        "enabled": {
          "type": "boolean",
          "description": "Whether to enable Image Cleaner on AKS cluster."
        },
        "intervalHours": {
          "type": "integer",
          "format": "int32",
          "description": "Image Cleaner scanning interval in hours."
        }
      },
      "description": "Image Cleaner removes unused images from nodes, freeing up disk space and helping to reduce attack surface area. Here are settings for the security profile."
    },
    "ManagedClusterSecurityProfileNodeRestriction": {
      "type": "object",
      "properties": {
        "enabled": {
          "type": "boolean",
          "description": "Whether to enable Node Restriction"
        }
      },
      "description": "Node Restriction settings for the security profile."
    },
    "ManagedClusterSecurityProfileCustomCATrustCertificates": {
      "type": "array",
      "items": {
        "type": "string",
        "format": "byte"
      },
      "minItems": 0,
      "maxItems": 10,
      "title": "The list of base64 encoded certificate strings that will be added to the node trust store. At most 10 strings can be provided.",
      "description": "Certificates will only be added to trust stores on node pools that have enableCustomCATrust field set to true. If updated, the new list of certificates will be installed in the trust store in place of the old certificates. The certificates are applied asynchronously and will be available a short time after the list is updated."
    },
    "ManagedClusterStorageProfileDiskCSIDriver": {
      "type": "object",
      "properties": {
        "enabled": {
          "type": "boolean",
          "description": "Whether to enable AzureDisk CSI Driver. The default value is true."
        },
        "version": {
          "type": "string",
          "description": "The version of AzureDisk CSI Driver. The default value is v1."
        }
      },
      "description": "AzureDisk CSI Driver settings for the storage profile."
    },
    "ManagedClusterStorageProfileFileCSIDriver": {
      "type": "object",
      "properties": {
        "enabled": {
          "type": "boolean",
          "description": "Whether to enable AzureFile CSI Driver. The default value is true."
        }
      },
      "description": "AzureFile CSI Driver settings for the storage profile."
    },
    "ManagedClusterStorageProfileSnapshotController": {
      "type": "object",
      "properties": {
        "enabled": {
          "type": "boolean",
          "description": "Whether to enable Snapshot Controller. The default value is true."
        }
      },
      "description": "Snapshot Controller settings for the storage profile."
    },
    "ManagedClusterStorageProfileBlobCSIDriver": {
      "type": "object",
      "properties": {
        "enabled": {
          "type": "boolean",
          "description": "Whether to enable AzureBlob CSI Driver. The default value is false."
        }
      },
      "description": "AzureBlob CSI Driver settings for the storage profile."
    },
    "CreationData": {
      "description": "Data used when creating a target resource from a source resource.",
      "type": "object",
      "properties": {
        "sourceResourceId": {
          "type": "string",
          "format": "arm-id",
          "description": "This is the ARM ID of the source object to be used to create the target object."
        }
      }
    },
    "SnapshotListResult": {
      "type": "object",
      "properties": {
        "value": {
          "type": "array",
          "items": {
            "$ref": "#/definitions/Snapshot"
          },
          "description": "The list of snapshots."
        },
        "nextLink": {
          "type": "string",
          "description": "The URL to get the next set of snapshot results.",
          "readOnly": true
        }
      },
      "description": "The response from the List Snapshots operation."
    },
    "ManagedClusterSnapshotListResult": {
      "type": "object",
      "properties": {
        "value": {
          "type": "array",
          "items": {
            "$ref": "#/definitions/ManagedClusterSnapshot"
          },
          "description": "The list of managed cluster snapshots."
        },
        "nextLink": {
          "type": "string",
          "description": "The URL to get the next set of managed cluster snapshot results.",
          "readOnly": true
        }
      },
      "description": "The response from the List Managed Cluster Snapshots operation."
    },
    "Snapshot": {
      "type": "object",
      "properties": {
        "properties": {
          "description": "Properties of a snapshot.",
          "$ref": "#/definitions/SnapshotProperties",
          "x-ms-client-flatten": true
        }
      },
      "allOf": [
        {
          "$ref": "../../../../../../common-types/resource-management/v3/types.json#/definitions/TrackedResource"
        }
      ],
      "description": "A node pool snapshot resource."
    },
    "ManagedClusterSnapshot": {
      "type": "object",
      "properties": {
        "properties": {
          "description": "Properties of a managed cluster snapshot.",
          "$ref": "#/definitions/ManagedClusterSnapshotProperties",
          "x-ms-client-flatten": true
        }
      },
      "allOf": [
        {
          "$ref": "../../../../../../common-types/resource-management/v3/types.json#/definitions/TrackedResource"
        }
      ],
      "description": "A managed cluster snapshot resource."
    },
    "SnapshotProperties": {
      "type": "object",
      "properties": {
        "creationData": {
          "$ref": "#/definitions/CreationData",
          "description": "CreationData to be used to specify the source agent pool resource ID to create this snapshot."
        },
        "snapshotType": {
          "$ref": "#/definitions/SnapshotType"
        },
        "kubernetesVersion": {
          "readOnly": true,
          "type": "string",
          "description": "The version of Kubernetes."
        },
        "nodeImageVersion": {
          "readOnly": true,
          "type": "string",
          "description": "The version of node image."
        },
        "osType": {
          "readOnly": true,
          "$ref": "#/definitions/OSType"
        },
        "osSku": {
          "readOnly": true,
          "$ref": "#/definitions/OSSKU"
        },
        "vmSize": {
          "readOnly": true,
          "type": "string",
          "description": "The size of the VM."
        },
        "enableFIPS": {
          "readOnly": true,
          "type": "boolean",
          "description": "Whether to use a FIPS-enabled OS."
        }
      },
      "description": "Properties used to configure a node pool snapshot."
    },
    "ManagedClusterSnapshotProperties": {
      "type": "object",
      "properties": {
        "creationData": {
          "$ref": "#/definitions/CreationData",
          "description": "CreationData to be used to specify the source resource ID to create this snapshot."
        },
        "snapshotType": {
          "$ref": "#/definitions/SnapshotType"
        },
        "managedClusterPropertiesReadOnly": {
          "$ref": "#/definitions/ManagedClusterPropertiesForSnapshot",
          "description": "What the properties will be showed when getting managed cluster snapshot. Those properties are read-only."
        }
      },
      "description": "Properties for a managed cluster snapshot."
    },
    "ManagedClusterPropertiesForSnapshot": {
      "type": "object",
      "readOnly": true,
      "properties": {
        "kubernetesVersion": {
          "type": "string",
          "description": "The current kubernetes version."
        },
        "sku": {
          "type": "object",
          "$ref": "#/definitions/ManagedClusterSKU",
          "description": "The current managed cluster sku."
        },
        "enableRbac": {
          "type": "boolean",
          "description": "Whether the cluster has enabled Kubernetes Role-Based Access Control or not."
        },
        "networkProfile": {
          "type": "object",
          "$ref": "#/definitions/NetworkProfileForSnapshot",
          "description": "The current network profile."
        }
      },
      "description": "managed cluster properties for snapshot, these properties are read only."
    },
    "NetworkProfileForSnapshot": {
      "type": "object",
      "readOnly": true,
      "properties": {
        "networkPlugin": {
          "$ref": "#/definitions/NetworkPlugin",
          "description": "networkPlugin for managed cluster snapshot."
        },
        "networkPluginMode": {
          "$ref": "#/definitions/NetworkPluginMode",
          "description": "NetworkPluginMode for managed cluster snapshot."
        },
        "networkPolicy": {
          "$ref": "#/definitions/NetworkPolicy",
          "description": "networkPolicy for managed cluster snapshot."
        },
        "networkMode": {
          "$ref": "#/definitions/NetworkMode",
          "description": "networkMode for managed cluster snapshot."
        },
        "loadBalancerSku": {
          "$ref": "#/definitions/LoadBalancerSku",
          "description": "loadBalancerSku for managed cluster snapshot."
        }
      },
      "description": "network profile for managed cluster snapshot, these properties are read only."
    },
    "NetworkPlugin": {
      "type": "string",
      "enum": [
        "azure",
        "kubenet",
        "none"
      ],
      "default": "kubenet",
      "x-ms-enum": {
        "name": "NetworkPlugin",
        "modelAsString": true,
        "values": [
          {
            "value": "azure",
            "description": "Use the Azure CNI network plugin. See [Azure CNI (advanced) networking](https://docs.microsoft.com/azure/aks/concepts-network#azure-cni-advanced-networking) for more information."
          },
          {
            "value": "kubenet",
            "description": "Use the Kubenet network plugin. See [Kubenet (basic) networking](https://docs.microsoft.com/azure/aks/concepts-network#kubenet-basic-networking) for more information."
          },
          {
            "value": "none",
            "description": "Do not use a network plugin. A custom CNI will need to be installed after cluster creation for networking functionality."
          }
        ]
      },
      "description": "Network plugin used for building the Kubernetes network."
    },
    "NetworkPluginMode": {
      "type": "string",
      "enum": [
        "Overlay"
      ],
      "x-ms-enum": {
        "name": "NetworkPluginMode",
        "modelAsString": true,
        "values": [
          {
            "value": "Overlay",
            "description": "Pods are given IPs from the PodCIDR address space but use Azure Routing Domains rather than Kubenet reference plugins host-local and bridge."
          }
        ]
      },
      "description": "The mode the network plugin should use."
    },
    "NetworkPolicy": {
      "type": "string",
      "enum": [
        "calico",
        "azure",
        "cilium"
      ],
      "x-ms-enum": {
        "name": "NetworkPolicy",
        "modelAsString": true,
        "values": [
          {
            "value": "calico",
            "description": "Use Calico network policies. See [differences between Azure and Calico policies](https://docs.microsoft.com/azure/aks/use-network-policies#differences-between-azure-and-calico-policies-and-their-capabilities) for more information."
          },
          {
            "value": "azure",
            "description": "Use Azure network policies. See [differences between Azure and Calico policies](https://docs.microsoft.com/azure/aks/use-network-policies#differences-between-azure-and-calico-policies-and-their-capabilities) for more information."
          },
          {
            "value": "cilium",
            "description": "Use Cilium to enforce network policies. This requires networkDataplane to be 'cilium'."
          }
        ]
      },
      "description": "Network policy used for building the Kubernetes network."
    },
    "NetworkMode": {
      "type": "string",
      "enum": [
        "transparent",
        "bridge"
      ],
      "x-ms-enum": {
        "name": "networkMode",
        "modelAsString": true,
        "values": [
          {
            "value": "transparent",
            "description": "No bridge is created. Intra-VM Pod to Pod communication is through IP routes created by Azure CNI. See [Transparent Mode](https://docs.microsoft.com/azure/aks/faq#transparent-mode) for more information."
          },
          {
            "value": "bridge",
            "description": "This is no longer supported"
          }
        ]
      },
      "title": "The network mode Azure CNI is configured with.",
      "description": "This cannot be specified if networkPlugin is anything other than 'azure'."
    },
    "NetworkDataplane": {
      "type": "string",
      "enum": [
        "azure",
        "cilium"
      ],
      "x-ms-enum": {
        "name": "networkDataplane",
        "modelAsString": true,
        "values": [
          {
            "value": "azure",
            "description": "Use Azure network dataplane."
          },
          {
            "value": "cilium",
            "description": "Use Cilium network dataplane. See [Azure CNI Powered by Cilium](https://learn.microsoft.com/azure/aks/azure-cni-powered-by-cilium) for more information."
          }
        ]
      },
      "description": "Network dataplane used in the Kubernetes cluster."
    },
    "LoadBalancerSku": {
      "type": "string",
      "enum": [
        "standard",
        "basic"
      ],
      "x-ms-enum": {
        "name": "loadBalancerSku",
        "modelAsString": true,
        "values": [
          {
            "value": "standard",
            "description": "Use a a standard Load Balancer. This is the recommended Load Balancer SKU. For more information about on working with the load balancer in the managed cluster, see the [standard Load Balancer](https://docs.microsoft.com/azure/aks/load-balancer-standard) article."
          },
          {
            "value": "basic",
            "description": "Use a basic Load Balancer with limited functionality."
          }
        ]
      },
      "title": "The load balancer sku for the managed cluster.",
      "description": "The default is 'standard'. See [Azure Load Balancer SKUs](https://docs.microsoft.com/azure/load-balancer/skus) for more information about the differences between load balancer SKUs."
    },
    "SnapshotType": {
      "type": "string",
      "default": "NodePool",
      "enum": [
        "NodePool",
        "ManagedCluster"
      ],
      "x-ms-enum": {
        "name": "SnapshotType",
        "modelAsString": true,
        "values": [
          {
            "value": "NodePool",
            "description": "The snapshot is a snapshot of a node pool."
          },
          {
            "value": "ManagedCluster",
            "description": "The snapshot is a snapshot of a managed cluster."
          }
        ]
      },
      "description": "The type of a snapshot. The default is NodePool."
    },
    "CapacityReservationGroupID": {
      "description": "Capacity Reservation Group ID for AgentPool to associate",
      "type": "string"
    },
    "TrustedAccessRoleRule": {
      "type": "object",
      "description": "Rule for trusted access role",
      "properties": {
        "verbs": {
          "type": "array",
          "readOnly": true,
          "items": {
            "type": "string"
          },
          "description": "List of allowed verbs"
        },
        "apiGroups": {
          "type": "array",
          "readOnly": true,
          "items": {
            "type": "string"
          },
          "description": "List of allowed apiGroups"
        },
        "resources": {
          "type": "array",
          "readOnly": true,
          "items": {
            "type": "string"
          },
          "description": "List of allowed resources"
        },
        "resourceNames": {
          "type": "array",
          "readOnly": true,
          "items": {
            "type": "string"
          },
          "description": "List of allowed names"
        },
        "nonResourceURLs": {
          "type": "array",
          "readOnly": true,
          "items": {
            "type": "string"
          },
          "description": "List of allowed nonResourceURLs"
        }
      }
    },
    "TrustedAccessRole": {
      "type": "object",
      "description": "Trusted access role definition.",
      "properties": {
        "sourceResourceType": {
          "type": "string",
          "readOnly": true,
          "description": "Resource type of Azure resource"
        },
        "name": {
          "type": "string",
          "readOnly": true,
          "description": "Name of role, name is unique under a source resource type"
        },
        "rules": {
          "type": "array",
          "readOnly": true,
          "items": {
            "$ref": "#/definitions/TrustedAccessRoleRule"
          },
          "x-ms-identifiers": [],
          "description": "List of rules for the role. This maps to 'rules' property of [Kubernetes Cluster Role](https://kubernetes.io/docs/reference/kubernetes-api/authorization-resources/cluster-role-v1/#ClusterRole)."
        }
      }
    },
    "TrustedAccessRoleListResult": {
      "type": "object",
      "description": "List of trusted access roles",
      "properties": {
        "value": {
          "type": "array",
          "readOnly": true,
          "items": {
            "$ref": "#/definitions/TrustedAccessRole"
          },
          "x-ms-identifiers": [
            "sourceResourceType",
            "name"
          ],
          "description": "Role list"
        },
        "nextLink": {
          "description": "Link to next page of resources.",
          "type": "string",
          "readOnly": true
        }
      }
    },
    "TrustedAccessRoleBindingProperties": {
      "type": "object",
      "description": "Properties for trusted access role binding",
      "required": [
        "sourceResourceId",
        "roles"
      ],
      "properties": {
        "provisioningState": {
          "type": "string",
          "readOnly": true,
          "description": "The current provisioning state of trusted access role binding.",
          "enum": [
            "Canceled",
            "Deleting",
            "Failed",
            "Succeeded",
            "Updating"
          ],
          "x-ms-enum": {
            "name": "TrustedAccessRoleBindingProvisioningState",
            "modelAsString": true
          }
        },
        "sourceResourceId": {
          "type": "string",
          "description": "The ARM resource ID of source resource that trusted access is configured for."
        },
        "roles": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "description": "A list of roles to bind, each item is a resource type qualified role name. For example: 'Microsoft.MachineLearningServices/workspaces/reader'."
        }
      }
    },
    "TrustedAccessRoleBinding": {
      "type": "object",
      "description": "Defines binding between a resource and role",
      "required": [
        "properties"
      ],
      "allOf": [
        {
          "$ref": "../../../../../../common-types/resource-management/v3/types.json#/definitions/Resource"
        }
      ],
      "properties": {
        "properties": {
          "$ref": "#/definitions/TrustedAccessRoleBindingProperties",
          "x-ms-client-flatten": true
        }
      }
    },
    "TrustedAccessRoleBindingListResult": {
      "type": "object",
      "description": "List of trusted access role bindings",
      "properties": {
        "value": {
          "type": "array",
          "items": {
            "$ref": "#/definitions/TrustedAccessRoleBinding"
          },
          "description": "Role binding list"
        },
        "nextLink": {
          "description": "Link to next page of resources.",
          "type": "string",
          "readOnly": true
        }
      }
    },
    "ManagedClusterWorkloadAutoScalerProfile": {
      "type": "object",
      "description": "Workload Auto-scaler profile for the managed cluster.",
      "properties": {
        "keda": {
          "$ref": "#/definitions/ManagedClusterWorkloadAutoScalerProfileKeda"
        },
        "verticalPodAutoscaler": {
          "$ref": "#/definitions/ManagedClusterWorkloadAutoScalerProfileVerticalPodAutoscaler"
        }
      }
    },
    "ManagedClusterWorkloadAutoScalerProfileKeda": {
      "type": "object",
      "description": "KEDA (Kubernetes Event-driven Autoscaling) settings for the workload auto-scaler profile.",
      "properties": {
        "enabled": {
          "type": "boolean",
          "description": "Whether to enable KEDA."
        }
      },
      "required": [
        "enabled"
      ]
    },
    "ManagedClusterWorkloadAutoScalerProfileVerticalPodAutoscaler": {
      "type": "object",
      "properties": {
        "enabled": {
          "type": "boolean",
          "description": "Whether to enable VPA. Default value is false.",
          "default": false
        },
        "controlledValues": {
          "type": "string",
          "enum": [
            "RequestsAndLimits",
            "RequestsOnly"
          ],
          "x-ms-enum": {
            "name": "ControlledValues",
            "modelAsString": true,
            "values": [
              {
                "value": "RequestsAndLimits",
                "description": "Autoscaler will control resource requests and limits."
              },
              {
                "value": "RequestsOnly",
                "description": "Autoscaler will control resource requests only."
              }
            ]
          },
          "default": "RequestsAndLimits",
          "description": "Controls which resource value autoscaler will change. Default value is RequestsAndLimits."
        },
        "updateMode": {
          "type": "string",
          "enum": [
            "Off",
            "Initial",
            "Recreate",
            "Auto"
          ],
          "x-ms-enum": {
            "name": "UpdateMode",
            "modelAsString": true,
            "values": [
              {
                "value": "Off",
                "description": "Autoscaler never changes pod resources but provides recommendations."
              },
              {
                "value": "Initial",
                "description": "Autoscaler only assigns resources on pod creation and doesn't change them during the lifetime of the pod."
              },
              {
                "value": "Recreate",
                "description": "Autoscaler assigns resources on pod creation and updates pods that need further scaling during their lifetime by deleting and recreating."
              },
              {
                "value": "Auto",
                "description": "Autoscaler chooses the update mode. Autoscaler currently does the same as Recreate. In the future, it may take advantage of restart-free mechanisms once they are available."
              }
            ]
          },
          "default": "Off",
          "title": "The update mode of the autoscaler.",
          "description": "Each update mode level is a superset of the lower levels. Off<Initial<Recreate<=Auto. For example: if UpdateMode is Initial, it means VPA sets the recommended resources in the VerticalPodAutoscaler Custom Resource (from UpdateMode Off) and also assigns resources on pod creation (from Initial). The default value is Off."
        }
      },
      "required": [
        "enabled",
        "updateMode",
        "controlledValues"
      ]
    },
    "ManagedClusterAzureMonitorProfile": {
      "type": "object",
      "description": "Prometheus addon profile for the container service cluster",
      "properties": {
        "metrics": {
          "$ref": "#/definitions/ManagedClusterAzureMonitorProfileMetrics"
        }
      }
    },
    "ManagedClusterAzureMonitorProfileKubeStateMetrics": {
      "type": "object",
      "description": "Kube State Metrics for prometheus addon profile for the container service cluster",
      "properties": {
        "metricLabelsAllowlist": {
          "type": "string",
          "description": "Comma-separated list of Kubernetes annotations keys that will be used in the resource's labels metric. "
        },
        "metricAnnotationsAllowList": {
          "type": "string",
          "description": "Comma-separated list of additional Kubernetes label keys that will be used in the resource's labels metric."
        }
      }
    },
    "ManagedClusterAzureMonitorProfileMetrics": {
      "type": "object",
      "description": "Metrics profile for the prometheus service addon",
      "properties": {
        "enabled": {
          "type": "boolean",
          "description": "Whether to enable the Prometheus collector"
        },
        "kubeStateMetrics": {
          "$ref": "#/definitions/ManagedClusterAzureMonitorProfileKubeStateMetrics"
        }
      },
      "required": [
        "enabled"
      ]
    },
    "GuardrailsProfile": {
      "type": "object",
      "properties": {
        "systemExcludedNamespaces": {
          "readOnly": true,
          "type": "array",
          "description": "List of namespaces specified by AKS to be excluded from Guardrails",
          "items": {
            "type": "string"
          }
        },
        "version": {
          "type": "string",
          "description": "The version of constraints to use"
        },
        "level": {
          "type": "string",
          "enum": [
            "Off",
            "Warning",
            "Enforcement"
          ],
          "x-ms-enum": {
            "name": "level",
            "modelAsString": true
          },
          "description": "The guardrails level to be used. By default, Guardrails is enabled for all namespaces except those that AKS excludes via systemExcludedNamespaces"
        },
        "excludedNamespaces": {
          "description": "List of namespaces excluded from guardrails checks",
          "type": "array",
          "items": {
            "type": "string"
          }
        }
      },
      "required": [
        "level",
        "version"
      ],
      "description": "The Guardrails profile."
    },
    "ServiceMeshProfile": {
      "type": "object",
      "description": "Service mesh profile for a managed cluster.",
      "properties": {
        "mode": {
          "type": "string",
          "description": "Mode of the service mesh.",
          "enum": [
            "Istio",
            "Disabled"
          ],
          "x-ms-enum": {
            "name": "ServiceMeshMode",
            "modelAsString": true,
            "values": [
              {
                "value": "Istio",
                "description": "Istio deployed as an AKS addon."
              },
              {
                "value": "Disabled",
                "description": "Mesh is disabled."
              }
            ]
          }
        },
        "istio": {
          "$ref": "#/definitions/IstioServiceMesh"
        }
      },
      "required": [
        "mode"
      ]
    },
    "IstioServiceMesh": {
      "type": "object",
      "description": "Istio service mesh configuration.",
      "properties": {
        "components": {
          "$ref": "#/definitions/IstioComponents"
        }
      }
    },
    "IstioComponents": {
      "type": "object",
      "description": "Istio components configuration.",
      "properties": {
        "ingressGateways": {
          "type": "array",
          "description": "Istio ingress gateways.",
          "items": {
            "$ref": "#/definitions/IstioIngressGateway"
          },
          "x-ms-identifiers": []
        }
      }
    },
    "IstioIngressGateway": {
      "type": "object",
      "description": "Istio ingress gateway configuration. For now, we support up to one external ingress gateway named `aks-istio-ingressgateway-external` and one internal ingress gateway named `aks-istio-ingressgateway-internal`.",
      "properties": {
        "mode": {
          "type": "string",
          "description": "Mode of an ingress gateway.",
          "enum": [
            "External",
            "Internal"
          ],
          "x-ms-enum": {
            "name": "IstioIngressGatewayMode",
            "modelAsString": true,
            "values": [
              {
                "value": "External",
                "description": "The ingress gateway is assigned a public IP address and is publicly accessible."
              },
              {
                "value": "Internal",
                "description": "The ingress gateway is assigned an internal IP address and cannot is accessed publicly."
              }
            ]
          }
        },
        "enabled": {
          "type": "boolean",
          "description": "Whether to enable the ingress gateway."
        }
      },
      "required": [
        "mode",
        "enabled"
      ]
    }
  },
  "parameters": {
    "ResourceNameParameter": {
      "name": "resourceName",
      "in": "path",
      "required": true,
      "type": "string",
      "minLength": 1,
      "maxLength": 63,
      "pattern": "^[a-zA-Z0-9]$|^[a-zA-Z0-9][-_a-zA-Z0-9]{0,61}[a-zA-Z0-9]$",
      "description": "The name of the managed cluster resource.",
      "x-ms-parameter-location": "method"
    },
    "ResourceTypeParameter": {
      "name": "resource-type",
      "in": "query",
      "required": false,
      "type": "string",
      "description": "The resource type for which the OS options needs to be returned",
      "x-ms-parameter-location": "method"
    },
    "ServerFqdnParameter": {
      "name": "server-fqdn",
      "in": "query",
      "required": false,
      "type": "string",
      "description": "server fqdn type for credentials to be returned",
      "x-ms-parameter-location": "method"
    },
    "CredentialFormatParameter": {
      "name": "format",
      "in": "query",
      "required": false,
      "type": "string",
      "enum": [
        "exec",
        "azure"
      ],
      "x-ms-enum": {
        "name": "format",
        "modelAsString": true,
        "values": [
          {
            "value": "azure",
            "description": "Return azure auth-provider kubeconfig. This format is deprecated in v1.22 and will be fully removed in v1.26. See: https://aka.ms/k8s/changes-1-26."
          },
          {
            "value": "exec",
            "description": "Return exec format kubeconfig. This format requires kubelogin binary in the path."
          }
        ]
      },
      "description": "Only apply to AAD clusters, specifies the format of returned kubeconfig. Format 'azure' will return azure auth-provider kubeconfig; format 'exec' will return exec format kubeconfig, which requires kubelogin binary in the path.",
      "x-ms-parameter-location": "method"
    },
    "IgnorePodDisruptionBudgetParameter": {
      "name": "ignore-pod-disruption-budget",
      "in": "query",
      "required": false,
      "type": "boolean",
      "description": "ignore-pod-disruption-budget=true to delete those pods on a node without considering Pod Disruption Budget",
      "x-ms-parameter-location": "method"
    },
    "TrustedAccessRoleBindingNameParameter": {
      "name": "trustedAccessRoleBindingName",
      "in": "path",
      "required": true,
      "type": "string",
      "description": "The name of trusted access role binding.",
      "pattern": "^([A-Za-z0-9-])+$",
      "minLength": 1,
      "maxLength": 24,
      "x-ms-parameter-location": "method"
    }
  }
}