Microsoft.ContainerService managedClusters/managedNamespaces 2026-02-01

Bicep resource definition

The managedClusters/managedNamespaces resource type can be deployed with operations that target:

For a list of changed properties in each API version, see change log.

Resource format

To create a Microsoft.ContainerService/managedClusters/managedNamespaces resource, add the following Bicep to your template.

resource symbolicname 'Microsoft.ContainerService/managedClusters/managedNamespaces@2026-02-01' = {
  parent: resourceSymbolicName
  location: 'string'
  name: 'string'
  properties: {
    adoptionPolicy: 'string'
    annotations: {
      {customized property}: 'string'
    }
    defaultNetworkPolicy: {
      egress: 'string'
      ingress: 'string'
    }
    defaultResourceQuota: {
      cpuLimit: 'string'
      cpuRequest: 'string'
      memoryLimit: 'string'
      memoryRequest: 'string'
    }
    deletePolicy: 'string'
    labels: {
      {customized property}: 'string'
    }
  }
  tags: {
    {customized property}: 'string'
  }
}

Property Values

Microsoft.ContainerService/managedClusters/managedNamespaces

Name Description Value
location The geo-location where the resource lives string (required)
name The resource name string

Constraints:
Min length = 1
Max length = 63
Pattern = [a-z0-9]([-a-z0-9]*[a-z0-9])? (required)
parent In Bicep, you can specify the parent resource for a child resource. You only need to add this property when the child resource is declared outside of the parent resource.

For more information, see Child resource outside parent resource.		 Symbolic name for resource of type: managedClusters
properties Properties of a namespace. NamespaceProperties
tags Resource tags Dictionary of tag names and values. See Tags in templates

NamespaceProperties

Name Description Value
adoptionPolicy Action if Kubernetes namespace with same name already exists. 'Always'
'IfIdentical'
'Never'
annotations The annotations of managed namespace. NamespacePropertiesAnnotations
defaultNetworkPolicy The default network policy enforced upon the namespace. Customers can have other Kubernetes network policy objects under the namespace. Network policies are additive; if a policy or policies apply to a given pod for a given direction, the connections allowed in that direction for the pod is the union of what all applicable policies allow. NetworkPolicies
defaultResourceQuota The default resource quota enforced upon the namespace. Customers can have other Kubernetes resource quota objects under the namespace. Resource quotas are additive; if multiple resource quotas are applied to a given namespace, then the effective limit will be one such that all quotas on the namespace can be satisfied. ResourceQuota
deletePolicy Delete options of a namespace. 'Delete'
'Keep'
labels The labels of managed namespace. NamespacePropertiesLabels

NamespacePropertiesAnnotations

Name Description Value

NamespacePropertiesLabels

Name Description Value

NetworkPolicies

Name Description Value
egress Enum representing different network policy rules. 'AllowAll'
'AllowSameNamespace'
'DenyAll'
ingress Enum representing different network policy rules. 'AllowAll'
'AllowSameNamespace'
'DenyAll'

ResourceQuota

Name Description Value
cpuLimit CPU limit of the namespace in one-thousandth CPU form. See CPU resource units for more details. string
cpuRequest CPU request of the namespace in one-thousandth CPU form. See CPU resource units for more details. string
memoryLimit Memory limit of the namespace in the power-of-two equivalents form: Ei, Pi, Ti, Gi, Mi, Ki. See Memory resource units for more details. string
memoryRequest Memory request of the namespace in the power-of-two equivalents form: Ei, Pi, Ti, Gi, Mi, Ki. See Memory resource units for more details. string

TrackedResourceTags

Name Description Value

ARM template resource definition

The managedClusters/managedNamespaces resource type can be deployed with operations that target:

Usage Examples

Resource format

To create a Microsoft.ContainerService/managedClusters/managedNamespaces resource, add the following JSON to your template.

{
  "type": "Microsoft.ContainerService/managedClusters/managedNamespaces",
  "apiVersion": "2026-02-01",
  "name": "string",
  "location": "string",
  "properties": {
    "adoptionPolicy": "string",
    "annotations": {
      "{customized property}": "string"
    },
    "defaultNetworkPolicy": {
      "egress": "string",
      "ingress": "string"
    },
    "defaultResourceQuota": {
      "cpuLimit": "string",
      "cpuRequest": "string",
      "memoryLimit": "string",
      "memoryRequest": "string"
    },
    "deletePolicy": "string",
    "labels": {
      "{customized property}": "string"
    }
  },
  "tags": {
    "{customized property}": "string"
  }
}

Property Values

Microsoft.ContainerService/managedClusters/managedNamespaces

Name Description Value
apiVersion The api version '2026-02-01'
location The geo-location where the resource lives string (required)
name The resource name string

Constraints:
Min length = 1
Max length = 63
Pattern = [a-z0-9]([-a-z0-9]*[a-z0-9])? (required)
properties Properties of a namespace. NamespaceProperties
tags Resource tags Dictionary of tag names and values. See Tags in templates
type The resource type 'Microsoft.ContainerService/managedClusters/managedNamespaces'

NamespaceProperties

Name Description Value
adoptionPolicy Action if Kubernetes namespace with same name already exists. 'Always'
'IfIdentical'
'Never'
annotations The annotations of managed namespace. NamespacePropertiesAnnotations
defaultNetworkPolicy The default network policy enforced upon the namespace. Customers can have other Kubernetes network policy objects under the namespace. Network policies are additive; if a policy or policies apply to a given pod for a given direction, the connections allowed in that direction for the pod is the union of what all applicable policies allow. NetworkPolicies
defaultResourceQuota The default resource quota enforced upon the namespace. Customers can have other Kubernetes resource quota objects under the namespace. Resource quotas are additive; if multiple resource quotas are applied to a given namespace, then the effective limit will be one such that all quotas on the namespace can be satisfied. ResourceQuota
deletePolicy Delete options of a namespace. 'Delete'
'Keep'
labels The labels of managed namespace. NamespacePropertiesLabels

NamespacePropertiesAnnotations

Name Description Value

NamespacePropertiesLabels

Name Description Value

NetworkPolicies

Name Description Value
egress Enum representing different network policy rules. 'AllowAll'
'AllowSameNamespace'
'DenyAll'
ingress Enum representing different network policy rules. 'AllowAll'
'AllowSameNamespace'
'DenyAll'

ResourceQuota

Name Description Value
cpuLimit CPU limit of the namespace in one-thousandth CPU form. See CPU resource units for more details. string
cpuRequest CPU request of the namespace in one-thousandth CPU form. See CPU resource units for more details. string
memoryLimit Memory limit of the namespace in the power-of-two equivalents form: Ei, Pi, Ti, Gi, Mi, Ki. See Memory resource units for more details. string
memoryRequest Memory request of the namespace in the power-of-two equivalents form: Ei, Pi, Ti, Gi, Mi, Ki. See Memory resource units for more details. string

TrackedResourceTags

Name Description Value

Terraform (AzAPI provider) resource definition

The managedClusters/managedNamespaces resource type can be deployed with operations that target:

  • Resource groups For a list of changed properties in each API version, see change log.

Resource format

To create a Microsoft.ContainerService/managedClusters/managedNamespaces resource, add the following Terraform to your template.

resource "azapi_resource" "symbolicname" {
  type = "Microsoft.ContainerService/managedClusters/managedNamespaces@2026-02-01"
  name = "string"
  parent_id = "string"
  location = "string"
  tags = {
    {customized property} = "string"
  }
  body = {
    properties = {
      adoptionPolicy = "string"
      annotations = {
        {customized property} = "string"
      }
      defaultNetworkPolicy = {
        egress = "string"
        ingress = "string"
      }
      defaultResourceQuota = {
        cpuLimit = "string"
        cpuRequest = "string"
        memoryLimit = "string"
        memoryRequest = "string"
      }
      deletePolicy = "string"
      labels = {
        {customized property} = "string"
      }
    }
  }
}

Property Values

Microsoft.ContainerService/managedClusters/managedNamespaces

Name Description Value
location The geo-location where the resource lives string (required)
name The resource name string

Constraints:
Min length = 1
Max length = 63
Pattern = [a-z0-9]([-a-z0-9]*[a-z0-9])? (required)
parent_id The ID of the resource that is the parent for this resource. ID for resource of type: managedClusters
properties Properties of a namespace. NamespaceProperties
tags Resource tags Dictionary of tag names and values.
type The resource type "Microsoft.ContainerService/managedClusters/managedNamespaces@2026-02-01"

NamespaceProperties

Name Description Value
adoptionPolicy Action if Kubernetes namespace with same name already exists. 'Always'
'IfIdentical'
'Never'
annotations The annotations of managed namespace. NamespacePropertiesAnnotations
defaultNetworkPolicy The default network policy enforced upon the namespace. Customers can have other Kubernetes network policy objects under the namespace. Network policies are additive; if a policy or policies apply to a given pod for a given direction, the connections allowed in that direction for the pod is the union of what all applicable policies allow. NetworkPolicies
defaultResourceQuota The default resource quota enforced upon the namespace. Customers can have other Kubernetes resource quota objects under the namespace. Resource quotas are additive; if multiple resource quotas are applied to a given namespace, then the effective limit will be one such that all quotas on the namespace can be satisfied. ResourceQuota
deletePolicy Delete options of a namespace. 'Delete'
'Keep'
labels The labels of managed namespace. NamespacePropertiesLabels

NamespacePropertiesAnnotations

Name Description Value

NamespacePropertiesLabels

Name Description Value

NetworkPolicies

Name Description Value
egress Enum representing different network policy rules. 'AllowAll'
'AllowSameNamespace'
'DenyAll'
ingress Enum representing different network policy rules. 'AllowAll'
'AllowSameNamespace'
'DenyAll'

ResourceQuota

Name Description Value
cpuLimit CPU limit of the namespace in one-thousandth CPU form. See CPU resource units for more details. string
cpuRequest CPU request of the namespace in one-thousandth CPU form. See CPU resource units for more details. string
memoryLimit Memory limit of the namespace in the power-of-two equivalents form: Ei, Pi, Ti, Gi, Mi, Ki. See Memory resource units for more details. string
memoryRequest Memory request of the namespace in the power-of-two equivalents form: Ei, Pi, Ti, Gi, Mi, Ki. See Memory resource units for more details. string

TrackedResourceTags

Name Description Value
  • Last updated on