Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Bicep resource definition
The supercomputers resource type can be deployed with operations that target:
- Resource groups - See resource group deployment commands
For a list of changed properties in each API version, see change log.
Resource format
To create a Microsoft.Discovery/supercomputers resource, add the following Bicep to your template.
resource symbolicname 'Microsoft.Discovery/supercomputers@2026-02-01-preview' = {
location: 'string'
name: 'string'
properties: {
customerManagedKeys: 'string'
diskEncryptionSetId: 'string'
identities: {
clusterIdentity: {
id: 'string'
}
kubeletIdentity: {
id: 'string'
}
workloadIdentities: {
{customized property}: {}
}
}
logAnalyticsClusterId: 'string'
managementSubnetId: 'string'
outboundType: 'string'
subnetId: 'string'
systemSku: 'string'
}
tags: {
{customized property}: 'string'
}
}
Property Values
Microsoft.Discovery/supercomputers
| Name | Description | Value |
|---|---|---|
| location | The geo-location where the resource lives | string (required) |
| name | The resource name | string Constraints: Pattern = ^[a-zA-Z0-9-]{3,24}$ (required) |
| properties | The resource-specific properties for this resource. | SupercomputerProperties |
| tags | Resource tags | Dictionary of tag names and values. See Tags in templates |
Identity
| Name | Description | Value |
|---|---|---|
| id | The resource ID of the user assigned identity. | string (required) |
SupercomputerIdentities
| Name | Description | Value |
|---|---|---|
| clusterIdentity | Cluster identity ID. | Identity (required) |
| kubeletIdentity | Kubelet identity ID used by the supercomputer. This identity is used by the supercomputer at node level to access Azure resources. This identity must have ManagedIdentityOperator role on the clusterIdentity. |
Identity (required) |
| workloadIdentities | User assigned identity IDs to be used by workloads as federated credentials running on supercomputer. The key value must be the resource ID of the identity resource. | SupercomputerIdentitiesWorkloadIdentities |
SupercomputerIdentitiesWorkloadIdentities
| Name | Description | Value |
|---|
SupercomputerProperties
| Name | Description | Value |
|---|---|---|
| customerManagedKeys | Whether or not to use a customer managed key when encrypting data at rest | 'Disabled' 'Enabled' |
| diskEncryptionSetId | Disk Encryption Set ID to use for Customer Managed Keys encryption. Required if Customer Managed Keys is enabled. | string |
| identities | Dictionary of identity properties. | SupercomputerIdentities (required) |
| logAnalyticsClusterId | The Log Analytics Cluster to use for debug logs. This is required when Customer Managed Keys are enabled. | string |
| managementSubnetId | System Subnet ID associated with AKS apiserver. Must be delegated to Microsoft.ContainerService/managedClusters. It should have connectivity to the system subnet and nodepool subnets. |
string |
| outboundType | Network egress type provisioned for the supercomputer workloads. Defaults to LoadBalancer if not specified. If None is specified, the customer is responsible for providing outbound connectivity for Supercomputer functionality. |
'LoadBalancer' 'None' |
| subnetId | System Subnet ID associated with managed NodePool for system resources. It should have connectivity to the child NodePool subnets. |
string (required) |
| systemSku | The SKU to use for the system node pool. | 'Standard_D4s_v4' 'Standard_D4s_v5' 'Standard_D4s_v6' |
TrackedResourceTags
| Name | Description | Value |
|---|
UserAssignedIdentity
| Name | Description | Value |
|---|
ARM template resource definition
The supercomputers resource type can be deployed with operations that target:
- Resource groups - See resource group deployment commands For a list of changed properties in each API version, see change log.
Usage Examples
Resource format
To create a Microsoft.Discovery/supercomputers resource, add the following JSON to your template.
{
"type": "Microsoft.Discovery/supercomputers",
"apiVersion": "2026-02-01-preview",
"name": "string",
"location": "string",
"properties": {
"customerManagedKeys": "string",
"diskEncryptionSetId": "string",
"identities": {
"clusterIdentity": {
"id": "string"
},
"kubeletIdentity": {
"id": "string"
},
"workloadIdentities": {
"{customized property}": {
}
}
},
"logAnalyticsClusterId": "string",
"managementSubnetId": "string",
"outboundType": "string",
"subnetId": "string",
"systemSku": "string"
},
"tags": {
"{customized property}": "string"
}
}
Property Values
Microsoft.Discovery/supercomputers
| Name | Description | Value |
|---|---|---|
| apiVersion | The api version | '2026-02-01-preview' |
| location | The geo-location where the resource lives | string (required) |
| name | The resource name | string Constraints: Pattern = ^[a-zA-Z0-9-]{3,24}$ (required) |
| properties | The resource-specific properties for this resource. | SupercomputerProperties |
| tags | Resource tags | Dictionary of tag names and values. See Tags in templates |
| type | The resource type | 'Microsoft.Discovery/supercomputers' |
Identity
| Name | Description | Value |
|---|---|---|
| id | The resource ID of the user assigned identity. | string (required) |
SupercomputerIdentities
| Name | Description | Value |
|---|---|---|
| clusterIdentity | Cluster identity ID. | Identity (required) |
| kubeletIdentity | Kubelet identity ID used by the supercomputer. This identity is used by the supercomputer at node level to access Azure resources. This identity must have ManagedIdentityOperator role on the clusterIdentity. |
Identity (required) |
| workloadIdentities | User assigned identity IDs to be used by workloads as federated credentials running on supercomputer. The key value must be the resource ID of the identity resource. | SupercomputerIdentitiesWorkloadIdentities |
SupercomputerIdentitiesWorkloadIdentities
| Name | Description | Value |
|---|
SupercomputerProperties
| Name | Description | Value |
|---|---|---|
| customerManagedKeys | Whether or not to use a customer managed key when encrypting data at rest | 'Disabled' 'Enabled' |
| diskEncryptionSetId | Disk Encryption Set ID to use for Customer Managed Keys encryption. Required if Customer Managed Keys is enabled. | string |
| identities | Dictionary of identity properties. | SupercomputerIdentities (required) |
| logAnalyticsClusterId | The Log Analytics Cluster to use for debug logs. This is required when Customer Managed Keys are enabled. | string |
| managementSubnetId | System Subnet ID associated with AKS apiserver. Must be delegated to Microsoft.ContainerService/managedClusters. It should have connectivity to the system subnet and nodepool subnets. |
string |
| outboundType | Network egress type provisioned for the supercomputer workloads. Defaults to LoadBalancer if not specified. If None is specified, the customer is responsible for providing outbound connectivity for Supercomputer functionality. |
'LoadBalancer' 'None' |
| subnetId | System Subnet ID associated with managed NodePool for system resources. It should have connectivity to the child NodePool subnets. |
string (required) |
| systemSku | The SKU to use for the system node pool. | 'Standard_D4s_v4' 'Standard_D4s_v5' 'Standard_D4s_v6' |
TrackedResourceTags
| Name | Description | Value |
|---|
UserAssignedIdentity
| Name | Description | Value |
|---|
Terraform (AzAPI provider) resource definition
The supercomputers resource type can be deployed with operations that target:
- Resource groups For a list of changed properties in each API version, see change log.
Resource format
To create a Microsoft.Discovery/supercomputers resource, add the following Terraform to your template.
resource "azapi_resource" "symbolicname" {
type = "Microsoft.Discovery/supercomputers@2026-02-01-preview"
name = "string"
parent_id = "string"
location = "string"
tags = {
{customized property} = "string"
}
body = {
properties = {
customerManagedKeys = "string"
diskEncryptionSetId = "string"
identities = {
clusterIdentity = {
id = "string"
}
kubeletIdentity = {
id = "string"
}
workloadIdentities = {
{customized property} = {
}
}
}
logAnalyticsClusterId = "string"
managementSubnetId = "string"
outboundType = "string"
subnetId = "string"
systemSku = "string"
}
}
}
Property Values
Microsoft.Discovery/supercomputers
| Name | Description | Value |
|---|---|---|
| location | The geo-location where the resource lives | string (required) |
| name | The resource name | string Constraints: Pattern = ^[a-zA-Z0-9-]{3,24}$ (required) |
| properties | The resource-specific properties for this resource. | SupercomputerProperties |
| tags | Resource tags | Dictionary of tag names and values. |
| type | The resource type | "Microsoft.Discovery/supercomputers@2026-02-01-preview" |
Identity
| Name | Description | Value |
|---|---|---|
| id | The resource ID of the user assigned identity. | string (required) |
SupercomputerIdentities
| Name | Description | Value |
|---|---|---|
| clusterIdentity | Cluster identity ID. | Identity (required) |
| kubeletIdentity | Kubelet identity ID used by the supercomputer. This identity is used by the supercomputer at node level to access Azure resources. This identity must have ManagedIdentityOperator role on the clusterIdentity. |
Identity (required) |
| workloadIdentities | User assigned identity IDs to be used by workloads as federated credentials running on supercomputer. The key value must be the resource ID of the identity resource. | SupercomputerIdentitiesWorkloadIdentities |
SupercomputerIdentitiesWorkloadIdentities
| Name | Description | Value |
|---|
SupercomputerProperties
| Name | Description | Value |
|---|---|---|
| customerManagedKeys | Whether or not to use a customer managed key when encrypting data at rest | 'Disabled' 'Enabled' |
| diskEncryptionSetId | Disk Encryption Set ID to use for Customer Managed Keys encryption. Required if Customer Managed Keys is enabled. | string |
| identities | Dictionary of identity properties. | SupercomputerIdentities (required) |
| logAnalyticsClusterId | The Log Analytics Cluster to use for debug logs. This is required when Customer Managed Keys are enabled. | string |
| managementSubnetId | System Subnet ID associated with AKS apiserver. Must be delegated to Microsoft.ContainerService/managedClusters. It should have connectivity to the system subnet and nodepool subnets. |
string |
| outboundType | Network egress type provisioned for the supercomputer workloads. Defaults to LoadBalancer if not specified. If None is specified, the customer is responsible for providing outbound connectivity for Supercomputer functionality. |
'LoadBalancer' 'None' |
| subnetId | System Subnet ID associated with managed NodePool for system resources. It should have connectivity to the child NodePool subnets. |
string (required) |
| systemSku | The SKU to use for the system node pool. | 'Standard_D4s_v4' 'Standard_D4s_v5' 'Standard_D4s_v6' |
TrackedResourceTags
| Name | Description | Value |
|---|
UserAssignedIdentity
| Name | Description | Value |
|---|