Managed Clusters - Create Or Update

服務:: AKS

API 版本:: 2026-01-01

建立或更新受管叢集。

PUT https://management.azure.com/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ContainerService/managedClusters/{resourceName}?api-version=2026-01-01

URI 參數

名稱	位於	必要	類型	Description
resourceGroupName	path	True	string minLength: 1 maxLength: 90	資源群組的名稱。名稱不區分大小寫。
resourceName	path	True	string minLength: 1 maxLength: 63 pattern: ^[a-zA-Z0-9]$\|^[a-zA-Z0-9][-_a-zA-Z0-9]{0,61}[a-zA-Z0-9]$	受管理叢集資源的名稱。
subscriptionId	path	True	string (uuid)	目標訂用帳戶的標識碼。此值必須是 UUID。
api-version	query	True	string minLength: 1	用於此作業的 API 版本。

要求標頭

名稱	必要	類型	Description
if-match		string	只有在實體符合此字串時，才應該繼續要求。
if-none-match		string	只有在沒有實體符合此字串時，才應該繼續要求。

要求本文

名稱	必要	類型	Description
location	True	string	資源所在的地理位置
extendedLocation		ExtendedLocation	虛擬機的擴充位置。
identity		ManagedClusterIdentity	如果已設定，則為受控叢集的身分識別。
kind		string	這主要用來在入口網站中針對不同類型公開不同的UI體驗
properties.aadProfile		ManagedClusterAADProfile	The Azure Active Directory 配置。
properties.addonProfiles		<string, ManagedClusterAddonProfile>	受控叢集附加元件配置檔。
properties.agentPoolProfiles		ManagedClusterAgentPoolProfile[]	代理程式集區屬性。
properties.aiToolchainOperatorProfile		ManagedClusterAIToolchainOperatorProfile	適用於整個叢集的 AI 工具鏈作員設定。
properties.apiServerAccessProfile		ManagedClusterAPIServerAccessProfile	管理叢集 API 伺服器的 access 設定檔。
properties.autoScalerProfile		ManagedClusterPropertiesAutoScalerProfile	啟用時要套用至叢集自動調整程序的參數
properties.autoUpgradeProfile		ManagedClusterAutoUpgradeProfile	自動升級組態。
properties.azureMonitorProfile		ManagedClusterAzureMonitorProfile	Azure Monitor 外掛配置檔用於監控受管理叢集。
properties.bootstrapProfile		ManagedClusterBootstrapProfile	叢集啟動程式組態的配置檔。
properties.disableLocalAccounts		boolean	如果應該在受控叢集上停用本機帳戶。如果設定為 true，將會停用此叢集的靜態認證。這隻能在已啟用 AAD 的受控叢集上使用。更多詳情請參見 disable local accounts。
properties.diskEncryptionSetID		string (arm-id)	要用來啟用待用加密之磁碟加密的資源標識符。這是格式：'/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Compute/diskEncryptionSets/{encryptionSetName}'
properties.dnsPrefix		string	受控叢集的 DNS 前置詞。建立受控叢集之後，就無法更新此專案。
properties.enableRBAC		boolean	是否啟用 Kubernetes Role-Based Access Control。
properties.fqdnSubdomain		string	具有自定義私人 DNS 區域的私人叢集 FQDN 子域。建立受控叢集之後，就無法更新此專案。
properties.httpProxyConfig		ManagedClusterHTTPProxyConfig	使用 HTTP Proxy 伺服器布建叢集的組態。
properties.identityProfile		<string, UserAssignedIdentity>	與受控叢集相關聯的使用者身分識別。 kubelet 會使用此身分識別。只允許一個使用者指派的身分識別。唯一接受的密鑰是 “kubeletidentity”，值為 “resourceId”：“/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}”。
properties.ingressProfile		ManagedClusterIngressProfile	受控叢集的輸入配置檔。
properties.kubernetesVersion		string	使用者指定的 Kubernetes 版本。支援修補程式版本 <major.minor.patch> （例如 1.20.13）和 <major.minor> （例如 1.20）。指定 major.minor< 時>，會自動選擇最新支援的 GA 修補程式版本。在建立叢集之後，以相同的 <major.minor> 更新叢集（例如 1.14.x -> 1.14）將不會觸發升級，即使有較新的修補程式版本也一樣。當您升級支援的 AKS 叢集時，無法略過 Kubernetes 次要版本。所有升級都必須依主要版本號碼循序執行。例如，允許在 1.14.x -> 1.15.x 或 1.15.x - 1.16.x 之間升級，但不允許 1.14.x ->> 1.16.x。更多細節請參見升級 AKS 叢集。
properties.linuxProfile		ContainerServiceLinuxProfile	受控叢集中Linux VM的配置檔。
properties.metricsProfile		ManagedClusterMetricsProfile	選擇性叢集計量組態。
properties.networkProfile		ContainerServiceNetworkProfile	網路組態配置檔。
properties.nodeProvisioningProfile		ManagedClusterNodeProvisioningProfile	套用至整個叢集的節點布建設定。
properties.nodeResourceGroup		string	包含代理程式集區節點的資源群組名稱。
properties.nodeResourceGroupProfile		ManagedClusterNodeResourceGroupProfile	節點資源群組組態的配置檔。
properties.oidcIssuerProfile		ManagedClusterOIDCIssuerProfile	受控叢集的 OIDC 簽發者配置檔。
properties.podIdentityProfile		ManagedClusterPodIdentityProfile	受控叢集的Pod身分識別配置檔。欲了解更多關於 AAD 莢果身份整合的細節，請參見 use AAD pod identity。
properties.privateLinkResources		PrivateLinkResource[]	與叢集相關的 Private link 資源。
properties.publicNetworkAccess		PublicNetworkAccess	PublicNetworkAccess 的 PublicNetworkAccess 中。允許或拒絕 AKS 的公共網路 access
properties.securityProfile		ManagedClusterSecurityProfile	受控叢集的安全性配置檔。
properties.serviceMeshProfile		ServiceMeshProfile	受控叢集的服務網格配置檔。
properties.servicePrincipalProfile		ManagedClusterServicePrincipalProfile	關於叢集用來操作 Azure API 的服務主體身份資訊。
properties.status		ManagedClusterStatus	包含受控叢集的唯讀資訊。
properties.storageProfile		ManagedClusterStorageProfile	管理叢集的 Storage 設定檔。
properties.supportPlan		KubernetesSupportPlan	受控叢集的支持計劃。如果未指定，則預設值為『KubernetesOfficial』。
properties.upgradeSettings		ClusterUpgradeSettings	升級叢集的設定。
properties.windowsProfile		ManagedClusterWindowsProfile	受控叢集中 Windows VM 的配置檔。
properties.workloadAutoScalerProfile		ManagedClusterWorkloadAutoScalerProfile	受控叢集的工作負載自動調整程式配置檔。
sku		ManagedClusterSKU	受控叢集 SKU。
tags		object	資源標籤。

回應

名稱	類型	Description
200 OK	ManagedCluster	資源 'ManagedCluster' 更新作業成功
201 Created	ManagedCluster	資源「ManagedCluster」建立操作成功標題 Azure-AsyncOperation: string Retry-After: integer
Other Status Codes	ErrorResponse	未預期的錯誤回應。

名稱

類型

Description

200 OK

ManagedCluster

資源 'ManagedCluster' 更新作業成功

201 Created

ManagedCluster

資源「ManagedCluster」建立操作成功

標題

Azure-AsyncOperation: string
Retry-After: integer

Other Status Codes

ErrorResponse

未預期的錯誤回應。

安全性

azure_auth

Azure Active Directory OAuth2 Flow.

類型: oauth2
Flow: implicit
授權 URL: https://login.microsoftonline.com/common/oauth2/authorize

範圍

名稱	Description
user_impersonation	模擬您的用戶帳戶

範例

Create Managed Cluster using an agent pool snapshot

Create Managed Cluster with Advanced Networking Transit Encryption

Create Managed Cluster with AKS-managed NAT gateway as outbound type

Create Managed Cluster with Azure KeyVault Secrets Provider Addon

Create Managed Cluster with Capacity Reservation Group

Create Managed Cluster with Custom CA Trust Certificates

Create Managed Cluster with Dedicated Host Group

Create Managed Cluster with EncryptionAtHost enabled

Create Managed Cluster with FIPS enabled OS

Create Managed Cluster with GPUMIG

Create Managed Cluster with HTTP proxy configured

Create Managed Cluster with LongTermSupport

Create Managed Cluster with Node Public IP Prefix

Create Managed Cluster with OSSKU

Create Managed Cluster with PodIdentity enabled

Create Managed Cluster with PPG

Create Managed Cluster with RunCommand disabled

Create Managed Cluster with Security Profile configured

Create Managed Cluster with UltraSSD enabled

Create Managed Cluster with user-assigned NAT gateway as outbound type

Create Managed Cluster with Web App Routing Ingress Profile configured

Create Managed Private Cluster with fqdn subdomain specified

Create Managed Private Cluster with Public FQDN specified

Create/Update AAD Managed Cluster with EnableAzureRBAC

Create/Update Managed Cluster

Create/Update Managed Cluster with Azure Service Mesh

Create/Update Managed Cluster with dual-stack networking

Create/Update Managed Cluster with EnableAHUB

Create/Update Managed Cluster with Windows gMSA enabled

Create Managed Cluster using an agent pool snapshot

PUT https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1?api-version=2026-01-01

{
  "location": "location1",
  "properties": {
    "addonProfiles": {},
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "creationData": {
          "sourceResourceId": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/snapshots/snapshot1"
        },
        "enableFIPS": true,
        "enableNodePublicIP": true,
        "mode": "System",
        "osType": "Linux",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "kubernetesVersion": "",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "networkProfile": {
      "loadBalancerProfile": {
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "standard",
      "outboundType": "loadBalancer"
    },
    "servicePrincipalProfile": {
      "clientId": "clientid",
      "secret": "secret"
    },
    "windowsProfile": {
      "adminPassword": "replacePassword1234$",
      "adminUsername": "azureuser"
    }
  },
  "sku": {
    "name": "Basic",
    "tier": "Free"
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

from azure.identity import DefaultAzureCredential

from azure.mgmt.containerservice import ContainerServiceClient

"""
# PREREQUISITES
    pip install azure-identity
    pip install azure-mgmt-containerservice
# USAGE
    python managed_clusters_create_snapshot.py

    Before run the sample, please set the values of the client ID, tenant ID and client secret
    of the AAD application as environment variables: AZURE_CLIENT_ID, AZURE_TENANT_ID,
    AZURE_CLIENT_SECRET. For more info about how to get the value, please see:
    https://docs.microsoft.com/azure/active-directory/develop/howto-create-service-principal-portal
"""


def main():
    client = ContainerServiceClient(
        credential=DefaultAzureCredential(),
        subscription_id="SUBSCRIPTION_ID",
    )

    response = client.managed_clusters.begin_create_or_update(
        resource_group_name="rg1",
        resource_name="clustername1",
        parameters={
            "location": "location1",
            "properties": {
                "addonProfiles": {},
                "agentPoolProfiles": [
                    {
                        "count": 3,
                        "creationData": {
                            "sourceResourceId": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/snapshots/snapshot1"
                        },
                        "enableFIPS": True,
                        "enableNodePublicIP": True,
                        "mode": "System",
                        "name": "nodepool1",
                        "osType": "Linux",
                        "type": "VirtualMachineScaleSets",
                        "vmSize": "Standard_DS2_v2",
                    }
                ],
                "autoScalerProfile": {"scale-down-delay-after-add": "15m", "scan-interval": "20s"},
                "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
                "dnsPrefix": "dnsprefix1",
                "enableRBAC": True,
                "kubernetesVersion": "",
                "linuxProfile": {"adminUsername": "azureuser", "ssh": {"publicKeys": [{"keyData": "keydata"}]}},
                "networkProfile": {
                    "loadBalancerProfile": {"managedOutboundIPs": {"count": 2}},
                    "loadBalancerSku": "standard",
                    "outboundType": "loadBalancer",
                },
                "servicePrincipalProfile": {"clientId": "clientid", "secret": "secret"},
                "windowsProfile": {"adminPassword": "replacePassword1234$", "adminUsername": "azureuser"},
            },
            "sku": {"name": "Basic", "tier": "Free"},
            "tags": {"archv2": "", "tier": "production"},
        },
    ).result()
    print(response)


# x-ms-original-file: 2026-01-01/ManagedClustersCreate_Snapshot.json
if __name__ == "__main__":
    main()

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

範例回覆

狀態碼:: 200

{
  "name": "clustername1",
  "type": "Microsoft.ContainerService/managedClusters",
  "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1",
  "location": "location1",
  "properties": {
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "creationData": {
          "sourceResourceId": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/snapshots/snapshot1"
        },
        "currentOrchestratorVersion": "1.9.6",
        "enableFIPS": true,
        "enableNodePublicIP": true,
        "maxPods": 110,
        "mode": "System",
        "nodeImageVersion": "AKSUbuntu:1604:2020.03.11",
        "orchestratorVersion": "1.9.6",
        "osType": "Linux",
        "provisioningState": "Succeeded",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "currentKubernetesVersion": "1.9.6",
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "fqdn": "dnsprefix1-abcd1234.hcp.eastus.azmk8s.io",
    "kubernetesVersion": "1.9.6",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "maxAgentPools": 1,
    "networkProfile": {
      "dnsServiceIP": "10.0.0.10",
      "ipFamilies": [
        "IPv4"
      ],
      "loadBalancerProfile": {
        "allocatedOutboundPorts": 2000,
        "effectiveOutboundIPs": [
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip1"
          },
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip2"
          }
        ],
        "idleTimeoutInMinutes": 10,
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "basic",
      "networkPlugin": "kubenet",
      "outboundType": "loadBalancer",
      "podCidr": "10.244.0.0/16",
      "podCidrs": [
        "10.244.0.0/16"
      ],
      "serviceCidr": "10.0.0.0/16",
      "serviceCidrs": [
        "10.0.0.0/16"
      ]
    },
    "nodeResourceGroup": "MC_rg1_clustername1_location1",
    "provisioningState": "Succeeded",
    "servicePrincipalProfile": {
      "clientId": "clientid"
    },
    "windowsProfile": {
      "adminUsername": "azureuser"
    }
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

狀態碼:: 201

{
  "name": "clustername1",
  "type": "Microsoft.ContainerService/managedClusters",
  "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1",
  "location": "location1",
  "properties": {
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "creationData": {
          "sourceResourceId": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/snapshots/snapshot1"
        },
        "currentOrchestratorVersion": "1.9.6",
        "enableFIPS": true,
        "enableNodePublicIP": true,
        "maxPods": 110,
        "mode": "System",
        "orchestratorVersion": "1.9.6",
        "osType": "Linux",
        "provisioningState": "Creating",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "currentKubernetesVersion": "1.9.6",
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "kubernetesVersion": "1.9.6",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "maxAgentPools": 1,
    "networkProfile": {
      "dnsServiceIP": "10.0.0.10",
      "ipFamilies": [
        "IPv4"
      ],
      "loadBalancerProfile": {
        "allocatedOutboundPorts": 2000,
        "effectiveOutboundIPs": [
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip1"
          },
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip2"
          }
        ],
        "idleTimeoutInMinutes": 10,
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "standard",
      "networkPlugin": "kubenet",
      "outboundType": "loadBalancer",
      "podCidr": "10.244.0.0/16",
      "podCidrs": [
        "10.244.0.0/16"
      ],
      "serviceCidr": "10.0.0.0/16",
      "serviceCidrs": [
        "10.0.0.0/16"
      ]
    },
    "nodeResourceGroup": "MC_rg1_clustername1_location1",
    "provisioningState": "Creating",
    "servicePrincipalProfile": {
      "clientId": "clientid"
    },
    "windowsProfile": {
      "adminUsername": "azureuser"
    }
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

Create Managed Cluster with Advanced Networking Transit Encryption

範例要求

HTTP
Python

PUT https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1?api-version=2026-01-01

{
  "location": "location1",
  "properties": {
    "addonProfiles": {},
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "enableNodePublicIP": true,
        "mode": "System",
        "osType": "Linux",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "kubernetesVersion": "",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "networkProfile": {
      "advancedNetworking": {
        "enabled": true,
        "observability": {
          "enabled": false
        },
        "security": {
          "advancedNetworkPolicies": "FQDN",
          "enabled": true,
          "transitEncryption": {
            "type": "WireGuard"
          }
        }
      },
      "loadBalancerProfile": {
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "standard",
      "networkDataplane": "cilium",
      "networkPlugin": "azure",
      "networkPluginMode": "overlay",
      "outboundType": "loadBalancer"
    },
    "servicePrincipalProfile": {
      "clientId": "clientid",
      "secret": "secret"
    }
  },
  "sku": {
    "name": "Basic",
    "tier": "Free"
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

from azure.identity import DefaultAzureCredential

from azure.mgmt.containerservice import ContainerServiceClient

"""
# PREREQUISITES
    pip install azure-identity
    pip install azure-mgmt-containerservice
# USAGE
    python advanced_networking_transit_encryption.py

    Before run the sample, please set the values of the client ID, tenant ID and client secret
    of the AAD application as environment variables: AZURE_CLIENT_ID, AZURE_TENANT_ID,
    AZURE_CLIENT_SECRET. For more info about how to get the value, please see:
    https://docs.microsoft.com/azure/active-directory/develop/howto-create-service-principal-portal
"""


def main():
    client = ContainerServiceClient(
        credential=DefaultAzureCredential(),
        subscription_id="SUBSCRIPTION_ID",
    )

    response = client.managed_clusters.begin_create_or_update(
        resource_group_name="rg1",
        resource_name="clustername1",
        parameters={
            "location": "location1",
            "properties": {
                "addonProfiles": {},
                "agentPoolProfiles": [
                    {
                        "count": 3,
                        "enableNodePublicIP": True,
                        "mode": "System",
                        "name": "nodepool1",
                        "osType": "Linux",
                        "type": "VirtualMachineScaleSets",
                        "vmSize": "Standard_DS2_v2",
                    }
                ],
                "dnsPrefix": "dnsprefix1",
                "enableRBAC": True,
                "kubernetesVersion": "",
                "linuxProfile": {"adminUsername": "azureuser", "ssh": {"publicKeys": [{"keyData": "keydata"}]}},
                "networkProfile": {
                    "advancedNetworking": {
                        "enabled": True,
                        "observability": {"enabled": False},
                        "security": {
                            "advancedNetworkPolicies": "FQDN",
                            "enabled": True,
                            "transitEncryption": {"type": "WireGuard"},
                        },
                    },
                    "loadBalancerProfile": {"managedOutboundIPs": {"count": 2}},
                    "loadBalancerSku": "standard",
                    "networkDataplane": "cilium",
                    "networkPlugin": "azure",
                    "networkPluginMode": "overlay",
                    "outboundType": "loadBalancer",
                },
                "servicePrincipalProfile": {"clientId": "clientid", "secret": "secret"},
            },
            "sku": {"name": "Basic", "tier": "Free"},
            "tags": {"archv2": "", "tier": "production"},
        },
    ).result()
    print(response)


# x-ms-original-file: 2026-01-01/AdvancedNetworkingTransitEncryption.json
if __name__ == "__main__":
    main()

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

範例回覆

狀態碼:: 200

{
  "name": "clustername1",
  "type": "Microsoft.ContainerService/managedClusters",
  "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1",
  "location": "location1",
  "properties": {
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "currentOrchestratorVersion": "1.9.6",
        "enableNodePublicIP": true,
        "maxPods": 110,
        "mode": "System",
        "nodeImageVersion": "AKSUbuntu:1604:2020.03.11",
        "orchestratorVersion": "1.9.6",
        "osType": "Linux",
        "provisioningState": "Succeeded",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "fqdn": "dnsprefix1-abcd1234.hcp.eastus.azmk8s.io",
    "kubernetesVersion": "1.9.6",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "maxAgentPools": 1,
    "networkProfile": {
      "advancedNetworking": {
        "enabled": true,
        "observability": {
          "enabled": false
        },
        "security": {
          "advancedNetworkPolicies": "FQDN",
          "enabled": true,
          "transitEncryption": {
            "type": "WireGuard"
          }
        }
      },
      "dnsServiceIP": "10.0.0.10",
      "ipFamilies": [
        "IPv4"
      ],
      "loadBalancerProfile": {
        "allocatedOutboundPorts": 2000,
        "effectiveOutboundIPs": [
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip1"
          },
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip2"
          }
        ],
        "idleTimeoutInMinutes": 10,
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "standard",
      "networkDataplane": "cilium",
      "networkPlugin": "azure",
      "networkPluginMode": "overlay",
      "outboundType": "loadBalancer",
      "podCidr": "10.244.0.0/16",
      "podCidrs": [
        "10.244.0.0/16"
      ],
      "serviceCidr": "10.0.0.0/16",
      "serviceCidrs": [
        "10.0.0.0/16"
      ]
    },
    "nodeResourceGroup": "MC_rg1_clustername1_location1",
    "provisioningState": "Succeeded"
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

狀態碼:: 201

{
  "name": "clustername1",
  "type": "Microsoft.ContainerService/managedClusters",
  "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1",
  "location": "location1",
  "properties": {
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "currentOrchestratorVersion": "1.9.6",
        "enableNodePublicIP": true,
        "maxPods": 110,
        "mode": "System",
        "nodeImageVersion": "AKSUbuntu:1604:2020.03.11",
        "orchestratorVersion": "1.9.6",
        "osType": "Linux",
        "provisioningState": "Succeeded",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "fqdn": "dnsprefix1-abcd1234.hcp.eastus.azmk8s.io",
    "kubernetesVersion": "1.9.6",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "maxAgentPools": 1,
    "networkProfile": {
      "advancedNetworking": {
        "enabled": true,
        "observability": {
          "enabled": false
        },
        "security": {
          "advancedNetworkPolicies": "FQDN",
          "enabled": true,
          "transitEncryption": {
            "type": "WireGuard"
          }
        }
      },
      "dnsServiceIP": "10.0.0.10",
      "ipFamilies": [
        "IPv4"
      ],
      "loadBalancerProfile": {
        "allocatedOutboundPorts": 2000,
        "effectiveOutboundIPs": [
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip1"
          },
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip2"
          }
        ],
        "idleTimeoutInMinutes": 10,
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "standard",
      "networkDataplane": "cilium",
      "networkPlugin": "azure",
      "networkPluginMode": "overlay",
      "outboundType": "loadBalancer",
      "podCidr": "10.244.0.0/16",
      "podCidrs": [
        "10.244.0.0/16"
      ],
      "serviceCidr": "10.0.0.0/16",
      "serviceCidrs": [
        "10.0.0.0/16"
      ]
    },
    "nodeResourceGroup": "MC_rg1_clustername1_location1",
    "provisioningState": "Succeeded"
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

Create Managed Cluster with AKS-managed NAT gateway as outbound type

範例要求

HTTP
Python

PUT https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1?api-version=2026-01-01

{
  "location": "location1",
  "properties": {
    "addonProfiles": {},
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "enableNodePublicIP": false,
        "mode": "System",
        "osType": "Linux",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "kubernetesVersion": "",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "networkProfile": {
      "loadBalancerSku": "standard",
      "natGatewayProfile": {
        "managedOutboundIPProfile": {
          "count": 2
        }
      },
      "outboundType": "managedNATGateway"
    },
    "servicePrincipalProfile": {
      "clientId": "clientid",
      "secret": "secret"
    },
    "windowsProfile": {
      "adminPassword": "replacePassword1234$",
      "adminUsername": "azureuser"
    }
  },
  "sku": {
    "name": "Basic",
    "tier": "Free"
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

from azure.identity import DefaultAzureCredential

from azure.mgmt.containerservice import ContainerServiceClient

"""
# PREREQUISITES
    pip install azure-identity
    pip install azure-mgmt-containerservice
# USAGE
    python managed_clusters_create_managed_nat_gateway.py

    Before run the sample, please set the values of the client ID, tenant ID and client secret
    of the AAD application as environment variables: AZURE_CLIENT_ID, AZURE_TENANT_ID,
    AZURE_CLIENT_SECRET. For more info about how to get the value, please see:
    https://docs.microsoft.com/azure/active-directory/develop/howto-create-service-principal-portal
"""


def main():
    client = ContainerServiceClient(
        credential=DefaultAzureCredential(),
        subscription_id="SUBSCRIPTION_ID",
    )

    response = client.managed_clusters.begin_create_or_update(
        resource_group_name="rg1",
        resource_name="clustername1",
        parameters={
            "location": "location1",
            "properties": {
                "addonProfiles": {},
                "agentPoolProfiles": [
                    {
                        "count": 3,
                        "enableNodePublicIP": False,
                        "mode": "System",
                        "name": "nodepool1",
                        "osType": "Linux",
                        "type": "VirtualMachineScaleSets",
                        "vmSize": "Standard_DS2_v2",
                    }
                ],
                "autoScalerProfile": {"scale-down-delay-after-add": "15m", "scan-interval": "20s"},
                "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
                "dnsPrefix": "dnsprefix1",
                "enableRBAC": True,
                "kubernetesVersion": "",
                "linuxProfile": {"adminUsername": "azureuser", "ssh": {"publicKeys": [{"keyData": "keydata"}]}},
                "networkProfile": {
                    "loadBalancerSku": "standard",
                    "natGatewayProfile": {"managedOutboundIPProfile": {"count": 2}},
                    "outboundType": "managedNATGateway",
                },
                "servicePrincipalProfile": {"clientId": "clientid", "secret": "secret"},
                "windowsProfile": {"adminPassword": "replacePassword1234$", "adminUsername": "azureuser"},
            },
            "sku": {"name": "Basic", "tier": "Free"},
            "tags": {"archv2": "", "tier": "production"},
        },
    ).result()
    print(response)


# x-ms-original-file: 2026-01-01/ManagedClustersCreate_ManagedNATGateway.json
if __name__ == "__main__":
    main()

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

範例回覆

狀態碼:: 200

{
  "name": "clustername1",
  "type": "Microsoft.ContainerService/managedClusters",
  "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1",
  "location": "location1",
  "properties": {
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "currentOrchestratorVersion": "1.9.6",
        "enableNodePublicIP": false,
        "maxPods": 110,
        "mode": "System",
        "nodeImageVersion": "AKSUbuntu:1604:2020.03.11",
        "orchestratorVersion": "1.9.6",
        "osType": "Linux",
        "provisioningState": "Succeeded",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "currentKubernetesVersion": "1.9.6",
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "fqdn": "dnsprefix1-abcd1234.hcp.eastus.azmk8s.io",
    "kubernetesVersion": "1.9.6",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "maxAgentPools": 1,
    "networkProfile": {
      "dnsServiceIP": "10.0.0.10",
      "loadBalancerSku": "basic",
      "natGatewayProfile": {
        "effectiveOutboundIPs": [
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip1"
          },
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip2"
          }
        ],
        "idleTimeoutInMinutes": 4,
        "managedOutboundIPProfile": {
          "count": 2
        }
      },
      "networkPlugin": "kubenet",
      "outboundType": "managedNATGateway",
      "podCidr": "10.244.0.0/16",
      "serviceCidr": "10.0.0.0/16"
    },
    "nodeResourceGroup": "MC_rg1_clustername1_location1",
    "provisioningState": "Succeeded",
    "servicePrincipalProfile": {
      "clientId": "clientid"
    },
    "windowsProfile": {
      "adminUsername": "azureuser"
    }
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

狀態碼:: 201

{
  "name": "clustername1",
  "type": "Microsoft.ContainerService/managedClusters",
  "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1",
  "location": "location1",
  "properties": {
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "currentOrchestratorVersion": "1.9.6",
        "enableNodePublicIP": false,
        "maxPods": 110,
        "mode": "System",
        "orchestratorVersion": "1.9.6",
        "osType": "Linux",
        "provisioningState": "Creating",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "currentKubernetesVersion": "1.9.6",
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "kubernetesVersion": "1.9.6",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "maxAgentPools": 1,
    "networkProfile": {
      "dnsServiceIP": "10.0.0.10",
      "loadBalancerSku": "standard",
      "natGatewayProfile": {
        "effectiveOutboundIPs": [
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip1"
          },
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip2"
          }
        ],
        "idleTimeoutInMinutes": 4,
        "managedOutboundIPProfile": {
          "count": 2
        }
      },
      "networkPlugin": "kubenet",
      "outboundType": "managedNATGateway",
      "podCidr": "10.244.0.0/16",
      "serviceCidr": "10.0.0.0/16"
    },
    "nodeResourceGroup": "MC_rg1_clustername1_location1",
    "provisioningState": "Creating",
    "servicePrincipalProfile": {
      "clientId": "clientid"
    },
    "windowsProfile": {
      "adminUsername": "azureuser"
    }
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

Create Managed Cluster with Azure KeyVault Secrets Provider Addon

範例要求

HTTP
Python

PUT https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1?api-version=2026-01-01

{
  "location": "location1",
  "properties": {
    "addonProfiles": {
      "azureKeyvaultSecretsProvider": {
        "config": {
          "enableSecretRotation": "true",
          "rotationPollInterval": "2m"
        },
        "enabled": true
      }
    },
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "enableNodePublicIP": true,
        "mode": "System",
        "osType": "Linux",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "kubernetesVersion": "",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "networkProfile": {
      "loadBalancerProfile": {
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "standard",
      "outboundType": "loadBalancer"
    },
    "servicePrincipalProfile": {
      "clientId": "clientid",
      "secret": "secret"
    },
    "windowsProfile": {
      "adminPassword": "replacePassword1234$",
      "adminUsername": "azureuser"
    }
  },
  "sku": {
    "name": "Basic",
    "tier": "Free"
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

from azure.identity import DefaultAzureCredential

from azure.mgmt.containerservice import ContainerServiceClient

"""
# PREREQUISITES
    pip install azure-identity
    pip install azure-mgmt-containerservice
# USAGE
    python managed_clusters_create_azure_keyvault_secrets_provider.py

    Before run the sample, please set the values of the client ID, tenant ID and client secret
    of the AAD application as environment variables: AZURE_CLIENT_ID, AZURE_TENANT_ID,
    AZURE_CLIENT_SECRET. For more info about how to get the value, please see:
    https://docs.microsoft.com/azure/active-directory/develop/howto-create-service-principal-portal
"""


def main():
    client = ContainerServiceClient(
        credential=DefaultAzureCredential(),
        subscription_id="SUBSCRIPTION_ID",
    )

    response = client.managed_clusters.begin_create_or_update(
        resource_group_name="rg1",
        resource_name="clustername1",
        parameters={
            "location": "location1",
            "properties": {
                "addonProfiles": {
                    "azureKeyvaultSecretsProvider": {
                        "config": {"enableSecretRotation": "true", "rotationPollInterval": "2m"},
                        "enabled": True,
                    }
                },
                "agentPoolProfiles": [
                    {
                        "count": 3,
                        "enableNodePublicIP": True,
                        "mode": "System",
                        "name": "nodepool1",
                        "osType": "Linux",
                        "type": "VirtualMachineScaleSets",
                        "vmSize": "Standard_DS2_v2",
                    }
                ],
                "autoScalerProfile": {"scale-down-delay-after-add": "15m", "scan-interval": "20s"},
                "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
                "dnsPrefix": "dnsprefix1",
                "enableRBAC": True,
                "kubernetesVersion": "",
                "linuxProfile": {"adminUsername": "azureuser", "ssh": {"publicKeys": [{"keyData": "keydata"}]}},
                "networkProfile": {
                    "loadBalancerProfile": {"managedOutboundIPs": {"count": 2}},
                    "loadBalancerSku": "standard",
                    "outboundType": "loadBalancer",
                },
                "servicePrincipalProfile": {"clientId": "clientid", "secret": "secret"},
                "windowsProfile": {"adminPassword": "replacePassword1234$", "adminUsername": "azureuser"},
            },
            "sku": {"name": "Basic", "tier": "Free"},
            "tags": {"archv2": "", "tier": "production"},
        },
    ).result()
    print(response)


# x-ms-original-file: 2026-01-01/ManagedClustersCreate_AzureKeyvaultSecretsProvider.json
if __name__ == "__main__":
    main()

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

範例回覆

狀態碼:: 200

{
  "name": "clustername1",
  "type": "Microsoft.ContainerService/managedClusters",
  "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1",
  "location": "location1",
  "properties": {
    "addonProfiles": {
      "azureKeyvaultSecretsProvider": {
        "config": {
          "enableSecretRotation": "true",
          "rotationPollInterval": "2m"
        },
        "enabled": true
      }
    },
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "enableEncryptionAtHost": true,
        "enableNodePublicIP": true,
        "maxPods": 110,
        "mode": "System",
        "nodeImageVersion": "AKSUbuntu:1604:2020.03.11",
        "orchestratorVersion": "1.9.6",
        "osType": "Linux",
        "provisioningState": "Succeeded",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "fqdn": "dnsprefix1-abcd1234.hcp.eastus.azmk8s.io",
    "kubernetesVersion": "1.9.6",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "maxAgentPools": 1,
    "networkProfile": {
      "dnsServiceIP": "10.0.0.10",
      "loadBalancerProfile": {
        "allocatedOutboundPorts": 2000,
        "effectiveOutboundIPs": [
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip1"
          },
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip2"
          }
        ],
        "idleTimeoutInMinutes": 10,
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "basic",
      "networkPlugin": "kubenet",
      "outboundType": "loadBalancer",
      "podCidr": "10.244.0.0/16",
      "serviceCidr": "10.0.0.0/16"
    },
    "nodeResourceGroup": "MC_rg1_clustername1_location1",
    "provisioningState": "Succeeded",
    "servicePrincipalProfile": {
      "clientId": "clientid"
    },
    "windowsProfile": {
      "adminUsername": "azureuser"
    }
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

狀態碼:: 201

{
  "name": "clustername1",
  "type": "Microsoft.ContainerService/managedClusters",
  "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1",
  "location": "location1",
  "properties": {
    "addonProfiles": {
      "azureKeyvaultSecretsProvider": {
        "config": {
          "enableSecretRotation": "true",
          "rotationPollInterval": "2m"
        },
        "enabled": true
      }
    },
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "enableEncryptionAtHost": true,
        "enableNodePublicIP": true,
        "maxPods": 110,
        "mode": "System",
        "orchestratorVersion": "1.9.6",
        "osType": "Linux",
        "provisioningState": "Creating",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "kubernetesVersion": "1.9.6",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "maxAgentPools": 1,
    "networkProfile": {
      "dnsServiceIP": "10.0.0.10",
      "loadBalancerProfile": {
        "allocatedOutboundPorts": 2000,
        "effectiveOutboundIPs": [
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip1"
          },
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip2"
          }
        ],
        "idleTimeoutInMinutes": 10,
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "standard",
      "networkPlugin": "kubenet",
      "outboundType": "loadBalancer",
      "podCidr": "10.244.0.0/16",
      "serviceCidr": "10.0.0.0/16"
    },
    "nodeResourceGroup": "MC_rg1_clustername1_location1",
    "provisioningState": "Creating",
    "servicePrincipalProfile": {
      "clientId": "clientid"
    },
    "windowsProfile": {
      "adminUsername": "azureuser"
    }
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

Create Managed Cluster with Capacity Reservation Group

範例要求

HTTP
Python

PUT https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1?api-version=2026-01-01

{
  "location": "location1",
  "properties": {
    "addonProfiles": {},
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "capacityReservationGroupID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/capacityReservationGroups/crg1",
        "count": 3,
        "enableNodePublicIP": true,
        "mode": "System",
        "osType": "Linux",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "kubernetesVersion": "",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "networkProfile": {
      "loadBalancerProfile": {
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "standard",
      "outboundType": "loadBalancer"
    },
    "servicePrincipalProfile": {
      "clientId": "clientid",
      "secret": "secret"
    },
    "windowsProfile": {
      "adminPassword": "replacePassword1234$",
      "adminUsername": "azureuser"
    }
  },
  "sku": {
    "name": "Basic",
    "tier": "Free"
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

from azure.identity import DefaultAzureCredential

from azure.mgmt.containerservice import ContainerServiceClient

"""
# PREREQUISITES
    pip install azure-identity
    pip install azure-mgmt-containerservice
# USAGE
    python managed_clusters_create_crg.py

    Before run the sample, please set the values of the client ID, tenant ID and client secret
    of the AAD application as environment variables: AZURE_CLIENT_ID, AZURE_TENANT_ID,
    AZURE_CLIENT_SECRET. For more info about how to get the value, please see:
    https://docs.microsoft.com/azure/active-directory/develop/howto-create-service-principal-portal
"""


def main():
    client = ContainerServiceClient(
        credential=DefaultAzureCredential(),
        subscription_id="SUBSCRIPTION_ID",
    )

    response = client.managed_clusters.begin_create_or_update(
        resource_group_name="rg1",
        resource_name="clustername1",
        parameters={
            "location": "location1",
            "properties": {
                "addonProfiles": {},
                "agentPoolProfiles": [
                    {
                        "capacityReservationGroupID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/capacityReservationGroups/crg1",
                        "count": 3,
                        "enableNodePublicIP": True,
                        "mode": "System",
                        "name": "nodepool1",
                        "osType": "Linux",
                        "type": "VirtualMachineScaleSets",
                        "vmSize": "Standard_DS2_v2",
                    }
                ],
                "autoScalerProfile": {"scale-down-delay-after-add": "15m", "scan-interval": "20s"},
                "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
                "dnsPrefix": "dnsprefix1",
                "enableRBAC": True,
                "kubernetesVersion": "",
                "linuxProfile": {"adminUsername": "azureuser", "ssh": {"publicKeys": [{"keyData": "keydata"}]}},
                "networkProfile": {
                    "loadBalancerProfile": {"managedOutboundIPs": {"count": 2}},
                    "loadBalancerSku": "standard",
                    "outboundType": "loadBalancer",
                },
                "servicePrincipalProfile": {"clientId": "clientid", "secret": "secret"},
                "windowsProfile": {"adminPassword": "replacePassword1234$", "adminUsername": "azureuser"},
            },
            "sku": {"name": "Basic", "tier": "Free"},
            "tags": {"archv2": "", "tier": "production"},
        },
    ).result()
    print(response)


# x-ms-original-file: 2026-01-01/ManagedClustersCreate_CRG.json
if __name__ == "__main__":
    main()

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

範例回覆

狀態碼:: 200

{
  "name": "clustername1",
  "type": "Microsoft.ContainerService/managedClusters",
  "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1",
  "location": "location1",
  "properties": {
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "capacityReservationGroupID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/capacityReservationGroups/crg1",
        "count": 3,
        "currentOrchestratorVersion": "1.9.6",
        "enableNodePublicIP": true,
        "maxPods": 110,
        "mode": "System",
        "nodeImageVersion": "AKSUbuntu:1604:2020.03.11",
        "orchestratorVersion": "1.9.6",
        "osType": "Linux",
        "provisioningState": "Succeeded",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "fqdn": "dnsprefix1-abcd1234.hcp.eastus.azmk8s.io",
    "kubernetesVersion": "1.9.6",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "maxAgentPools": 1,
    "networkProfile": {
      "dnsServiceIP": "10.0.0.10",
      "ipFamilies": [
        "IPv4"
      ],
      "loadBalancerProfile": {
        "allocatedOutboundPorts": 2000,
        "effectiveOutboundIPs": [
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip1"
          },
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip2"
          }
        ],
        "idleTimeoutInMinutes": 10,
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "basic",
      "networkPlugin": "kubenet",
      "outboundType": "loadBalancer",
      "podCidr": "10.244.0.0/16",
      "podCidrs": [
        "10.244.0.0/16"
      ],
      "serviceCidr": "10.0.0.0/16",
      "serviceCidrs": [
        "10.0.0.0/16"
      ]
    },
    "nodeResourceGroup": "MC_rg1_clustername1_location1",
    "provisioningState": "Succeeded",
    "servicePrincipalProfile": {
      "clientId": "clientid"
    },
    "windowsProfile": {
      "adminUsername": "azureuser"
    }
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

狀態碼:: 201

{
  "name": "clustername1",
  "type": "Microsoft.ContainerService/managedClusters",
  "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1",
  "location": "location1",
  "properties": {
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "capacityReservationGroupID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/capacityReservationGroups/crg1",
        "count": 3,
        "currentOrchestratorVersion": "1.9.6",
        "enableNodePublicIP": true,
        "maxPods": 110,
        "mode": "System",
        "orchestratorVersion": "1.9.6",
        "osType": "Linux",
        "provisioningState": "Creating",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "kubernetesVersion": "1.9.6",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "maxAgentPools": 1,
    "networkProfile": {
      "dnsServiceIP": "10.0.0.10",
      "ipFamilies": [
        "IPv4"
      ],
      "loadBalancerProfile": {
        "allocatedOutboundPorts": 2000,
        "effectiveOutboundIPs": [
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip1"
          },
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip2"
          }
        ],
        "idleTimeoutInMinutes": 10,
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "standard",
      "networkPlugin": "kubenet",
      "outboundType": "loadBalancer",
      "podCidr": "10.244.0.0/16",
      "podCidrs": [
        "10.244.0.0/16"
      ],
      "serviceCidr": "10.0.0.0/16",
      "serviceCidrs": [
        "10.0.0.0/16"
      ]
    },
    "nodeResourceGroup": "MC_rg1_clustername1_location1",
    "provisioningState": "Creating",
    "servicePrincipalProfile": {
      "clientId": "clientid"
    },
    "windowsProfile": {
      "adminUsername": "azureuser"
    }
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

Create Managed Cluster with Custom CA Trust Certificates

範例要求

HTTP
Python

PUT https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1?api-version=2026-01-01

{
  "location": "location1",
  "properties": {
    "addonProfiles": {},
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "enableNodePublicIP": true,
        "mode": "System",
        "osType": "Linux",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "kubernetesVersion": "",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "networkProfile": {
      "loadBalancerProfile": {
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "standard",
      "outboundType": "loadBalancer"
    },
    "securityProfile": {
      "customCATrustCertificates": [
        "ZHVtbXlFeGFtcGxlVGVzdFZhbHVlRm9yQ2VydGlmaWNhdGVUb0JlQWRkZWQ="
      ]
    },
    "servicePrincipalProfile": {
      "clientId": "clientid",
      "secret": "secret"
    },
    "windowsProfile": {
      "adminPassword": "replacePassword1234$",
      "adminUsername": "azureuser"
    }
  },
  "sku": {
    "name": "Basic",
    "tier": "Free"
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

from azure.identity import DefaultAzureCredential

from azure.mgmt.containerservice import ContainerServiceClient

"""
# PREREQUISITES
    pip install azure-identity
    pip install azure-mgmt-containerservice
# USAGE
    python managed_clusters_create_custom_ca_trust_certificates.py

    Before run the sample, please set the values of the client ID, tenant ID and client secret
    of the AAD application as environment variables: AZURE_CLIENT_ID, AZURE_TENANT_ID,
    AZURE_CLIENT_SECRET. For more info about how to get the value, please see:
    https://docs.microsoft.com/azure/active-directory/develop/howto-create-service-principal-portal
"""


def main():
    client = ContainerServiceClient(
        credential=DefaultAzureCredential(),
        subscription_id="SUBSCRIPTION_ID",
    )

    response = client.managed_clusters.begin_create_or_update(
        resource_group_name="rg1",
        resource_name="clustername1",
        parameters={
            "location": "location1",
            "properties": {
                "addonProfiles": {},
                "agentPoolProfiles": [
                    {
                        "count": 3,
                        "enableNodePublicIP": True,
                        "mode": "System",
                        "name": "nodepool1",
                        "osType": "Linux",
                        "type": "VirtualMachineScaleSets",
                        "vmSize": "Standard_DS2_v2",
                    }
                ],
                "autoScalerProfile": {"scale-down-delay-after-add": "15m", "scan-interval": "20s"},
                "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
                "dnsPrefix": "dnsprefix1",
                "enableRBAC": True,
                "kubernetesVersion": "",
                "linuxProfile": {"adminUsername": "azureuser", "ssh": {"publicKeys": [{"keyData": "keydata"}]}},
                "networkProfile": {
                    "loadBalancerProfile": {"managedOutboundIPs": {"count": 2}},
                    "loadBalancerSku": "standard",
                    "outboundType": "loadBalancer",
                },
                "securityProfile": {
                    "customCATrustCertificates": ["ZHVtbXlFeGFtcGxlVGVzdFZhbHVlRm9yQ2VydGlmaWNhdGVUb0JlQWRkZWQ="]
                },
                "servicePrincipalProfile": {"clientId": "clientid", "secret": "secret"},
                "windowsProfile": {"adminPassword": "replacePassword1234$", "adminUsername": "azureuser"},
            },
            "sku": {"name": "Basic", "tier": "Free"},
            "tags": {"archv2": "", "tier": "production"},
        },
    ).result()
    print(response)


# x-ms-original-file: 2026-01-01/ManagedClustersCreate_CustomCATrustCertificates.json
if __name__ == "__main__":
    main()

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

範例回覆

狀態碼:: 200

{
  "name": "clustername1",
  "type": "Microsoft.ContainerService/managedClusters",
  "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1",
  "location": "location1",
  "properties": {
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "currentOrchestratorVersion": "1.9.6",
        "enableNodePublicIP": true,
        "maxPods": 110,
        "mode": "System",
        "nodeImageVersion": "AKSUbuntu:1604:2020.03.11",
        "orchestratorVersion": "1.9.6",
        "osType": "Linux",
        "provisioningState": "Succeeded",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "fqdn": "dnsprefix1-abcd1234.hcp.eastus.azmk8s.io",
    "kubernetesVersion": "1.9.6",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "maxAgentPools": 1,
    "networkProfile": {
      "dnsServiceIP": "10.0.0.10",
      "ipFamilies": [
        "IPv4"
      ],
      "loadBalancerProfile": {
        "allocatedOutboundPorts": 2000,
        "effectiveOutboundIPs": [
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip1"
          },
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip2"
          }
        ],
        "idleTimeoutInMinutes": 10,
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "basic",
      "networkPlugin": "kubenet",
      "outboundType": "loadBalancer",
      "podCidr": "10.244.0.0/16",
      "podCidrs": [
        "10.244.0.0/16"
      ],
      "serviceCidr": "10.0.0.0/16",
      "serviceCidrs": [
        "10.0.0.0/16"
      ]
    },
    "nodeResourceGroup": "MC_rg1_clustername1_location1",
    "provisioningState": "Succeeded",
    "securityProfile": {
      "customCATrustCertificates": [
        "ZHVtbXlFeGFtcGxlVGVzdFZhbHVlRm9yQ2VydGlmaWNhdGVUb0JlQWRkZWQ="
      ]
    },
    "servicePrincipalProfile": {
      "clientId": "clientid"
    },
    "windowsProfile": {
      "adminUsername": "azureuser"
    }
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

狀態碼:: 201

{
  "name": "clustername1",
  "type": "Microsoft.ContainerService/managedClusters",
  "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1",
  "location": "location1",
  "properties": {
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "currentOrchestratorVersion": "1.9.6",
        "enableNodePublicIP": true,
        "maxPods": 110,
        "mode": "System",
        "orchestratorVersion": "1.9.6",
        "osType": "Linux",
        "provisioningState": "Creating",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "kubernetesVersion": "1.9.6",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "maxAgentPools": 1,
    "networkProfile": {
      "dnsServiceIP": "10.0.0.10",
      "ipFamilies": [
        "IPv4"
      ],
      "loadBalancerProfile": {
        "allocatedOutboundPorts": 2000,
        "effectiveOutboundIPs": [
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip1"
          },
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip2"
          }
        ],
        "idleTimeoutInMinutes": 10,
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "standard",
      "networkPlugin": "kubenet",
      "outboundType": "loadBalancer",
      "podCidr": "10.244.0.0/16",
      "podCidrs": [
        "10.244.0.0/16"
      ],
      "serviceCidr": "10.0.0.0/16",
      "serviceCidrs": [
        "10.0.0.0/16"
      ]
    },
    "nodeResourceGroup": "MC_rg1_clustername1_location1",
    "provisioningState": "Creating",
    "securityProfile": {
      "customCATrustCertificates": [
        "ZHVtbXlFeGFtcGxlVGVzdFZhbHVlRm9yQ2VydGlmaWNhdGVUb0JlQWRkZWQ="
      ]
    },
    "servicePrincipalProfile": {
      "clientId": "clientid"
    },
    "windowsProfile": {
      "adminUsername": "azureuser"
    }
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

Create Managed Cluster with Dedicated Host Group

範例要求

HTTP
Python

PUT https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1?api-version=2026-01-01

{
  "location": "location1",
  "properties": {
    "addonProfiles": {},
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "enableNodePublicIP": true,
        "hostGroupID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg/providers/Microsoft.Compute/hostGroups/hostgroup1",
        "osType": "Linux",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "kubernetesVersion": "",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "networkProfile": {
      "loadBalancerProfile": {
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "standard",
      "outboundType": "loadBalancer"
    },
    "servicePrincipalProfile": {
      "clientId": "clientid",
      "secret": "secret"
    },
    "windowsProfile": {
      "adminPassword": "replacePassword1234$",
      "adminUsername": "azureuser"
    }
  },
  "sku": {
    "name": "Basic",
    "tier": "Free"
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

from azure.identity import DefaultAzureCredential

from azure.mgmt.containerservice import ContainerServiceClient

"""
# PREREQUISITES
    pip install azure-identity
    pip install azure-mgmt-containerservice
# USAGE
    python managed_clusters_create_dedicated_host_group.py

    Before run the sample, please set the values of the client ID, tenant ID and client secret
    of the AAD application as environment variables: AZURE_CLIENT_ID, AZURE_TENANT_ID,
    AZURE_CLIENT_SECRET. For more info about how to get the value, please see:
    https://docs.microsoft.com/azure/active-directory/develop/howto-create-service-principal-portal
"""


def main():
    client = ContainerServiceClient(
        credential=DefaultAzureCredential(),
        subscription_id="SUBSCRIPTION_ID",
    )

    response = client.managed_clusters.begin_create_or_update(
        resource_group_name="rg1",
        resource_name="clustername1",
        parameters={
            "location": "location1",
            "properties": {
                "addonProfiles": {},
                "agentPoolProfiles": [
                    {
                        "count": 3,
                        "enableNodePublicIP": True,
                        "hostGroupID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg/providers/Microsoft.Compute/hostGroups/hostgroup1",
                        "name": "nodepool1",
                        "osType": "Linux",
                        "type": "VirtualMachineScaleSets",
                        "vmSize": "Standard_DS2_v2",
                    }
                ],
                "autoScalerProfile": {"scale-down-delay-after-add": "15m", "scan-interval": "20s"},
                "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
                "dnsPrefix": "dnsprefix1",
                "enableRBAC": True,
                "kubernetesVersion": "",
                "linuxProfile": {"adminUsername": "azureuser", "ssh": {"publicKeys": [{"keyData": "keydata"}]}},
                "networkProfile": {
                    "loadBalancerProfile": {"managedOutboundIPs": {"count": 2}},
                    "loadBalancerSku": "standard",
                    "outboundType": "loadBalancer",
                },
                "servicePrincipalProfile": {"clientId": "clientid", "secret": "secret"},
                "windowsProfile": {"adminPassword": "replacePassword1234$", "adminUsername": "azureuser"},
            },
            "sku": {"name": "Basic", "tier": "Free"},
            "tags": {"archv2": "", "tier": "production"},
        },
    ).result()
    print(response)


# x-ms-original-file: 2026-01-01/ManagedClustersCreate_DedicatedHostGroup.json
if __name__ == "__main__":
    main()

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

範例回覆

狀態碼:: 200

{
  "name": "clustername1",
  "type": "Microsoft.ContainerService/managedClusters",
  "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1",
  "location": "location1",
  "properties": {
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "enableNodePublicIP": true,
        "hostGroupID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg/providers/Microsoft.Compute/hostGroups/hostgroup1",
        "maxPods": 110,
        "nodeImageVersion": "AKSUbuntu:1604:2020.03.11",
        "orchestratorVersion": "1.9.6",
        "osType": "Linux",
        "provisioningState": "Succeeded",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "fqdn": "dnsprefix1-abcd1234.hcp.eastus.azmk8s.io",
    "kubernetesVersion": "1.9.6",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "maxAgentPools": 1,
    "networkProfile": {
      "dnsServiceIP": "10.0.0.10",
      "ipFamilies": [
        "IPv4"
      ],
      "loadBalancerProfile": {
        "allocatedOutboundPorts": 2000,
        "effectiveOutboundIPs": [
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip1"
          },
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip2"
          }
        ],
        "idleTimeoutInMinutes": 10,
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "basic",
      "networkPlugin": "kubenet",
      "outboundType": "loadBalancer",
      "podCidr": "10.244.0.0/16",
      "podCidrs": [
        "10.244.0.0/16"
      ],
      "serviceCidr": "10.0.0.0/16",
      "serviceCidrs": [
        "10.0.0.0/16"
      ]
    },
    "nodeResourceGroup": "MC_rg1_clustername1_location1",
    "provisioningState": "Succeeded",
    "servicePrincipalProfile": {
      "clientId": "clientid"
    },
    "windowsProfile": {
      "adminUsername": "azureuser"
    }
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

狀態碼:: 201

{
  "name": "clustername1",
  "type": "Microsoft.ContainerService/managedClusters",
  "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1",
  "location": "location1",
  "properties": {
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "enableNodePublicIP": true,
        "hostGroupID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg/providers/Microsoft.Compute/hostGroups/hostgroup1",
        "maxPods": 110,
        "orchestratorVersion": "1.9.6",
        "osType": "Linux",
        "provisioningState": "Creating",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "kubernetesVersion": "1.9.6",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "maxAgentPools": 1,
    "networkProfile": {
      "dnsServiceIP": "10.0.0.10",
      "ipFamilies": [
        "IPv4"
      ],
      "loadBalancerProfile": {
        "allocatedOutboundPorts": 2000,
        "effectiveOutboundIPs": [
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip1"
          },
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip2"
          }
        ],
        "idleTimeoutInMinutes": 10,
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "standard",
      "networkPlugin": "kubenet",
      "outboundType": "loadBalancer",
      "podCidr": "10.244.0.0/16",
      "podCidrs": [
        "10.244.0.0/16"
      ],
      "serviceCidr": "10.0.0.0/16",
      "serviceCidrs": [
        "10.0.0.0/16"
      ]
    },
    "nodeResourceGroup": "MC_rg1_clustername1_location1",
    "provisioningState": "Creating",
    "servicePrincipalProfile": {
      "clientId": "clientid"
    },
    "windowsProfile": {
      "adminUsername": "azureuser"
    }
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

Create Managed Cluster with EncryptionAtHost enabled

範例要求

HTTP
Python

PUT https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1?api-version=2026-01-01

{
  "location": "location1",
  "properties": {
    "addonProfiles": {},
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "enableEncryptionAtHost": true,
        "enableNodePublicIP": true,
        "mode": "System",
        "osType": "Linux",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "kubernetesVersion": "",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "networkProfile": {
      "loadBalancerProfile": {
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "standard",
      "outboundType": "loadBalancer"
    },
    "servicePrincipalProfile": {
      "clientId": "clientid",
      "secret": "secret"
    },
    "windowsProfile": {
      "adminPassword": "replacePassword1234$",
      "adminUsername": "azureuser"
    }
  },
  "sku": {
    "name": "Basic",
    "tier": "Free"
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

from azure.identity import DefaultAzureCredential

from azure.mgmt.containerservice import ContainerServiceClient

"""
# PREREQUISITES
    pip install azure-identity
    pip install azure-mgmt-containerservice
# USAGE
    python managed_clusters_create_enable_encryption_at_host.py

    Before run the sample, please set the values of the client ID, tenant ID and client secret
    of the AAD application as environment variables: AZURE_CLIENT_ID, AZURE_TENANT_ID,
    AZURE_CLIENT_SECRET. For more info about how to get the value, please see:
    https://docs.microsoft.com/azure/active-directory/develop/howto-create-service-principal-portal
"""


def main():
    client = ContainerServiceClient(
        credential=DefaultAzureCredential(),
        subscription_id="SUBSCRIPTION_ID",
    )

    response = client.managed_clusters.begin_create_or_update(
        resource_group_name="rg1",
        resource_name="clustername1",
        parameters={
            "location": "location1",
            "properties": {
                "addonProfiles": {},
                "agentPoolProfiles": [
                    {
                        "count": 3,
                        "enableEncryptionAtHost": True,
                        "enableNodePublicIP": True,
                        "mode": "System",
                        "name": "nodepool1",
                        "osType": "Linux",
                        "type": "VirtualMachineScaleSets",
                        "vmSize": "Standard_DS2_v2",
                    }
                ],
                "autoScalerProfile": {"scale-down-delay-after-add": "15m", "scan-interval": "20s"},
                "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
                "dnsPrefix": "dnsprefix1",
                "enableRBAC": True,
                "kubernetesVersion": "",
                "linuxProfile": {"adminUsername": "azureuser", "ssh": {"publicKeys": [{"keyData": "keydata"}]}},
                "networkProfile": {
                    "loadBalancerProfile": {"managedOutboundIPs": {"count": 2}},
                    "loadBalancerSku": "standard",
                    "outboundType": "loadBalancer",
                },
                "servicePrincipalProfile": {"clientId": "clientid", "secret": "secret"},
                "windowsProfile": {"adminPassword": "replacePassword1234$", "adminUsername": "azureuser"},
            },
            "sku": {"name": "Basic", "tier": "Free"},
            "tags": {"archv2": "", "tier": "production"},
        },
    ).result()
    print(response)


# x-ms-original-file: 2026-01-01/ManagedClustersCreate_EnableEncryptionAtHost.json
if __name__ == "__main__":
    main()

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

範例回覆

狀態碼:: 200

{
  "name": "clustername1",
  "type": "Microsoft.ContainerService/managedClusters",
  "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1",
  "location": "location1",
  "properties": {
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "currentOrchestratorVersion": "1.9.6",
        "enableEncryptionAtHost": true,
        "enableNodePublicIP": true,
        "maxPods": 110,
        "mode": "System",
        "nodeImageVersion": "AKSUbuntu:1604:2020.03.11",
        "orchestratorVersion": "1.9.6",
        "osType": "Linux",
        "provisioningState": "Succeeded",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "currentKubernetesVersion": "1.9.6",
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "fqdn": "dnsprefix1-abcd1234.hcp.eastus.azmk8s.io",
    "kubernetesVersion": "1.9.6",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "maxAgentPools": 1,
    "networkProfile": {
      "dnsServiceIP": "10.0.0.10",
      "ipFamilies": [
        "IPv4"
      ],
      "loadBalancerProfile": {
        "allocatedOutboundPorts": 2000,
        "effectiveOutboundIPs": [
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip1"
          },
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip2"
          }
        ],
        "idleTimeoutInMinutes": 10,
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "basic",
      "networkPlugin": "kubenet",
      "outboundType": "loadBalancer",
      "podCidr": "10.244.0.0/16",
      "podCidrs": [
        "10.244.0.0/16"
      ],
      "serviceCidr": "10.0.0.0/16",
      "serviceCidrs": [
        "10.0.0.0/16"
      ]
    },
    "nodeResourceGroup": "MC_rg1_clustername1_location1",
    "provisioningState": "Succeeded",
    "servicePrincipalProfile": {
      "clientId": "clientid"
    },
    "windowsProfile": {
      "adminUsername": "azureuser"
    }
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

狀態碼:: 201

{
  "name": "clustername1",
  "type": "Microsoft.ContainerService/managedClusters",
  "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1",
  "location": "location1",
  "properties": {
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "currentOrchestratorVersion": "1.9.6",
        "enableEncryptionAtHost": true,
        "enableNodePublicIP": true,
        "maxPods": 110,
        "mode": "System",
        "orchestratorVersion": "1.9.6",
        "osType": "Linux",
        "provisioningState": "Creating",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "currentKubernetesVersion": "1.9.6",
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "kubernetesVersion": "1.9.6",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "maxAgentPools": 1,
    "networkProfile": {
      "dnsServiceIP": "10.0.0.10",
      "ipFamilies": [
        "IPv4"
      ],
      "loadBalancerProfile": {
        "allocatedOutboundPorts": 2000,
        "effectiveOutboundIPs": [
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip1"
          },
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip2"
          }
        ],
        "idleTimeoutInMinutes": 10,
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "standard",
      "networkPlugin": "kubenet",
      "outboundType": "loadBalancer",
      "podCidr": "10.244.0.0/16",
      "podCidrs": [
        "10.244.0.0/16"
      ],
      "serviceCidr": "10.0.0.0/16",
      "serviceCidrs": [
        "10.0.0.0/16"
      ]
    },
    "nodeResourceGroup": "MC_rg1_clustername1_location1",
    "provisioningState": "Creating",
    "servicePrincipalProfile": {
      "clientId": "clientid"
    },
    "windowsProfile": {
      "adminUsername": "azureuser"
    }
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

Create Managed Cluster with FIPS enabled OS

範例要求

HTTP
Python

PUT https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1?api-version=2026-01-01

{
  "location": "location1",
  "properties": {
    "addonProfiles": {},
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "enableFIPS": true,
        "enableNodePublicIP": true,
        "mode": "System",
        "osType": "Linux",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "kubernetesVersion": "",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "networkProfile": {
      "loadBalancerProfile": {
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "standard",
      "outboundType": "loadBalancer"
    },
    "servicePrincipalProfile": {
      "clientId": "clientid",
      "secret": "secret"
    },
    "windowsProfile": {
      "adminPassword": "replacePassword1234$",
      "adminUsername": "azureuser"
    }
  },
  "sku": {
    "name": "Basic",
    "tier": "Free"
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

from azure.identity import DefaultAzureCredential

from azure.mgmt.containerservice import ContainerServiceClient

"""
# PREREQUISITES
    pip install azure-identity
    pip install azure-mgmt-containerservice
# USAGE
    python managed_clusters_create_enabled_fips.py

    Before run the sample, please set the values of the client ID, tenant ID and client secret
    of the AAD application as environment variables: AZURE_CLIENT_ID, AZURE_TENANT_ID,
    AZURE_CLIENT_SECRET. For more info about how to get the value, please see:
    https://docs.microsoft.com/azure/active-directory/develop/howto-create-service-principal-portal
"""


def main():
    client = ContainerServiceClient(
        credential=DefaultAzureCredential(),
        subscription_id="SUBSCRIPTION_ID",
    )

    response = client.managed_clusters.begin_create_or_update(
        resource_group_name="rg1",
        resource_name="clustername1",
        parameters={
            "location": "location1",
            "properties": {
                "addonProfiles": {},
                "agentPoolProfiles": [
                    {
                        "count": 3,
                        "enableFIPS": True,
                        "enableNodePublicIP": True,
                        "mode": "System",
                        "name": "nodepool1",
                        "osType": "Linux",
                        "type": "VirtualMachineScaleSets",
                        "vmSize": "Standard_DS2_v2",
                    }
                ],
                "autoScalerProfile": {"scale-down-delay-after-add": "15m", "scan-interval": "20s"},
                "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
                "dnsPrefix": "dnsprefix1",
                "enableRBAC": True,
                "kubernetesVersion": "",
                "linuxProfile": {"adminUsername": "azureuser", "ssh": {"publicKeys": [{"keyData": "keydata"}]}},
                "networkProfile": {
                    "loadBalancerProfile": {"managedOutboundIPs": {"count": 2}},
                    "loadBalancerSku": "standard",
                    "outboundType": "loadBalancer",
                },
                "servicePrincipalProfile": {"clientId": "clientid", "secret": "secret"},
                "windowsProfile": {"adminPassword": "replacePassword1234$", "adminUsername": "azureuser"},
            },
            "sku": {"name": "Basic", "tier": "Free"},
            "tags": {"archv2": "", "tier": "production"},
        },
    ).result()
    print(response)


# x-ms-original-file: 2026-01-01/ManagedClustersCreate_EnabledFIPS.json
if __name__ == "__main__":
    main()

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

範例回覆

狀態碼:: 200

{
  "name": "clustername1",
  "type": "Microsoft.ContainerService/managedClusters",
  "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1",
  "location": "location1",
  "properties": {
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "currentOrchestratorVersion": "1.9.6",
        "enableFIPS": true,
        "enableNodePublicIP": true,
        "maxPods": 110,
        "mode": "System",
        "nodeImageVersion": "AKSUbuntu:1604:2020.03.11",
        "orchestratorVersion": "1.9.6",
        "osType": "Linux",
        "provisioningState": "Succeeded",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "currentKubernetesVersion": "1.9.6",
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "fqdn": "dnsprefix1-abcd1234.hcp.eastus.azmk8s.io",
    "kubernetesVersion": "1.9.6",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "maxAgentPools": 1,
    "networkProfile": {
      "dnsServiceIP": "10.0.0.10",
      "ipFamilies": [
        "IPv4"
      ],
      "loadBalancerProfile": {
        "allocatedOutboundPorts": 2000,
        "effectiveOutboundIPs": [
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip1"
          },
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip2"
          }
        ],
        "idleTimeoutInMinutes": 10,
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "basic",
      "networkPlugin": "kubenet",
      "outboundType": "loadBalancer",
      "podCidr": "10.244.0.0/16",
      "podCidrs": [
        "10.244.0.0/16"
      ],
      "serviceCidr": "10.0.0.0/16",
      "serviceCidrs": [
        "10.0.0.0/16"
      ]
    },
    "nodeResourceGroup": "MC_rg1_clustername1_location1",
    "provisioningState": "Succeeded",
    "servicePrincipalProfile": {
      "clientId": "clientid"
    },
    "windowsProfile": {
      "adminUsername": "azureuser"
    }
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

狀態碼:: 201

{
  "name": "clustername1",
  "type": "Microsoft.ContainerService/managedClusters",
  "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1",
  "location": "location1",
  "properties": {
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "currentOrchestratorVersion": "1.9.6",
        "enableFIPS": true,
        "enableNodePublicIP": true,
        "maxPods": 110,
        "mode": "System",
        "orchestratorVersion": "1.9.6",
        "osType": "Linux",
        "provisioningState": "Creating",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "currentKubernetesVersion": "1.9.6",
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "kubernetesVersion": "1.9.6",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "maxAgentPools": 1,
    "networkProfile": {
      "dnsServiceIP": "10.0.0.10",
      "ipFamilies": [
        "IPv4"
      ],
      "loadBalancerProfile": {
        "allocatedOutboundPorts": 2000,
        "effectiveOutboundIPs": [
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip1"
          },
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip2"
          }
        ],
        "idleTimeoutInMinutes": 10,
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "standard",
      "networkPlugin": "kubenet",
      "outboundType": "loadBalancer",
      "podCidr": "10.244.0.0/16",
      "podCidrs": [
        "10.244.0.0/16"
      ],
      "serviceCidr": "10.0.0.0/16",
      "serviceCidrs": [
        "10.0.0.0/16"
      ]
    },
    "nodeResourceGroup": "MC_rg1_clustername1_location1",
    "provisioningState": "Creating",
    "servicePrincipalProfile": {
      "clientId": "clientid"
    },
    "windowsProfile": {
      "adminUsername": "azureuser"
    }
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

Create Managed Cluster with GPUMIG

範例要求

HTTP
Python

PUT https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1?api-version=2026-01-01

{
  "location": "location1",
  "properties": {
    "addonProfiles": {},
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "enableNodePublicIP": true,
        "gpuInstanceProfile": "MIG3g",
        "mode": "System",
        "osType": "Linux",
        "vmSize": "Standard_ND96asr_v4"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "httpProxyConfig": {
      "httpProxy": "http://myproxy.server.com:8080",
      "httpsProxy": "https://myproxy.server.com:8080",
      "noProxy": [
        "localhost",
        "127.0.0.1"
      ],
      "trustedCa": "Q29uZ3JhdHMhIFlvdSBoYXZlIGZvdW5kIGEgaGlkZGVuIG1lc3NhZ2U="
    },
    "kubernetesVersion": "",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "networkProfile": {
      "loadBalancerProfile": {
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "standard",
      "outboundType": "loadBalancer"
    },
    "servicePrincipalProfile": {
      "clientId": "clientid",
      "secret": "secret"
    },
    "windowsProfile": {
      "adminPassword": "replacePassword1234$",
      "adminUsername": "azureuser"
    }
  },
  "sku": {
    "name": "Basic",
    "tier": "Free"
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

from azure.identity import DefaultAzureCredential

from azure.mgmt.containerservice import ContainerServiceClient

"""
# PREREQUISITES
    pip install azure-identity
    pip install azure-mgmt-containerservice
# USAGE
    python managed_clusters_create_gpumig.py

    Before run the sample, please set the values of the client ID, tenant ID and client secret
    of the AAD application as environment variables: AZURE_CLIENT_ID, AZURE_TENANT_ID,
    AZURE_CLIENT_SECRET. For more info about how to get the value, please see:
    https://docs.microsoft.com/azure/active-directory/develop/howto-create-service-principal-portal
"""


def main():
    client = ContainerServiceClient(
        credential=DefaultAzureCredential(),
        subscription_id="SUBSCRIPTION_ID",
    )

    response = client.managed_clusters.begin_create_or_update(
        resource_group_name="rg1",
        resource_name="clustername1",
        parameters={
            "location": "location1",
            "properties": {
                "addonProfiles": {},
                "agentPoolProfiles": [
                    {
                        "count": 3,
                        "enableNodePublicIP": True,
                        "gpuInstanceProfile": "MIG3g",
                        "mode": "System",
                        "name": "nodepool1",
                        "osType": "Linux",
                        "type": "VirtualMachineScaleSets",
                        "vmSize": "Standard_ND96asr_v4",
                    }
                ],
                "autoScalerProfile": {"scale-down-delay-after-add": "15m", "scan-interval": "20s"},
                "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
                "dnsPrefix": "dnsprefix1",
                "enableRBAC": True,
                "httpProxyConfig": {
                    "httpProxy": "http://myproxy.server.com:8080",
                    "httpsProxy": "https://myproxy.server.com:8080",
                    "noProxy": ["localhost", "127.0.0.1"],
                    "trustedCa": "Q29uZ3JhdHMhIFlvdSBoYXZlIGZvdW5kIGEgaGlkZGVuIG1lc3NhZ2U=",
                },
                "kubernetesVersion": "",
                "linuxProfile": {"adminUsername": "azureuser", "ssh": {"publicKeys": [{"keyData": "keydata"}]}},
                "networkProfile": {
                    "loadBalancerProfile": {"managedOutboundIPs": {"count": 2}},
                    "loadBalancerSku": "standard",
                    "outboundType": "loadBalancer",
                },
                "servicePrincipalProfile": {"clientId": "clientid", "secret": "secret"},
                "windowsProfile": {"adminPassword": "replacePassword1234$", "adminUsername": "azureuser"},
            },
            "sku": {"name": "Basic", "tier": "Free"},
            "tags": {"archv2": "", "tier": "production"},
        },
    ).result()
    print(response)


# x-ms-original-file: 2026-01-01/ManagedClustersCreate_GPUMIG.json
if __name__ == "__main__":
    main()

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

範例回覆

狀態碼:: 200

{
  "name": "clustername1",
  "type": "Microsoft.ContainerService/managedClusters",
  "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1",
  "location": "location1",
  "properties": {
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "currentOrchestratorVersion": "1.9.6",
        "enableNodePublicIP": true,
        "gpuInstanceProfile": "MIG3g",
        "maxPods": 110,
        "mode": "System",
        "nodeImageVersion": "AKSUbuntu:1604:2020.03.11",
        "orchestratorVersion": "1.9.6",
        "osType": "Linux",
        "provisioningState": "Succeeded",
        "vmSize": "Standard_ND96asr_v4"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "currentKubernetesVersion": "1.9.6",
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "fqdn": "dnsprefix1-abcd1234.hcp.eastus.azmk8s.io",
    "httpProxyConfig": {
      "httpProxy": "http://myproxy.server.com:8080",
      "httpsProxy": "https://myproxy.server.com:8080",
      "noProxy": [
        "localhost",
        "127.0.0.1"
      ],
      "trustedCa": "Q29uZ3JhdHMhIFlvdSBoYXZlIGZvdW5kIGEgaGlkZGVuIG1lc3NhZ2U="
    },
    "kubernetesVersion": "1.9.6",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "maxAgentPools": 1,
    "networkProfile": {
      "dnsServiceIP": "10.0.0.10",
      "ipFamilies": [
        "IPv4"
      ],
      "loadBalancerProfile": {
        "allocatedOutboundPorts": 2000,
        "effectiveOutboundIPs": [
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip1"
          },
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip2"
          }
        ],
        "idleTimeoutInMinutes": 10,
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "basic",
      "networkPlugin": "kubenet",
      "outboundType": "loadBalancer",
      "podCidr": "10.244.0.0/16",
      "podCidrs": [
        "10.244.0.0/16"
      ],
      "serviceCidr": "10.0.0.0/16",
      "serviceCidrs": [
        "10.0.0.0/16"
      ]
    },
    "nodeResourceGroup": "MC_rg1_clustername1_location1",
    "provisioningState": "Succeeded",
    "servicePrincipalProfile": {
      "clientId": "clientid"
    },
    "windowsProfile": {
      "adminUsername": "azureuser"
    }
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

狀態碼:: 201

{
  "name": "clustername1",
  "type": "Microsoft.ContainerService/managedClusters",
  "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1",
  "location": "location1",
  "properties": {
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "currentOrchestratorVersion": "1.9.6",
        "enableNodePublicIP": true,
        "gpuInstanceProfile": "MIG3g",
        "maxPods": 110,
        "mode": "System",
        "orchestratorVersion": "1.9.6",
        "osType": "Linux",
        "provisioningState": "Creating",
        "vmSize": "Standard_ND96asr_v4"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "currentKubernetesVersion": "1.9.6",
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "httpProxyConfig": {
      "httpProxy": "http://myproxy.server.com:8080",
      "httpsProxy": "https://myproxy.server.com:8080",
      "noProxy": [
        "localhost",
        "127.0.0.1"
      ],
      "trustedCa": "Q29uZ3JhdHMhIFlvdSBoYXZlIGZvdW5kIGEgaGlkZGVuIG1lc3NhZ2U="
    },
    "kubernetesVersion": "1.9.6",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "maxAgentPools": 1,
    "networkProfile": {
      "dnsServiceIP": "10.0.0.10",
      "ipFamilies": [
        "IPv4"
      ],
      "loadBalancerProfile": {
        "allocatedOutboundPorts": 2000,
        "effectiveOutboundIPs": [
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip1"
          },
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip2"
          }
        ],
        "idleTimeoutInMinutes": 10,
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "standard",
      "networkPlugin": "kubenet",
      "outboundType": "loadBalancer",
      "podCidr": "10.244.0.0/16",
      "podCidrs": [
        "10.244.0.0/16"
      ],
      "serviceCidr": "10.0.0.0/16",
      "serviceCidrs": [
        "10.0.0.0/16"
      ]
    },
    "nodeResourceGroup": "MC_rg1_clustername1_location1",
    "provisioningState": "Creating",
    "servicePrincipalProfile": {
      "clientId": "clientid"
    },
    "windowsProfile": {
      "adminUsername": "azureuser"
    }
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

Create Managed Cluster with HTTP proxy configured

範例要求

HTTP
Python

PUT https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1?api-version=2026-01-01

{
  "location": "location1",
  "properties": {
    "addonProfiles": {},
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "enableNodePublicIP": true,
        "mode": "System",
        "osType": "Linux",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "httpProxyConfig": {
      "httpProxy": "http://myproxy.server.com:8080",
      "httpsProxy": "https://myproxy.server.com:8080",
      "noProxy": [
        "localhost",
        "127.0.0.1"
      ],
      "trustedCa": "Q29uZ3JhdHMhIFlvdSBoYXZlIGZvdW5kIGEgaGlkZGVuIG1lc3NhZ2U="
    },
    "kubernetesVersion": "",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "networkProfile": {
      "loadBalancerProfile": {
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "standard",
      "outboundType": "loadBalancer"
    },
    "servicePrincipalProfile": {
      "clientId": "clientid",
      "secret": "secret"
    },
    "windowsProfile": {
      "adminPassword": "replacePassword1234$",
      "adminUsername": "azureuser"
    }
  },
  "sku": {
    "name": "Basic",
    "tier": "Free"
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

from azure.identity import DefaultAzureCredential

from azure.mgmt.containerservice import ContainerServiceClient

"""
# PREREQUISITES
    pip install azure-identity
    pip install azure-mgmt-containerservice
# USAGE
    python managed_clusters_create_httpproxy.py

    Before run the sample, please set the values of the client ID, tenant ID and client secret
    of the AAD application as environment variables: AZURE_CLIENT_ID, AZURE_TENANT_ID,
    AZURE_CLIENT_SECRET. For more info about how to get the value, please see:
    https://docs.microsoft.com/azure/active-directory/develop/howto-create-service-principal-portal
"""


def main():
    client = ContainerServiceClient(
        credential=DefaultAzureCredential(),
        subscription_id="SUBSCRIPTION_ID",
    )

    response = client.managed_clusters.begin_create_or_update(
        resource_group_name="rg1",
        resource_name="clustername1",
        parameters={
            "location": "location1",
            "properties": {
                "addonProfiles": {},
                "agentPoolProfiles": [
                    {
                        "count": 3,
                        "enableNodePublicIP": True,
                        "mode": "System",
                        "name": "nodepool1",
                        "osType": "Linux",
                        "type": "VirtualMachineScaleSets",
                        "vmSize": "Standard_DS2_v2",
                    }
                ],
                "autoScalerProfile": {"scale-down-delay-after-add": "15m", "scan-interval": "20s"},
                "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
                "dnsPrefix": "dnsprefix1",
                "enableRBAC": True,
                "httpProxyConfig": {
                    "httpProxy": "http://myproxy.server.com:8080",
                    "httpsProxy": "https://myproxy.server.com:8080",
                    "noProxy": ["localhost", "127.0.0.1"],
                    "trustedCa": "Q29uZ3JhdHMhIFlvdSBoYXZlIGZvdW5kIGEgaGlkZGVuIG1lc3NhZ2U=",
                },
                "kubernetesVersion": "",
                "linuxProfile": {"adminUsername": "azureuser", "ssh": {"publicKeys": [{"keyData": "keydata"}]}},
                "networkProfile": {
                    "loadBalancerProfile": {"managedOutboundIPs": {"count": 2}},
                    "loadBalancerSku": "standard",
                    "outboundType": "loadBalancer",
                },
                "servicePrincipalProfile": {"clientId": "clientid", "secret": "secret"},
                "windowsProfile": {"adminPassword": "replacePassword1234$", "adminUsername": "azureuser"},
            },
            "sku": {"name": "Basic", "tier": "Free"},
            "tags": {"archv2": "", "tier": "production"},
        },
    ).result()
    print(response)


# x-ms-original-file: 2026-01-01/ManagedClustersCreate_HTTPProxy.json
if __name__ == "__main__":
    main()

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

範例回覆

狀態碼:: 200

{
  "name": "clustername1",
  "type": "Microsoft.ContainerService/managedClusters",
  "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1",
  "location": "location1",
  "properties": {
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "currentOrchestratorVersion": "1.9.6",
        "enableNodePublicIP": true,
        "maxPods": 110,
        "mode": "System",
        "nodeImageVersion": "AKSUbuntu:1604:2020.03.11",
        "orchestratorVersion": "1.9.6",
        "osType": "Linux",
        "provisioningState": "Succeeded",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "currentKubernetesVersion": "1.9.6",
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "fqdn": "dnsprefix1-abcd1234.hcp.eastus.azmk8s.io",
    "httpProxyConfig": {
      "httpProxy": "http://myproxy.server.com:8080",
      "httpsProxy": "https://myproxy.server.com:8080",
      "noProxy": [
        "localhost",
        "127.0.0.1"
      ],
      "trustedCa": "Q29uZ3JhdHMhIFlvdSBoYXZlIGZvdW5kIGEgaGlkZGVuIG1lc3NhZ2U="
    },
    "kubernetesVersion": "1.9.6",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "maxAgentPools": 1,
    "networkProfile": {
      "dnsServiceIP": "10.0.0.10",
      "ipFamilies": [
        "IPv4"
      ],
      "loadBalancerProfile": {
        "allocatedOutboundPorts": 2000,
        "effectiveOutboundIPs": [
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip1"
          },
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip2"
          }
        ],
        "idleTimeoutInMinutes": 10,
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "basic",
      "networkPlugin": "kubenet",
      "outboundType": "loadBalancer",
      "podCidr": "10.244.0.0/16",
      "podCidrs": [
        "10.244.0.0/16"
      ],
      "serviceCidr": "10.0.0.0/16",
      "serviceCidrs": [
        "10.0.0.0/16"
      ]
    },
    "nodeResourceGroup": "MC_rg1_clustername1_location1",
    "provisioningState": "Succeeded",
    "servicePrincipalProfile": {
      "clientId": "clientid"
    },
    "windowsProfile": {
      "adminUsername": "azureuser"
    }
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

狀態碼:: 201

{
  "name": "clustername1",
  "type": "Microsoft.ContainerService/managedClusters",
  "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1",
  "location": "location1",
  "properties": {
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "currentOrchestratorVersion": "1.9.6",
        "enableNodePublicIP": true,
        "maxPods": 110,
        "mode": "System",
        "orchestratorVersion": "1.9.6",
        "osType": "Linux",
        "provisioningState": "Creating",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "currentKubernetesVersion": "1.9.6",
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "httpProxyConfig": {
      "httpProxy": "http://myproxy.server.com:8080",
      "httpsProxy": "https://myproxy.server.com:8080",
      "noProxy": [
        "localhost",
        "127.0.0.1"
      ],
      "trustedCa": "Q29uZ3JhdHMhIFlvdSBoYXZlIGZvdW5kIGEgaGlkZGVuIG1lc3NhZ2U="
    },
    "kubernetesVersion": "1.9.6",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "maxAgentPools": 1,
    "networkProfile": {
      "dnsServiceIP": "10.0.0.10",
      "ipFamilies": [
        "IPv4"
      ],
      "loadBalancerProfile": {
        "allocatedOutboundPorts": 2000,
        "effectiveOutboundIPs": [
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip1"
          },
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip2"
          }
        ],
        "idleTimeoutInMinutes": 10,
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "standard",
      "networkPlugin": "kubenet",
      "outboundType": "loadBalancer",
      "podCidr": "10.244.0.0/16",
      "podCidrs": [
        "10.244.0.0/16"
      ],
      "serviceCidr": "10.0.0.0/16",
      "serviceCidrs": [
        "10.0.0.0/16"
      ]
    },
    "nodeResourceGroup": "MC_rg1_clustername1_location1",
    "provisioningState": "Creating",
    "servicePrincipalProfile": {
      "clientId": "clientid"
    },
    "windowsProfile": {
      "adminUsername": "azureuser"
    }
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

Create Managed Cluster with LongTermSupport

範例要求

HTTP
Python

PUT https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1?api-version=2026-01-01

{
  "location": "location1",
  "properties": {
    "addonProfiles": {},
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "enableEncryptionAtHost": true,
        "enableNodePublicIP": true,
        "mode": "System",
        "osType": "Linux",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "apiServerAccessProfile": {
      "disableRunCommand": true
    },
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "kubernetesVersion": "",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "networkProfile": {
      "loadBalancerProfile": {
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "standard",
      "outboundType": "loadBalancer"
    },
    "servicePrincipalProfile": {
      "clientId": "clientid",
      "secret": "secret"
    },
    "supportPlan": "AKSLongTermSupport",
    "windowsProfile": {
      "adminPassword": "replacePassword1234$",
      "adminUsername": "azureuser"
    }
  },
  "sku": {
    "name": "Base",
    "tier": "Premium"
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

from azure.identity import DefaultAzureCredential

from azure.mgmt.containerservice import ContainerServiceClient

"""
# PREREQUISITES
    pip install azure-identity
    pip install azure-mgmt-containerservice
# USAGE
    python managed_clusters_create_premium.py

    Before run the sample, please set the values of the client ID, tenant ID and client secret
    of the AAD application as environment variables: AZURE_CLIENT_ID, AZURE_TENANT_ID,
    AZURE_CLIENT_SECRET. For more info about how to get the value, please see:
    https://docs.microsoft.com/azure/active-directory/develop/howto-create-service-principal-portal
"""


def main():
    client = ContainerServiceClient(
        credential=DefaultAzureCredential(),
        subscription_id="SUBSCRIPTION_ID",
    )

    response = client.managed_clusters.begin_create_or_update(
        resource_group_name="rg1",
        resource_name="clustername1",
        parameters={
            "location": "location1",
            "properties": {
                "addonProfiles": {},
                "agentPoolProfiles": [
                    {
                        "count": 3,
                        "enableEncryptionAtHost": True,
                        "enableNodePublicIP": True,
                        "mode": "System",
                        "name": "nodepool1",
                        "osType": "Linux",
                        "type": "VirtualMachineScaleSets",
                        "vmSize": "Standard_DS2_v2",
                    }
                ],
                "apiServerAccessProfile": {"disableRunCommand": True},
                "autoScalerProfile": {"scale-down-delay-after-add": "15m", "scan-interval": "20s"},
                "dnsPrefix": "dnsprefix1",
                "enableRBAC": True,
                "kubernetesVersion": "",
                "linuxProfile": {"adminUsername": "azureuser", "ssh": {"publicKeys": [{"keyData": "keydata"}]}},
                "networkProfile": {
                    "loadBalancerProfile": {"managedOutboundIPs": {"count": 2}},
                    "loadBalancerSku": "standard",
                    "outboundType": "loadBalancer",
                },
                "servicePrincipalProfile": {"clientId": "clientid", "secret": "secret"},
                "supportPlan": "AKSLongTermSupport",
                "windowsProfile": {"adminPassword": "replacePassword1234$", "adminUsername": "azureuser"},
            },
            "sku": {"name": "Base", "tier": "Premium"},
            "tags": {"archv2": "", "tier": "production"},
        },
    ).result()
    print(response)


# x-ms-original-file: 2026-01-01/ManagedClustersCreate_Premium.json
if __name__ == "__main__":
    main()

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

範例回覆

狀態碼:: 200

{
  "name": "clustername1",
  "type": "Microsoft.ContainerService/managedClusters",
  "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1",
  "location": "location1",
  "properties": {
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "currentOrchestratorVersion": "1.9.6",
        "enableEncryptionAtHost": true,
        "enableNodePublicIP": true,
        "maxPods": 110,
        "mode": "System",
        "nodeImageVersion": "AKSUbuntu:1604:2020.03.11",
        "orchestratorVersion": "1.9.6",
        "osType": "Linux",
        "provisioningState": "Succeeded",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "apiServerAccessProfile": {
      "disableRunCommand": true
    },
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "fqdn": "dnsprefix1-ee788a1f.hcp.location1.azmk8s.io",
    "kubernetesVersion": "1.9.6",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "maxAgentPools": 1,
    "networkProfile": {
      "dnsServiceIP": "10.0.0.10",
      "ipFamilies": [
        "IPv4"
      ],
      "loadBalancerProfile": {
        "allocatedOutboundPorts": 2000,
        "effectiveOutboundIPs": [
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip1"
          },
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip2"
          }
        ],
        "idleTimeoutInMinutes": 10,
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "basic",
      "networkPlugin": "kubenet",
      "outboundType": "loadBalancer",
      "podCidr": "10.244.0.0/16",
      "podCidrs": [
        "10.244.0.0/16"
      ],
      "serviceCidr": "10.0.0.0/16",
      "serviceCidrs": [
        "10.0.0.0/16"
      ]
    },
    "nodeResourceGroup": "MC_rg1_clustername1_location1",
    "privateFQDN": "dnsprefix1-aae7e0f0.5cef6058-b6b5-414d-8cb1-4bd14eb0b15c.privatelink.location1.azmk8s.io",
    "provisioningState": "Succeeded",
    "servicePrincipalProfile": {
      "clientId": "clientid"
    },
    "supportPlan": "AKSLongTermSupport",
    "windowsProfile": {
      "adminUsername": "azureuser"
    }
  },
  "sku": {
    "name": "Base",
    "tier": "Premium"
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

狀態碼:: 201

{
  "name": "clustername1",
  "type": "Microsoft.ContainerService/managedClusters",
  "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1",
  "location": "location1",
  "properties": {
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "currentOrchestratorVersion": "1.9.6",
        "enableEncryptionAtHost": true,
        "enableNodePublicIP": true,
        "maxPods": 110,
        "mode": "System",
        "orchestratorVersion": "1.9.6",
        "osType": "Linux",
        "provisioningState": "Creating",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "apiServerAccessProfile": {
      "disableRunCommand": true
    },
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "fqdn": "dnsprefix1-ee788a1f.hcp.location1.azmk8s.io",
    "kubernetesVersion": "1.9.6",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "maxAgentPools": 1,
    "networkProfile": {
      "dnsServiceIP": "10.0.0.10",
      "ipFamilies": [
        "IPv4"
      ],
      "loadBalancerProfile": {
        "allocatedOutboundPorts": 2000,
        "effectiveOutboundIPs": [
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip1"
          },
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip2"
          }
        ],
        "idleTimeoutInMinutes": 10,
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "standard",
      "networkPlugin": "kubenet",
      "outboundType": "loadBalancer",
      "podCidr": "10.244.0.0/16",
      "podCidrs": [
        "10.244.0.0/16"
      ],
      "serviceCidr": "10.0.0.0/16",
      "serviceCidrs": [
        "10.0.0.0/16"
      ]
    },
    "nodeResourceGroup": "MC_rg1_clustername1_location1",
    "privateFQDN": "dnsprefix1-aae7e0f0.5cef6058-b6b5-414d-8cb1-4bd14eb0b15c.privatelink.location1.azmk8s.io",
    "provisioningState": "Creating",
    "servicePrincipalProfile": {
      "clientId": "clientid"
    },
    "supportPlan": "AKSLongTermSupport",
    "windowsProfile": {
      "adminUsername": "azureuser"
    }
  },
  "sku": {
    "name": "Base",
    "tier": "Premium"
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

Create Managed Cluster with Node Public IP Prefix

範例要求

HTTP
Python

PUT https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1?api-version=2026-01-01

{
  "location": "location1",
  "properties": {
    "addonProfiles": {},
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "enableNodePublicIP": true,
        "mode": "System",
        "nodePublicIPPrefixID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Network/publicIPPrefixes/public-ip-prefix",
        "osType": "Linux",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "kubernetesVersion": "",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "networkProfile": {
      "loadBalancerProfile": {
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "standard",
      "outboundType": "loadBalancer"
    },
    "servicePrincipalProfile": {
      "clientId": "clientid",
      "secret": "secret"
    },
    "windowsProfile": {
      "adminPassword": "replacePassword1234$",
      "adminUsername": "azureuser"
    }
  },
  "sku": {
    "name": "Basic",
    "tier": "Free"
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

from azure.identity import DefaultAzureCredential

from azure.mgmt.containerservice import ContainerServiceClient

"""
# PREREQUISITES
    pip install azure-identity
    pip install azure-mgmt-containerservice
# USAGE
    python managed_clusters_create_node_public_ip_prefix.py

    Before run the sample, please set the values of the client ID, tenant ID and client secret
    of the AAD application as environment variables: AZURE_CLIENT_ID, AZURE_TENANT_ID,
    AZURE_CLIENT_SECRET. For more info about how to get the value, please see:
    https://docs.microsoft.com/azure/active-directory/develop/howto-create-service-principal-portal
"""


def main():
    client = ContainerServiceClient(
        credential=DefaultAzureCredential(),
        subscription_id="SUBSCRIPTION_ID",
    )

    response = client.managed_clusters.begin_create_or_update(
        resource_group_name="rg1",
        resource_name="clustername1",
        parameters={
            "location": "location1",
            "properties": {
                "addonProfiles": {},
                "agentPoolProfiles": [
                    {
                        "count": 3,
                        "enableNodePublicIP": True,
                        "mode": "System",
                        "name": "nodepool1",
                        "nodePublicIPPrefixID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Network/publicIPPrefixes/public-ip-prefix",
                        "osType": "Linux",
                        "type": "VirtualMachineScaleSets",
                        "vmSize": "Standard_DS2_v2",
                    }
                ],
                "autoScalerProfile": {"scale-down-delay-after-add": "15m", "scan-interval": "20s"},
                "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
                "dnsPrefix": "dnsprefix1",
                "enableRBAC": True,
                "kubernetesVersion": "",
                "linuxProfile": {"adminUsername": "azureuser", "ssh": {"publicKeys": [{"keyData": "keydata"}]}},
                "networkProfile": {
                    "loadBalancerProfile": {"managedOutboundIPs": {"count": 2}},
                    "loadBalancerSku": "standard",
                    "outboundType": "loadBalancer",
                },
                "servicePrincipalProfile": {"clientId": "clientid", "secret": "secret"},
                "windowsProfile": {"adminPassword": "replacePassword1234$", "adminUsername": "azureuser"},
            },
            "sku": {"name": "Basic", "tier": "Free"},
            "tags": {"archv2": "", "tier": "production"},
        },
    ).result()
    print(response)


# x-ms-original-file: 2026-01-01/ManagedClustersCreate_NodePublicIPPrefix.json
if __name__ == "__main__":
    main()

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

範例回覆

狀態碼:: 200

{
  "name": "clustername1",
  "type": "Microsoft.ContainerService/managedClusters",
  "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1",
  "location": "location1",
  "properties": {
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "currentOrchestratorVersion": "1.9.6",
        "enableNodePublicIP": true,
        "maxPods": 110,
        "mode": "System",
        "nodeImageVersion": "AKSUbuntu:1604:2020.03.11",
        "nodePublicIPPrefixID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Network/publicIPPrefixes/public-ip-prefix",
        "orchestratorVersion": "1.9.6",
        "osType": "Linux",
        "provisioningState": "Succeeded",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "currentKubernetesVersion": "1.9.6",
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "fqdn": "dnsprefix1-abcd1234.hcp.eastus.azmk8s.io",
    "kubernetesVersion": "1.9.6",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "maxAgentPools": 1,
    "networkProfile": {
      "dnsServiceIP": "10.0.0.10",
      "ipFamilies": [
        "IPv4"
      ],
      "loadBalancerProfile": {
        "allocatedOutboundPorts": 2000,
        "effectiveOutboundIPs": [
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip1"
          },
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip2"
          }
        ],
        "idleTimeoutInMinutes": 10,
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "basic",
      "networkPlugin": "kubenet",
      "outboundType": "loadBalancer",
      "podCidr": "10.244.0.0/16",
      "podCidrs": [
        "10.244.0.0/16"
      ],
      "serviceCidr": "10.0.0.0/16",
      "serviceCidrs": [
        "10.0.0.0/16"
      ]
    },
    "nodeResourceGroup": "MC_rg1_clustername1_location1",
    "provisioningState": "Succeeded",
    "servicePrincipalProfile": {
      "clientId": "clientid"
    },
    "windowsProfile": {
      "adminUsername": "azureuser"
    }
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

狀態碼:: 201

{
  "name": "clustername1",
  "type": "Microsoft.ContainerService/managedClusters",
  "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1",
  "location": "location1",
  "properties": {
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "currentOrchestratorVersion": "1.9.6",
        "enableNodePublicIP": true,
        "maxPods": 110,
        "mode": "System",
        "nodePublicIPPrefixID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Network/publicIPPrefixes/public-ip-prefix",
        "orchestratorVersion": "1.9.6",
        "osType": "Linux",
        "provisioningState": "Creating",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "currentKubernetesVersion": "1.9.6",
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "kubernetesVersion": "1.9.6",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "maxAgentPools": 1,
    "networkProfile": {
      "dnsServiceIP": "10.0.0.10",
      "ipFamilies": [
        "IPv4"
      ],
      "loadBalancerProfile": {
        "allocatedOutboundPorts": 2000,
        "effectiveOutboundIPs": [
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip1"
          },
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip2"
          }
        ],
        "idleTimeoutInMinutes": 10,
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "standard",
      "networkPlugin": "kubenet",
      "outboundType": "loadBalancer",
      "podCidr": "10.244.0.0/16",
      "podCidrs": [
        "10.244.0.0/16"
      ],
      "serviceCidr": "10.0.0.0/16",
      "serviceCidrs": [
        "10.0.0.0/16"
      ]
    },
    "nodeResourceGroup": "MC_rg1_clustername1_location1",
    "provisioningState": "Creating",
    "servicePrincipalProfile": {
      "clientId": "clientid"
    },
    "windowsProfile": {
      "adminUsername": "azureuser"
    }
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

Create Managed Cluster with OSSKU

範例要求

HTTP
Python

PUT https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1?api-version=2026-01-01

{
  "location": "location1",
  "properties": {
    "addonProfiles": {},
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "enableNodePublicIP": true,
        "mode": "System",
        "osSKU": "AzureLinux",
        "osType": "Linux",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "httpProxyConfig": {
      "httpProxy": "http://myproxy.server.com:8080",
      "httpsProxy": "https://myproxy.server.com:8080",
      "noProxy": [
        "localhost",
        "127.0.0.1"
      ],
      "trustedCa": "Q29uZ3JhdHMhIFlvdSBoYXZlIGZvdW5kIGEgaGlkZGVuIG1lc3NhZ2U="
    },
    "kubernetesVersion": "",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "networkProfile": {
      "loadBalancerProfile": {
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "standard",
      "outboundType": "loadBalancer"
    },
    "servicePrincipalProfile": {
      "clientId": "clientid",
      "secret": "secret"
    },
    "windowsProfile": {
      "adminPassword": "replacePassword1234$",
      "adminUsername": "azureuser"
    }
  },
  "sku": {
    "name": "Basic",
    "tier": "Free"
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

from azure.identity import DefaultAzureCredential

from azure.mgmt.containerservice import ContainerServiceClient

"""
# PREREQUISITES
    pip install azure-identity
    pip install azure-mgmt-containerservice
# USAGE
    python managed_clusters_create_ossku.py

    Before run the sample, please set the values of the client ID, tenant ID and client secret
    of the AAD application as environment variables: AZURE_CLIENT_ID, AZURE_TENANT_ID,
    AZURE_CLIENT_SECRET. For more info about how to get the value, please see:
    https://docs.microsoft.com/azure/active-directory/develop/howto-create-service-principal-portal
"""


def main():
    client = ContainerServiceClient(
        credential=DefaultAzureCredential(),
        subscription_id="SUBSCRIPTION_ID",
    )

    response = client.managed_clusters.begin_create_or_update(
        resource_group_name="rg1",
        resource_name="clustername1",
        parameters={
            "location": "location1",
            "properties": {
                "addonProfiles": {},
                "agentPoolProfiles": [
                    {
                        "count": 3,
                        "enableNodePublicIP": True,
                        "mode": "System",
                        "name": "nodepool1",
                        "osSKU": "AzureLinux",
                        "osType": "Linux",
                        "type": "VirtualMachineScaleSets",
                        "vmSize": "Standard_DS2_v2",
                    }
                ],
                "autoScalerProfile": {"scale-down-delay-after-add": "15m", "scan-interval": "20s"},
                "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
                "dnsPrefix": "dnsprefix1",
                "enableRBAC": True,
                "httpProxyConfig": {
                    "httpProxy": "http://myproxy.server.com:8080",
                    "httpsProxy": "https://myproxy.server.com:8080",
                    "noProxy": ["localhost", "127.0.0.1"],
                    "trustedCa": "Q29uZ3JhdHMhIFlvdSBoYXZlIGZvdW5kIGEgaGlkZGVuIG1lc3NhZ2U=",
                },
                "kubernetesVersion": "",
                "linuxProfile": {"adminUsername": "azureuser", "ssh": {"publicKeys": [{"keyData": "keydata"}]}},
                "networkProfile": {
                    "loadBalancerProfile": {"managedOutboundIPs": {"count": 2}},
                    "loadBalancerSku": "standard",
                    "outboundType": "loadBalancer",
                },
                "servicePrincipalProfile": {"clientId": "clientid", "secret": "secret"},
                "windowsProfile": {"adminPassword": "replacePassword1234$", "adminUsername": "azureuser"},
            },
            "sku": {"name": "Basic", "tier": "Free"},
            "tags": {"archv2": "", "tier": "production"},
        },
    ).result()
    print(response)


# x-ms-original-file: 2026-01-01/ManagedClustersCreate_OSSKU.json
if __name__ == "__main__":
    main()

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

範例回覆

狀態碼:: 200

{
  "name": "clustername1",
  "type": "Microsoft.ContainerService/managedClusters",
  "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1",
  "location": "location1",
  "properties": {
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "currentOrchestratorVersion": "1.9.6",
        "enableNodePublicIP": true,
        "maxPods": 110,
        "mode": "System",
        "nodeImageVersion": "AKSUbuntu:1604:2020.03.11",
        "orchestratorVersion": "1.9.6",
        "osSKU": "AzureLinux",
        "osType": "Linux",
        "provisioningState": "Succeeded",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "currentKubernetesVersion": "1.9.6",
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "fqdn": "dnsprefix1-abcd1234.hcp.eastus.azmk8s.io",
    "httpProxyConfig": {
      "httpProxy": "http://myproxy.server.com:8080",
      "httpsProxy": "https://myproxy.server.com:8080",
      "noProxy": [
        "localhost",
        "127.0.0.1"
      ],
      "trustedCa": "Q29uZ3JhdHMhIFlvdSBoYXZlIGZvdW5kIGEgaGlkZGVuIG1lc3NhZ2U="
    },
    "kubernetesVersion": "1.9.6",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "maxAgentPools": 1,
    "networkProfile": {
      "dnsServiceIP": "10.0.0.10",
      "ipFamilies": [
        "IPv4"
      ],
      "loadBalancerProfile": {
        "allocatedOutboundPorts": 2000,
        "effectiveOutboundIPs": [
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip1"
          },
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip2"
          }
        ],
        "idleTimeoutInMinutes": 10,
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "basic",
      "networkPlugin": "kubenet",
      "outboundType": "loadBalancer",
      "podCidr": "10.244.0.0/16",
      "podCidrs": [
        "10.244.0.0/16"
      ],
      "serviceCidr": "10.0.0.0/16",
      "serviceCidrs": [
        "10.0.0.0/16"
      ]
    },
    "nodeResourceGroup": "MC_rg1_clustername1_location1",
    "provisioningState": "Succeeded",
    "servicePrincipalProfile": {
      "clientId": "clientid"
    },
    "windowsProfile": {
      "adminUsername": "azureuser"
    }
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

狀態碼:: 201

{
  "name": "clustername1",
  "type": "Microsoft.ContainerService/managedClusters",
  "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1",
  "location": "location1",
  "properties": {
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "currentOrchestratorVersion": "1.9.6",
        "enableNodePublicIP": true,
        "maxPods": 110,
        "mode": "System",
        "orchestratorVersion": "1.9.6",
        "osSKU": "AzureLinux",
        "osType": "Linux",
        "provisioningState": "Creating",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "currentKubernetesVersion": "1.9.6",
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "httpProxyConfig": {
      "httpProxy": "http://myproxy.server.com:8080",
      "httpsProxy": "https://myproxy.server.com:8080",
      "noProxy": [
        "localhost",
        "127.0.0.1"
      ],
      "trustedCa": "Q29uZ3JhdHMhIFlvdSBoYXZlIGZvdW5kIGEgaGlkZGVuIG1lc3NhZ2U="
    },
    "kubernetesVersion": "1.9.6",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "maxAgentPools": 1,
    "networkProfile": {
      "dnsServiceIP": "10.0.0.10",
      "ipFamilies": [
        "IPv4"
      ],
      "loadBalancerProfile": {
        "allocatedOutboundPorts": 2000,
        "effectiveOutboundIPs": [
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip1"
          },
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip2"
          }
        ],
        "idleTimeoutInMinutes": 10,
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "standard",
      "networkPlugin": "kubenet",
      "outboundType": "loadBalancer",
      "podCidr": "10.244.0.0/16",
      "podCidrs": [
        "10.244.0.0/16"
      ],
      "serviceCidr": "10.0.0.0/16",
      "serviceCidrs": [
        "10.0.0.0/16"
      ]
    },
    "nodeResourceGroup": "MC_rg1_clustername1_location1",
    "provisioningState": "Creating",
    "servicePrincipalProfile": {
      "clientId": "clientid"
    },
    "windowsProfile": {
      "adminUsername": "azureuser"
    }
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

Create Managed Cluster with PodIdentity enabled

範例要求

HTTP
Python

PUT https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1?api-version=2026-01-01

{
  "location": "location1",
  "properties": {
    "addonProfiles": {},
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "enableNodePublicIP": true,
        "mode": "System",
        "osType": "Linux",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "kubernetesVersion": "",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "networkProfile": {
      "loadBalancerProfile": {
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "standard",
      "outboundType": "loadBalancer"
    },
    "podIdentityProfile": {
      "allowNetworkPluginKubenet": true,
      "enabled": true
    },
    "servicePrincipalProfile": {
      "clientId": "clientid",
      "secret": "secret"
    },
    "windowsProfile": {
      "adminPassword": "replacePassword1234$",
      "adminUsername": "azureuser"
    }
  },
  "sku": {
    "name": "Basic",
    "tier": "Free"
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

from azure.identity import DefaultAzureCredential

from azure.mgmt.containerservice import ContainerServiceClient

"""
# PREREQUISITES
    pip install azure-identity
    pip install azure-mgmt-containerservice
# USAGE
    python managed_clusters_create_pod_identity.py

    Before run the sample, please set the values of the client ID, tenant ID and client secret
    of the AAD application as environment variables: AZURE_CLIENT_ID, AZURE_TENANT_ID,
    AZURE_CLIENT_SECRET. For more info about how to get the value, please see:
    https://docs.microsoft.com/azure/active-directory/develop/howto-create-service-principal-portal
"""


def main():
    client = ContainerServiceClient(
        credential=DefaultAzureCredential(),
        subscription_id="SUBSCRIPTION_ID",
    )

    response = client.managed_clusters.begin_create_or_update(
        resource_group_name="rg1",
        resource_name="clustername1",
        parameters={
            "location": "location1",
            "properties": {
                "addonProfiles": {},
                "agentPoolProfiles": [
                    {
                        "count": 3,
                        "enableNodePublicIP": True,
                        "mode": "System",
                        "name": "nodepool1",
                        "osType": "Linux",
                        "type": "VirtualMachineScaleSets",
                        "vmSize": "Standard_DS2_v2",
                    }
                ],
                "autoScalerProfile": {"scale-down-delay-after-add": "15m", "scan-interval": "20s"},
                "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
                "dnsPrefix": "dnsprefix1",
                "enableRBAC": True,
                "kubernetesVersion": "",
                "linuxProfile": {"adminUsername": "azureuser", "ssh": {"publicKeys": [{"keyData": "keydata"}]}},
                "networkProfile": {
                    "loadBalancerProfile": {"managedOutboundIPs": {"count": 2}},
                    "loadBalancerSku": "standard",
                    "outboundType": "loadBalancer",
                },
                "podIdentityProfile": {"allowNetworkPluginKubenet": True, "enabled": True},
                "servicePrincipalProfile": {"clientId": "clientid", "secret": "secret"},
                "windowsProfile": {"adminPassword": "replacePassword1234$", "adminUsername": "azureuser"},
            },
            "sku": {"name": "Basic", "tier": "Free"},
            "tags": {"archv2": "", "tier": "production"},
        },
    ).result()
    print(response)


# x-ms-original-file: 2026-01-01/ManagedClustersCreate_PodIdentity.json
if __name__ == "__main__":
    main()

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

範例回覆

狀態碼:: 200

{
  "name": "clustername1",
  "type": "Microsoft.ContainerService/managedClusters",
  "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1",
  "location": "location1",
  "properties": {
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "currentOrchestratorVersion": "1.9.6",
        "enableNodePublicIP": true,
        "maxPods": 110,
        "mode": "System",
        "nodeImageVersion": "AKSUbuntu:1604:2020.03.11",
        "orchestratorVersion": "1.9.6",
        "osType": "Linux",
        "provisioningState": "Succeeded",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "currentKubernetesVersion": "1.9.6",
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "fqdn": "dnsprefix1-abcd1234.hcp.eastus.azmk8s.io",
    "kubernetesVersion": "1.9.6",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "maxAgentPools": 1,
    "networkProfile": {
      "dnsServiceIP": "10.0.0.10",
      "ipFamilies": [
        "IPv4"
      ],
      "loadBalancerProfile": {
        "allocatedOutboundPorts": 2000,
        "effectiveOutboundIPs": [
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip1"
          },
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip2"
          }
        ],
        "idleTimeoutInMinutes": 10,
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "basic",
      "networkPlugin": "kubenet",
      "outboundType": "loadBalancer",
      "podCidr": "10.244.0.0/16",
      "podCidrs": [
        "10.244.0.0/16"
      ],
      "serviceCidr": "10.0.0.0/16",
      "serviceCidrs": [
        "10.0.0.0/16"
      ]
    },
    "nodeResourceGroup": "MC_rg1_clustername1_location1",
    "podIdentityProfile": {
      "allowNetworkPluginKubenet": true,
      "enabled": true
    },
    "provisioningState": "Succeeded",
    "servicePrincipalProfile": {
      "clientId": "clientid"
    },
    "windowsProfile": {
      "adminUsername": "azureuser"
    }
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

狀態碼:: 201

{
  "name": "clustername1",
  "type": "Microsoft.ContainerService/managedClusters",
  "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1",
  "location": "location1",
  "properties": {
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "currentOrchestratorVersion": "1.9.6",
        "enableNodePublicIP": true,
        "maxPods": 110,
        "mode": "System",
        "orchestratorVersion": "1.9.6",
        "osType": "Linux",
        "provisioningState": "Creating",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "currentKubernetesVersion": "1.9.6",
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "kubernetesVersion": "1.9.6",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "maxAgentPools": 1,
    "networkProfile": {
      "dnsServiceIP": "10.0.0.10",
      "ipFamilies": [
        "IPv4"
      ],
      "loadBalancerProfile": {
        "allocatedOutboundPorts": 2000,
        "effectiveOutboundIPs": [
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip1"
          },
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip2"
          }
        ],
        "idleTimeoutInMinutes": 10,
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "standard",
      "networkPlugin": "kubenet",
      "outboundType": "loadBalancer",
      "podCidr": "10.244.0.0/16",
      "podCidrs": [
        "10.244.0.0/16"
      ],
      "serviceCidr": "10.0.0.0/16",
      "serviceCidrs": [
        "10.0.0.0/16"
      ]
    },
    "nodeResourceGroup": "MC_rg1_clustername1_location1",
    "podIdentityProfile": {
      "allowNetworkPluginKubenet": true,
      "enabled": true
    },
    "provisioningState": "Creating",
    "servicePrincipalProfile": {
      "clientId": "clientid"
    },
    "windowsProfile": {
      "adminUsername": "azureuser"
    }
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

Create Managed Cluster with PPG

範例要求

HTTP
Python

PUT https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1?api-version=2026-01-01

{
  "location": "location1",
  "properties": {
    "addonProfiles": {},
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "enableNodePublicIP": true,
        "mode": "System",
        "osType": "Linux",
        "proximityPlacementGroupID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/proximityPlacementGroups/ppg1",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "kubernetesVersion": "",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "networkProfile": {
      "loadBalancerProfile": {
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "standard",
      "outboundType": "loadBalancer"
    },
    "servicePrincipalProfile": {
      "clientId": "clientid",
      "secret": "secret"
    },
    "windowsProfile": {
      "adminPassword": "replacePassword1234$",
      "adminUsername": "azureuser"
    }
  },
  "sku": {
    "name": "Basic",
    "tier": "Free"
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

from azure.identity import DefaultAzureCredential

from azure.mgmt.containerservice import ContainerServiceClient

"""
# PREREQUISITES
    pip install azure-identity
    pip install azure-mgmt-containerservice
# USAGE
    python managed_clusters_create_ppg.py

    Before run the sample, please set the values of the client ID, tenant ID and client secret
    of the AAD application as environment variables: AZURE_CLIENT_ID, AZURE_TENANT_ID,
    AZURE_CLIENT_SECRET. For more info about how to get the value, please see:
    https://docs.microsoft.com/azure/active-directory/develop/howto-create-service-principal-portal
"""


def main():
    client = ContainerServiceClient(
        credential=DefaultAzureCredential(),
        subscription_id="SUBSCRIPTION_ID",
    )

    response = client.managed_clusters.begin_create_or_update(
        resource_group_name="rg1",
        resource_name="clustername1",
        parameters={
            "location": "location1",
            "properties": {
                "addonProfiles": {},
                "agentPoolProfiles": [
                    {
                        "count": 3,
                        "enableNodePublicIP": True,
                        "mode": "System",
                        "name": "nodepool1",
                        "osType": "Linux",
                        "proximityPlacementGroupID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/proximityPlacementGroups/ppg1",
                        "type": "VirtualMachineScaleSets",
                        "vmSize": "Standard_DS2_v2",
                    }
                ],
                "autoScalerProfile": {"scale-down-delay-after-add": "15m", "scan-interval": "20s"},
                "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
                "dnsPrefix": "dnsprefix1",
                "enableRBAC": True,
                "kubernetesVersion": "",
                "linuxProfile": {"adminUsername": "azureuser", "ssh": {"publicKeys": [{"keyData": "keydata"}]}},
                "networkProfile": {
                    "loadBalancerProfile": {"managedOutboundIPs": {"count": 2}},
                    "loadBalancerSku": "standard",
                    "outboundType": "loadBalancer",
                },
                "servicePrincipalProfile": {"clientId": "clientid", "secret": "secret"},
                "windowsProfile": {"adminPassword": "replacePassword1234$", "adminUsername": "azureuser"},
            },
            "sku": {"name": "Basic", "tier": "Free"},
            "tags": {"archv2": "", "tier": "production"},
        },
    ).result()
    print(response)


# x-ms-original-file: 2026-01-01/ManagedClustersCreate_PPG.json
if __name__ == "__main__":
    main()

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

範例回覆

狀態碼:: 200

{
  "name": "clustername1",
  "type": "Microsoft.ContainerService/managedClusters",
  "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1",
  "location": "location1",
  "properties": {
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "currentOrchestratorVersion": "1.9.6",
        "enableNodePublicIP": true,
        "maxPods": 110,
        "mode": "System",
        "nodeImageVersion": "AKSUbuntu:1604:2020.03.11",
        "orchestratorVersion": "1.9.6",
        "osType": "Linux",
        "provisioningState": "Succeeded",
        "proximityPlacementGroupID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/proximityPlacementGroups/ppg1",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "currentKubernetesVersion": "1.9.6",
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "fqdn": "dnsprefix1-abcd1234.hcp.eastus.azmk8s.io",
    "kubernetesVersion": "1.9.6",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "maxAgentPools": 1,
    "networkProfile": {
      "dnsServiceIP": "10.0.0.10",
      "ipFamilies": [
        "IPv4"
      ],
      "loadBalancerProfile": {
        "allocatedOutboundPorts": 2000,
        "effectiveOutboundIPs": [
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip1"
          },
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip2"
          }
        ],
        "idleTimeoutInMinutes": 10,
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "basic",
      "networkPlugin": "kubenet",
      "outboundType": "loadBalancer",
      "podCidr": "10.244.0.0/16",
      "podCidrs": [
        "10.244.0.0/16"
      ],
      "serviceCidr": "10.0.0.0/16",
      "serviceCidrs": [
        "10.0.0.0/16"
      ]
    },
    "nodeResourceGroup": "MC_rg1_clustername1_location1",
    "provisioningState": "Succeeded",
    "servicePrincipalProfile": {
      "clientId": "clientid"
    },
    "windowsProfile": {
      "adminUsername": "azureuser"
    }
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

狀態碼:: 201

{
  "name": "clustername1",
  "type": "Microsoft.ContainerService/managedClusters",
  "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1",
  "location": "location1",
  "properties": {
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "currentOrchestratorVersion": "1.9.6",
        "enableNodePublicIP": true,
        "maxPods": 110,
        "mode": "System",
        "orchestratorVersion": "1.9.6",
        "osType": "Linux",
        "provisioningState": "Creating",
        "proximityPlacementGroupID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/proximityPlacementGroups/ppg1",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "currentKubernetesVersion": "1.9.6",
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "kubernetesVersion": "1.9.6",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "maxAgentPools": 1,
    "networkProfile": {
      "dnsServiceIP": "10.0.0.10",
      "ipFamilies": [
        "IPv4"
      ],
      "loadBalancerProfile": {
        "allocatedOutboundPorts": 2000,
        "effectiveOutboundIPs": [
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip1"
          },
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip2"
          }
        ],
        "idleTimeoutInMinutes": 10,
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "standard",
      "networkPlugin": "kubenet",
      "outboundType": "loadBalancer",
      "podCidr": "10.244.0.0/16",
      "podCidrs": [
        "10.244.0.0/16"
      ],
      "serviceCidr": "10.0.0.0/16",
      "serviceCidrs": [
        "10.0.0.0/16"
      ]
    },
    "nodeResourceGroup": "MC_rg1_clustername1_location1",
    "provisioningState": "Creating",
    "servicePrincipalProfile": {
      "clientId": "clientid"
    },
    "windowsProfile": {
      "adminUsername": "azureuser"
    }
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

Create Managed Cluster with RunCommand disabled

範例要求

HTTP
Python

PUT https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1?api-version=2026-01-01

{
  "location": "location1",
  "properties": {
    "addonProfiles": {},
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "enableEncryptionAtHost": true,
        "enableNodePublicIP": true,
        "mode": "System",
        "osType": "Linux",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "apiServerAccessProfile": {
      "disableRunCommand": true
    },
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "kubernetesVersion": "",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "networkProfile": {
      "loadBalancerProfile": {
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "standard",
      "outboundType": "loadBalancer"
    },
    "servicePrincipalProfile": {
      "clientId": "clientid",
      "secret": "secret"
    },
    "windowsProfile": {
      "adminPassword": "replacePassword1234$",
      "adminUsername": "azureuser"
    }
  },
  "sku": {
    "name": "Basic",
    "tier": "Free"
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

from azure.identity import DefaultAzureCredential

from azure.mgmt.containerservice import ContainerServiceClient

"""
# PREREQUISITES
    pip install azure-identity
    pip install azure-mgmt-containerservice
# USAGE
    python managed_clusters_create_disable_run_command.py

    Before run the sample, please set the values of the client ID, tenant ID and client secret
    of the AAD application as environment variables: AZURE_CLIENT_ID, AZURE_TENANT_ID,
    AZURE_CLIENT_SECRET. For more info about how to get the value, please see:
    https://docs.microsoft.com/azure/active-directory/develop/howto-create-service-principal-portal
"""


def main():
    client = ContainerServiceClient(
        credential=DefaultAzureCredential(),
        subscription_id="SUBSCRIPTION_ID",
    )

    response = client.managed_clusters.begin_create_or_update(
        resource_group_name="rg1",
        resource_name="clustername1",
        parameters={
            "location": "location1",
            "properties": {
                "addonProfiles": {},
                "agentPoolProfiles": [
                    {
                        "count": 3,
                        "enableEncryptionAtHost": True,
                        "enableNodePublicIP": True,
                        "mode": "System",
                        "name": "nodepool1",
                        "osType": "Linux",
                        "type": "VirtualMachineScaleSets",
                        "vmSize": "Standard_DS2_v2",
                    }
                ],
                "apiServerAccessProfile": {"disableRunCommand": True},
                "autoScalerProfile": {"scale-down-delay-after-add": "15m", "scan-interval": "20s"},
                "dnsPrefix": "dnsprefix1",
                "enableRBAC": True,
                "kubernetesVersion": "",
                "linuxProfile": {"adminUsername": "azureuser", "ssh": {"publicKeys": [{"keyData": "keydata"}]}},
                "networkProfile": {
                    "loadBalancerProfile": {"managedOutboundIPs": {"count": 2}},
                    "loadBalancerSku": "standard",
                    "outboundType": "loadBalancer",
                },
                "servicePrincipalProfile": {"clientId": "clientid", "secret": "secret"},
                "windowsProfile": {"adminPassword": "replacePassword1234$", "adminUsername": "azureuser"},
            },
            "sku": {"name": "Basic", "tier": "Free"},
            "tags": {"archv2": "", "tier": "production"},
        },
    ).result()
    print(response)


# x-ms-original-file: 2026-01-01/ManagedClustersCreate_DisableRunCommand.json
if __name__ == "__main__":
    main()

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

範例回覆

狀態碼:: 200

{
  "name": "clustername1",
  "type": "Microsoft.ContainerService/managedClusters",
  "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1",
  "location": "location1",
  "properties": {
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "currentOrchestratorVersion": "1.9.6",
        "enableEncryptionAtHost": true,
        "enableNodePublicIP": true,
        "maxPods": 110,
        "mode": "System",
        "nodeImageVersion": "AKSUbuntu:1604:2020.03.11",
        "orchestratorVersion": "1.9.6",
        "osType": "Linux",
        "provisioningState": "Succeeded",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "apiServerAccessProfile": {
      "disableRunCommand": true
    },
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "currentKubernetesVersion": "1.9.6",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "fqdn": "dnsprefix1-ee788a1f.hcp.location1.azmk8s.io",
    "kubernetesVersion": "1.9.6",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "maxAgentPools": 1,
    "networkProfile": {
      "dnsServiceIP": "10.0.0.10",
      "ipFamilies": [
        "IPv4"
      ],
      "loadBalancerProfile": {
        "allocatedOutboundPorts": 2000,
        "effectiveOutboundIPs": [
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip1"
          },
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip2"
          }
        ],
        "idleTimeoutInMinutes": 10,
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "basic",
      "networkPlugin": "kubenet",
      "outboundType": "loadBalancer",
      "podCidr": "10.244.0.0/16",
      "podCidrs": [
        "10.244.0.0/16"
      ],
      "serviceCidr": "10.0.0.0/16",
      "serviceCidrs": [
        "10.0.0.0/16"
      ]
    },
    "nodeResourceGroup": "MC_rg1_clustername1_location1",
    "privateFQDN": "dnsprefix1-aae7e0f0.5cef6058-b6b5-414d-8cb1-4bd14eb0b15c.privatelink.location1.azmk8s.io",
    "provisioningState": "Succeeded",
    "servicePrincipalProfile": {
      "clientId": "clientid"
    },
    "supportPlan": "KubernetesOfficial",
    "windowsProfile": {
      "adminUsername": "azureuser"
    }
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

狀態碼:: 201

{
  "name": "clustername1",
  "type": "Microsoft.ContainerService/managedClusters",
  "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1",
  "location": "location1",
  "properties": {
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "currentOrchestratorVersion": "1.9.6",
        "enableEncryptionAtHost": true,
        "enableNodePublicIP": true,
        "maxPods": 110,
        "mode": "System",
        "orchestratorVersion": "1.9.6",
        "osType": "Linux",
        "provisioningState": "Creating",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "apiServerAccessProfile": {
      "disableRunCommand": true
    },
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "currentKubernetesVersion": "1.9.6",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "fqdn": "dnsprefix1-ee788a1f.hcp.location1.azmk8s.io",
    "kubernetesVersion": "1.9.6",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "maxAgentPools": 1,
    "networkProfile": {
      "dnsServiceIP": "10.0.0.10",
      "ipFamilies": [
        "IPv4"
      ],
      "loadBalancerProfile": {
        "allocatedOutboundPorts": 2000,
        "effectiveOutboundIPs": [
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip1"
          },
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip2"
          }
        ],
        "idleTimeoutInMinutes": 10,
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "standard",
      "networkPlugin": "kubenet",
      "outboundType": "loadBalancer",
      "podCidr": "10.244.0.0/16",
      "podCidrs": [
        "10.244.0.0/16"
      ],
      "serviceCidr": "10.0.0.0/16",
      "serviceCidrs": [
        "10.0.0.0/16"
      ]
    },
    "nodeResourceGroup": "MC_rg1_clustername1_location1",
    "privateFQDN": "dnsprefix1-aae7e0f0.5cef6058-b6b5-414d-8cb1-4bd14eb0b15c.privatelink.location1.azmk8s.io",
    "provisioningState": "Creating",
    "servicePrincipalProfile": {
      "clientId": "clientid"
    },
    "supportPlan": "KubernetesOfficial",
    "windowsProfile": {
      "adminUsername": "azureuser"
    }
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

Create Managed Cluster with Security Profile configured

範例要求

HTTP
Python

PUT https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1?api-version=2026-01-01

{
  "location": "location1",
  "properties": {
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "enableNodePublicIP": true,
        "mode": "System",
        "osType": "Linux",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "dnsPrefix": "dnsprefix1",
    "kubernetesVersion": "",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "networkProfile": {
      "loadBalancerProfile": {
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "standard",
      "outboundType": "loadBalancer"
    },
    "securityProfile": {
      "defender": {
        "logAnalyticsWorkspaceResourceId": "/subscriptions/SUB_ID/resourceGroups/RG_NAME/providers/microsoft.operationalinsights/workspaces/WORKSPACE_NAME",
        "securityMonitoring": {
          "enabled": true
        }
      },
      "workloadIdentity": {
        "enabled": true
      }
    }
  },
  "sku": {
    "name": "Basic",
    "tier": "Free"
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

from azure.identity import DefaultAzureCredential

from azure.mgmt.containerservice import ContainerServiceClient

"""
# PREREQUISITES
    pip install azure-identity
    pip install azure-mgmt-containerservice
# USAGE
    python managed_clusters_create_security_profile.py

    Before run the sample, please set the values of the client ID, tenant ID and client secret
    of the AAD application as environment variables: AZURE_CLIENT_ID, AZURE_TENANT_ID,
    AZURE_CLIENT_SECRET. For more info about how to get the value, please see:
    https://docs.microsoft.com/azure/active-directory/develop/howto-create-service-principal-portal
"""


def main():
    client = ContainerServiceClient(
        credential=DefaultAzureCredential(),
        subscription_id="SUBSCRIPTION_ID",
    )

    response = client.managed_clusters.begin_create_or_update(
        resource_group_name="rg1",
        resource_name="clustername1",
        parameters={
            "location": "location1",
            "properties": {
                "agentPoolProfiles": [
                    {
                        "count": 3,
                        "enableNodePublicIP": True,
                        "mode": "System",
                        "name": "nodepool1",
                        "osType": "Linux",
                        "type": "VirtualMachineScaleSets",
                        "vmSize": "Standard_DS2_v2",
                    }
                ],
                "dnsPrefix": "dnsprefix1",
                "kubernetesVersion": "",
                "linuxProfile": {"adminUsername": "azureuser", "ssh": {"publicKeys": [{"keyData": "keydata"}]}},
                "networkProfile": {
                    "loadBalancerProfile": {"managedOutboundIPs": {"count": 2}},
                    "loadBalancerSku": "standard",
                    "outboundType": "loadBalancer",
                },
                "securityProfile": {
                    "defender": {
                        "logAnalyticsWorkspaceResourceId": "/subscriptions/SUB_ID/resourceGroups/RG_NAME/providers/microsoft.operationalinsights/workspaces/WORKSPACE_NAME",
                        "securityMonitoring": {"enabled": True},
                    },
                    "workloadIdentity": {"enabled": True},
                },
            },
            "sku": {"name": "Basic", "tier": "Free"},
            "tags": {"archv2": "", "tier": "production"},
        },
    ).result()
    print(response)


# x-ms-original-file: 2026-01-01/ManagedClustersCreate_SecurityProfile.json
if __name__ == "__main__":
    main()

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

範例回覆

狀態碼:: 200

{
  "name": "clustername1",
  "type": "Microsoft.ContainerService/managedClusters",
  "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1",
  "location": "location1",
  "properties": {
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "currentOrchestratorVersion": "1.9.6",
        "enableNodePublicIP": true,
        "maxPods": 110,
        "mode": "System",
        "nodeImageVersion": "AKSUbuntu:1604:2020.03.11",
        "orchestratorVersion": "1.9.6",
        "osType": "Linux",
        "provisioningState": "Succeeded",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "currentKubernetesVersion": "1.9.6",
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "fqdn": "dnsprefix1-abcd1234.hcp.eastus.azmk8s.io",
    "kubernetesVersion": "1.9.6",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "maxAgentPools": 1,
    "networkProfile": {
      "dnsServiceIP": "10.0.0.10",
      "ipFamilies": [
        "IPv4"
      ],
      "loadBalancerProfile": {
        "allocatedOutboundPorts": 2000,
        "effectiveOutboundIPs": [
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip1"
          },
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip2"
          }
        ],
        "idleTimeoutInMinutes": 10,
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "basic",
      "networkPlugin": "kubenet",
      "outboundType": "loadBalancer",
      "podCidr": "10.244.0.0/16",
      "podCidrs": [
        "10.244.0.0/16"
      ],
      "serviceCidr": "10.0.0.0/16",
      "serviceCidrs": [
        "10.0.0.0/16"
      ]
    },
    "nodeResourceGroup": "MC_rg1_clustername1_location1",
    "provisioningState": "Succeeded",
    "securityProfile": {
      "defender": {
        "logAnalyticsWorkspaceResourceId": "/subscriptions/SUB_ID/resourceGroups/RG_NAME/providers/microsoft.operationalinsights/workspaces/WORKSPACE_NAME",
        "securityMonitoring": {
          "enabled": true
        }
      },
      "workloadIdentity": {
        "enabled": true
      }
    },
    "servicePrincipalProfile": {
      "clientId": "clientid"
    },
    "windowsProfile": {
      "adminUsername": "azureuser"
    }
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

狀態碼:: 201

{
  "name": "clustername1",
  "type": "Microsoft.ContainerService/managedClusters",
  "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1",
  "location": "location1",
  "properties": {
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "currentOrchestratorVersion": "1.9.6",
        "enableNodePublicIP": true,
        "maxPods": 110,
        "mode": "System",
        "orchestratorVersion": "1.9.6",
        "osType": "Linux",
        "provisioningState": "Creating",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "currentKubernetesVersion": "1.9.6",
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "kubernetesVersion": "1.9.6",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "maxAgentPools": 1,
    "networkProfile": {
      "dnsServiceIP": "10.0.0.10",
      "ipFamilies": [
        "IPv4"
      ],
      "loadBalancerProfile": {
        "allocatedOutboundPorts": 2000,
        "effectiveOutboundIPs": [
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip1"
          },
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip2"
          }
        ],
        "idleTimeoutInMinutes": 10,
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "standard",
      "networkPlugin": "kubenet",
      "outboundType": "loadBalancer",
      "podCidr": "10.244.0.0/16",
      "podCidrs": [
        "10.244.0.0/16"
      ],
      "serviceCidr": "10.0.0.0/16",
      "serviceCidrs": [
        "10.0.0.0/16"
      ]
    },
    "nodeResourceGroup": "MC_rg1_clustername1_location1",
    "provisioningState": "Creating",
    "securityProfile": {
      "defender": {
        "logAnalyticsWorkspaceResourceId": "/subscriptions/SUB_ID/resourceGroups/RG_NAME/providers/microsoft.operationalinsights/workspaces/WORKSPACE_NAME",
        "securityMonitoring": {
          "enabled": true
        }
      },
      "workloadIdentity": {
        "enabled": true
      }
    },
    "servicePrincipalProfile": {
      "clientId": "clientid"
    },
    "windowsProfile": {
      "adminUsername": "azureuser"
    }
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

Create Managed Cluster with UltraSSD enabled

範例要求

HTTP
Python

PUT https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1?api-version=2026-01-01

{
  "location": "location1",
  "properties": {
    "addonProfiles": {},
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "enableNodePublicIP": true,
        "enableUltraSSD": true,
        "mode": "System",
        "osType": "Linux",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "kubernetesVersion": "",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "networkProfile": {
      "loadBalancerProfile": {
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "standard",
      "outboundType": "loadBalancer"
    },
    "servicePrincipalProfile": {
      "clientId": "clientid",
      "secret": "secret"
    },
    "windowsProfile": {
      "adminPassword": "replacePassword1234$",
      "adminUsername": "azureuser"
    }
  },
  "sku": {
    "name": "Basic",
    "tier": "Free"
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

from azure.identity import DefaultAzureCredential

from azure.mgmt.containerservice import ContainerServiceClient

"""
# PREREQUISITES
    pip install azure-identity
    pip install azure-mgmt-containerservice
# USAGE
    python managed_clusters_create_enable_ultra_ssd.py

    Before run the sample, please set the values of the client ID, tenant ID and client secret
    of the AAD application as environment variables: AZURE_CLIENT_ID, AZURE_TENANT_ID,
    AZURE_CLIENT_SECRET. For more info about how to get the value, please see:
    https://docs.microsoft.com/azure/active-directory/develop/howto-create-service-principal-portal
"""


def main():
    client = ContainerServiceClient(
        credential=DefaultAzureCredential(),
        subscription_id="SUBSCRIPTION_ID",
    )

    response = client.managed_clusters.begin_create_or_update(
        resource_group_name="rg1",
        resource_name="clustername1",
        parameters={
            "location": "location1",
            "properties": {
                "addonProfiles": {},
                "agentPoolProfiles": [
                    {
                        "count": 3,
                        "enableNodePublicIP": True,
                        "enableUltraSSD": True,
                        "mode": "System",
                        "name": "nodepool1",
                        "osType": "Linux",
                        "type": "VirtualMachineScaleSets",
                        "vmSize": "Standard_DS2_v2",
                    }
                ],
                "autoScalerProfile": {"scale-down-delay-after-add": "15m", "scan-interval": "20s"},
                "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
                "dnsPrefix": "dnsprefix1",
                "enableRBAC": True,
                "kubernetesVersion": "",
                "linuxProfile": {"adminUsername": "azureuser", "ssh": {"publicKeys": [{"keyData": "keydata"}]}},
                "networkProfile": {
                    "loadBalancerProfile": {"managedOutboundIPs": {"count": 2}},
                    "loadBalancerSku": "standard",
                    "outboundType": "loadBalancer",
                },
                "servicePrincipalProfile": {"clientId": "clientid", "secret": "secret"},
                "windowsProfile": {"adminPassword": "replacePassword1234$", "adminUsername": "azureuser"},
            },
            "sku": {"name": "Basic", "tier": "Free"},
            "tags": {"archv2": "", "tier": "production"},
        },
    ).result()
    print(response)


# x-ms-original-file: 2026-01-01/ManagedClustersCreate_EnableUltraSSD.json
if __name__ == "__main__":
    main()

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

範例回覆

狀態碼:: 200

{
  "name": "clustername1",
  "type": "Microsoft.ContainerService/managedClusters",
  "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1",
  "location": "location1",
  "properties": {
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "currentOrchestratorVersion": "1.9.6",
        "enableNodePublicIP": true,
        "enableUltraSSD": true,
        "maxPods": 110,
        "mode": "System",
        "nodeImageVersion": "AKSUbuntu:1604:2020.03.11",
        "orchestratorVersion": "1.9.6",
        "osType": "Linux",
        "provisioningState": "Succeeded",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "currentKubernetesVersion": "1.9.6",
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "fqdn": "dnsprefix1-abcd1234.hcp.eastus.azmk8s.io",
    "kubernetesVersion": "1.9.6",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "maxAgentPools": 1,
    "networkProfile": {
      "dnsServiceIP": "10.0.0.10",
      "ipFamilies": [
        "IPv4"
      ],
      "loadBalancerProfile": {
        "allocatedOutboundPorts": 2000,
        "effectiveOutboundIPs": [
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip1"
          },
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip2"
          }
        ],
        "idleTimeoutInMinutes": 10,
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "basic",
      "networkPlugin": "kubenet",
      "outboundType": "loadBalancer",
      "podCidr": "10.244.0.0/16",
      "podCidrs": [
        "10.244.0.0/16"
      ],
      "serviceCidr": "10.0.0.0/16",
      "serviceCidrs": [
        "10.0.0.0/16"
      ]
    },
    "nodeResourceGroup": "MC_rg1_clustername1_location1",
    "provisioningState": "Succeeded",
    "servicePrincipalProfile": {
      "clientId": "clientid"
    },
    "windowsProfile": {
      "adminUsername": "azureuser"
    }
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

狀態碼:: 201

{
  "name": "clustername1",
  "type": "Microsoft.ContainerService/managedClusters",
  "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1",
  "location": "location1",
  "properties": {
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "currentOrchestratorVersion": "1.9.6",
        "enableNodePublicIP": true,
        "enableUltraSSD": true,
        "maxPods": 110,
        "mode": "System",
        "orchestratorVersion": "1.9.6",
        "osType": "Linux",
        "provisioningState": "Creating",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "currentKubernetesVersion": "1.9.6",
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "kubernetesVersion": "1.9.6",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "maxAgentPools": 1,
    "networkProfile": {
      "dnsServiceIP": "10.0.0.10",
      "ipFamilies": [
        "IPv4"
      ],
      "loadBalancerProfile": {
        "allocatedOutboundPorts": 2000,
        "effectiveOutboundIPs": [
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip1"
          },
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip2"
          }
        ],
        "idleTimeoutInMinutes": 10,
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "standard",
      "networkPlugin": "kubenet",
      "outboundType": "loadBalancer",
      "podCidr": "10.244.0.0/16",
      "podCidrs": [
        "10.244.0.0/16"
      ],
      "serviceCidr": "10.0.0.0/16",
      "serviceCidrs": [
        "10.0.0.0/16"
      ]
    },
    "nodeResourceGroup": "MC_rg1_clustername1_location1",
    "provisioningState": "Creating",
    "servicePrincipalProfile": {
      "clientId": "clientid"
    },
    "windowsProfile": {
      "adminUsername": "azureuser"
    }
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

Create Managed Cluster with user-assigned NAT gateway as outbound type

範例要求

HTTP
Python

PUT https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1?api-version=2026-01-01

{
  "location": "location1",
  "properties": {
    "addonProfiles": {},
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "enableNodePublicIP": false,
        "mode": "System",
        "osType": "Linux",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "kubernetesVersion": "",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "networkProfile": {
      "loadBalancerSku": "standard",
      "outboundType": "userAssignedNATGateway"
    },
    "servicePrincipalProfile": {
      "clientId": "clientid",
      "secret": "secret"
    },
    "windowsProfile": {
      "adminPassword": "replacePassword1234$",
      "adminUsername": "azureuser"
    }
  },
  "sku": {
    "name": "Basic",
    "tier": "Free"
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

from azure.identity import DefaultAzureCredential

from azure.mgmt.containerservice import ContainerServiceClient

"""
# PREREQUISITES
    pip install azure-identity
    pip install azure-mgmt-containerservice
# USAGE
    python managed_clusters_create_user_assigned_nat_gateway.py

    Before run the sample, please set the values of the client ID, tenant ID and client secret
    of the AAD application as environment variables: AZURE_CLIENT_ID, AZURE_TENANT_ID,
    AZURE_CLIENT_SECRET. For more info about how to get the value, please see:
    https://docs.microsoft.com/azure/active-directory/develop/howto-create-service-principal-portal
"""


def main():
    client = ContainerServiceClient(
        credential=DefaultAzureCredential(),
        subscription_id="SUBSCRIPTION_ID",
    )

    response = client.managed_clusters.begin_create_or_update(
        resource_group_name="rg1",
        resource_name="clustername1",
        parameters={
            "location": "location1",
            "properties": {
                "addonProfiles": {},
                "agentPoolProfiles": [
                    {
                        "count": 3,
                        "enableNodePublicIP": False,
                        "mode": "System",
                        "name": "nodepool1",
                        "osType": "Linux",
                        "type": "VirtualMachineScaleSets",
                        "vmSize": "Standard_DS2_v2",
                    }
                ],
                "autoScalerProfile": {"scale-down-delay-after-add": "15m", "scan-interval": "20s"},
                "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
                "dnsPrefix": "dnsprefix1",
                "enableRBAC": True,
                "kubernetesVersion": "",
                "linuxProfile": {"adminUsername": "azureuser", "ssh": {"publicKeys": [{"keyData": "keydata"}]}},
                "networkProfile": {"loadBalancerSku": "standard", "outboundType": "userAssignedNATGateway"},
                "servicePrincipalProfile": {"clientId": "clientid", "secret": "secret"},
                "windowsProfile": {"adminPassword": "replacePassword1234$", "adminUsername": "azureuser"},
            },
            "sku": {"name": "Basic", "tier": "Free"},
            "tags": {"archv2": "", "tier": "production"},
        },
    ).result()
    print(response)


# x-ms-original-file: 2026-01-01/ManagedClustersCreate_UserAssignedNATGateway.json
if __name__ == "__main__":
    main()

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

範例回覆

狀態碼:: 200

{
  "name": "clustername1",
  "type": "Microsoft.ContainerService/managedClusters",
  "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1",
  "location": "location1",
  "properties": {
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "currentOrchestratorVersion": "1.9.6",
        "enableNodePublicIP": false,
        "maxPods": 110,
        "mode": "System",
        "nodeImageVersion": "AKSUbuntu:1604:2020.03.11",
        "orchestratorVersion": "1.9.6",
        "osType": "Linux",
        "provisioningState": "Succeeded",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "currentKubernetesVersion": "1.9.6",
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "fqdn": "dnsprefix1-abcd1234.hcp.eastus.azmk8s.io",
    "kubernetesVersion": "1.9.6",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "maxAgentPools": 1,
    "networkProfile": {
      "dnsServiceIP": "10.0.0.10",
      "loadBalancerSku": "basic",
      "networkPlugin": "kubenet",
      "outboundType": "userAssignedNATGateway",
      "podCidr": "10.244.0.0/16",
      "serviceCidr": "10.0.0.0/16"
    },
    "nodeResourceGroup": "MC_rg1_clustername1_location1",
    "provisioningState": "Succeeded",
    "servicePrincipalProfile": {
      "clientId": "clientid"
    },
    "windowsProfile": {
      "adminUsername": "azureuser"
    }
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

狀態碼:: 201

{
  "name": "clustername1",
  "type": "Microsoft.ContainerService/managedClusters",
  "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1",
  "location": "location1",
  "properties": {
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "currentOrchestratorVersion": "1.9.6",
        "enableNodePublicIP": false,
        "maxPods": 110,
        "mode": "System",
        "orchestratorVersion": "1.9.6",
        "osType": "Linux",
        "provisioningState": "Creating",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "currentKubernetesVersion": "1.9.6",
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "kubernetesVersion": "1.9.6",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "maxAgentPools": 1,
    "networkProfile": {
      "dnsServiceIP": "10.0.0.10",
      "loadBalancerSku": "standard",
      "networkPlugin": "kubenet",
      "outboundType": "userAssignedNATGateway",
      "podCidr": "10.244.0.0/16",
      "serviceCidr": "10.0.0.0/16"
    },
    "nodeResourceGroup": "MC_rg1_clustername1_location1",
    "provisioningState": "Creating",
    "servicePrincipalProfile": {
      "clientId": "clientid"
    },
    "windowsProfile": {
      "adminUsername": "azureuser"
    }
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

Create Managed Cluster with Web App Routing Ingress Profile configured

範例要求

HTTP
Python

PUT https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1?api-version=2026-01-01

{
  "location": "location1",
  "properties": {
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "enableNodePublicIP": true,
        "mode": "System",
        "osType": "Linux",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "dnsPrefix": "dnsprefix1",
    "ingressProfile": {
      "webAppRouting": {
        "dnsZoneResourceIds": [
          "/subscriptions/SUB_ID/resourceGroups/RG_NAME/providers/Microsoft.Network/dnszones/DNS_ZONE_NAME"
        ],
        "enabled": true
      }
    },
    "kubernetesVersion": "",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "networkProfile": {
      "loadBalancerProfile": {
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "standard",
      "outboundType": "loadBalancer"
    }
  },
  "sku": {
    "name": "Basic",
    "tier": "Free"
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

from azure.identity import DefaultAzureCredential

from azure.mgmt.containerservice import ContainerServiceClient

"""
# PREREQUISITES
    pip install azure-identity
    pip install azure-mgmt-containerservice
# USAGE
    python managed_clusters_create_ingress_profile_web_app_routing.py

    Before run the sample, please set the values of the client ID, tenant ID and client secret
    of the AAD application as environment variables: AZURE_CLIENT_ID, AZURE_TENANT_ID,
    AZURE_CLIENT_SECRET. For more info about how to get the value, please see:
    https://docs.microsoft.com/azure/active-directory/develop/howto-create-service-principal-portal
"""


def main():
    client = ContainerServiceClient(
        credential=DefaultAzureCredential(),
        subscription_id="SUBSCRIPTION_ID",
    )

    response = client.managed_clusters.begin_create_or_update(
        resource_group_name="rg1",
        resource_name="clustername1",
        parameters={
            "location": "location1",
            "properties": {
                "agentPoolProfiles": [
                    {
                        "count": 3,
                        "enableNodePublicIP": True,
                        "mode": "System",
                        "name": "nodepool1",
                        "osType": "Linux",
                        "type": "VirtualMachineScaleSets",
                        "vmSize": "Standard_DS2_v2",
                    }
                ],
                "dnsPrefix": "dnsprefix1",
                "ingressProfile": {
                    "webAppRouting": {
                        "dnsZoneResourceIds": [
                            "/subscriptions/SUB_ID/resourceGroups/RG_NAME/providers/Microsoft.Network/dnszones/DNS_ZONE_NAME"
                        ],
                        "enabled": True,
                    }
                },
                "kubernetesVersion": "",
                "linuxProfile": {"adminUsername": "azureuser", "ssh": {"publicKeys": [{"keyData": "keydata"}]}},
                "networkProfile": {
                    "loadBalancerProfile": {"managedOutboundIPs": {"count": 2}},
                    "loadBalancerSku": "standard",
                    "outboundType": "loadBalancer",
                },
            },
            "sku": {"name": "Basic", "tier": "Free"},
            "tags": {"archv2": "", "tier": "production"},
        },
    ).result()
    print(response)


# x-ms-original-file: 2026-01-01/ManagedClustersCreate_IngressProfile_WebAppRouting.json
if __name__ == "__main__":
    main()

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

範例回覆

狀態碼:: 200

{
  "name": "clustername1",
  "type": "Microsoft.ContainerService/managedClusters",
  "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1",
  "location": "location1",
  "properties": {
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "enableNodePublicIP": true,
        "maxPods": 110,
        "mode": "System",
        "nodeImageVersion": "AKSUbuntu:1604:2020.03.11",
        "orchestratorVersion": "1.9.6",
        "osType": "Linux",
        "provisioningState": "Succeeded",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "fqdn": "dnsprefix1-abcd1234.hcp.eastus.azmk8s.io",
    "ingressProfile": {
      "webAppRouting": {
        "dnsZoneResourceIds": [
          "/subscriptions/SUB_ID/resourceGroups/RG_NAME/providers/Microsoft.Network/dnszones/DNS_ZONE_NAME"
        ],
        "enabled": true
      }
    },
    "kubernetesVersion": "1.9.6",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "maxAgentPools": 1,
    "networkProfile": {
      "dnsServiceIP": "10.0.0.10",
      "ipFamilies": [
        "IPv4"
      ],
      "loadBalancerProfile": {
        "allocatedOutboundPorts": 2000,
        "effectiveOutboundIPs": [
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip1"
          },
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip2"
          }
        ],
        "idleTimeoutInMinutes": 10,
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "basic",
      "networkPlugin": "kubenet",
      "outboundType": "loadBalancer",
      "podCidr": "10.244.0.0/16",
      "podCidrs": [
        "10.244.0.0/16"
      ],
      "serviceCidr": "10.0.0.0/16",
      "serviceCidrs": [
        "10.0.0.0/16"
      ]
    },
    "nodeResourceGroup": "MC_rg1_clustername1_location1",
    "provisioningState": "Succeeded",
    "servicePrincipalProfile": {
      "clientId": "clientid"
    },
    "windowsProfile": {
      "adminUsername": "azureuser"
    }
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

狀態碼:: 201

{
  "name": "clustername1",
  "type": "Microsoft.ContainerService/managedClusters",
  "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1",
  "location": "location1",
  "properties": {
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "enableNodePublicIP": true,
        "maxPods": 110,
        "mode": "System",
        "orchestratorVersion": "1.9.6",
        "osType": "Linux",
        "provisioningState": "Creating",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "ingressProfile": {
      "webAppRouting": {
        "dnsZoneResourceIds": [
          "/subscriptions/SUB_ID/resourceGroups/RG_NAME/providers/Microsoft.Network/dnszones/DNS_ZONE_NAME"
        ],
        "enabled": true
      }
    },
    "kubernetesVersion": "1.9.6",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "maxAgentPools": 1,
    "networkProfile": {
      "dnsServiceIP": "10.0.0.10",
      "ipFamilies": [
        "IPv4"
      ],
      "loadBalancerProfile": {
        "allocatedOutboundPorts": 2000,
        "effectiveOutboundIPs": [
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip1"
          },
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip2"
          }
        ],
        "idleTimeoutInMinutes": 10,
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "standard",
      "networkPlugin": "kubenet",
      "outboundType": "loadBalancer",
      "podCidr": "10.244.0.0/16",
      "podCidrs": [
        "10.244.0.0/16"
      ],
      "serviceCidr": "10.0.0.0/16",
      "serviceCidrs": [
        "10.0.0.0/16"
      ]
    },
    "nodeResourceGroup": "MC_rg1_clustername1_location1",
    "provisioningState": "Creating",
    "servicePrincipalProfile": {
      "clientId": "clientid"
    },
    "windowsProfile": {
      "adminUsername": "azureuser"
    }
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

Create Managed Private Cluster with fqdn subdomain specified

範例要求

HTTP
Python

PUT https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1?api-version=2026-01-01

{
  "location": "location1",
  "properties": {
    "addonProfiles": {},
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "enableEncryptionAtHost": true,
        "enableNodePublicIP": true,
        "mode": "System",
        "osType": "Linux",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "apiServerAccessProfile": {
      "enablePrivateCluster": true,
      "privateDNSZone": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Network/privateDnsZones/privatelink.location1.azmk8s.io"
    },
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "enableRBAC": true,
    "fqdnSubdomain": "domain1",
    "kubernetesVersion": "",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "networkProfile": {
      "loadBalancerProfile": {
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "standard",
      "outboundType": "loadBalancer"
    },
    "servicePrincipalProfile": {
      "clientId": "clientid",
      "secret": "secret"
    },
    "windowsProfile": {
      "adminPassword": "replacePassword1234$",
      "adminUsername": "azureuser"
    }
  },
  "sku": {
    "name": "Basic",
    "tier": "Free"
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

from azure.identity import DefaultAzureCredential

from azure.mgmt.containerservice import ContainerServiceClient

"""
# PREREQUISITES
    pip install azure-identity
    pip install azure-mgmt-containerservice
# USAGE
    python managed_clusters_create_private_cluster_fqdn_subdomain.py

    Before run the sample, please set the values of the client ID, tenant ID and client secret
    of the AAD application as environment variables: AZURE_CLIENT_ID, AZURE_TENANT_ID,
    AZURE_CLIENT_SECRET. For more info about how to get the value, please see:
    https://docs.microsoft.com/azure/active-directory/develop/howto-create-service-principal-portal
"""


def main():
    client = ContainerServiceClient(
        credential=DefaultAzureCredential(),
        subscription_id="SUBSCRIPTION_ID",
    )

    response = client.managed_clusters.begin_create_or_update(
        resource_group_name="rg1",
        resource_name="clustername1",
        parameters={
            "location": "location1",
            "properties": {
                "addonProfiles": {},
                "agentPoolProfiles": [
                    {
                        "count": 3,
                        "enableEncryptionAtHost": True,
                        "enableNodePublicIP": True,
                        "mode": "System",
                        "name": "nodepool1",
                        "osType": "Linux",
                        "type": "VirtualMachineScaleSets",
                        "vmSize": "Standard_DS2_v2",
                    }
                ],
                "apiServerAccessProfile": {
                    "enablePrivateCluster": True,
                    "privateDNSZone": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Network/privateDnsZones/privatelink.location1.azmk8s.io",
                },
                "autoScalerProfile": {"scale-down-delay-after-add": "15m", "scan-interval": "20s"},
                "enableRBAC": True,
                "fqdnSubdomain": "domain1",
                "kubernetesVersion": "",
                "linuxProfile": {"adminUsername": "azureuser", "ssh": {"publicKeys": [{"keyData": "keydata"}]}},
                "networkProfile": {
                    "loadBalancerProfile": {"managedOutboundIPs": {"count": 2}},
                    "loadBalancerSku": "standard",
                    "outboundType": "loadBalancer",
                },
                "servicePrincipalProfile": {"clientId": "clientid", "secret": "secret"},
                "windowsProfile": {"adminPassword": "replacePassword1234$", "adminUsername": "azureuser"},
            },
            "sku": {"name": "Basic", "tier": "Free"},
            "tags": {"archv2": "", "tier": "production"},
        },
    ).result()
    print(response)


# x-ms-original-file: 2026-01-01/ManagedClustersCreate_PrivateClusterFQDNSubdomain.json
if __name__ == "__main__":
    main()

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

範例回覆

狀態碼:: 200

{
  "name": "clustername1",
  "type": "Microsoft.ContainerService/managedClusters",
  "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1",
  "location": "location1",
  "properties": {
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "currentOrchestratorVersion": "1.9.6",
        "enableEncryptionAtHost": true,
        "enableNodePublicIP": true,
        "maxPods": 110,
        "mode": "System",
        "nodeImageVersion": "AKSUbuntu:1604:2020.03.11",
        "orchestratorVersion": "1.9.6",
        "osType": "Linux",
        "provisioningState": "Succeeded",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "apiServerAccessProfile": {
      "enablePrivateCluster": true,
      "privateDNSZone": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Network/privateDnsZones/privatelink.location1.azmk8s.io"
    },
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "currentKubernetesVersion": "1.9.6",
    "enableRBAC": true,
    "fqdnSubdomain": "domain1",
    "kubernetesVersion": "1.9.6",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "maxAgentPools": 1,
    "networkProfile": {
      "dnsServiceIP": "10.0.0.10",
      "ipFamilies": [
        "IPv4"
      ],
      "loadBalancerProfile": {
        "allocatedOutboundPorts": 2000,
        "effectiveOutboundIPs": [
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip1"
          },
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip2"
          }
        ],
        "idleTimeoutInMinutes": 10,
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "basic",
      "networkPlugin": "kubenet",
      "outboundType": "loadBalancer",
      "podCidr": "10.244.0.0/16",
      "podCidrs": [
        "10.244.0.0/16"
      ],
      "serviceCidr": "10.0.0.0/16",
      "serviceCidrs": [
        "10.0.0.0/16"
      ]
    },
    "nodeResourceGroup": "MC_rg1_clustername1_location1",
    "privateFQDN": "domain1.privatelink.location1.azmk8s.io",
    "provisioningState": "Succeeded",
    "servicePrincipalProfile": {
      "clientId": "clientid"
    },
    "windowsProfile": {
      "adminUsername": "azureuser"
    }
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

狀態碼:: 201

{
  "name": "clustername1",
  "type": "Microsoft.ContainerService/managedClusters",
  "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1",
  "location": "location1",
  "properties": {
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "currentOrchestratorVersion": "1.9.6",
        "enableEncryptionAtHost": true,
        "enableNodePublicIP": true,
        "maxPods": 110,
        "mode": "System",
        "orchestratorVersion": "1.9.6",
        "osType": "Linux",
        "provisioningState": "Creating",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "apiServerAccessProfile": {
      "enablePrivateCluster": true,
      "privateDNSZone": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Network/privateDnsZones/privatelink.location1.azmk8s.io"
    },
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "currentKubernetesVersion": "1.9.6",
    "enableRBAC": true,
    "fqdnSubdomain": "domain1",
    "kubernetesVersion": "1.9.6",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "maxAgentPools": 1,
    "networkProfile": {
      "dnsServiceIP": "10.0.0.10",
      "ipFamilies": [
        "IPv4"
      ],
      "loadBalancerProfile": {
        "allocatedOutboundPorts": 2000,
        "effectiveOutboundIPs": [
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip1"
          },
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip2"
          }
        ],
        "idleTimeoutInMinutes": 10,
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "standard",
      "networkPlugin": "kubenet",
      "outboundType": "loadBalancer",
      "podCidr": "10.244.0.0/16",
      "podCidrs": [
        "10.244.0.0/16"
      ],
      "serviceCidr": "10.0.0.0/16",
      "serviceCidrs": [
        "10.0.0.0/16"
      ]
    },
    "nodeResourceGroup": "MC_rg1_clustername1_location1",
    "privateFQDN": "domain1.privatelink.location1.azmk8s.io",
    "provisioningState": "Creating",
    "servicePrincipalProfile": {
      "clientId": "clientid"
    },
    "windowsProfile": {
      "adminUsername": "azureuser"
    }
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

Create Managed Private Cluster with Public FQDN specified

範例要求

HTTP
Python

PUT https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1?api-version=2026-01-01

{
  "location": "location1",
  "properties": {
    "addonProfiles": {},
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "enableEncryptionAtHost": true,
        "enableNodePublicIP": true,
        "mode": "System",
        "osType": "Linux",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "apiServerAccessProfile": {
      "enablePrivateCluster": true,
      "enablePrivateClusterPublicFQDN": true
    },
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "kubernetesVersion": "",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "networkProfile": {
      "loadBalancerProfile": {
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "standard",
      "outboundType": "loadBalancer"
    },
    "servicePrincipalProfile": {
      "clientId": "clientid",
      "secret": "secret"
    },
    "windowsProfile": {
      "adminPassword": "replacePassword1234$",
      "adminUsername": "azureuser"
    }
  },
  "sku": {
    "name": "Basic",
    "tier": "Free"
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

from azure.identity import DefaultAzureCredential

from azure.mgmt.containerservice import ContainerServiceClient

"""
# PREREQUISITES
    pip install azure-identity
    pip install azure-mgmt-containerservice
# USAGE
    python managed_clusters_create_private_cluster_public_fqdn.py

    Before run the sample, please set the values of the client ID, tenant ID and client secret
    of the AAD application as environment variables: AZURE_CLIENT_ID, AZURE_TENANT_ID,
    AZURE_CLIENT_SECRET. For more info about how to get the value, please see:
    https://docs.microsoft.com/azure/active-directory/develop/howto-create-service-principal-portal
"""


def main():
    client = ContainerServiceClient(
        credential=DefaultAzureCredential(),
        subscription_id="SUBSCRIPTION_ID",
    )

    response = client.managed_clusters.begin_create_or_update(
        resource_group_name="rg1",
        resource_name="clustername1",
        parameters={
            "location": "location1",
            "properties": {
                "addonProfiles": {},
                "agentPoolProfiles": [
                    {
                        "count": 3,
                        "enableEncryptionAtHost": True,
                        "enableNodePublicIP": True,
                        "mode": "System",
                        "name": "nodepool1",
                        "osType": "Linux",
                        "type": "VirtualMachineScaleSets",
                        "vmSize": "Standard_DS2_v2",
                    }
                ],
                "apiServerAccessProfile": {"enablePrivateCluster": True, "enablePrivateClusterPublicFQDN": True},
                "autoScalerProfile": {"scale-down-delay-after-add": "15m", "scan-interval": "20s"},
                "dnsPrefix": "dnsprefix1",
                "enableRBAC": True,
                "kubernetesVersion": "",
                "linuxProfile": {"adminUsername": "azureuser", "ssh": {"publicKeys": [{"keyData": "keydata"}]}},
                "networkProfile": {
                    "loadBalancerProfile": {"managedOutboundIPs": {"count": 2}},
                    "loadBalancerSku": "standard",
                    "outboundType": "loadBalancer",
                },
                "servicePrincipalProfile": {"clientId": "clientid", "secret": "secret"},
                "windowsProfile": {"adminPassword": "replacePassword1234$", "adminUsername": "azureuser"},
            },
            "sku": {"name": "Basic", "tier": "Free"},
            "tags": {"archv2": "", "tier": "production"},
        },
    ).result()
    print(response)


# x-ms-original-file: 2026-01-01/ManagedClustersCreate_PrivateClusterPublicFQDN.json
if __name__ == "__main__":
    main()

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

範例回覆

狀態碼:: 200

{
  "name": "clustername1",
  "type": "Microsoft.ContainerService/managedClusters",
  "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1",
  "location": "location1",
  "properties": {
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "currentOrchestratorVersion": "1.9.6",
        "enableEncryptionAtHost": true,
        "enableNodePublicIP": true,
        "maxPods": 110,
        "mode": "System",
        "nodeImageVersion": "AKSUbuntu:1604:2020.03.11",
        "orchestratorVersion": "1.9.6",
        "osType": "Linux",
        "provisioningState": "Succeeded",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "apiServerAccessProfile": {
      "enablePrivateCluster": true,
      "enablePrivateClusterPublicFQDN": true,
      "privateDNSZone": "system"
    },
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "currentKubernetesVersion": "1.9.6",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "fqdn": "dnsprefix1-ee788a1f.hcp.location1.azmk8s.io",
    "kubernetesVersion": "1.9.6",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "maxAgentPools": 1,
    "networkProfile": {
      "dnsServiceIP": "10.0.0.10",
      "ipFamilies": [
        "IPv4"
      ],
      "loadBalancerProfile": {
        "allocatedOutboundPorts": 2000,
        "effectiveOutboundIPs": [
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip1"
          },
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip2"
          }
        ],
        "idleTimeoutInMinutes": 10,
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "basic",
      "networkPlugin": "kubenet",
      "outboundType": "loadBalancer",
      "podCidr": "10.244.0.0/16",
      "podCidrs": [
        "10.244.0.0/16"
      ],
      "serviceCidr": "10.0.0.0/16",
      "serviceCidrs": [
        "10.0.0.0/16"
      ]
    },
    "nodeResourceGroup": "MC_rg1_clustername1_location1",
    "privateFQDN": "dnsprefix1-aae7e0f0.5cef6058-b6b5-414d-8cb1-4bd14eb0b15c.privatelink.location1.azmk8s.io",
    "provisioningState": "Succeeded",
    "servicePrincipalProfile": {
      "clientId": "clientid"
    },
    "windowsProfile": {
      "adminUsername": "azureuser"
    }
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

狀態碼:: 201

{
  "name": "clustername1",
  "type": "Microsoft.ContainerService/managedClusters",
  "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1",
  "location": "location1",
  "properties": {
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "currentOrchestratorVersion": "1.9.6",
        "enableEncryptionAtHost": true,
        "enableNodePublicIP": true,
        "maxPods": 110,
        "mode": "System",
        "orchestratorVersion": "1.9.6",
        "osType": "Linux",
        "provisioningState": "Creating",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "apiServerAccessProfile": {
      "enablePrivateCluster": true,
      "enablePrivateClusterPublicFQDN": true,
      "privateDNSZone": "system"
    },
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "currentKubernetesVersion": "1.9.6",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "fqdn": "dnsprefix1-ee788a1f.hcp.location1.azmk8s.io",
    "kubernetesVersion": "1.9.6",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "maxAgentPools": 1,
    "networkProfile": {
      "dnsServiceIP": "10.0.0.10",
      "ipFamilies": [
        "IPv4"
      ],
      "loadBalancerProfile": {
        "allocatedOutboundPorts": 2000,
        "effectiveOutboundIPs": [
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip1"
          },
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip2"
          }
        ],
        "idleTimeoutInMinutes": 10,
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "standard",
      "networkPlugin": "kubenet",
      "outboundType": "loadBalancer",
      "podCidr": "10.244.0.0/16",
      "podCidrs": [
        "10.244.0.0/16"
      ],
      "serviceCidr": "10.0.0.0/16",
      "serviceCidrs": [
        "10.0.0.0/16"
      ]
    },
    "nodeResourceGroup": "MC_rg1_clustername1_location1",
    "privateFQDN": "dnsprefix1-aae7e0f0.5cef6058-b6b5-414d-8cb1-4bd14eb0b15c.privatelink.location1.azmk8s.io",
    "provisioningState": "Creating",
    "servicePrincipalProfile": {
      "clientId": "clientid"
    },
    "windowsProfile": {
      "adminUsername": "azureuser"
    }
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

Create/Update AAD Managed Cluster with EnableAzureRBAC

範例要求

HTTP
Python

PUT https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1?api-version=2026-01-01

{
  "location": "location1",
  "properties": {
    "aadProfile": {
      "enableAzureRBAC": true,
      "managed": true
    },
    "addonProfiles": {},
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "availabilityZones": [
          "1",
          "2",
          "3"
        ],
        "count": 3,
        "enableNodePublicIP": true,
        "mode": "System",
        "osType": "Linux",
        "vmSize": "Standard_DS1_v2"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "kubernetesVersion": "",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "networkProfile": {
      "loadBalancerProfile": {
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "standard",
      "outboundType": "loadBalancer"
    },
    "servicePrincipalProfile": {
      "clientId": "clientid",
      "secret": "secret"
    },
    "windowsProfile": {
      "adminPassword": "replacePassword1234$",
      "adminUsername": "azureuser"
    }
  },
  "sku": {
    "name": "Basic",
    "tier": "Free"
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

from azure.identity import DefaultAzureCredential

from azure.mgmt.containerservice import ContainerServiceClient

"""
# PREREQUISITES
    pip install azure-identity
    pip install azure-mgmt-containerservice
# USAGE
    python managed_clusters_create_update_with_enable_azure_rbac.py

    Before run the sample, please set the values of the client ID, tenant ID and client secret
    of the AAD application as environment variables: AZURE_CLIENT_ID, AZURE_TENANT_ID,
    AZURE_CLIENT_SECRET. For more info about how to get the value, please see:
    https://docs.microsoft.com/azure/active-directory/develop/howto-create-service-principal-portal
"""


def main():
    client = ContainerServiceClient(
        credential=DefaultAzureCredential(),
        subscription_id="SUBSCRIPTION_ID",
    )

    response = client.managed_clusters.begin_create_or_update(
        resource_group_name="rg1",
        resource_name="clustername1",
        parameters={
            "location": "location1",
            "properties": {
                "aadProfile": {"enableAzureRBAC": True, "managed": True},
                "addonProfiles": {},
                "agentPoolProfiles": [
                    {
                        "availabilityZones": ["1", "2", "3"],
                        "count": 3,
                        "enableNodePublicIP": True,
                        "mode": "System",
                        "name": "nodepool1",
                        "osType": "Linux",
                        "type": "VirtualMachineScaleSets",
                        "vmSize": "Standard_DS1_v2",
                    }
                ],
                "autoScalerProfile": {"scale-down-delay-after-add": "15m", "scan-interval": "20s"},
                "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
                "dnsPrefix": "dnsprefix1",
                "enableRBAC": True,
                "kubernetesVersion": "",
                "linuxProfile": {"adminUsername": "azureuser", "ssh": {"publicKeys": [{"keyData": "keydata"}]}},
                "networkProfile": {
                    "loadBalancerProfile": {"managedOutboundIPs": {"count": 2}},
                    "loadBalancerSku": "standard",
                    "outboundType": "loadBalancer",
                },
                "servicePrincipalProfile": {"clientId": "clientid", "secret": "secret"},
                "windowsProfile": {"adminPassword": "replacePassword1234$", "adminUsername": "azureuser"},
            },
            "sku": {"name": "Basic", "tier": "Free"},
            "tags": {"archv2": "", "tier": "production"},
        },
    ).result()
    print(response)


# x-ms-original-file: 2026-01-01/ManagedClustersCreate_UpdateWithEnableAzureRBAC.json
if __name__ == "__main__":
    main()

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

範例回覆

狀態碼:: 200

{
  "name": "clustername1",
  "type": "Microsoft.ContainerService/managedClusters",
  "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1",
  "location": "location1",
  "properties": {
    "aadProfile": {
      "adminGroupObjectIDs": null,
      "enableAzureRBAC": true,
      "managed": true,
      "tenantID": "tenantID"
    },
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "availabilityZones": [
          "1",
          "2",
          "3"
        ],
        "count": 3,
        "currentOrchestratorVersion": "1.9.6",
        "enableNodePublicIP": true,
        "maxPods": 110,
        "mode": "System",
        "nodeImageVersion": "AKSUbuntu:1604:2020.03.11",
        "orchestratorVersion": "1.9.6",
        "osType": "Linux",
        "provisioningState": "Succeeded",
        "vmSize": "Standard_DS1_v2"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "currentKubernetesVersion": "1.9.6",
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "fqdn": "dnsprefix1-abcd1234.hcp.eastus.azmk8s.io",
    "kubernetesVersion": "1.9.6",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "maxAgentPools": 1,
    "networkProfile": {
      "dnsServiceIP": "10.0.0.10",
      "ipFamilies": [
        "IPv4"
      ],
      "loadBalancerProfile": {
        "allocatedOutboundPorts": 2000,
        "effectiveOutboundIPs": [
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip1"
          },
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip2"
          }
        ],
        "idleTimeoutInMinutes": 10,
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "basic",
      "networkPlugin": "kubenet",
      "outboundType": "loadBalancer",
      "podCidr": "10.244.0.0/16",
      "podCidrs": [
        "10.244.0.0/16"
      ],
      "serviceCidr": "10.0.0.0/16",
      "serviceCidrs": [
        "10.0.0.0/16"
      ]
    },
    "nodeResourceGroup": "MC_rg1_clustername1_location1",
    "provisioningState": "Succeeded",
    "servicePrincipalProfile": {
      "clientId": "clientid"
    },
    "windowsProfile": {
      "adminUsername": "azureuser"
    }
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

狀態碼:: 201

{
  "name": "clustername1",
  "type": "Microsoft.ContainerService/managedClusters",
  "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1",
  "location": "location1",
  "properties": {
    "aadProfile": {
      "adminGroupObjectIDs": null,
      "enableAzureRBAC": true,
      "managed": true,
      "tenantID": "tenantID"
    },
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "availabilityZones": [
          "1",
          "2",
          "3"
        ],
        "count": 3,
        "currentOrchestratorVersion": "1.9.6",
        "enableNodePublicIP": true,
        "maxPods": 110,
        "mode": "System",
        "orchestratorVersion": "1.9.6",
        "osType": "Linux",
        "provisioningState": "Creating",
        "vmSize": "Standard_DS1_v2"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "currentKubernetesVersion": "1.9.6",
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "kubernetesVersion": "1.9.6",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "maxAgentPools": 1,
    "networkProfile": {
      "dnsServiceIP": "10.0.0.10",
      "ipFamilies": [
        "IPv4"
      ],
      "loadBalancerProfile": {
        "allocatedOutboundPorts": 2000,
        "effectiveOutboundIPs": [
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip1"
          },
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip2"
          }
        ],
        "idleTimeoutInMinutes": 10,
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "standard",
      "networkPlugin": "kubenet",
      "outboundType": "loadBalancer",
      "podCidr": "10.244.0.0/16",
      "podCidrs": [
        "10.244.0.0/16"
      ],
      "serviceCidr": "10.0.0.0/16",
      "serviceCidrs": [
        "10.0.0.0/16"
      ]
    },
    "nodeResourceGroup": "MC_rg1_clustername1_location1",
    "provisioningState": "Creating",
    "servicePrincipalProfile": {
      "clientId": "clientid"
    },
    "windowsProfile": {
      "adminUsername": "azureuser"
    }
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

Create/Update Managed Cluster

範例要求

HTTP
Python

PUT https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1?api-version=2026-01-01

{
  "identity": {
    "type": "UserAssigned",
    "userAssignedIdentities": {
      "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgName1/providers/Microsoft.ManagedIdentity/userAssignedIdentities/identity1": {}
    }
  },
  "location": "location1",
  "properties": {
    "addonProfiles": {},
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "availabilityZones": [
          "1",
          "2",
          "3"
        ],
        "count": 3,
        "enableNodePublicIP": true,
        "mode": "System",
        "osType": "Linux",
        "scaleDownMode": "Deallocate",
        "vmSize": "Standard_DS1_v2"
      }
    ],
    "autoScalerProfile": {
      "balance-similar-node-groups": "true",
      "expander": "priority",
      "max-node-provision-time": "15m",
      "new-pod-scale-up-delay": "1m",
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s",
      "skip-nodes-with-system-pods": "false"
    },
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "kubernetesVersion": "",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "networkProfile": {
      "loadBalancerProfile": {
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "standard",
      "outboundType": "loadBalancer"
    },
    "servicePrincipalProfile": {
      "clientId": "clientid",
      "secret": "secret"
    },
    "upgradeSettings": {
      "overrideSettings": {
        "forceUpgrade": false,
        "until": "2022-11-01T13:00:00Z"
      }
    },
    "windowsProfile": {
      "adminPassword": "replacePassword1234$",
      "adminUsername": "azureuser"
    }
  },
  "sku": {
    "name": "Basic",
    "tier": "Free"
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

from azure.identity import DefaultAzureCredential

from azure.mgmt.containerservice import ContainerServiceClient

"""
# PREREQUISITES
    pip install azure-identity
    pip install azure-mgmt-containerservice
# USAGE
    python managed_clusters_create_update.py

    Before run the sample, please set the values of the client ID, tenant ID and client secret
    of the AAD application as environment variables: AZURE_CLIENT_ID, AZURE_TENANT_ID,
    AZURE_CLIENT_SECRET. For more info about how to get the value, please see:
    https://docs.microsoft.com/azure/active-directory/develop/howto-create-service-principal-portal
"""


def main():
    client = ContainerServiceClient(
        credential=DefaultAzureCredential(),
        subscription_id="SUBSCRIPTION_ID",
    )

    response = client.managed_clusters.begin_create_or_update(
        resource_group_name="rg1",
        resource_name="clustername1",
        parameters={
            "identity": {
                "type": "UserAssigned",
                "userAssignedIdentities": {
                    "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgName1/providers/Microsoft.ManagedIdentity/userAssignedIdentities/identity1": {}
                },
            },
            "location": "location1",
            "properties": {
                "addonProfiles": {},
                "agentPoolProfiles": [
                    {
                        "availabilityZones": ["1", "2", "3"],
                        "count": 3,
                        "enableNodePublicIP": True,
                        "mode": "System",
                        "name": "nodepool1",
                        "osType": "Linux",
                        "scaleDownMode": "Deallocate",
                        "type": "VirtualMachineScaleSets",
                        "vmSize": "Standard_DS1_v2",
                    }
                ],
                "autoScalerProfile": {
                    "balance-similar-node-groups": "true",
                    "expander": "priority",
                    "max-node-provision-time": "15m",
                    "new-pod-scale-up-delay": "1m",
                    "scale-down-delay-after-add": "15m",
                    "scan-interval": "20s",
                    "skip-nodes-with-system-pods": "false",
                },
                "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
                "dnsPrefix": "dnsprefix1",
                "enableRBAC": True,
                "kubernetesVersion": "",
                "linuxProfile": {"adminUsername": "azureuser", "ssh": {"publicKeys": [{"keyData": "keydata"}]}},
                "networkProfile": {
                    "loadBalancerProfile": {"managedOutboundIPs": {"count": 2}},
                    "loadBalancerSku": "standard",
                    "outboundType": "loadBalancer",
                },
                "servicePrincipalProfile": {"clientId": "clientid", "secret": "secret"},
                "upgradeSettings": {"overrideSettings": {"forceUpgrade": False, "until": "2022-11-01T13:00:00Z"}},
                "windowsProfile": {"adminPassword": "replacePassword1234$", "adminUsername": "azureuser"},
            },
            "sku": {"name": "Basic", "tier": "Free"},
            "tags": {"archv2": "", "tier": "production"},
        },
    ).result()
    print(response)


# x-ms-original-file: 2026-01-01/ManagedClustersCreate_Update.json
if __name__ == "__main__":
    main()

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

範例回覆

狀態碼:: 200

{
  "name": "clustername1",
  "type": "Microsoft.ContainerService/managedClusters",
  "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1",
  "identity": {
    "type": "UserAssigned",
    "userAssignedIdentities": {
      "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgName1/providers/Microsoft.ManagedIdentity/userAssignedIdentities/identity1": {
        "clientId": "clientId1",
        "principalId": "principalId1"
      }
    }
  },
  "location": "location1",
  "properties": {
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "availabilityZones": [
          "1",
          "2",
          "3"
        ],
        "count": 3,
        "currentOrchestratorVersion": "1.9.6",
        "enableNodePublicIP": true,
        "maxPods": 110,
        "mode": "System",
        "nodeImageVersion": "AKSUbuntu:1604:2020.03.11",
        "orchestratorVersion": "1.9.6",
        "osType": "Linux",
        "provisioningState": "Succeeded",
        "scaleDownMode": "Deallocate",
        "vmSize": "Standard_DS1_v2"
      }
    ],
    "autoScalerProfile": {
      "balance-similar-node-groups": "true",
      "expander": "priority",
      "max-node-provision-time": "15m",
      "new-pod-scale-up-delay": "1m",
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s",
      "skip-nodes-with-system-pods": "false"
    },
    "currentKubernetesVersion": "1.9.6",
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "fqdn": "dnsprefix1-abcd1234.hcp.eastus.azmk8s.io",
    "kubernetesVersion": "1.9.6",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "maxAgentPools": 1,
    "networkProfile": {
      "dnsServiceIP": "10.0.0.10",
      "ipFamilies": [
        "IPv4"
      ],
      "loadBalancerProfile": {
        "allocatedOutboundPorts": 2000,
        "effectiveOutboundIPs": [
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip1"
          },
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip2"
          }
        ],
        "idleTimeoutInMinutes": 10,
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "basic",
      "networkPlugin": "kubenet",
      "outboundType": "loadBalancer",
      "podCidr": "10.244.0.0/16",
      "podCidrs": [
        "10.244.0.0/16"
      ],
      "serviceCidr": "10.0.0.0/16",
      "serviceCidrs": [
        "10.0.0.0/16"
      ]
    },
    "nodeResourceGroup": "MC_rg1_clustername1_location1",
    "provisioningState": "Succeeded",
    "servicePrincipalProfile": {
      "clientId": "clientid"
    },
    "upgradeSettings": {
      "overrideSettings": {
        "forceUpgrade": false,
        "until": "2022-11-01T13:00:00Z"
      }
    },
    "windowsProfile": {
      "adminUsername": "azureuser"
    }
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

狀態碼:: 201

{
  "name": "clustername1",
  "type": "Microsoft.ContainerService/managedClusters",
  "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1",
  "identity": {
    "type": "UserAssigned",
    "userAssignedIdentities": {
      "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgName1/providers/Microsoft.ManagedIdentity/userAssignedIdentities/identity1": {
        "clientId": "clientId1",
        "principalId": "principalId1"
      }
    }
  },
  "location": "location1",
  "properties": {
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "availabilityZones": [
          "1",
          "2",
          "3"
        ],
        "count": 3,
        "currentOrchestratorVersion": "1.9.6",
        "enableNodePublicIP": true,
        "maxPods": 110,
        "mode": "System",
        "orchestratorVersion": "1.9.6",
        "osType": "Linux",
        "provisioningState": "Creating",
        "scaleDownMode": "Deallocate",
        "vmSize": "Standard_DS1_v2"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "currentKubernetesVersion": "1.9.6",
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "kubernetesVersion": "1.9.6",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "maxAgentPools": 1,
    "networkProfile": {
      "dnsServiceIP": "10.0.0.10",
      "ipFamilies": [
        "IPv4"
      ],
      "loadBalancerProfile": {
        "allocatedOutboundPorts": 2000,
        "effectiveOutboundIPs": [
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip1"
          },
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip2"
          }
        ],
        "idleTimeoutInMinutes": 10,
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "standard",
      "networkPlugin": "kubenet",
      "outboundType": "loadBalancer",
      "podCidr": "10.244.0.0/16",
      "podCidrs": [
        "10.244.0.0/16"
      ],
      "serviceCidr": "10.0.0.0/16",
      "serviceCidrs": [
        "10.0.0.0/16"
      ]
    },
    "nodeResourceGroup": "MC_rg1_clustername1_location1",
    "provisioningState": "Creating",
    "servicePrincipalProfile": {
      "clientId": "clientid"
    },
    "windowsProfile": {
      "adminUsername": "azureuser"
    }
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

Create/Update Managed Cluster with Azure Service Mesh

範例要求

HTTP
Python

PUT https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1?api-version=2026-01-01

{
  "location": "location1",
  "properties": {
    "addonProfiles": {
      "azureKeyvaultSecretsProvider": {
        "config": {
          "enableSecretRotation": "true",
          "rotationPollInterval": "2m"
        },
        "enabled": true
      }
    },
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "enableNodePublicIP": true,
        "mode": "System",
        "osType": "Linux",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "kubernetesVersion": "",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "networkProfile": {
      "loadBalancerProfile": {
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "standard",
      "outboundType": "loadBalancer"
    },
    "serviceMeshProfile": {
      "istio": {
        "certificateAuthority": {
          "plugin": {
            "certChainObjectName": "cert-chain",
            "certObjectName": "ca-cert",
            "keyObjectName": "ca-key",
            "keyVaultId": "/subscriptions/854c9ddb-fe9e-4aea-8d58-99ed88282881/resourceGroups/ddama-test/providers/Microsoft.KeyVault/vaults/my-akv",
            "rootCertObjectName": "root-cert"
          }
        },
        "components": {
          "egressGateways": [
            {
              "name": "test-istio-egress",
              "enabled": true,
              "gatewayConfigurationName": "test-gateway-configuration"
            }
          ],
          "ingressGateways": [
            {
              "enabled": true,
              "mode": "Internal"
            }
          ]
        }
      },
      "mode": "Istio"
    },
    "servicePrincipalProfile": {
      "clientId": "clientid",
      "secret": "secret"
    },
    "windowsProfile": {
      "adminPassword": "replacePassword1234$",
      "adminUsername": "azureuser"
    }
  },
  "sku": {
    "name": "Basic",
    "tier": "Free"
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

from azure.identity import DefaultAzureCredential

from azure.mgmt.containerservice import ContainerServiceClient

"""
# PREREQUISITES
    pip install azure-identity
    pip install azure-mgmt-containerservice
# USAGE
    python managed_clusters_create_azure_service_mesh.py

    Before run the sample, please set the values of the client ID, tenant ID and client secret
    of the AAD application as environment variables: AZURE_CLIENT_ID, AZURE_TENANT_ID,
    AZURE_CLIENT_SECRET. For more info about how to get the value, please see:
    https://docs.microsoft.com/azure/active-directory/develop/howto-create-service-principal-portal
"""


def main():
    client = ContainerServiceClient(
        credential=DefaultAzureCredential(),
        subscription_id="SUBSCRIPTION_ID",
    )

    response = client.managed_clusters.begin_create_or_update(
        resource_group_name="rg1",
        resource_name="clustername1",
        parameters={
            "location": "location1",
            "properties": {
                "addonProfiles": {
                    "azureKeyvaultSecretsProvider": {
                        "config": {"enableSecretRotation": "true", "rotationPollInterval": "2m"},
                        "enabled": True,
                    }
                },
                "agentPoolProfiles": [
                    {
                        "count": 3,
                        "enableNodePublicIP": True,
                        "mode": "System",
                        "name": "nodepool1",
                        "osType": "Linux",
                        "type": "VirtualMachineScaleSets",
                        "vmSize": "Standard_DS2_v2",
                    }
                ],
                "autoScalerProfile": {"scale-down-delay-after-add": "15m", "scan-interval": "20s"},
                "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
                "dnsPrefix": "dnsprefix1",
                "enableRBAC": True,
                "kubernetesVersion": "",
                "linuxProfile": {"adminUsername": "azureuser", "ssh": {"publicKeys": [{"keyData": "keydata"}]}},
                "networkProfile": {
                    "loadBalancerProfile": {"managedOutboundIPs": {"count": 2}},
                    "loadBalancerSku": "standard",
                    "outboundType": "loadBalancer",
                },
                "serviceMeshProfile": {
                    "istio": {
                        "certificateAuthority": {
                            "plugin": {
                                "certChainObjectName": "cert-chain",
                                "certObjectName": "ca-cert",
                                "keyObjectName": "ca-key",
                                "keyVaultId": "/subscriptions/854c9ddb-fe9e-4aea-8d58-99ed88282881/resourceGroups/ddama-test/providers/Microsoft.KeyVault/vaults/my-akv",
                                "rootCertObjectName": "root-cert",
                            }
                        },
                        "components": {
                            "egressGateways": [
                                {
                                    "enabled": True,
                                    "gatewayConfigurationName": "test-gateway-configuration",
                                    "name": "test-istio-egress",
                                }
                            ],
                            "ingressGateways": [{"enabled": True, "mode": "Internal"}],
                        },
                    },
                    "mode": "Istio",
                },
                "servicePrincipalProfile": {"clientId": "clientid", "secret": "secret"},
                "windowsProfile": {"adminPassword": "replacePassword1234$", "adminUsername": "azureuser"},
            },
            "sku": {"name": "Basic", "tier": "Free"},
            "tags": {"archv2": "", "tier": "production"},
        },
    ).result()
    print(response)


# x-ms-original-file: 2026-01-01/ManagedClustersCreate_AzureServiceMesh.json
if __name__ == "__main__":
    main()

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

範例回覆

狀態碼:: 200

{
  "name": "clustername1",
  "type": "Microsoft.ContainerService/managedClusters",
  "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1",
  "location": "location1",
  "properties": {
    "addonProfiles": {
      "azureKeyvaultSecretsProvider": {
        "config": {
          "enableSecretRotation": "true",
          "rotationPollInterval": "2m"
        },
        "enabled": true
      }
    },
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "enableEncryptionAtHost": true,
        "enableNodePublicIP": true,
        "maxPods": 110,
        "mode": "System",
        "nodeImageVersion": "AKSUbuntu:1604:2020.03.11",
        "orchestratorVersion": "1.9.6",
        "osType": "Linux",
        "provisioningState": "Succeeded",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "fqdn": "dnsprefix1-abcd1234.hcp.eastus.azmk8s.io",
    "kubernetesVersion": "1.9.6",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "maxAgentPools": 1,
    "networkProfile": {
      "dnsServiceIP": "10.0.0.10",
      "loadBalancerProfile": {
        "allocatedOutboundPorts": 2000,
        "effectiveOutboundIPs": [
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip1"
          },
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip2"
          }
        ],
        "idleTimeoutInMinutes": 10,
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "basic",
      "networkPlugin": "kubenet",
      "outboundType": "loadBalancer",
      "podCidr": "10.244.0.0/16",
      "serviceCidr": "10.0.0.0/16"
    },
    "nodeResourceGroup": "MC_rg1_clustername1_location1",
    "provisioningState": "Succeeded",
    "serviceMeshProfile": {
      "istio": {
        "certificateAuthority": {
          "plugin": {
            "certChainObjectName": "cert-chain",
            "certObjectName": "ca-cert",
            "keyObjectName": "ca-key",
            "keyVaultId": "/subscriptions/854c9ddb-fe9e-4aea-8d58-99ed88282881/resourceGroups/ddama-test/providers/Microsoft.KeyVault/vaults/my-akv",
            "rootCertObjectName": "root-cert"
          }
        },
        "components": {
          "egressGateways": [
            {
              "name": "test-istio-egress",
              "enabled": true,
              "gatewayConfigurationName": "test-gateway-configuration"
            }
          ],
          "ingressGateways": [
            {
              "enabled": true,
              "mode": "Internal"
            }
          ]
        },
        "revisions": [
          "asm-1-17"
        ]
      },
      "mode": "Istio"
    },
    "servicePrincipalProfile": {
      "clientId": "clientid"
    },
    "windowsProfile": {
      "adminUsername": "azureuser"
    }
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

狀態碼:: 201

{
  "name": "clustername1",
  "type": "Microsoft.ContainerService/managedClusters",
  "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1",
  "location": "location1",
  "properties": {
    "addonProfiles": {
      "azureKeyvaultSecretsProvider": {
        "config": {
          "enableSecretRotation": "true",
          "rotationPollInterval": "2m"
        },
        "enabled": true
      }
    },
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "count": 3,
        "enableEncryptionAtHost": true,
        "enableNodePublicIP": true,
        "maxPods": 110,
        "mode": "System",
        "orchestratorVersion": "1.9.6",
        "osType": "Linux",
        "provisioningState": "Creating",
        "vmSize": "Standard_DS2_v2"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "kubernetesVersion": "1.9.6",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "maxAgentPools": 1,
    "networkProfile": {
      "dnsServiceIP": "10.0.0.10",
      "loadBalancerProfile": {
        "allocatedOutboundPorts": 2000,
        "effectiveOutboundIPs": [
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip1"
          },
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip2"
          }
        ],
        "idleTimeoutInMinutes": 10,
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "standard",
      "networkPlugin": "kubenet",
      "outboundType": "loadBalancer",
      "podCidr": "10.244.0.0/16",
      "serviceCidr": "10.0.0.0/16"
    },
    "nodeResourceGroup": "MC_rg1_clustername1_location1",
    "provisioningState": "Creating",
    "serviceMeshProfile": {
      "istio": {
        "certificateAuthority": {
          "plugin": {
            "certChainObjectName": "cert-chain",
            "certObjectName": "ca-cert",
            "keyObjectName": "ca-key",
            "keyVaultId": "/subscriptions/854c9ddb-fe9e-4aea-8d58-99ed88282881/resourceGroups/ddama-test/providers/Microsoft.KeyVault/vaults/my-akv",
            "rootCertObjectName": "root-cert"
          }
        },
        "components": {
          "egressGateways": [
            {
              "name": "test-istio-egress",
              "enabled": true,
              "gatewayConfigurationName": "test-gateway-configuration"
            }
          ],
          "ingressGateways": [
            {
              "enabled": true,
              "mode": "Internal"
            }
          ]
        },
        "revisions": [
          "asm-1-17"
        ]
      },
      "mode": "Istio"
    },
    "servicePrincipalProfile": {
      "clientId": "clientid"
    },
    "windowsProfile": {
      "adminUsername": "azureuser"
    }
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

Create/Update Managed Cluster with dual-stack networking

範例要求

HTTP
Python

PUT https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1?api-version=2026-01-01

{
  "identity": {
    "type": "UserAssigned",
    "userAssignedIdentities": {
      "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgName1/providers/Microsoft.ManagedIdentity/userAssignedIdentities/identity1": {}
    }
  },
  "location": "location1",
  "properties": {
    "addonProfiles": {},
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "availabilityZones": [
          "1",
          "2",
          "3"
        ],
        "count": 3,
        "enableNodePublicIP": true,
        "mode": "System",
        "osType": "Linux",
        "scaleDownMode": "Deallocate",
        "vmSize": "Standard_DS1_v2"
      }
    ],
    "autoScalerProfile": {
      "balance-similar-node-groups": "true",
      "expander": "priority",
      "max-node-provision-time": "15m",
      "new-pod-scale-up-delay": "1m",
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s",
      "skip-nodes-with-system-pods": "false"
    },
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "kubernetesVersion": "",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "networkProfile": {
      "ipFamilies": [
        "IPv4",
        "IPv6"
      ],
      "loadBalancerProfile": {
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "standard",
      "outboundType": "loadBalancer"
    },
    "servicePrincipalProfile": {
      "clientId": "clientid",
      "secret": "secret"
    },
    "windowsProfile": {
      "adminPassword": "replacePassword1234$",
      "adminUsername": "azureuser"
    }
  },
  "sku": {
    "name": "Basic",
    "tier": "Free"
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

from azure.identity import DefaultAzureCredential

from azure.mgmt.containerservice import ContainerServiceClient

"""
# PREREQUISITES
    pip install azure-identity
    pip install azure-mgmt-containerservice
# USAGE
    python managed_clusters_create_dual_stack_networking.py

    Before run the sample, please set the values of the client ID, tenant ID and client secret
    of the AAD application as environment variables: AZURE_CLIENT_ID, AZURE_TENANT_ID,
    AZURE_CLIENT_SECRET. For more info about how to get the value, please see:
    https://docs.microsoft.com/azure/active-directory/develop/howto-create-service-principal-portal
"""


def main():
    client = ContainerServiceClient(
        credential=DefaultAzureCredential(),
        subscription_id="SUBSCRIPTION_ID",
    )

    response = client.managed_clusters.begin_create_or_update(
        resource_group_name="rg1",
        resource_name="clustername1",
        parameters={
            "identity": {
                "type": "UserAssigned",
                "userAssignedIdentities": {
                    "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgName1/providers/Microsoft.ManagedIdentity/userAssignedIdentities/identity1": {}
                },
            },
            "location": "location1",
            "properties": {
                "addonProfiles": {},
                "agentPoolProfiles": [
                    {
                        "availabilityZones": ["1", "2", "3"],
                        "count": 3,
                        "enableNodePublicIP": True,
                        "mode": "System",
                        "name": "nodepool1",
                        "osType": "Linux",
                        "scaleDownMode": "Deallocate",
                        "type": "VirtualMachineScaleSets",
                        "vmSize": "Standard_DS1_v2",
                    }
                ],
                "autoScalerProfile": {
                    "balance-similar-node-groups": "true",
                    "expander": "priority",
                    "max-node-provision-time": "15m",
                    "new-pod-scale-up-delay": "1m",
                    "scale-down-delay-after-add": "15m",
                    "scan-interval": "20s",
                    "skip-nodes-with-system-pods": "false",
                },
                "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
                "dnsPrefix": "dnsprefix1",
                "enableRBAC": True,
                "kubernetesVersion": "",
                "linuxProfile": {"adminUsername": "azureuser", "ssh": {"publicKeys": [{"keyData": "keydata"}]}},
                "networkProfile": {
                    "ipFamilies": ["IPv4", "IPv6"],
                    "loadBalancerProfile": {"managedOutboundIPs": {"count": 2}},
                    "loadBalancerSku": "standard",
                    "outboundType": "loadBalancer",
                },
                "servicePrincipalProfile": {"clientId": "clientid", "secret": "secret"},
                "windowsProfile": {"adminPassword": "replacePassword1234$", "adminUsername": "azureuser"},
            },
            "sku": {"name": "Basic", "tier": "Free"},
            "tags": {"archv2": "", "tier": "production"},
        },
    ).result()
    print(response)


# x-ms-original-file: 2026-01-01/ManagedClustersCreate_DualStackNetworking.json
if __name__ == "__main__":
    main()

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

範例回覆

狀態碼:: 200

{
  "name": "clustername1",
  "type": "Microsoft.ContainerService/managedClusters",
  "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1",
  "identity": {
    "type": "UserAssigned",
    "userAssignedIdentities": {
      "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgName1/providers/Microsoft.ManagedIdentity/userAssignedIdentities/identity1": {
        "clientId": "clientId1",
        "principalId": "principalId1"
      }
    }
  },
  "location": "location1",
  "properties": {
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "availabilityZones": [
          "1",
          "2",
          "3"
        ],
        "count": 3,
        "currentOrchestratorVersion": "1.22.1",
        "enableNodePublicIP": true,
        "maxPods": 110,
        "mode": "System",
        "nodeImageVersion": "AKSUbuntu:1604:2020.03.11",
        "orchestratorVersion": "1.22.1",
        "osType": "Linux",
        "provisioningState": "Succeeded",
        "scaleDownMode": "Deallocate",
        "vmSize": "Standard_DS1_v2"
      }
    ],
    "autoScalerProfile": {
      "balance-similar-node-groups": "true",
      "expander": "priority",
      "max-node-provision-time": "15m",
      "new-pod-scale-up-delay": "1m",
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s",
      "skip-nodes-with-system-pods": "false"
    },
    "currentKubernetesVersion": "1.22.1",
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "fqdn": "dnsprefix1-abcd1234.hcp.eastus.azmk8s.io",
    "kubernetesVersion": "1.22.1",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "maxAgentPools": 1,
    "networkProfile": {
      "dnsServiceIP": "10.0.0.10",
      "ipFamilies": [
        "IPv4",
        "IPv6"
      ],
      "loadBalancerProfile": {
        "allocatedOutboundPorts": 2000,
        "effectiveOutboundIPs": [
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip1"
          },
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip2"
          },
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip3-ipv6"
          }
        ],
        "idleTimeoutInMinutes": 10,
        "managedOutboundIPs": {
          "count": 2,
          "countIPv6": 1
        }
      },
      "loadBalancerSku": "basic",
      "networkPlugin": "kubenet",
      "outboundType": "loadBalancer",
      "podCidr": "10.244.0.0/16",
      "podCidrs": [
        "10.244.0.0/16",
        "fd11:1234::/64"
      ],
      "serviceCidr": "10.0.0.0/16",
      "serviceCidrs": [
        "10.0.0.0/16",
        "fd00:1234::/108"
      ]
    },
    "nodeResourceGroup": "MC_rg1_clustername1_location1",
    "provisioningState": "Succeeded",
    "servicePrincipalProfile": {
      "clientId": "clientid"
    },
    "windowsProfile": {
      "adminUsername": "azureuser"
    }
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

狀態碼:: 201

{
  "name": "clustername1",
  "type": "Microsoft.ContainerService/managedClusters",
  "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1",
  "identity": {
    "type": "UserAssigned",
    "userAssignedIdentities": {
      "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgName1/providers/Microsoft.ManagedIdentity/userAssignedIdentities/identity1": {
        "clientId": "clientId1",
        "principalId": "principalId1"
      }
    }
  },
  "location": "location1",
  "properties": {
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "availabilityZones": [
          "1",
          "2",
          "3"
        ],
        "count": 3,
        "currentOrchestratorVersion": "1.22.1",
        "enableNodePublicIP": true,
        "maxPods": 110,
        "mode": "System",
        "orchestratorVersion": "1.22.1",
        "osType": "Linux",
        "provisioningState": "Creating",
        "scaleDownMode": "Deallocate",
        "vmSize": "Standard_DS1_v2"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "currentKubernetesVersion": "1.22.1",
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "kubernetesVersion": "1.22.1",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "maxAgentPools": 1,
    "networkProfile": {
      "dnsServiceIP": "10.0.0.10",
      "ipFamilies": [
        "IPv4",
        "IPv6"
      ],
      "loadBalancerProfile": {
        "allocatedOutboundPorts": 2000,
        "effectiveOutboundIPs": [
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip1"
          },
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip2"
          },
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip3-ipv6"
          }
        ],
        "idleTimeoutInMinutes": 10,
        "managedOutboundIPs": {
          "count": 2,
          "countIPv6": 1
        }
      },
      "loadBalancerSku": "standard",
      "networkPlugin": "kubenet",
      "outboundType": "loadBalancer",
      "podCidr": "10.244.0.0/16",
      "podCidrs": [
        "10.244.0.0/16",
        "fd11:1234::/64"
      ],
      "serviceCidr": "10.0.0.0/16",
      "serviceCidrs": [
        "10.0.0.0/16",
        "fd00:1234::/108"
      ]
    },
    "nodeResourceGroup": "MC_rg1_clustername1_location1",
    "provisioningState": "Creating",
    "servicePrincipalProfile": {
      "clientId": "clientid"
    },
    "windowsProfile": {
      "adminUsername": "azureuser"
    }
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

Create/Update Managed Cluster with EnableAHUB

範例要求

HTTP
Python

PUT https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1?api-version=2026-01-01

{
  "identity": {
    "type": "UserAssigned",
    "userAssignedIdentities": {
      "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgName1/providers/Microsoft.ManagedIdentity/userAssignedIdentities/identity1": {}
    }
  },
  "location": "location1",
  "properties": {
    "addonProfiles": {},
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "availabilityZones": [
          "1",
          "2",
          "3"
        ],
        "count": 3,
        "enableNodePublicIP": true,
        "mode": "System",
        "osType": "Linux",
        "vmSize": "Standard_DS1_v2"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "kubernetesVersion": "",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "networkProfile": {
      "loadBalancerProfile": {
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "standard",
      "outboundType": "loadBalancer"
    },
    "servicePrincipalProfile": {
      "clientId": "clientid",
      "secret": "secret"
    },
    "windowsProfile": {
      "adminPassword": "replacePassword1234$",
      "adminUsername": "azureuser",
      "licenseType": "Windows_Server"
    }
  },
  "sku": {
    "name": "Basic",
    "tier": "Free"
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

from azure.identity import DefaultAzureCredential

from azure.mgmt.containerservice import ContainerServiceClient

"""
# PREREQUISITES
    pip install azure-identity
    pip install azure-mgmt-containerservice
# USAGE
    python managed_clusters_create_update_with_ahub.py

    Before run the sample, please set the values of the client ID, tenant ID and client secret
    of the AAD application as environment variables: AZURE_CLIENT_ID, AZURE_TENANT_ID,
    AZURE_CLIENT_SECRET. For more info about how to get the value, please see:
    https://docs.microsoft.com/azure/active-directory/develop/howto-create-service-principal-portal
"""


def main():
    client = ContainerServiceClient(
        credential=DefaultAzureCredential(),
        subscription_id="SUBSCRIPTION_ID",
    )

    response = client.managed_clusters.begin_create_or_update(
        resource_group_name="rg1",
        resource_name="clustername1",
        parameters={
            "identity": {
                "type": "UserAssigned",
                "userAssignedIdentities": {
                    "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgName1/providers/Microsoft.ManagedIdentity/userAssignedIdentities/identity1": {}
                },
            },
            "location": "location1",
            "properties": {
                "addonProfiles": {},
                "agentPoolProfiles": [
                    {
                        "availabilityZones": ["1", "2", "3"],
                        "count": 3,
                        "enableNodePublicIP": True,
                        "mode": "System",
                        "name": "nodepool1",
                        "osType": "Linux",
                        "type": "VirtualMachineScaleSets",
                        "vmSize": "Standard_DS1_v2",
                    }
                ],
                "autoScalerProfile": {"scale-down-delay-after-add": "15m", "scan-interval": "20s"},
                "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
                "dnsPrefix": "dnsprefix1",
                "enableRBAC": True,
                "kubernetesVersion": "",
                "linuxProfile": {"adminUsername": "azureuser", "ssh": {"publicKeys": [{"keyData": "keydata"}]}},
                "networkProfile": {
                    "loadBalancerProfile": {"managedOutboundIPs": {"count": 2}},
                    "loadBalancerSku": "standard",
                    "outboundType": "loadBalancer",
                },
                "servicePrincipalProfile": {"clientId": "clientid", "secret": "secret"},
                "windowsProfile": {
                    "adminPassword": "replacePassword1234$",
                    "adminUsername": "azureuser",
                    "licenseType": "Windows_Server",
                },
            },
            "sku": {"name": "Basic", "tier": "Free"},
            "tags": {"archv2": "", "tier": "production"},
        },
    ).result()
    print(response)


# x-ms-original-file: 2026-01-01/ManagedClustersCreate_UpdateWithAHUB.json
if __name__ == "__main__":
    main()

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

範例回覆

狀態碼:: 200

{
  "name": "clustername1",
  "type": "Microsoft.ContainerService/managedClusters",
  "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1",
  "identity": {
    "type": "UserAssigned",
    "userAssignedIdentities": {
      "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgName1/providers/Microsoft.ManagedIdentity/userAssignedIdentities/identity1": {
        "clientId": "clientId1",
        "principalId": "principalId1"
      }
    }
  },
  "location": "location1",
  "properties": {
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "availabilityZones": [
          "1",
          "2",
          "3"
        ],
        "count": 3,
        "currentOrchestratorVersion": "1.9.6",
        "enableNodePublicIP": true,
        "maxPods": 110,
        "mode": "System",
        "nodeImageVersion": "AKSUbuntu:1604:2020.03.11",
        "orchestratorVersion": "1.9.6",
        "osType": "Linux",
        "provisioningState": "Succeeded",
        "vmSize": "Standard_DS1_v2"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "currentKubernetesVersion": "1.9.6",
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "fqdn": "dnsprefix1-abcd1234.hcp.eastus.azmk8s.io",
    "kubernetesVersion": "1.9.6",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "maxAgentPools": 1,
    "networkProfile": {
      "dnsServiceIP": "10.0.0.10",
      "ipFamilies": [
        "IPv4"
      ],
      "loadBalancerProfile": {
        "allocatedOutboundPorts": 2000,
        "effectiveOutboundIPs": [
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip1"
          },
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip2"
          }
        ],
        "idleTimeoutInMinutes": 10,
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "basic",
      "networkPlugin": "kubenet",
      "outboundType": "loadBalancer",
      "podCidr": "10.244.0.0/16",
      "podCidrs": [
        "10.244.0.0/16"
      ],
      "serviceCidr": "10.0.0.0/16",
      "serviceCidrs": [
        "10.0.0.0/16"
      ]
    },
    "nodeResourceGroup": "MC_rg1_clustername1_location1",
    "provisioningState": "Succeeded",
    "servicePrincipalProfile": {
      "clientId": "clientid"
    },
    "windowsProfile": {
      "adminUsername": "azureuser",
      "licenseType": "Windows_Server"
    }
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

狀態碼:: 201

{
  "name": "clustername1",
  "type": "Microsoft.ContainerService/managedClusters",
  "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1",
  "identity": {
    "type": "UserAssigned",
    "userAssignedIdentities": {
      "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgName1/providers/Microsoft.ManagedIdentity/userAssignedIdentities/identity1": {
        "clientId": "clientId1",
        "principalId": "principalId1"
      }
    }
  },
  "location": "location1",
  "properties": {
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "availabilityZones": [
          "1",
          "2",
          "3"
        ],
        "count": 3,
        "currentOrchestratorVersion": "1.9.6",
        "enableNodePublicIP": true,
        "maxPods": 110,
        "mode": "System",
        "orchestratorVersion": "1.9.6",
        "osType": "Linux",
        "provisioningState": "Creating",
        "vmSize": "Standard_DS1_v2"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "currentKubernetesVersion": "1.9.6",
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "kubernetesVersion": "1.9.6",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "maxAgentPools": 1,
    "networkProfile": {
      "dnsServiceIP": "10.0.0.10",
      "ipFamilies": [
        "IPv4"
      ],
      "loadBalancerProfile": {
        "allocatedOutboundPorts": 2000,
        "effectiveOutboundIPs": [
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip1"
          },
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip2"
          }
        ],
        "idleTimeoutInMinutes": 10,
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "standard",
      "networkPlugin": "kubenet",
      "outboundType": "loadBalancer",
      "podCidr": "10.244.0.0/16",
      "podCidrs": [
        "10.244.0.0/16"
      ],
      "serviceCidr": "10.0.0.0/16",
      "serviceCidrs": [
        "10.0.0.0/16"
      ]
    },
    "nodeResourceGroup": "MC_rg1_clustername1_location1",
    "provisioningState": "Creating",
    "servicePrincipalProfile": {
      "clientId": "clientid"
    },
    "windowsProfile": {
      "adminUsername": "azureuser",
      "licenseType": "Windows_Server"
    }
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

Create/Update Managed Cluster with Windows gMSA enabled

範例要求

HTTP
Python

PUT https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1?api-version=2026-01-01

{
  "identity": {
    "type": "UserAssigned",
    "userAssignedIdentities": {
      "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgName1/providers/Microsoft.ManagedIdentity/userAssignedIdentities/identity1": {}
    }
  },
  "location": "location1",
  "properties": {
    "addonProfiles": {},
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "availabilityZones": [
          "1",
          "2",
          "3"
        ],
        "count": 3,
        "enableNodePublicIP": true,
        "mode": "System",
        "osType": "Linux",
        "vmSize": "Standard_DS1_v2"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "kubernetesVersion": "",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "networkProfile": {
      "loadBalancerProfile": {
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "standard",
      "outboundType": "loadBalancer"
    },
    "servicePrincipalProfile": {
      "clientId": "clientid",
      "secret": "secret"
    },
    "windowsProfile": {
      "adminPassword": "replacePassword1234$",
      "adminUsername": "azureuser",
      "gmsaProfile": {
        "enabled": true
      }
    }
  },
  "sku": {
    "name": "Basic",
    "tier": "Free"
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

from azure.identity import DefaultAzureCredential

from azure.mgmt.containerservice import ContainerServiceClient

"""
# PREREQUISITES
    pip install azure-identity
    pip install azure-mgmt-containerservice
# USAGE
    python managed_clusters_create_update_windows_gmsa.py

    Before run the sample, please set the values of the client ID, tenant ID and client secret
    of the AAD application as environment variables: AZURE_CLIENT_ID, AZURE_TENANT_ID,
    AZURE_CLIENT_SECRET. For more info about how to get the value, please see:
    https://docs.microsoft.com/azure/active-directory/develop/howto-create-service-principal-portal
"""


def main():
    client = ContainerServiceClient(
        credential=DefaultAzureCredential(),
        subscription_id="SUBSCRIPTION_ID",
    )

    response = client.managed_clusters.begin_create_or_update(
        resource_group_name="rg1",
        resource_name="clustername1",
        parameters={
            "identity": {
                "type": "UserAssigned",
                "userAssignedIdentities": {
                    "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgName1/providers/Microsoft.ManagedIdentity/userAssignedIdentities/identity1": {}
                },
            },
            "location": "location1",
            "properties": {
                "addonProfiles": {},
                "agentPoolProfiles": [
                    {
                        "availabilityZones": ["1", "2", "3"],
                        "count": 3,
                        "enableNodePublicIP": True,
                        "mode": "System",
                        "name": "nodepool1",
                        "osType": "Linux",
                        "type": "VirtualMachineScaleSets",
                        "vmSize": "Standard_DS1_v2",
                    }
                ],
                "autoScalerProfile": {"scale-down-delay-after-add": "15m", "scan-interval": "20s"},
                "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
                "dnsPrefix": "dnsprefix1",
                "enableRBAC": True,
                "kubernetesVersion": "",
                "linuxProfile": {"adminUsername": "azureuser", "ssh": {"publicKeys": [{"keyData": "keydata"}]}},
                "networkProfile": {
                    "loadBalancerProfile": {"managedOutboundIPs": {"count": 2}},
                    "loadBalancerSku": "standard",
                    "outboundType": "loadBalancer",
                },
                "servicePrincipalProfile": {"clientId": "clientid", "secret": "secret"},
                "windowsProfile": {
                    "adminPassword": "replacePassword1234$",
                    "adminUsername": "azureuser",
                    "gmsaProfile": {"enabled": True},
                },
            },
            "sku": {"name": "Basic", "tier": "Free"},
            "tags": {"archv2": "", "tier": "production"},
        },
    ).result()
    print(response)


# x-ms-original-file: 2026-01-01/ManagedClustersCreate_UpdateWindowsGmsa.json
if __name__ == "__main__":
    main()

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

範例回覆

狀態碼:: 200

{
  "name": "clustername1",
  "type": "Microsoft.ContainerService/managedClusters",
  "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1",
  "identity": {
    "type": "UserAssigned",
    "userAssignedIdentities": {
      "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgName1/providers/Microsoft.ManagedIdentity/userAssignedIdentities/identity1": {
        "clientId": "clientId1",
        "principalId": "principalId1"
      }
    }
  },
  "location": "location1",
  "properties": {
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "availabilityZones": [
          "1",
          "2",
          "3"
        ],
        "count": 3,
        "currentOrchestratorVersion": "1.9.6",
        "enableNodePublicIP": true,
        "maxPods": 110,
        "mode": "System",
        "nodeImageVersion": "AKSUbuntu:1604:2020.03.11",
        "orchestratorVersion": "1.9.6",
        "osType": "Linux",
        "provisioningState": "Succeeded",
        "vmSize": "Standard_DS1_v2"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "currentKubernetesVersion": "1.9.6",
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "fqdn": "dnsprefix1-abcd1234.hcp.eastus.azmk8s.io",
    "kubernetesVersion": "1.9.6",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "maxAgentPools": 1,
    "networkProfile": {
      "dnsServiceIP": "10.0.0.10",
      "ipFamilies": [
        "IPv4"
      ],
      "loadBalancerProfile": {
        "allocatedOutboundPorts": 2000,
        "effectiveOutboundIPs": [
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip1"
          },
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip2"
          }
        ],
        "idleTimeoutInMinutes": 10,
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "basic",
      "networkPlugin": "kubenet",
      "outboundType": "loadBalancer",
      "podCidr": "10.244.0.0/16",
      "podCidrs": [
        "10.244.0.0/16"
      ],
      "serviceCidr": "10.0.0.0/16",
      "serviceCidrs": [
        "10.0.0.0/16"
      ]
    },
    "nodeResourceGroup": "MC_rg1_clustername1_location1",
    "provisioningState": "Succeeded",
    "servicePrincipalProfile": {
      "clientId": "clientid"
    },
    "windowsProfile": {
      "adminUsername": "azureuser",
      "gmsaProfile": {
        "enabled": true
      }
    }
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

狀態碼:: 201

{
  "name": "clustername1",
  "type": "Microsoft.ContainerService/managedClusters",
  "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.ContainerService/managedClusters/clustername1",
  "identity": {
    "type": "UserAssigned",
    "userAssignedIdentities": {
      "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgName1/providers/Microsoft.ManagedIdentity/userAssignedIdentities/identity1": {
        "clientId": "clientId1",
        "principalId": "principalId1"
      }
    }
  },
  "location": "location1",
  "properties": {
    "agentPoolProfiles": [
      {
        "name": "nodepool1",
        "type": "VirtualMachineScaleSets",
        "availabilityZones": [
          "1",
          "2",
          "3"
        ],
        "count": 3,
        "currentOrchestratorVersion": "1.9.6",
        "enableNodePublicIP": true,
        "maxPods": 110,
        "mode": "System",
        "orchestratorVersion": "1.9.6",
        "osType": "Linux",
        "provisioningState": "Creating",
        "vmSize": "Standard_DS1_v2"
      }
    ],
    "autoScalerProfile": {
      "scale-down-delay-after-add": "15m",
      "scan-interval": "20s"
    },
    "currentKubernetesVersion": "1.9.6",
    "diskEncryptionSetID": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/diskEncryptionSets/des",
    "dnsPrefix": "dnsprefix1",
    "enableRBAC": true,
    "kubernetesVersion": "1.9.6",
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "keydata"
          }
        ]
      }
    },
    "maxAgentPools": 1,
    "networkProfile": {
      "dnsServiceIP": "10.0.0.10",
      "ipFamilies": [
        "IPv4"
      ],
      "loadBalancerProfile": {
        "allocatedOutboundPorts": 2000,
        "effectiveOutboundIPs": [
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip1"
          },
          {
            "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_rg1/providers/Microsoft.Network/publicIPAddresses/mgdoutboundip2"
          }
        ],
        "idleTimeoutInMinutes": 10,
        "managedOutboundIPs": {
          "count": 2
        }
      },
      "loadBalancerSku": "standard",
      "networkPlugin": "kubenet",
      "outboundType": "loadBalancer",
      "podCidr": "10.244.0.0/16",
      "podCidrs": [
        "10.244.0.0/16"
      ],
      "serviceCidr": "10.0.0.0/16",
      "serviceCidrs": [
        "10.0.0.0/16"
      ]
    },
    "nodeResourceGroup": "MC_rg1_clustername1_location1",
    "provisioningState": "Creating",
    "servicePrincipalProfile": {
      "clientId": "clientid"
    },
    "windowsProfile": {
      "adminUsername": "azureuser",
      "gmsaProfile": {
        "enabled": true
      }
    }
  },
  "tags": {
    "archv2": "",
    "tier": "production"
  }
}

定義

名稱	Description
AccelerationMode	啟用進階網路加速選項。這允許用戶使用 BPF 主機路由配置加速。這只能透過 Cilium 資料平面啟用。如果未指定，預設值為 None （無加速）。加速模式可以在預先存在的叢集上變更。詳細說明見https://aka.ms/acnsperformance
AdvancedNetworking	在叢集上啟用可檢視性和安全性功能套件的進階網路配置檔。如需詳細資訊，請參閱 aka.ms/aksadvancednetworking。
AdvancedNetworkingObservability	可檢視性配置檔，可啟用具有歷程記錄內容的進階網路計量和流量記錄。
AdvancedNetworkingPerformance	設定檔可啟用使用 Azure CNI 由 Cilium 驅動的叢集的效能提升功能。
AdvancedNetworkingSecurity	安全性配置檔，以在 cilium 型叢集上啟用安全性功能。
AdvancedNetworkingSecurityTransitEncryption	基於 Cilium 的集群的加密配置。啟用后，Cilium 託管的 Pod 之間的所有流量在離開節點邊界時都將被加密。
AdvancedNetworkPolicies	啟用高級網路策略。這可讓用戶設定第 7 層網路原則（FQDN、HTTP、Kafka）。原則本身必須透過 Cilium 網路原則資源進行設定，請參閱 https://docs.cilium.io/en/latest/security/policy/index.html。這隻能在 cilium 型叢集上啟用。如果未指定，如果 security.enabled 設定為 true，則預設值為 FQDN。
AgentPoolGatewayProfile	受控叢集網關代理程式集區的配置檔。
AgentPoolMode	代理程式集區的模式。叢集必須隨時至少有一個「系統」代理程式集區。如需代理程式集區限制和最佳做法的其他資訊，請參閱：https://docs.microsoft.com/azure/aks/use-system-pools
AgentPoolNetworkProfile	代理程式集區的網路設定。
AgentPoolSecurityProfile	代理程式集區的安全性設定。
AgentPoolSSHAccess	代理池的 SSH access 方法。
AgentPoolStatus	包含代理程式集區的唯讀資訊。
AgentPoolType	Agent 集區的類型。
AgentPoolUpgradeSettings	升級代理程式集池的設定
AgentPoolWindowsProfile	Windows 代理程式集區的特定配置檔。
ArtifactSource	成品來源。從下載成品的來源。
AzureKeyVaultKms	安全性配置檔的 Azure Key Vault 金鑰管理服務設定。
BackendPoolType	受管理的入站 Load Balancer BackendPool 類型。
ClusterUpgradeSettings	升級叢集的設定。
Code	告知叢集是否正在執行或已停止
ContainerServiceLinuxProfile	容器服務叢集中Linux VM的配置檔。
ContainerServiceNetworkProfile	網路組態的配置檔。
ContainerServiceSshConfiguration	在 Azure 上執行的 Linux 型 VM 的 SSH 組態。
ContainerServiceSshPublicKey	包含 SSH 憑證公鑰數據的相關信息。
createdByType	建立資源的身分識別類型。
CreationData	從來源資源建立目標資源時所使用的數據。
DelegatedResource	委派的資源屬性 - 僅供內部使用。
ErrorAdditionalInfo	資源管理錯誤其他資訊。
ErrorDetail	錯誤詳細數據。
ErrorResponse	錯誤回應
Expander	縱向擴展時要使用的擴展器。如果未指定，則預設值為『random』。更多資訊請參見擴展器。
ExtendedLocation	擴充位置的複雜類型。
ExtendedLocationTypes	extendedLocation 的類型。
GPUDriver	是否要安裝 GPU 驅動程式。未指定時，預設值為 [安裝]。
GPUInstanceProfile	要用來為支援的 GPU VM SKU 指定 GPU MIG 實例設定檔的 GPUInstanceProfile。
GPUProfile	代理程式集區的 GPU 設定。
IPFamily	判斷位址是否屬於 IPv4 或 IPv6 系列
IPTag	包含與對象相關聯的IPTag。
IstioCertificateAuthority	Istio Service Mesh 證書頒發機構單位（CA）組態。目前，我們僅支援外掛程式憑證，如這裡所述 https://aka.ms/asm-plugin-ca
IstioComponents	Istio 元件設定。
IstioEgressGateway	Istio 輸出閘道組態。
IstioIngressGateway	Istio 輸入閘道組態。目前，我們最多支援一個名為 `aks-istio-ingressgateway-external` 的外部輸入閘道，以及一個名為 `aks-istio-ingressgateway-internal`的內部輸入閘道。
IstioIngressGatewayMode	輸入閘道的模式。
IstioPluginCertificateAuthority	Service Mesh 的外掛程式憑證資訊。
IstioServiceMesh	Istio 服務網格設定。
KeyVaultNetworkAccessTypes	key vault的access網絡。金鑰保存庫的網路存取。可能的值為 `Public` 和 `Private`。 `Public` 表示key vault允許所有網路的公開access。 `Private` 表示key vault會停用公共access並啟用private link。預設值為 `Public`。
KubeletConfig	代理程序節點的 Kubelet 組態。如需詳細資訊，請參閱 AKS 自定義節點組態。
KubeletDiskType	決定空 Dir 卷的放置位置、容器執行時資料根，以及 Kubelet 臨時儲存（ephemeral storage）。
KubernetesSupportPlan	AKS 受控叢集的不同支援層
LicenseType	要用於 Windows VM 的授權類型。詳情請參見 Azure 混合用戶優勢。
LinuxOSConfig	Linux 代理程序節點的 OS 組態。如需詳細資訊，請參閱 AKS 自定義節點組態。
LoadBalancerSku	受控叢集的負載平衡器 SKU。默認值為『standard』。欲了解load balancer SKU 差異，請參見 Azure Load Balancer SKUs。
LocalDNSForwardDestination	要從 localDNS 轉發的 DNS 查詢的目標伺服器。
LocalDNSForwardPolicy	用於選擇上游 DNS 伺服器的轉發策略。有關更多資訊，請參閱 forward plugin 。
LocalDNSMode	localDNS 的啟用模式。
LocalDNSOverride	localDNS 設定檔的覆蓋。
LocalDNSProfile	使用 VnetDNS 和 KubeDNS 覆蓋配置每個節點的本地 DNS。 LocalDNS 有助於提高 AKS 群集中 DNS 解析的性能和可靠性。有關更多詳細資訊，請參閱 aka.ms/aks/localdns。
LocalDNSProtocol	對於從 localDNS 到上游 DNS 伺服器的連接，強制執行 TCP 或首選 UDP 協定。
LocalDNSQueryLogging	localDNS 中 DNS 查詢的日誌級別。
LocalDNSServeStale	用於提供過時數據的策略。有關更多資訊，請參閱緩存外掛程式。
LocalDNSState	系統產生的 localDNS 狀態。
ManagedCluster	託管集群。
ManagedClusterAADProfile	AADProfile 會指定 Azure Active Directory 整合的屬性。如需詳細資訊，請參閱在 AKS上受控 AAD。
ManagedClusterAddonProfile	受控叢集的 Kubernetes 附加元件配置檔。
ManagedClusterAddonProfileIdentity	此附加元件所使用的使用者指派身分識別資訊。
ManagedClusterAgentPoolProfile	容器服務代理程式集區的配置檔。
ManagedClusterAIToolchainOperatorProfile	啟用操作員時，叢集中將會安裝一組 AKS 受控 CRD 和控制器。操作員會針對推斷和/或定型目的，自動部署 OSS 模型。它提供一組預設模型，並針對它們啟用分散式推斷。
ManagedClusterAPIServerAccessProfile	受控叢集 API 伺服器的存取設定檔。
ManagedClusterAutoUpgradeProfile	受控叢集的自動升級配置檔。
ManagedClusterAzureMonitorProfile	Azure Monitor 外掛配置檔用於監控受管理叢集。
ManagedClusterAzureMonitorProfileKubeStateMetrics	Kube State Metrics profile for the Azure Managed Prometheus addon. 這些選擇性設定適用於使用附加元件部署的 kube-state-metrics Pod。如需詳細資訊，請參閱 aka.ms/AzureManagedPrometheus-optional-parameters。
ManagedClusterAzureMonitorProfileMetrics	Metrics profile for the Azure Monitor managed service for Prometheus addon. 收集開箱即用的 Kubernetes 基礎架構指標，傳送至 Azure Monitor 工作區，並為自訂目標設定額外的爬蟲功能。如需概觀，請參閱 aka.ms/AzureManagedPrometheus。
ManagedClusterBootstrapProfile	啟動程式配置檔。
ManagedClusterCostAnalysis	叢集的成本分析組態
ManagedClusterHTTPProxyConfig	叢集 HTTP Proxy 設定。
ManagedClusterIdentity	受控叢集的身分識別。
ManagedClusterIngressProfile	容器服務叢集的輸入配置檔。
ManagedClusterIngressProfileNginx	Nginx 輸入控制器配置，用於管理叢集輸入設定檔。
ManagedClusterIngressProfileWebAppRouting	輸入配置檔的應用程式路由附加元件設定。
ManagedClusterLoadBalancerProfile	受控叢集負載平衡器的配置檔。
ManagedClusterLoadBalancerProfileManagedOutboundIPs	叢集load balancer想要的託管外站 IP。
ManagedClusterLoadBalancerProfileOutboundIPPrefixes	叢集負載平衡器所需的輸出 IP 前綴資源。
ManagedClusterLoadBalancerProfileOutboundIPs	叢集負載平衡器所需的輸出IP資源。
ManagedClusterManagedOutboundIPProfile	受控叢集的受控輸出IP資源配置檔。
ManagedClusterMetricsProfile	ManagedCluster 的計量配置檔。
ManagedClusterNATGatewayProfile	受控叢集 NAT 閘道的配置檔。
ManagedClusterNodeProvisioningProfile	管理叢集的節點配置設定檔。
ManagedClusterNodeResourceGroupProfile	受控叢集的節點資源群組鎖定配置檔。
ManagedClusterOIDCIssuerProfile	受控叢集的 OIDC 簽發者配置檔。
ManagedClusterPodIdentity	指派給受控叢集之 Pod 身分識別的詳細數據。
ManagedClusterPodIdentityException	Pod 身分識別例外狀況，可讓具有特定標籤的 Pod 存取 Azure 實例元數據服務（IMDS）端點，而不會遭到節點受控識別（NMI）伺服器攔截。如需詳細資訊，請參閱停用特定 Pod/應用程式的 AAD Pod 身分識別。
ManagedClusterPodIdentityProfile	受控叢集的Pod身分識別配置檔。如需Pod身分識別整合的詳細資訊，請參閱使用 AAD Pod 身分識別。
ManagedClusterPodIdentityProvisioningError	Pod 身分識別布建的錯誤回應。
ManagedClusterPodIdentityProvisioningErrorBody	Pod 身分識別布建的錯誤回應。
ManagedClusterPodIdentityProvisioningInfo	Pod 身份配置資訊。
ManagedClusterPodIdentityProvisioningState	網繭身分識別的目前佈建狀態。
ManagedClusterPropertiesAutoScalerProfile	啟用時要套用至叢集自動調整程序的參數
ManagedClusterSecurityProfile	容器服務叢集的安全性配置檔。
ManagedClusterSecurityProfileDefender	Microsoft Defender 的安全設定檔設定。
ManagedClusterSecurityProfileDefenderSecurityMonitoring	Microsoft安全性配置文件威脅偵測的 Defender 設定。
ManagedClusterSecurityProfileImageCleaner	影像清除工具會從節點移除未使用的映像、釋放磁碟空間，並協助減少受攻擊面區域。以下是安全性配置檔的設定。
ManagedClusterSecurityProfileWorkloadIdentity	安全性配置檔的工作負載身分識別設定。
ManagedClusterServicePrincipalProfile	關於叢集用來操作 Azure API 的服務主體身份資訊。
ManagedClusterSKU	受控叢集的SKU。
ManagedClusterSKUName	受控叢集 SKU 的名稱。
ManagedClusterSKUTier	受控叢集 SKU 的層。如果未指定，則預設值為『Free』。詳情請參見 AKS 定價層級。
ManagedClusterStaticEgressGatewayProfile	叢集的靜態輸出閘道附加元件組態。
ManagedClusterStatus	包含受控叢集的唯讀資訊。
ManagedClusterStorageProfile	容器服務叢集的記憶體配置檔。
ManagedClusterStorageProfileBlobCSIDriver	AzureBlob CSI 驅動程式設定中的 storage 設定檔。
ManagedClusterStorageProfileDiskCSIDriver	AzureDisk CSI 驅動程式設定中 storage profile 的設定。
ManagedClusterStorageProfileFileCSIDriver	AzureFile CSI 驅動程式設定中的 storage 設定檔。
ManagedClusterStorageProfileSnapshotController	storage profile 的快照控制器設定。
ManagedClusterWindowsProfile	受控叢集中 Windows VM 的配置檔。
ManagedClusterWorkloadAutoScalerProfile	受控叢集的工作負載自動調整程式配置檔。
ManagedClusterWorkloadAutoScalerProfileKeda	適用於工作負載自動調整程式配置檔的KEDA （Kubernetes 事件驅動自動調整）設定。
ManagedClusterWorkloadAutoScalerProfileVerticalPodAutoscaler	工作負載自動調整程式設定檔的 VPA （垂直 Pod 自動調整程式）設定。
ManagedServiceIdentityUserAssignedIdentitiesValue	使用者指派的身分識別屬性。
ManualScaleProfile	機器數目的規格。
NetworkDataplane	Kubernetes 叢集中所使用的網路數據平面。
NetworkMode	Azure CNI 所設定的網路模式。如果 networkPlugin 不是 'azure'，則無法指定這個功能。
NetworkPlugin	用於建置 Kubernetes 網路的網路外掛程式。
NetworkPluginMode	網路外掛程式應該使用的模式。
NetworkPolicy	用於建置 Kubernetes 網路的網路原則。
NginxIngressControllerType	默認 NginxIngressController 自訂資源的輸入類型
NodeOSUpgradeChannel	節點作系統升級通道。更新節點上OS的方式。預設值為 NodeImage。
NodeProvisioningDefaultNodePools	為節點預置配置的預設 Karpenter 節點池（CRD）集。除非mode為 'Auto'，否則此欄位無效。警告：在現有集群上將其從 Auto 更改為 None 將導致預設的 Karpenter NodePools 被刪除，這將耗盡並刪除與這些池關聯的節點。強烈建議不要這樣做，除非有空閒節點準備好接收該作驅逐的 Pod。如果未指定，則預設值為 Auto。有關更多資訊，請參閱 aka.ms/aks/nap#node-pools。
NodeProvisioningMode	節點布建模式。如果未指定，則預設值為Manual。
OSDiskType	要用於代理程式集區中機器的 OS 磁碟類型。如果 VM 支援，且快取磁碟大於要求的 OSDiskSizeGB，則預設值為「暫時」。否則，預設為「受控」。建立之後可能不會變更。更多資訊請參見 Ephemeral OS。
OSSKU	指定代理程式集區所使用的 OS SKU。如果OSType為Linux，則預設值為Ubuntu。當 Kubernetes <= 1.24 或 Windows2022 時，如果 OSType >為 Windows，則預設值為 Windows2019。
OSType	作系統類型。預設值為Linux。
OutboundType	輸出（輸出）路由方法。這隻能在叢集建立期間設定，且稍後無法變更。更多資訊請參見出口類型。
PodIPAllocationMode	Pod IP 分配模式。代理程式集區中 Pod 的 IP 配置模式。必須與 podSubnetId 搭配使用。預設值為『DynamicIndividual』。
PortRange	埠範圍。
PowerState	描述叢集的電源狀態
PrivateLinkResource	私人鏈接資源
Protocol	埠的網路通訊協定。
ProxyRedirectionMechanism	流量重新導向的模式。
PublicNetworkAccess	PublicNetworkAccess 的 PublicNetworkAccess 中。允許或拒絕 AKS 的公共網路 access
ResourceIdentityType	用於受控叢集的身分識別類型。欲了解更多資訊，請參閱 AKS 中的 use 管理身份。
ResourceReference	Azure 資源的參考。
RestrictionLevel	套用至叢集節點資源群組的限制層級。如果未指定，預設值為 'Unrestricted'
ScaleDownMode	描述如何將 VM 新增至代理程式集區或從代理程式集區移除。請參閱計費狀態。
ScaleProfile	如何調整 VirtualMachines 代理程式集區的規格。
ScaleSetEvictionPolicy	虛擬機器擴展集收回原則。驅逐政策會明確說明當虛擬機被驅逐時to do什麼。預設值為刪除。欲了解更多驅逐資訊，請參見 spot VMs
ScaleSetPriority	虛擬機擴展集優先順序。
ServiceMeshMode	服務網格的模式。
ServiceMeshProfile	受控叢集的服務網格配置檔。
SysctlConfig	Linux 代理程序節點的 Sysctl 設定。
systemData	與建立和上次修改資源相關的元數據。
TransitEncryptionType	配置 Pod 到 Pod 加密。這隻能在 Cilium 型叢集上啟用。如果未指定，預設值為 None。
UndrainableNodeBehavior	定義升級期間無法透支節點的行為。無法透支節點最常見的原因是 Pod 中斷預算（PDB），但其他問題，例如 Pod 終止寬限期超過剩餘的個別節點清空逾時，或 Pod 仍在執行中狀態，也可能導致無法執行的節點。
UpgradeChannel	自動升級的升級通道。預設值為『none』。更多資訊請參見 setting AKS 叢集自動升級通道。
UpgradeOverrideSettings	升級叢集時覆寫的設定。
UserAssignedIdentity	使用者指派身分識別的詳細數據。
VirtualMachineNodes	相同 VM 大小的節點群組目前狀態。
VirtualMachinesProfile	VirtualMachines 代理程式集區的規格。
WindowsGmsaProfile	受控叢集中的 Windows gMSA 配置檔。
WorkloadRuntime	決定節點可執行的工作負載類型。

AccelerationMode

列舉型別

啟用進階網路加速選項。這允許用戶使用 BPF 主機路由配置加速。這只能透過 Cilium 資料平面啟用。如果未指定，預設值為 None （無加速）。加速模式可以在預先存在的叢集上變更。詳細說明見https://aka.ms/acnsperformance

值	Description
BpfVeth	使用 veth 裝置模式啟用 eBPF 主機路由。
None	停用加速選項。

AdvancedNetworking

Object

在叢集上啟用可檢視性和安全性功能套件的進階網路配置檔。如需詳細資訊，請參閱 aka.ms/aksadvancednetworking。

名稱	類型	Description
enabled	boolean	表示啟用 AKS 叢集上可檢視性和安全性的進階網路功能。當此設定為 true 時，除非明確停用，否則所有可檢視性和安全性功能都會設定為啟用。如果未指定，則預設值為 false。
observability	AdvancedNetworkingObservability	可檢視性配置檔，可啟用具有歷程記錄內容的進階網路計量和流量記錄。
performance	AdvancedNetworkingPerformance	設定檔可啟用使用 Azure CNI 由 Cilium 驅動的叢集的效能提升功能。
security	AdvancedNetworkingSecurity	安全性配置檔，以在 cilium 型叢集上啟用安全性功能。

AdvancedNetworkingObservability

Object

可檢視性配置檔，可啟用具有歷程記錄內容的進階網路計量和流量記錄。

名稱	類型	Description
enabled	boolean	表示在叢集上啟用進階網路可檢視性功能。

AdvancedNetworkingPerformance

Object

設定檔可啟用使用 Azure CNI 由 Cilium 驅動的叢集的效能提升功能。

名稱	類型	預設值	Description
accelerationMode	AccelerationMode	None	啟用進階網路加速選項。這允許用戶使用 BPF 主機路由配置加速。這只能透過 Cilium 資料平面啟用。如果未指定，預設值為 None （無加速）。加速模式可以在預先存在的叢集上變更。詳細說明見https://aka.ms/acnsperformance

AdvancedNetworkingSecurity

Object

安全性配置檔，以在 cilium 型叢集上啟用安全性功能。

名稱	類型	Description
advancedNetworkPolicies	AdvancedNetworkPolicies	啟用高級網路策略。這可讓用戶設定第 7 層網路原則（FQDN、HTTP、Kafka）。原則本身必須透過 Cilium 網路原則資源進行設定，請參閱 https://docs.cilium.io/en/latest/security/policy/index.html。這隻能在 cilium 型叢集上啟用。如果未指定，如果 security.enabled 設定為 true，則預設值為 FQDN。
enabled	boolean	此功能可讓使用者根據 DNS （FQDN）名稱來設定網路原則。它只能在 cilium 型叢集上啟用。如果未指定，則預設值為 false。
transitEncryption	AdvancedNetworkingSecurityTransitEncryption	基於 Cilium 的集群的加密配置。啟用后，Cilium 託管的 Pod 之間的所有流量在離開節點邊界時都將被加密。

AdvancedNetworkingSecurityTransitEncryption

Object

基於 Cilium 的集群的加密配置。啟用后，Cilium 託管的 Pod 之間的所有流量在離開節點邊界時都將被加密。

名稱	類型	Description
type	TransitEncryptionType	配置 Pod 到 Pod 加密。這隻能在 Cilium 型叢集上啟用。如果未指定，預設值為 None。

AdvancedNetworkPolicies

列舉型別

啟用高級網路策略。這可讓用戶設定第 7 層網路原則（FQDN、HTTP、Kafka）。原則本身必須透過 Cilium 網路原則資源進行設定，請參閱 https://docs.cilium.io/en/latest/security/policy/index.html。這隻能在 cilium 型叢集上啟用。如果未指定，如果 security.enabled 設定為 true，則預設值為 FQDN。

值	Description
L7	啟用第 7 層網路原則（FQDN、HTTP/S、Kafka）。此選項是 FQDN 選項的超集。
FQDN	啟用 FQDN 型網路原則
None	停用第 7 層網路原則（FQDN、HTTP/S、Kafka）

AgentPoolGatewayProfile

Object

受控叢集網關代理程式集區的配置檔。

名稱	類型	預設值	Description
publicIPPrefixSize	integer (int32) minimum: 28 maximum: 31	31	網關代理程式集區會為每個靜態輸出閘道建立一個公用IPPrefix的關聯，以提供公用輸出。用戶應該選取公用IPPrefix的大小。代理程式集區中的每個節點都會從IPPrefix指派一個IP。因此，IPPrefix 大小會做為閘道代理程式集區大小的上限。由於 Azure 公開 IPPrefix 大小限制，有效值範圍為 [28， 31]（/31 = 2 節點/IP，/30 = 4 節點/IP，/29 = 8 節點/IP，/28 = 16 節點/IP）。預設值為 31。

AgentPoolMode

列舉型別

代理程式集區的模式。叢集必須隨時至少有一個「系統」代理程式集區。如需代理程式集區限制和最佳做法的其他資訊，請參閱：https://docs.microsoft.com/azure/aks/use-system-pools

值	Description
System	系統代理程式集區主要用於裝載重要系統網繭，例如 CoreDNS 和 metrics-server。系統代理程式集區 osType 必須是 Linux。系統代理程式集區 VM SKU 必須至少有 2vCPU 和 4 GB 的記憶體。
User	使用者代理程式集區主要用於代管應用程式網繭。
Gateway	閘道代理程式集區專用於提供靜態輸出 IP 給網繭。如需詳細資訊，請參閱 https://aka.ms/aks/static-egress-gateway。

AgentPoolNetworkProfile

Object

代理程式集區的網路設定。

名稱	類型	Description
allowedHostPorts	PortRange[]	允許 access 的埠範圍。允許指定的範圍重疊。
applicationSecurityGroups	string[] (arm-id)	應用程式安全組的標識碼，代理程式集區會在建立時產生關聯。
nodePublicIPTags	IPTag[]	實例層級公用IP的IPTag。

AgentPoolSecurityProfile

Object

代理程式集區的安全性設定。

名稱	類型	Description
enableSecureBoot	boolean	安全開機是受信任的啟動功能，可確保只有已簽署的作系統和驅動程式才能開機。如需詳細資訊，請參閱 aka.ms/aks/trustedlaunch。如果未指定，則預設值為 false。
enableVTPM	boolean	vTPM 是受信任的啟動功能，用於設定節點上本機所保留密鑰和度量的專用安全保存庫。如需詳細資訊，請參閱 aka.ms/aks/trustedlaunch。如果未指定，則預設值為 false。
sshAccess	AgentPoolSSHAccess	代理池的 SSH access 方法。

AgentPoolSSHAccess

列舉型別

代理池的 SSH access 方法。

值	Description
LocalUser	可以使用私鑰以本機使用者身分透過 SSH 連線到節點。
Disabled	SSH 服務將會在節點上關閉。

AgentPoolStatus

Object

包含代理程式集區的唯讀資訊。

名稱	類型	Description
provisioningError	ErrorDetail	代理程式集區的錯誤詳細資料。保留失敗的詳細資訊。如果沒有錯誤，則省略此欄位。

AgentPoolType

列舉型別

Agent 集區的類型。

值	Description
VirtualMachineScaleSets	建立由虛擬機器擴展集支援的代理程式集區。
AvailabilitySet	強烈建議不要使用此功能。
VirtualMachines	建立由單一執行個體 VM 協調流程模式支援的代理程式集區。

AgentPoolUpgradeSettings

Object

升級代理程式集池的設定

名稱	類型	Description
drainTimeoutInMinutes	integer (int32) minimum: 1 maximum: 1440	節點的耗盡超時。等待收回 Pod 的時間量，以及每個節點的正常終止時間。此收回等候時間會接受等候 Pod 中斷預算。如果超過這個時間，升級就會失敗。如果未指定，則預設值為 30 分鐘。
maxSurge	string	升級期間激增的節點數目或百分比上限。這可以設定為整數（例如 '5'）或百分比（例如 '50%'）。如果指定了百分比，則它是升級時代理程式集區大小總計的百分比。針對百分比，小數節點會四捨五入。如果未指定，則預設值為 10%。如需詳細資訊，包括最佳實務，請參閱： https://learn.microsoft.com/en-us/azure/aks/upgrade-cluster
maxUnavailable	string	升級期間可以同時無法使用的節點數目或百分比上限。這可以設定為整數（例如 '1'）或百分比（例如 '5%'）。如果指定了百分比，則它是升級時代理程式集區大小總計的百分比。針對百分比，小數節點會四捨五入。如果未指定，則預設值為 0。如需詳細資訊，包括最佳實務，請參閱： https://learn.microsoft.com/en-us/azure/aks/upgrade-cluster
nodeSoakDurationInMinutes	integer (int32) minimum: 0 maximum: 30	節點的soak持續時間。清空節點並重新製作映射並移至下一個節點之前，等待的時間量（以分鐘為單位）。如果未指定，則預設值為0分鐘。
undrainableNodeBehavior	UndrainableNodeBehavior	定義升級期間無法透支節點的行為。無法透支節點最常見的原因是 Pod 中斷預算（PDB），但其他問題，例如 Pod 終止寬限期超過剩餘的個別節點清空逾時，或 Pod 仍在執行中狀態，也可能導致無法執行的節點。

AgentPoolWindowsProfile

Object

Windows 代理程式集區的特定配置檔。

名稱	類型	Description
disableOutboundNat	boolean	是否在 Windows 節點中禁用 OutboundNAT。預設值為 false。只有在叢集 outboundType 是 NAT 閘道，且 Windows 代理程式集區未啟用節點公用 IP 時，才能停用輸出 NAT。

ArtifactSource

列舉型別

成品來源。從下載成品的來源。

值	Description
Cache	使用快取從 Azure Container Registry 提取映像
Direct	從 Microsoft 成品登錄提取映像

AzureKeyVaultKms

Object

安全性配置檔的 Azure Key Vault 金鑰管理服務設定。

名稱	類型	預設值	Description
enabled	boolean		是否啟用 Azure Key Vault 鍵管理服務。預設值為 false。
keyId	string		Azure Key Vault key 的識別碼。詳情請參見 key identifier format。啟用 Azure Key Vault 金鑰管理服務時，此欄位為必填且必須為有效的金鑰識別碼。當 Azure Key Vault 的金鑰管理服務被停用時，請保持欄位空。
keyVaultNetworkAccess	KeyVaultNetworkAccessTypes	Public	key vault的access網絡。金鑰保存庫的網路存取。可能的值為 `Public` 和 `Private`。 `Public` 表示key vault允許所有網路的公開access。 `Private` 表示key vault會停用公共access並啟用private link。預設值為 `Public`。
keyVaultResourceId	string (arm-id)		key vault 的資源 ID。當keyVaultNetworkAccess為 `Private`時，此字段是必要的，而且必須是有效的資源標識符。當keyVaultNetworkAccess為 `Public`時，請將字段保留空白。

BackendPoolType

列舉型別

受管理的入站 Load Balancer BackendPool 類型。

值	Description
NodeIPConfiguration	受管理的入站 Load Balancer BackendPool 類型。 https://cloud-provider-azure.sigs.k8s.io/topics/loadbalancer/#configure-load-balancer-backend。
NodeIP	受管理的入站 Load Balancer BackendPool 類型。 https://cloud-provider-azure.sigs.k8s.io/topics/loadbalancer/#configure-load-balancer-backend。

ClusterUpgradeSettings

Object

升級叢集的設定。

名稱	類型	Description
overrideSettings	UpgradeOverrideSettings	覆寫的設定。

Code

列舉型別

告知叢集是否正在執行或已停止

值	Description
Running	叢集正在執行中。
Stopped	叢集已停止。

ContainerServiceLinuxProfile

Object

容器服務叢集中Linux VM的配置檔。

名稱	類型	Description
adminUsername	string pattern: ^[A-Za-z][-A-Za-z0-9_]*$	要用於 Linux VM 的系統管理員用戶名稱。
ssh	ContainerServiceSshConfiguration	這是針對在 Azure 上運行的 Linux 虛擬機的 SSH 配置。

ContainerServiceNetworkProfile

Object

網路組態的配置檔。

名稱	類型	預設值	Description
advancedNetworking	AdvancedNetworking		在叢集上啟用可檢視性和安全性功能套件的進階網路配置檔。如需詳細資訊，請參閱 aka.ms/aksadvancednetworking。
dnsServiceIP	string pattern: ^(?:(?:25[0-5]\|2[0-4][0-9]\|[01]?[0-9][0-9]?)\.){3}(?:25[0-5]\|2[0-4][0-9]\|[01]?[0-9][0-9]?)$	10.0.0.10	指派給 Kubernetes DNS 服務的 IP 位址。它必須位於 serviceCidr 中指定的 Kubernetes 服務地址範圍內。
ipFamilies	IPFamily[]		用來指定叢集可用IP版本的IP系列。 IP 系列可用來判斷單一堆疊或雙堆棧叢集。對於單一堆棧，預期的值為IPv4。針對雙堆棧，預期的值為IPv4和IPv6。
loadBalancerProfile	ManagedClusterLoadBalancerProfile		叢集 load balancer 的設定檔。
loadBalancerSku	LoadBalancerSku		受控叢集的負載平衡器 SKU。默認值為『standard』。欲了解load balancer SKU 差異，請參見 Azure Load Balancer SKUs。
natGatewayProfile	ManagedClusterNATGatewayProfile		叢集 NAT 閘道的配置檔。
networkDataplane	NetworkDataplane		Kubernetes 叢集中所使用的網路數據平面。
networkMode	NetworkMode		Azure CNI 所設定的網路模式。如果 networkPlugin 不是 'azure'，則無法指定這個功能。
networkPlugin	NetworkPlugin		用於建置 Kubernetes 網路的網路外掛程式。
networkPluginMode	NetworkPluginMode		網路外掛程式應該使用的模式。
networkPolicy	NetworkPolicy		用於建置 Kubernetes 網路的網路原則。
outboundType	OutboundType	loadBalancer	輸出（輸出）路由方法。這隻能在叢集建立期間設定，且稍後無法變更。更多資訊請參見出口類型。
podCidr	string pattern: ^([0-9]{1,3}\.){3}[0-9]{1,3}(\/([0-9]\|[1-2][0-9]\|3[0-2]))?$	10.244.0.0/16	使用 kubenet 時，要從中指派 Pod IP 的 CIDR 表示法 IP 範圍。
podCidrs	string[]		要從中指派 Pod IP 的 CIDR 表示法IP範圍。單一堆棧網路應該會有一個 IPv4 CIDR。兩個 CIDR，每個 IP 系列一個（IPv4/IPv6），預期雙堆棧網路。
serviceCidr	string pattern: ^([0-9]{1,3}\.){3}[0-9]{1,3}(\/([0-9]\|[1-2][0-9]\|3[0-2]))?$	10.0.0.0/16	要從中指派服務叢集IP的CIDR表示法IP範圍。它不得與任何子網IP範圍重疊。
serviceCidrs	string[]		要從中指派服務叢集IP的CIDR表示法IP範圍。單一堆棧網路應該會有一個 IPv4 CIDR。兩個 CIDR，每個 IP 系列一個（IPv4/IPv6），預期雙堆棧網路。它們不得與任何子網IP範圍重疊。
staticEgressGatewayProfile	ManagedClusterStaticEgressGatewayProfile		靜態輸出閘道附加元件配置檔。如需靜態輸出閘道的詳細資訊，請參閱 https://aka.ms/aks/static-egress-gateway。

ContainerServiceSshConfiguration

Object

在 Azure 上執行的 Linux 型 VM 的 SSH 組態。

名稱	類型	Description
publicKeys	ContainerServiceSshPublicKey[]	用來向Linux型VM進行驗證的SSH公鑰清單。最多可以指定1個索引鍵。

ContainerServiceSshPublicKey

Object

包含 SSH 憑證公鑰數據的相關信息。

名稱	類型	Description
keyData	string	用來透過 SSH 向 VM 進行驗證的憑證公鑰。憑證必須採用 PEM 格式，且不含標頭。

createdByType

列舉型別

建立資源的身分識別類型。

值	Description
User
Application
ManagedIdentity
Key

CreationData

Object

從來源資源建立目標資源時所使用的數據。

名稱	類型	Description
sourceResourceId	string (arm-id)	這是要用來建立目標物件的來源物件的 ARM 識別碼。

DelegatedResource

Object

委派的資源屬性 - 僅供內部使用。

名稱	類型	Description
location	string	來源資源位置 - 僅供內部使用。
referralResource	string	轉介委派的委派標識碼（選擇性） - 僅供內部使用。
resourceId	string	委派資源的 ARM 資源識別碼 - 僅供內部使用。
tenantId	string (uuid)	委派資源的租用戶標識碼 - 僅供內部使用。

ErrorAdditionalInfo

Object

資源管理錯誤其他資訊。

名稱	類型	Description
info	object	其他資訊。
type	string	其他信息類型。

ErrorDetail

Object

錯誤詳細數據。

名稱	類型	Description
additionalInfo	ErrorAdditionalInfo[]	錯誤其他資訊。
code	string	錯誤碼。
details	ErrorDetail[]	錯誤詳情
message	string	錯誤訊息。
target	string	錯誤目標。

ErrorResponse

Object

錯誤回應

名稱	類型	Description
error	ErrorDetail	error 物件。

Expander

列舉型別

縱向擴展時要使用的擴展器。如果未指定，則預設值為『random』。更多資訊請參見擴展器。

值	Description
least-waste	選取在相應增加之後具有最少閒置 CPU （如果繫結，則為未使用的記憶體）的節點群組。當您有不同類別的節點時，例如高 CPU 或高記憶體節點，而且只有在有需要大量這些資源的暫止 Pod 時，才想要擴充這些節點。
most-pods	選取在相應增加時能夠排程最多 Pod 的節點群組。當您使用 nodeSelector 確保特定 Pod 落在特定節點上時，這會很有用。請注意，這不會讓自動調整程序選取較大的節點與較小的節點，因為它可以同時新增多個較小的節點。
priority	選取使用者指派的優先順序最高的節點群組。如需詳細資訊，請參閱這裡的詳細數據。
random	當您不需要以不同的方式調整節點群組時使用。

ExtendedLocation

Object

擴充位置的複雜類型。

名稱	類型	Description
name	string	擴充位置的名稱。
type	ExtendedLocationTypes	擴充位置的類型。

ExtendedLocationTypes

列舉型別

extendedLocation 的類型。

值	Description
EdgeZone	Azure Edge Zone 擴展位置類型。

GPUDriver

列舉型別

是否要安裝 GPU 驅動程式。未指定時，預設值為 [安裝]。

值	Description
Install	安裝驅動程式。
None	略過驅動程式安裝。

GPUInstanceProfile

列舉型別

要用來為支援的 GPU VM SKU 指定 GPU MIG 實例設定檔的 GPUInstanceProfile。

值	Description
MIG1g	MIG 1g GPU 實例設定檔。
MIG2g	MIG 2G GPU 實例設定檔。
MIG3g	MIG 3G GPU 實例設定。
MIG4g	MIG 4G GPU 實例設定檔。
MIG7g	MIG 7g GPU 實例設定。

GPUProfile

Object

代理程式集區的 GPU 設定。

名稱	類型	Description
driver	GPUDriver	是否要安裝 GPU 驅動程式。未指定時，預設值為 [安裝]。

IPFamily

列舉型別

判斷位址是否屬於 IPv4 或 IPv6 系列

值	Description
IPv4	IPv4 系列
IPv6	IPv6 系列

IPTag

Object

包含與對象相關聯的IPTag。

名稱	類型	Description
ipTagType	string	IP 標籤類型。範例：RoutingPreference。
tag	string	與公用IP相關聯的IP標籤。範例：因特網。

IstioCertificateAuthority

Object

Istio Service Mesh 證書頒發機構單位（CA）組態。目前，我們僅支援外掛程式憑證，如這裡所述 https://aka.ms/asm-plugin-ca

名稱	類型	Description
plugin	IstioPluginCertificateAuthority	Service Mesh 的外掛程式憑證資訊。

IstioComponents

Object

Istio 元件設定。

名稱	類型	Description
egressGateways	IstioEgressGateway[]	Istio 輸出閘道。
ingressGateways	IstioIngressGateway[]	Istio 輸入閘道。
proxyRedirectionMechanism	ProxyRedirectionMechanism	流量重新導向的模式。

IstioEgressGateway

Object

Istio 輸出閘道組態。

名稱	類型	Description
enabled	boolean	是否啟用輸出閘道。
gatewayConfigurationName	string	Istio 附加元件輸出閘道的閘道組態自定義資源名稱。啟用 Istio 輸出閘道時必須指定。必須部署在 Istio 輸出閘道部署所在的相同命名空間中。
name	string pattern: [a-z0-9]([-a-z0-9][a-z0-9])?(\.[a-z0-9]([-a-z0-9][a-z0-9])?)*	Istio 附加元件輸出閘道的名稱。
namespace	string	Istio 附加元件輸出閘道應該部署在的命名空間。如果未指定，則預設值為 aks-istio-egress。

IstioIngressGateway

Object

Istio 輸入閘道組態。目前，我們最多支援一個名為 aks-istio-ingressgateway-external 的外部輸入閘道，以及一個名為 aks-istio-ingressgateway-internal的內部輸入閘道。

名稱	類型	Description
enabled	boolean	是否要啟用輸入閘道。
mode	IstioIngressGatewayMode	輸入閘道的模式。

IstioIngressGatewayMode

列舉型別

輸入閘道的模式。

值	Description
External	輸入閘道會指派公用 IP 位址，且可公開存取。
Internal	輸入閘道會指派內部 IP 位址，且無法公開存取。

IstioPluginCertificateAuthority

Object

Service Mesh 的外掛程式憑證資訊。

名稱	類型	Description
certChainObjectName	string	Azure Key Vault 中的 Certificate chain object name.
certObjectName	string	Azure Key Vault 中的 Intermediate certificate object name.
keyObjectName	string	Azure Key Vault 中的中介憑證私鑰物件名稱。
keyVaultId	string (arm-id)	Key Vault 的資源 ID。
rootCertObjectName	string	Azure Key Vault 中的根憑證物件名稱。

IstioServiceMesh

Object

Istio 服務網格設定。

名稱	類型	Description
certificateAuthority	IstioCertificateAuthority	Istio Service Mesh 證書頒發機構單位（CA）組態。目前，我們僅支援外掛程式憑證，如這裡所述 https://aka.ms/asm-plugin-ca
components	IstioComponents	Istio 元件設定。
revisions	string[]	Istio 控制平面的修訂清單。升級未進行時，這會保留一個值。當 Canary 升級正在進行時，這隻能保留兩個連續值。欲了解更多資訊，請參閱： https://learn.microsoft.com/en-us/azure/aks/istio-upgrade

KeyVaultNetworkAccessTypes

列舉型別

key vault的access網絡。金鑰保存庫的網路存取。可能的值為 Public 和 Private。 Public 表示key vault允許所有網路的公開access。 Private 表示key vault會停用公共access並啟用private link。預設值為 Public。

值	Description
Public	金鑰庫允許所有網路公開存取。
Private	金鑰庫會停用公開存取並啟用私有連結。

KubeletConfig

Object

代理程序節點的 Kubelet 組態。如需詳細資訊，請參閱 AKS 自定義節點組態。

名稱	類型	Description
allowedUnsafeSysctls	string[]	允許的不安全 sysctls 或 unsafe sysctl 模式清單（結尾為 `*`）。
containerLogMaxFiles	integer (int32) minimum: 2	容器可存在的容器記錄檔數目上限。數字必須≥ 2。
containerLogMaxSizeMB	integer (int32)	容器記錄檔的大小上限（例如 10Mi）在輪替之前。
cpuCfsQuota	boolean	如果針對指定 CPU 限制的容器啟用 CPU CFS 配額強制執行。預設值為 True。
cpuCfsQuotaPeriod	string	CPU CFS 配額期間值。默認值為『100 毫秒』。有效值是具有選擇性分數和單位後綴的十進位數序列。例如：『300ms』、『2h45m』。支持的單位為『ns』、『us』、『ms』、『s』、'm'和 'h'。
cpuManagerPolicy	string	要使用的 CPU 管理員原則。預設值為『none』。如需詳細資訊，請參閱 Kubernetes CPU 管理原則。允許的值為『none』和『static』。
failSwapOn	boolean	如果設定為 true，當節點上啟用交換時，Kubelet 將無法啟動。
imageGcHighThreshold	integer (int32)	磁碟使用量的百分比，之後映射垃圾收集一律會執行。若要停用映射垃圾收集，請將設定為100。預設值為85%
imageGcLowThreshold	integer (int32)	永遠不會執行映射垃圾收集的磁碟使用量百分比。這無法設定高於 imageGcHighThreshold。預設值為 80%
podMaxPids	integer (int32)	每個 Pod 的進程數目上限。
topologyManagerPolicy	string	要使用的拓撲管理員原則。如需詳細資訊，請參閱 Kubernetes 拓撲管理員。預設值為『none』。允許的值為 'none'、'best-effort'、'restricted'和 'single-numa-node'。

KubeletDiskType

列舉型別

決定空 Dir 卷的放置位置、容器執行時資料根，以及 Kubelet 臨時儲存（ephemeral storage）。

值	Description
OS	Kubelet 將使用操作系統磁盤作為其數據。
Temporary	Kubelet 將使用臨時磁碟來儲存其資料。

KubernetesSupportPlan

列舉型別

AKS 受控叢集的不同支援層

值	Description
KubernetesOfficial	對版本的支援與開放原始碼 Kubernetes 供應項目的支援相同。正式 Kubernetes 開放原始碼社群在發行后 1 年支援版本。
AKSLongTermSupport	對該版本的支援超過了 Kubernetes 官方支援 1 年。 AKS 繼續修補 CVE 再 1 年，總共支援 2 年。

LicenseType

列舉型別

要用於 Windows VM 的授權類型。詳情請參見 Azure 混合用戶優勢。

值	Description
None	不會套用其他授權。
Windows_Server	啟用 Windows VM 的 Azure 混合式使用者權益。

LinuxOSConfig

Object

Linux 代理程序節點的 OS 組態。如需詳細資訊，請參閱 AKS 自定義節點組態。

名稱	類型	Description
swapFileSizeMB	integer (int32)	將在每個節點上建立之交換檔案 MB 的大小。
sysctls	SysctlConfig	Linux 代理程序節點的 Sysctl 設定。
transparentHugePageDefrag	string	核心是否應該積極使用記憶體壓縮，讓更多的大量頁面可供使用。有效值為 'always'、'defer'、'defer+madvise'、'madvise' 和 'never'。默認值為「瘋狂」。如需詳細資訊，請參閱 Transparent Hugepages。
transparentHugePageEnabled	string	是否啟用透明巨頁。有效值為『always』、『madvise』和『never』。默認值為『always』。如需詳細資訊，請參閱 Transparent Hugepages。

LoadBalancerSku

列舉型別

受控叢集的負載平衡器 SKU。默認值為『standard』。欲了解load balancer SKU 差異，請參見 Azure Load Balancer SKUs。

值	Description
standard	使用標準負載平衡器。這是建議的Load Balancer SKU。如需在受控叢集中使用負載平衡器的詳細資訊，請參閱標準Load Balancer 一文。
basic	使用功能有限的基本負載平衡器。

LocalDNSForwardDestination

列舉型別

要從 localDNS 轉發的 DNS 查詢的目標伺服器。

值	Description
ClusterCoreDNS	將 DNS 查詢從 localDNS 轉送至叢集 CoreDNS。
VnetDNS	將 DNS 查詢從 localDNS 轉送至 VNET 中設定的 DNS 伺服器。一個 VNET 可以配置多個 DNS 伺服器。

LocalDNSForwardPolicy

列舉型別

用於選擇上游 DNS 伺服器的轉發策略。有關更多資訊，請參閱 forward plugin 。

值	Description
Sequential	實作循序上游 DNS 伺服器選取。有關更多資訊，請參閱 forward plugin 。
RoundRobin	實作循環資源上游 DNS 伺服器選取。有關更多資訊，請參閱 forward plugin 。
Random	實現隨機上游DNS伺服器選擇。有關更多資訊，請參閱 forward plugin 。

LocalDNSMode

列舉型別

localDNS 的啟用模式。

值	Description
Preferred	如果目前的 Orchestrator 版本支援此功能，請最好啟用 localDNS。
Required	啟用 localDNS。
Disabled	停用 localDNS。

LocalDNSOverride

Object

localDNS 設定檔的覆蓋。

名稱	類型	預設值	Description
cacheDurationInSeconds	integer (int32)	3600	緩存最大 TTL（以秒為單位）。有關更多資訊，請參閱緩存外掛程式。
forwardDestination	LocalDNSForwardDestination	ClusterCoreDNS	要從 localDNS 轉發的 DNS 查詢的目標伺服器。
forwardPolicy	LocalDNSForwardPolicy	Sequential	用於選擇上游 DNS 伺服器的轉發策略。有關更多資訊，請參閱 forward plugin 。
maxConcurrent	integer (int32)	1000	最大併發查詢數。有關更多資訊，請參閱 forward plugin 。
protocol	LocalDNSProtocol	PreferUDP	對於從 localDNS 到上游 DNS 伺服器的連接，強制執行 TCP 或首選 UDP 協定。
queryLogging	LocalDNSQueryLogging	Error	localDNS 中 DNS 查詢的日誌級別。
serveStale	LocalDNSServeStale	Immediate	用於提供過時數據的策略。有關更多資訊，請參閱緩存外掛程式。
serveStaleDurationInSeconds	integer (int32)	3600	提供過時的持續時間（以秒為單位）。有關更多資訊，請參閱緩存外掛程式。

LocalDNSProfile

Object

使用 VnetDNS 和 KubeDNS 覆蓋配置每個節點的本地 DNS。 LocalDNS 有助於提高 AKS 群集中 DNS 解析的性能和可靠性。有關更多詳細資訊，請參閱 aka.ms/aks/localdns。

名稱	類型	預設值	Description
kubeDNSOverrides	<string, LocalDNSOverride>		KubeDNS 覆蓋適用於來自 dnsPolicy：ClusterFirst 的 Pod 的 DNS 流量（稱為 KubeDNS 流量）。
mode	LocalDNSMode	Preferred	localDNS 的啟用模式。
state	LocalDNSState		系統產生的 localDNS 狀態。
vnetDNSOverrides	<string, LocalDNSOverride>		VnetDNS 覆蓋適用於來自 dnsPolicy：default 或 kubelet 的 Pod 的 DNS 流量（稱為 VnetDNS 流量）。

LocalDNSProtocol

列舉型別

對於從 localDNS 到上游 DNS 伺服器的連接，強制執行 TCP 或首選 UDP 協定。

值	Description
PreferUDP	偏好從 localDNS 連線到上游 DNS 伺服器的 UDP 通訊協定。
ForceTCP	強制執行從 localDNS 到上游 DNS 伺服器的連線的 TCP 通訊協定。

LocalDNSQueryLogging

列舉型別

localDNS 中 DNS 查詢的日誌級別。

值	Description
Error	在localDNS中啟用錯誤記錄。有關更多資訊，請參閱 errors 外掛程式。
Log	在localDNS中啟用查詢記錄。有關更多資訊，請參閱 log外掛程式。

LocalDNSServeStale

列舉型別

用於提供過時數據的策略。有關更多資訊，請參閱緩存外掛程式。

值	Description
Verify	透過驗證提供過時的資料。首先驗證源中的條目是否仍然不可用，然後再將過期的條目發送到用戶端。有關更多資訊，請參閱緩存外掛程式。
Immediate	立即提供過時的資料。將過期的條目發送到客戶端，然後檢查該條目是否可從源獲得。有關更多資訊，請參閱緩存外掛程式。
Disable	停用提供過時的資料。

LocalDNSState

列舉型別

系統產生的 localDNS 狀態。

值	Description
Enabled	localDNS 已啟用。
Disabled	localDNS 已停用。

ManagedCluster

Object

託管集群。

名稱	類型	Description
eTag	string	如果在回應本文中提供 eTag，它也可以根據一般 etag 慣例提供作為標頭。實體標籤用於比較來自相同要求資源的兩個或多個實體。 HTTP/1.1 會在 etag（第 14.19 節）、If-Match（第 14.24 節）、If-None-Match （section 14.26）和 If-Range （第 14.27 節）標頭字段中使用實體標記。
extendedLocation	ExtendedLocation	虛擬機的擴充位置。
id	string (arm-id)	資源的完整資源標識碼。例如 “/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}”
identity	ManagedClusterIdentity	如果已設定，則為受控叢集的身分識別。
kind	string	這主要用來在入口網站中針對不同類型公開不同的UI體驗
location	string	資源所在的地理位置
name	string	資源的名稱
properties.aadProfile	ManagedClusterAADProfile	The Azure Active Directory 配置。
properties.addonProfiles	<string, ManagedClusterAddonProfile>	受控叢集附加元件配置檔。
properties.agentPoolProfiles	ManagedClusterAgentPoolProfile[]	代理程式集區屬性。
properties.aiToolchainOperatorProfile	ManagedClusterAIToolchainOperatorProfile	適用於整個叢集的 AI 工具鏈作員設定。
properties.apiServerAccessProfile	ManagedClusterAPIServerAccessProfile	管理叢集 API 伺服器的 access 設定檔。
properties.autoScalerProfile	ManagedClusterPropertiesAutoScalerProfile	啟用時要套用至叢集自動調整程序的參數
properties.autoUpgradeProfile	ManagedClusterAutoUpgradeProfile	自動升級組態。
properties.azureMonitorProfile	ManagedClusterAzureMonitorProfile	Azure Monitor 外掛配置檔用於監控受管理叢集。
properties.azurePortalFQDN	string	Azure 入口網站用來存取受控叢集的特殊 FQDN。此 FQDN 僅供 Azure 入口網站使用，不應供其他用戶端使用。 Azure 入口網站需要某些跨原始來源資源分享（CORS）標頭以某些回應傳送，Kubernetes APIServer 預設不會處理這些標頭。這個特殊的 FQDN 支援 CORS，讓 Azure 入口網站能夠正常運作。
properties.bootstrapProfile	ManagedClusterBootstrapProfile	叢集啟動程式組態的配置檔。
properties.currentKubernetesVersion	string	受控叢集正在執行的 Kubernetes 版本。如果 kubernetesVersion 是 <major.minor.patch>的完整指定版本，則此字段會完全相等。如果 kubernetesVersion <major.minor>，則此字段會包含使用的完整 <major.minor.patch> 版本。
properties.disableLocalAccounts	boolean	如果應該在受控叢集上停用本機帳戶。如果設定為 true，將會停用此叢集的靜態認證。這隻能在已啟用 AAD 的受控叢集上使用。更多詳情請參見 disable local accounts。
properties.diskEncryptionSetID	string (arm-id)	要用來啟用待用加密之磁碟加密的資源標識符。這是格式：'/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Compute/diskEncryptionSets/{encryptionSetName}'
properties.dnsPrefix	string	受控叢集的 DNS 前置詞。建立受控叢集之後，就無法更新此專案。
properties.enableRBAC	boolean	是否啟用 Kubernetes Role-Based Access Control。
properties.fqdn	string	主要集區的 FQDN。
properties.fqdnSubdomain	string	具有自定義私人 DNS 區域的私人叢集 FQDN 子域。建立受控叢集之後，就無法更新此專案。
properties.httpProxyConfig	ManagedClusterHTTPProxyConfig	使用 HTTP Proxy 伺服器布建叢集的組態。
properties.identityProfile	<string, UserAssignedIdentity>	與受控叢集相關聯的使用者身分識別。 kubelet 會使用此身分識別。只允許一個使用者指派的身分識別。唯一接受的密鑰是 “kubeletidentity”，值為 “resourceId”：“/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}”。
properties.ingressProfile	ManagedClusterIngressProfile	受控叢集的輸入配置檔。
properties.kubernetesVersion	string	使用者指定的 Kubernetes 版本。支援修補程式版本 <major.minor.patch> （例如 1.20.13）和 <major.minor> （例如 1.20）。指定 major.minor< 時>，會自動選擇最新支援的 GA 修補程式版本。在建立叢集之後，以相同的 <major.minor> 更新叢集（例如 1.14.x -> 1.14）將不會觸發升級，即使有較新的修補程式版本也一樣。當您升級支援的 AKS 叢集時，無法略過 Kubernetes 次要版本。所有升級都必須依主要版本號碼循序執行。例如，允許在 1.14.x -> 1.15.x 或 1.15.x - 1.16.x 之間升級，但不允許 1.14.x ->> 1.16.x。更多細節請參見升級 AKS 叢集。
properties.linuxProfile	ContainerServiceLinuxProfile	受控叢集中Linux VM的配置檔。
properties.maxAgentPools	integer (int32)	受控叢集的代理程式集區數目上限。
properties.metricsProfile	ManagedClusterMetricsProfile	選擇性叢集計量組態。
properties.networkProfile	ContainerServiceNetworkProfile	網路組態配置檔。
properties.nodeProvisioningProfile	ManagedClusterNodeProvisioningProfile	套用至整個叢集的節點布建設定。
properties.nodeResourceGroup	string	包含代理程式集區節點的資源群組名稱。
properties.nodeResourceGroupProfile	ManagedClusterNodeResourceGroupProfile	節點資源群組組態的配置檔。
properties.oidcIssuerProfile	ManagedClusterOIDCIssuerProfile	受控叢集的 OIDC 簽發者配置檔。
properties.podIdentityProfile	ManagedClusterPodIdentityProfile	受控叢集的Pod身分識別配置檔。欲了解更多關於 AAD 莢果身份整合的細節，請參見 use AAD pod identity。
properties.powerState	PowerState	叢集的電源狀態。
properties.privateFQDN	string	私人叢集的 FQDN。
properties.privateLinkResources	PrivateLinkResource[]	與叢集相關的 Private link 資源。
properties.provisioningState	string	目前的布建狀態。
properties.publicNetworkAccess	PublicNetworkAccess	PublicNetworkAccess 的 PublicNetworkAccess 中。允許或拒絕 AKS 的公共網路 access
properties.resourceUID	string	resourceUID 會唯一識別重複使用 ARM ResourceIds 的 ManagedClusters （亦即：建立、刪除、建立序列）
properties.securityProfile	ManagedClusterSecurityProfile	受控叢集的安全性配置檔。
properties.serviceMeshProfile	ServiceMeshProfile	受控叢集的服務網格配置檔。
properties.servicePrincipalProfile	ManagedClusterServicePrincipalProfile	關於叢集用來操作 Azure API 的服務主體身份資訊。
properties.status	ManagedClusterStatus	包含受控叢集的唯讀資訊。
properties.storageProfile	ManagedClusterStorageProfile	管理叢集的 Storage 設定檔。
properties.supportPlan	KubernetesSupportPlan	受控叢集的支持計劃。如果未指定，則預設值為『KubernetesOfficial』。
properties.upgradeSettings	ClusterUpgradeSettings	升級叢集的設定。
properties.windowsProfile	ManagedClusterWindowsProfile	受控叢集中 Windows VM 的配置檔。
properties.workloadAutoScalerProfile	ManagedClusterWorkloadAutoScalerProfile	受控叢集的工作負載自動調整程式配置檔。
sku	ManagedClusterSKU	受控叢集 SKU。
systemData	systemData	Azure Resource Manager 包含 createdBy 與 modifiedBy 資訊的元資料。
tags	object	資源標籤。
type	string	資源的類型。例如“Microsoft.Compute/virtualMachines” 或 “Microsoft.Storage/storageAccounts”

ManagedClusterAADProfile

Object

AADProfile 會指定 Azure Active Directory 整合的屬性。如需詳細資訊，請參閱在 AKS上受控 AAD。

名稱	類型	Description
adminGroupObjectIDs	string[]	具有叢集管理員角色的 AAD 群組物件標識符清單。
clientAppID	string	（已淘汰）用戶端 AAD 應用程式識別碼。了解更多資訊，請至 https://aka.ms/aks/aad-legacy。
enableAzureRBAC	boolean	是否要啟用 Azure RBAC 以進行 Kubernetes 授權。
managed	boolean	是否要啟用受控 AAD。
serverAppID	string	（已淘汰）伺服器 AAD 應用程式識別碼。了解更多資訊，請至 https://aka.ms/aks/aad-legacy。
serverAppSecret	string (password)	（已淘汰）伺服器 AAD 應用程式秘密。了解更多資訊，請至 https://aka.ms/aks/aad-legacy。
tenantID	string	要用於驗證的 AAD 租使用者識別碼。如果未指定，將會使用部署訂用帳戶的租使用者。

ManagedClusterAddonProfile

Object

受控叢集的 Kubernetes 附加元件配置檔。

名稱	類型	Description
config	object	用於設定附加元件的關鍵/值組。
enabled	boolean	是否啟用附加元件。
identity	ManagedClusterAddonProfileIdentity	此附加元件所使用的使用者指派身分識別資訊。

ManagedClusterAddonProfileIdentity

Object

此附加元件所使用的使用者指派身分識別資訊。

名稱	類型	Description
clientId	string	使用者指派身分識別的用戶端標識碼。
objectId	string	使用者指派身分識別的物件標識碼。
resourceId	string (arm-id)	使用者指派身分識別的資源標識碼。

ManagedClusterAgentPoolProfile

Object

容器服務代理程式集區的配置檔。

名稱	類型	預設值	Description
availabilityZones	string[]		節點可用的 Availability zones 清單。只有在 AgentPoolType 屬性是 'VirtualMachineScaleSets' 時，才能指定這個值。
capacityReservationGroupID	string (arm-id)		容量保留群組的完全限定資源 ID，用於從保留的 Virtual Machines 群組提供 virtual machines。此形式為：'/subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.Compute/capacityreservationgroups/{capacityReservationGroupName}' 客戶會用它建立包含指定 CRG 的代理池。更多資訊請參見 Capacity Reservation
count	integer (int32)		裝載 Docker 容器的代理程式（VM）數目。允許的值必須介於使用者集區的 0 到 1000（含）範圍內，且系統集區的範圍為 1 到 1000（含）。預設值為 1。
creationData	CreationData		如果節點集區將會使用快照集建立/升級，則用來指定來源快照集標識符的 CreationData。
currentOrchestratorVersion	string		Agent 集區正在執行的 Kubernetes 版本。如果 orchestratorVersion 是 <major.minor.patch>的完整指定版本，則此字段會完全相等。如果 orchestratorVersion <major.minor>，則此字段會包含使用的完整 <major.minor.patch> 版本。
eTag	string		用來實作開放式並行存取的唯一隻讀字串。更新資源時，eTag 值將會變更。指定 if-match 或 if-none-match 標頭，其中包含後續請求的 eTag 值，以根據一般 eTag 慣例啟用樂觀並行。
enableAutoScaling	boolean		是否要啟用自動調整程式
enableEncryptionAtHost	boolean		是否要啟用主機型 OS 和數據磁碟驅動器加密。這只支援特定虛擬機大小和特定 Azure 區域。欲了解更多資訊，請參閱： https://docs.microsoft.com/azure/aks/enable-host-encryption
enableFIPS	boolean		是否要使用已啟用 FIPS 的 OS。詳情請參見 Add a enabled FIPS node pool。
enableNodePublicIP	boolean		每個節點是否配置自己的公用IP。某些案例可能需要節點集區中的節點接收自己的專用公用IP位址。常見的案例是遊戲工作負載，其中控制台需要直接連線到雲端虛擬機，以將躍點降到最低。更多資訊請參見為節點分配公共 IP。預設值為 false。
enableUltraSSD	boolean		是否要啟用 UltraSSD
gatewayProfile	AgentPoolGatewayProfile		閘道模式中受控代理程式集區特有的配置檔。如果代理程式集區模式不是閘道，則無法設定此欄位。
gpuInstanceProfile	GPUInstanceProfile		要用來為支援的 GPU VM SKU 指定 GPU MIG 實例設定檔的 GPUInstanceProfile。
gpuProfile	GPUProfile		代理程式集區的 GPU 設定。
hostGroupID	string (arm-id)		專用主機群組用來布建虛擬機的完整資源標識符，僅用於建立案例，且一旦設定后就不允許變更。這是格式：/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Compute/hostGroups/{hostGroupName}。欲了解更多資訊，請參見 Azure dedicated hosts。
kubeletConfig	KubeletConfig		代理程式集區節點上的 Kubelet 組態。
kubeletDiskType	KubeletDiskType		決定空 Dir 卷的放置位置、容器執行時資料根，以及 Kubelet 臨時儲存（ephemeral storage）。
linuxOSConfig	LinuxOSConfig		Linux 代理程序節點的 OS 組態。
localDNSProfile	LocalDNSProfile		使用 VnetDNS 和 KubeDNS 覆蓋配置每個節點的本地 DNS。 LocalDNS 有助於提高 AKS 群集中 DNS 解析的性能和可靠性。有關更多詳細資訊，請參閱 aka.ms/aks/localdns。
maxCount	integer (int32)		自動調整的節點數目上限
maxPods	integer (int32)		可在節點上執行的 Pod 數目上限。
messageOfTheDay	string		Linux 節點當天的訊息，base64 編碼。 base64 編碼的字串，將在譯碼之後寫入 /etc/motd。這允許自定義 Linux 節點當天的訊息。 Windows 節點不得指定此參數。它必須是靜態字串（也就是將列印為未經處理，而不是以腳本的形式執行）。
minCount	integer (int32)		自動調整的節點數目下限
mode	AgentPoolMode		代理程式集區的模式。叢集必須隨時至少有一個「系統」代理程式集區。如需代理程式集區限制和最佳做法的其他資訊，請參閱：https://docs.microsoft.com/azure/aks/use-system-pools
name	string pattern: ^[a-z][a-z0-9]{0,11}$		訂用帳戶和資源群組內容中代理程式集區配置檔的唯一名稱。 Windows 代理程式集區名稱必須是 6 個字元或更少。
networkProfile	AgentPoolNetworkProfile		代理程式集區的網路相關設定。
nodeImageVersion	string		節點映像的版本
nodeLabels	object		要跨代理程式集區中所有節點保存的節點標籤。
nodePublicIPPrefixID	string (arm-id)		VM 節點應該使用IP的公用IP前置詞標識碼。格式如下：/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/publicIPPrefixes/{publicIPPrefixName}
nodeTaints	string[]		節點集區建立和調整期間新增至新節點的污點。例如，key=value：NoSchedule。
orchestratorVersion	string		使用者指定的 Kubernetes 版本。支援修補程式版本 <major.minor.patch> （例如 1.20.13）和 <major.minor> （例如 1.20）。指定 major.minor< 時>，會自動選擇最新支援的 GA 修補程式版本。在建立叢集之後，以相同的 <major.minor> 更新叢集（例如 1.14.x -> 1.14）將不會觸發升級，即使有較新的修補程式版本也一樣。最佳做法是，您應該將 AKS 叢集中的所有節點集區升級為相同的 Kubernetes 版本。節點集區版本必須與控制平面具有相同的主要版本。節點集區次要版本必須位於控制平面版本的兩個次要版本內。節點集區版本不能大於控制平面版本。更多資訊請參見升級節點池。
osDiskSizeGB	integer (int32) minimum: 0 maximum: 2048		OS 磁碟大小 GB，用來指定主要/代理程式集區中每部計算機的磁碟大小。如果您指定 0，它會根據指定的 vmSize 套用預設 osDisk 大小。
osDiskType	OSDiskType		要用於代理程式集區中機器的 OS 磁碟類型。如果 VM 支援，且快取磁碟大於要求的 OSDiskSizeGB，則預設值為「暫時」。否則，預設為「受控」。建立之後可能不會變更。更多資訊請參見 Ephemeral OS。
osSKU	OSSKU		指定代理程式集區所使用的 OS SKU。如果OSType為Linux，則預設值為Ubuntu。當 Kubernetes <= 1.24 或 Windows2022 時，如果 OSType >為 Windows，則預設值為 Windows2019。
osType	OSType	Linux	作系統類型。預設值為Linux。
podIPAllocationMode	PodIPAllocationMode		Pod IP 分配模式。代理程式集區中 Pod 的 IP 配置模式。必須與 podSubnetId 搭配使用。預設值為『DynamicIndividual』。
podSubnetID	string (arm-id)		啟動時，Pod 會加入之子網的標識碼。如果省略，則會在節點子網上靜態指派 Pod IP（如需詳細資訊，請參閱 vnetSubnetID）。格式如下：/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/virtualNetworks/{virtualNetworkName}/subnets/{subnetName}
powerState	PowerState		代理程式集區正在執行或停止。第一次建立代理程式集區時，它一開始會執行。您可以將此欄位設定為 [已停止] 來停止代理程式集區。已停止的代理程式集區會停止其所有 VM，而不會產生計費費用。只有在執行中且布建狀態為 [成功] 時，才能停止代理程式集區
provisioningState	string		目前的部署或布建狀態。
proximityPlacementGroupID	string (arm-id)		鄰近放置群組的標識碼。
scaleDownMode	ScaleDownMode		調整代理程式集區時要使用的相應減少模式。這也會影響叢集自動調整程序的行為。如果未指定，則預設為 Delete。
scaleSetEvictionPolicy	ScaleSetEvictionPolicy	Delete	虛擬機器擴展集收回原則。驅逐政策會明確說明當虛擬機被驅逐時to do什麼。預設值為刪除。欲了解更多驅逐資訊，請參見 spot VMs
scaleSetPriority	ScaleSetPriority	Regular	虛擬機擴展集優先順序。
securityProfile	AgentPoolSecurityProfile		代理程式集區的安全性設定。
spotMaxPrice	number (float)	-1	您願意為現成實例支付的最高價格（以美元為單位）。可能的值為大於零或 -1 的任何十進位值，表示依需求 up-to 默認價格。可能的值為大於零或 -1 的任何十進位值，表示願意支付任何隨選價格。欲了解更多現貨價格，請參閱 spot VMs 價格
status	AgentPoolStatus		包含代理程式集區的唯讀資訊。
tags	object		要保存在代理程式集區虛擬機擴展集上的標記。
type	AgentPoolType		Agent 集區的類型。
upgradeSettings	AgentPoolUpgradeSettings		升級代理程式集池的設定
virtualMachineNodesStatus	VirtualMachineNodes[]		VirtualMachines 代理程式集區中的節點狀態。
virtualMachinesProfile	VirtualMachinesProfile		VirtualMachines 代理程式集區的規格。
vmSize	string		代理程式集區 VM 的大小。 VM 大小可用性會因區域而異。如果節點包含計算資源不足（記憶體、cpu 等）Pod 可能無法正確執行。如需受限制 VM 大小的詳細資訊，請參閱：https://docs.microsoft.com/azure/aks/quotas-skus-regions
vnetSubnetID	string (arm-id)		代理程式集區節點和選擇性 Pod 將在啟動時加入的子網標識碼。如果未指定此專案，則會產生及使用 VNET 和子網。如果未指定 podSubnetID，這會套用至節點和 Pod，否則只會套用至節點。格式如下：/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/virtualNetworks/{virtualNetworkName}/subnets/{subnetName}
windowsProfile	AgentPoolWindowsProfile		Windows 代理程式集區的特定配置檔。
workloadRuntime	WorkloadRuntime		決定節點可執行的工作負載類型。

ManagedClusterAIToolchainOperatorProfile

Object

啟用操作員時，叢集中將會安裝一組 AKS 受控 CRD 和控制器。操作員會針對推斷和/或定型目的，自動部署 OSS 模型。它提供一組預設模型，並針對它們啟用分散式推斷。

名稱	類型	Description
enabled	boolean	是否為集群啟用 AI toolchain Operator。指出 AI 工具鏈運算子是否啟用。

ManagedClusterAPIServerAccessProfile

Object

受控叢集 API 伺服器的存取設定檔。

名稱	類型	Description
authorizedIPRanges	string[]	授權存取 Kubernetes API 伺服器的 IP 範圍。 IP 範圍以 CIDR 格式指定，例如 137.117.106.88/29。此功能不相容於使用公共 IP 逐節點的叢集，或使用 Basic Load Balancer 的叢集。欲了解更多資訊，請參閱 API 伺服器授權 IP 範圍。
disableRunCommand	boolean	是否要停用叢集的執行命令。
enablePrivateCluster	boolean	是否要將叢集建立為私人叢集。更多細節請參見建立私人 AKS 叢集。
enablePrivateClusterPublicFQDN	boolean	是否要為私人叢集建立其他公用 FQDN。
enableVnetIntegration	boolean	是否要啟用叢集的apiserver vnet整合。有關詳細資訊，請參閱 aka.ms/AksVnetIntegration。
privateDNSZone	string	叢集的私人 DNS 區域模式。預設值為 System。更多細節請參見 configure private DNS zone。允許的值為 'system' 和 'none'。
subnetId	string (arm-id)	啟用apiserver vnet整合時要使用的子網。使用 BYO Vnet 創建新集群時，或者更新現有集群以啟用 apiserver vnet 集成時，需要它。

ManagedClusterAutoUpgradeProfile

Object

受控叢集的自動升級配置檔。

名稱	類型	Description
nodeOSUpgradeChannel	NodeOSUpgradeChannel	節點作系統升級通道。更新節點上OS的方式。預設值為 NodeImage。
upgradeChannel	UpgradeChannel	自動升級的升級通道。預設值為『none』。更多資訊請參見 setting AKS 叢集自動升級通道。

ManagedClusterAzureMonitorProfile

Object

Azure Monitor 外掛配置檔用於監控受管理叢集。

名稱	類型	Description
metrics	ManagedClusterAzureMonitorProfileMetrics	Metrics profile for the Azure Monitor managed service for Prometheus addon. 收集開箱即用的 Kubernetes 基礎架構指標，傳送至 Azure Monitor 工作區，並為自訂目標設定額外的爬蟲功能。如需概觀，請參閱 aka.ms/AzureManagedPrometheus。

ManagedClusterAzureMonitorProfileKubeStateMetrics

Object

Kube State Metrics profile for the Azure Managed Prometheus addon. 這些選擇性設定適用於使用附加元件部署的 kube-state-metrics Pod。如需詳細資訊，請參閱 aka.ms/AzureManagedPrometheus-optional-parameters。

名稱	類型	Description
metricAnnotationsAllowList	string	將在資源標籤量中使用的 Kubernetes 批註索引鍵逗號分隔清單（範例：'namespaces=[kubernetes.io/team,...]，pods=[kubernetes.io/team],...'）。根據預設，計量只包含資源名稱和命名空間標籤。
metricLabelsAllowlist	string	將用於資源標籤計量的其他 Kubernetes 標籤索引鍵逗號分隔清單（範例：'namespaces=[k8s-label-1，k8s-label-n,...]，pods=[app],...'）。根據預設，計量只包含資源名稱和命名空間標籤。

ManagedClusterAzureMonitorProfileMetrics

Object

Metrics profile for the Azure Monitor managed service for Prometheus addon. 收集開箱即用的 Kubernetes 基礎架構指標，傳送至 Azure Monitor 工作區，並為自訂目標設定額外的爬蟲功能。如需概觀，請參閱 aka.ms/AzureManagedPrometheus。

名稱	類型	Description
enabled	boolean	是否啟用或停用 Azure Managed Prometheus 外掛以監控 Prometheus。如需啟用和停用的詳細資訊，請參閱 aka.ms/AzureManagedPrometheus-aks-enable。
kubeStateMetrics	ManagedClusterAzureMonitorProfileKubeStateMetrics	Kube State Metrics profile for the Azure Managed Prometheus addon. 這些選擇性設定適用於使用附加元件部署的 kube-state-metrics Pod。如需詳細資訊，請參閱 aka.ms/AzureManagedPrometheus-optional-parameters。

ManagedClusterBootstrapProfile

Object

啟動程式配置檔。

名稱	類型	預設值	Description
artifactSource	ArtifactSource	Direct	成品來源。從下載成品的來源。
containerRegistryId	string (arm-id)		The resource ID of Azure Container Registry. 登錄必須具有專用網存取、進階 SKU 和區域備援。

ManagedClusterCostAnalysis

Object

叢集的成本分析組態

名稱	類型	Description
enabled	boolean	是否啟用成本分析。受控叢集 sku.tier 必須設定為「標準」或「進階」，才能啟用此功能。啟用此功能後，Kubernetes 命名空間與部署細節會加入 Azure 入口網站的成本分析檢視。如果未指定，則預設值為 false。如需詳細資訊，請參閱 aka.ms/aks/docs/cost-analysis。

ManagedClusterHTTPProxyConfig

Object

叢集 HTTP Proxy 設定。

名稱	類型	Description
enabled	boolean	是否開啟 HTTP 代理。若停用，指定的代理設定將不會被設定在 pods 和節點上。如果未指定，則預設值為 true。
httpProxy	string	要使用的 HTTP Proxy 伺服器端點。
httpsProxy	string	要使用的 HTTPS Proxy 伺服器端點。
noProxy	string[]	不應該通過 Proxy 的端點。
trustedCa	string	用來連線到 Proxy 伺服器的替代 CA 憑證。

ManagedClusterIdentity

Object

受控叢集的身分識別。

名稱	類型	Description
delegatedResources	<string, DelegatedResource>	指派給此受控叢集的委派身分識別資源。這只能由其他 Azure 資源提供者設定，而受管理叢集只接受一個委派的身份資源。僅供內部使用。
principalId	string	主要元件所使用的系統指派身分識別的主體 ID。
tenantId	string	主要元件所使用的系統指派身分識別的租用戶識別碼。
type	ResourceIdentityType	用於受控叢集的身分識別類型。欲了解更多資訊，請參閱 AKS 中的 use 管理身份。
userAssignedIdentities	<string, ManagedServiceIdentityUserAssignedIdentitiesValue>	與受控叢集相關聯的使用者身分識別。此身分識別將用於控制平面。只允許一個使用者指派的身分識別。密鑰必須是 ARM 資源識別符，格式為：『/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'。

ManagedClusterIngressProfile

Object

容器服務叢集的輸入配置檔。

名稱	類型	Description
webAppRouting	ManagedClusterIngressProfileWebAppRouting	輸入設定檔的應用程式路由設定。您可以在以下位置 https://learn.microsoft.com/en-us/azure/aks/app-routing?tabs=default%2Cdeploy-app-default找到此功能的概觀和入門指南。

ManagedClusterIngressProfileNginx

Object

Nginx 輸入控制器配置，用於管理叢集輸入設定檔。

名稱	類型	Description
defaultIngressControllerType	NginxIngressControllerType	默認 NginxIngressController 自訂資源的輸入類型

ManagedClusterIngressProfileWebAppRouting

Object

輸入配置檔的應用程式路由附加元件設定。

名稱	類型	Description
dnsZoneResourceIds	string[] (arm-id)	要與應用程式路由附加元件相關聯的 DNS 區域資源識別碼。只有在啟用應用程式路由附加元件時才使用。公有與 private DNS 區域可以屬於不同的資源群組，但所有公共 DNS 區域必須屬於同一資源群組，且所有 private DNS 區域必須在同一資源群組中。
enabled	boolean	是否要啟用應用程式路由附加元件。
identity	UserAssignedIdentity	應用程式路由附加元件的受控識別。這是應該授與許可權的身分識別，例如，管理相關聯的 Azure DNS 資源，以及從 Azure 金鑰保存庫取得憑證。請參閱此附加元件概觀以取得更多指示。
nginx	ManagedClusterIngressProfileNginx	默認 NginxIngressController 的組態。如需詳細資訊，請參閱 https://learn.microsoft.com/en-us/azure/aks/app-routing-nginx-configuration#the-default-nginx-ingress-controller。

ManagedClusterLoadBalancerProfile

Object

受控叢集負載平衡器的配置檔。

名稱	類型	預設值	Description
allocatedOutboundPorts	integer (int32) minimum: 0 maximum: 64000	0	每個 VM 所需配置的 SNAT 埠數目。允許的值介於 0 到 64000 的範圍內（含）。預設值是 0，這會導致 Azure 動態分配埠口。
backendPoolType	BackendPoolType	NodeIPConfiguration	受管理的入站 Load Balancer BackendPool 類型。
effectiveOutboundIPs	ResourceReference[]		叢集負載平衡器的有效輸出IP資源。
enableMultipleStandardLoadBalancers	boolean		為每個 AKS 叢集啟用多個標準負載平衡器。
idleTimeoutInMinutes	integer (int32) minimum: 4 maximum: 120	30	所需的輸出流程閑置逾時，以分鐘為單位。允許的值介於 4 到 120 之間（含）。預設值為 30 分鐘。
managedOutboundIPs	ManagedClusterLoadBalancerProfileManagedOutboundIPs		叢集load balancer想要的託管外站 IP。
outboundIPPrefixes	ManagedClusterLoadBalancerProfileOutboundIPPrefixes		叢集負載平衡器所需的輸出 IP 前綴資源。
outboundIPs	ManagedClusterLoadBalancerProfileOutboundIPs		叢集負載平衡器所需的輸出IP資源。

ManagedClusterLoadBalancerProfileManagedOutboundIPs

Object

叢集load balancer想要的託管外站 IP。

名稱	類型	預設值	Description
count	integer (int32) minimum: 1 maximum: 100	1	Azure為叢集建立/管理的 IPv4 外站 IP 數量load balancer。允許的值必須介於 1 到 100 的範圍內（含）。預設值為 1。
countIPv6	integer (int32) minimum: 0 maximum: 100	0	Azure為叢集建立/管理的 IPv6 外撥 IP 數量load balancer。允許的值必須介於 1 到 100 的範圍內（含）。單一堆棧的預設值為0，雙堆疊的預設值為1。

ManagedClusterLoadBalancerProfileOutboundIPPrefixes

Object

叢集負載平衡器所需的輸出 IP 前綴資源。

名稱	類型	Description
publicIPPrefixes	ResourceReference[]	公用IP前置資源的清單。

ManagedClusterLoadBalancerProfileOutboundIPs

Object

叢集負載平衡器所需的輸出IP資源。

名稱	類型	Description
publicIPs	ResourceReference[]	公用IP資源的清單。

ManagedClusterManagedOutboundIPProfile

Object

受控叢集的受控輸出IP資源配置檔。

名稱	類型	預設值	Description
count	integer (int32) minimum: 1 maximum: 16	1	Azure 建立/管理的期望出站 IP 數量。允許的值必須介於 1 到 16 的範圍內（含）。預設值為 1。

ManagedClusterMetricsProfile

Object

ManagedCluster 的計量配置檔。

名稱	類型	Description
costAnalysis	ManagedClusterCostAnalysis	每個 Kubernetes 資源成本分析的詳細設定。

ManagedClusterNATGatewayProfile

Object

受控叢集 NAT 閘道的配置檔。

名稱	類型	預設值	Description
effectiveOutboundIPs	ResourceReference[]		叢集 NAT 閘道的有效輸出 IP 資源。
idleTimeoutInMinutes	integer (int32) minimum: 4 maximum: 120	4	所需的輸出流程閑置逾時，以分鐘為單位。允許的值介於 4 到 120 之間（含）。預設值為 4 分鐘。
managedOutboundIPProfile	ManagedClusterManagedOutboundIPProfile		叢集 NAT 閘道的受控輸出 IP 資源設定檔。

ManagedClusterNodeProvisioningProfile

Object

管理叢集的節點配置設定檔。

名稱	類型	預設值	Description
defaultNodePools	NodeProvisioningDefaultNodePools	Auto	為節點預置配置的預設 Karpenter 節點池（CRD）集。除非mode為 'Auto'，否則此欄位無效。警告：在現有集群上將其從 Auto 更改為 None 將導致預設的 Karpenter NodePools 被刪除，這將耗盡並刪除與這些池關聯的節點。強烈建議不要這樣做，除非有空閒節點準備好接收該作驅逐的 Pod。如果未指定，則預設值為 Auto。有關更多資訊，請參閱 aka.ms/aks/nap#node-pools。
mode	NodeProvisioningMode		節點布建模式。如果未指定，則預設值為Manual。

ManagedClusterNodeResourceGroupProfile

Object

受控叢集的節點資源群組鎖定配置檔。

名稱	類型	Description
restrictionLevel	RestrictionLevel	套用至叢集節點資源群組的限制層級。如果未指定，預設值為 'Unrestricted'

ManagedClusterOIDCIssuerProfile

Object

受控叢集的 OIDC 簽發者配置檔。

名稱	類型	Description
enabled	boolean	是否啟用 OIDC 簽發者。
issuerURL	string	受管理叢集的 OIDC 簽發者 URL。

ManagedClusterPodIdentity

Object

指派給受控叢集之 Pod 身分識別的詳細數據。

名稱	類型	Description
bindingSelector	string	要用於 AzureIdentityBinding 資源的系結選取器。
identity	UserAssignedIdentity	使用者指派的身分識別詳細數據。
name	string	Pod 身分識別的名稱。
namespace	string	Pod 身分識別的命名空間。
provisioningInfo	ManagedClusterPodIdentityProvisioningInfo	Pod 身份的配置資訊。
provisioningState	ManagedClusterPodIdentityProvisioningState	網繭身分識別的目前佈建狀態。

ManagedClusterPodIdentityException

Object

Pod 身分識別例外狀況，可讓具有特定標籤的 Pod 存取 Azure 實例元數據服務（IMDS）端點，而不會遭到節點受控識別（NMI）伺服器攔截。如需詳細資訊，請參閱停用特定 Pod/應用程式的 AAD Pod 身分識別。

名稱	類型	Description
name	string	Pod 身分識別例外狀況的名稱。
namespace	string	Pod 身分識別例外狀況的命名空間。
podLabels	object	要比對的 Pod 標籤。

ManagedClusterPodIdentityProfile

Object

受控叢集的Pod身分識別配置檔。如需Pod身分識別整合的詳細資訊，請參閱使用 AAD Pod 身分識別。

名稱	類型	Description
allowNetworkPluginKubenet	boolean	是否允許Pod身分識別在具有 Kubenet 網路的叢集上執行。根據預設，在 Kubenet 中執行會因為 AAD Pod 身分識別的安全性相關本質和 IP 詐騙的風險而停用。更多資訊請參閱 using Kubenet network plugin with AAD Pod Identity。
enabled	boolean	是否啟用Pod身分識別附加元件。
userAssignedIdentities	ManagedClusterPodIdentity[]	叢集中要使用的Pod身分識別。
userAssignedIdentityExceptions	ManagedClusterPodIdentityException[]	允許的Pod身分識別例外狀況。

ManagedClusterPodIdentityProvisioningError

Object

Pod 身分識別布建的錯誤回應。

名稱	類型	Description
error	ManagedClusterPodIdentityProvisioningErrorBody	有關錯誤的詳細資料。

ManagedClusterPodIdentityProvisioningErrorBody

Object

Pod 身分識別布建的錯誤回應。

名稱	類型	Description
code	string	錯誤的識別碼。程序代碼是不變的，而且是要以程序設計方式取用。
details	ManagedClusterPodIdentityProvisioningErrorBody[]	錯誤的其他詳細數據清單。
message	string	描述錯誤的訊息，適用於在使用者介面中顯示。
target	string	特定錯誤的目標。例如，錯誤中的屬性名稱。

ManagedClusterPodIdentityProvisioningInfo

Object

Pod 身份配置資訊。

名稱	類型	Description
error	ManagedClusterPodIdentityProvisioningError	Pod 身分指派錯誤（如果有的話）。

ManagedClusterPodIdentityProvisioningState

列舉型別

網繭身分識別的目前佈建狀態。

值	Description
Assigned	會分配 Pod 身份。
Canceled	艙體身份分配被取消。
Deleting	Pod 身份正在被刪除。
Failed	艙體身份分配失敗。
Succeeded	艙體身份分配成功。
Updating	艙體身份正在更新中。

ManagedClusterPropertiesAutoScalerProfile

Object

啟用時要套用至叢集自動調整程序的參數

名稱	類型	Description
balance-similar-node-groups	string	偵測相似的節點集區，並平衡其間的節點數目。有效值為 'true' 和 'false'
daemonset-eviction-for-empty-nodes	boolean	DaemonSet Pod 將從空節點正常終止。如果設定為 true，則會在刪除節點之前收回空白節點上的所有精靈集 Pod。如果無法收回精靈集 Pod，則會選擇另一個節點進行調整。如果設定為 false，則會刪除節點，而不會確保刪除或收回精靈集 Pod。
daemonset-eviction-for-occupied-nodes	boolean	DaemonSet Pod 將從非空節點正常終止。如果設定為 true，則會先收回已佔用節點上的所有精靈集 Pod，再刪除節點。如果無法收回精靈集 Pod，則會選擇另一個節點進行調整。如果設定為 false，則會刪除節點，而不會確保刪除或收回精靈集 Pod。
expander	Expander	縱向擴展時要使用的擴展器。如果未指定，則預設值為『random』。更多資訊請參見擴展器。
ignore-daemonsets-utilization	boolean	CA 在計算縮減的資源利用率時是否應該忽略 DaemonSet Pod。如果設定為 true，精靈集所使用的資源會在做出相應減少決策時納入考慮。
max-empty-bulk-delete	string	可以同時刪除的空白節點數目上限。這必須是正整數。預設值為 10。
max-graceful-termination-sec	string	叢集自動調整程式在嘗試相應減少節點時等候Pod終止的最大秒數。預設值為 600。
max-node-provision-time	string	自動調整程式等候布建節點的最大時間。預設值為『15m』。值必須是後面接著『m』的整數。不支援分鐘（m）以外的時間單位。
max-total-unready-percentage	string	叢集中未讀取節點的最大百分比。超過此百分比之後，叢集自動調整程式會停止作業。預設值為 45。最大值為 100，最小值為 0。
new-pod-scale-up-delay	string	在某個年齡之前，請忽略未排程的 Pod。針對高載/批次規模等案例，您不希望 CA 在 kubernetes 排程器排程所有 Pod 之前採取行動，您可以告訴 CA 在排程特定年齡之前忽略未排程的 Pod。預設值為『0s』。值必須是整數，後面接著單位（秒的 's'、'm' 代表分鐘數、'h' 等。
ok-total-unready-count	string	允許的未讀取節點數目，不論 total-total-unready-percentage。這必須是整數。預設值為 3。
scale-down-delay-after-add	string	擴大後需要多長時間才能繼續進行縮小評估。預設值為『10m』。值必須是後面接著『m』的整數。不支援分鐘（m）以外的時間單位。
scale-down-delay-after-delete	string	節點刪除後再繼續進行縮小評估的時間長度。預設值為掃描間隔。值必須是後面接著『m』的整數。不支援分鐘（m）以外的時間單位。
scale-down-delay-after-failure	string	縮小失敗後再繼續進行縮小評估的時間長度。預設值為『3m』。值必須是後面接著『m』的整數。不支援分鐘（m）以外的時間單位。
scale-down-unneeded-time	string	節點在符合相應減少資格之前，應該不需要多久的時間。預設值為『10m』。值必須是後面接著『m』的整數。不支援分鐘（m）以外的時間單位。
scale-down-unready-time	string	未就緒的節點在符合縮減條件之前應不需要多長時間。默認值為『20m』。值必須是後面接著『m』的整數。不支援分鐘（m）以外的時間單位。
scale-down-utilization-threshold	string	節點使用率層級，定義為要求資源的總和除以容量，而節點可考慮相應減少。預設值為『0.5』。
scan-interval	string	重新評估叢集以相應增加或減少的頻率。預設值為『10』。值必須是整數秒數。
skip-nodes-with-local-storage	string	如果叢集自動縮放器會跳過刪除帶有本地 storage 的 pod 節點，例如 EmptyDir 或 HostPath。預設值為 True。
skip-nodes-with-system-pods	string	如果集群自動擴縮器會跳過從 kube-system 中刪除帶有 Pod 的節點（DaemonSet 或鏡像 Pod 除外）。預設值為 True。

ManagedClusterSecurityProfile

Object

容器服務叢集的安全性配置檔。

名稱	類型	Description
azureKeyVaultKms	AzureKeyVaultKms	Azure Key Vault key management service 安全設定檔的設定。
customCATrustCertificates	string[] (byte)	最多 10 個 base64 編碼 CA 的清單，這些 CA 將會新增至叢集中所有節點上的信任存放區。欲了解更多資訊，請參閱 Custom CA Trust Certificates。
defender	ManagedClusterSecurityProfileDefender	Microsoft Defender 的安全設定檔設定。
imageCleaner	ManagedClusterSecurityProfileImageCleaner	安全性配置檔的影像清除器設定。
workloadIdentity	ManagedClusterSecurityProfileWorkloadIdentity	安全性配置檔的工作負載身分識別設定。工作負載身份讓 Kubernetes 應用程式能透過 Azure AD 安全access Azure雲端資源。如需詳細資訊，請參閱 https://aka.ms/aks/wi。

ManagedClusterSecurityProfileDefender

Object

Microsoft Defender 的安全設定檔設定。

名稱	類型	Description
logAnalyticsWorkspaceResourceId	string (arm-id)	與 Microsoft Defender 關聯的日誌分析工作區資源 ID。啟用 Microsoft Defender 時，此欄位為必填且必須為有效的工作空間資源 ID。當 Microsoft Defender 被停用時，請將欄位留空。
securityMonitoring	ManagedClusterSecurityProfileDefenderSecurityMonitoring	Microsoft Defender 威脅偵測，用於雲端安全設定檔。

ManagedClusterSecurityProfileDefenderSecurityMonitoring

Object

Microsoft安全性配置文件威脅偵測的 Defender 設定。

名稱	類型	Description
enabled	boolean	是否啟用Defender威脅偵測

ManagedClusterSecurityProfileImageCleaner

Object

影像清除工具會從節點移除未使用的映像、釋放磁碟空間，並協助減少受攻擊面區域。以下是安全性配置檔的設定。

名稱	類型	Description
enabled	boolean	是否要在 AKS 叢集上啟用影像清除器。
intervalHours	integer (int32)	影像清除程序掃描間隔以小時為單位。

ManagedClusterSecurityProfileWorkloadIdentity

Object

安全性配置檔的工作負載身分識別設定。

名稱	類型	Description
enabled	boolean	是否要啟用工作負載身分識別。

ManagedClusterServicePrincipalProfile

Object

關於叢集用來操作 Azure API 的服務主體身份資訊。

名稱	類型	Description
clientId	string	服務主體的標識碼。
secret	string (password)	純文本中與服務主體相關聯的秘密密碼。

ManagedClusterSKU

Object

受控叢集的SKU。

名稱	類型	Description
name	ManagedClusterSKUName	受控叢集 SKU 的名稱。
tier	ManagedClusterSKUTier	受控叢集 SKU 的層。如果未指定，則預設值為『Free』。詳情請參見 AKS 定價層級。

ManagedClusterSKUName

列舉型別

受控叢集 SKU 的名稱。

值	Description
Base	AKS 控制平面的基底選項。
Automatic	自動叢集經過最佳化，可執行大部分的生產工作負載，其設定會遵循叢集和工作負載設定、延展性和安全性的 AKS 最佳做法和建議。如需自動叢集的詳細資訊，請參閱 aka.ms/aks/automatic。

ManagedClusterSKUTier

列舉型別

受控叢集 SKU 的層。如果未指定，則預設值為『Free』。詳情請參見 AKS 定價層級。

值	Description
Premium	除了「標準」中包含的所有功能之外，叢集還具有進階功能。 Premium 可讓您針對特定 Kubernetes 版本選擇 LongTermSupport （aka.ms/aks/lts）。
Standard	建議用於關鍵任務和生產工作負載。包含 Kubernetes 控制平面自動調整、工作負載密集測試，以及每個叢集最多 5,000 個節點。為未使用可用性區域的叢集保證 99.95% Kubernetes API 伺服器端點的可用性，以及 99.9% 可用性。
Free	叢集管理是免費的，但會針對 VM、儲存體和網路使用量收費。最適合用於實驗、學習、簡單測試或少於10個節點的工作負載。不建議用於生產使用案例。

ManagedClusterStaticEgressGatewayProfile

Object

叢集的靜態輸出閘道附加元件組態。

名稱	類型	Description
enabled	boolean	啟用 Static Egress Gateway 外掛程式。指出是否啟用靜態輸出閘道附加元件。

ManagedClusterStatus

Object

包含受控叢集的唯讀資訊。

名稱	類型	Description
provisioningError	ErrorDetail	錯誤詳細資料是受管理叢集的資訊。保留失敗的詳細資訊。如果沒有錯誤，則省略此欄位。

ManagedClusterStorageProfile

Object

容器服務叢集的記憶體配置檔。

名稱	類型	Description
blobCSIDriver	ManagedClusterStorageProfileBlobCSIDriver	AzureBlob CSI 驅動程式設定中的 storage 設定檔。
diskCSIDriver	ManagedClusterStorageProfileDiskCSIDriver	AzureDisk CSI 驅動程式設定中 storage profile 的設定。
fileCSIDriver	ManagedClusterStorageProfileFileCSIDriver	AzureFile CSI 驅動程式設定中的 storage 設定檔。
snapshotController	ManagedClusterStorageProfileSnapshotController	storage profile 的快照控制器設定。

ManagedClusterStorageProfileBlobCSIDriver

Object

AzureBlob CSI 驅動程式設定中的 storage 設定檔。

名稱	類型	Description
enabled	boolean	是否要啟用 AzureBlob CSI 驅動程式。預設值為 false。

ManagedClusterStorageProfileDiskCSIDriver

Object

AzureDisk CSI 驅動程式設定中 storage profile 的設定。

名稱	類型	Description
enabled	boolean	是否要啟用 AzureDisk CSI 驅動程式。預設值為 True。

ManagedClusterStorageProfileFileCSIDriver

Object

AzureFile CSI 驅動程式設定中的 storage 設定檔。

名稱	類型	Description
enabled	boolean	是否要啟用 AzureFile CSI 驅動程式。預設值為 True。

ManagedClusterStorageProfileSnapshotController

Object

storage profile 的快照控制器設定。

名稱	類型	Description
enabled	boolean	是否要啟用快照控制器。預設值為 True。

ManagedClusterWindowsProfile

Object

受控叢集中 Windows VM 的配置檔。

名稱	類型	Description
adminPassword	string (password)	指定系統管理員帳戶的密碼。長度下限： 8 個字元長度上限： 123 個字元複雜性需求：需要滿足下列 4 個條件中的 3 個字元較低具有大字元具有數位具有特殊字元（Regex match [\W_]）不允許的值： “abc@123”、“P@$$w 0rd”、“P@ssw0rd”、“P@ssword123”、“Pa$$word”、“pass@word1”、“Password！”、“Password1”、“Password22”、“iloveyou！”
adminUsername	string	指定系統管理員帳戶的名稱。限制：不能以 “” 結尾。不允許的值： “administrator”、“admin”、“user”、“user1”、“test”、“user2”、“test1”、“user3”、“admin1”、“1” “123”、“a”、“actuser”、“adm”、“admin2”、“aspnet”、“backup”、“console”、“david”、“guest”、“john”、“owner”、“root”、“server”、“sql”、“support”、“support_388945a0”、“sys”、“test2”、“test3”、“user4”、“user5”。最小長度： 1 個字元長度上限： 20 個字元
enableCSIProxy	boolean	是否要啟用 CSI Proxy。欲了解更多 CSI 代理的詳細資訊，請參閱 CSI 代理 GitHub repo。
gmsaProfile	WindowsGmsaProfile	受控叢集中的 Windows gMSA 配置檔。
licenseType	LicenseType	要用於 Windows VM 的授權類型。詳情請參見 Azure 混合用戶優勢。

ManagedClusterWorkloadAutoScalerProfile

Object

受控叢集的工作負載自動調整程式配置檔。

名稱	類型	Description
keda	ManagedClusterWorkloadAutoScalerProfileKeda	適用於工作負載自動調整程式配置檔的KEDA （Kubernetes 事件驅動自動調整）設定。
verticalPodAutoscaler	ManagedClusterWorkloadAutoScalerProfileVerticalPodAutoscaler	工作負載自動調整程式設定檔的 VPA （垂直 Pod 自動調整程式）設定。

ManagedClusterWorkloadAutoScalerProfileKeda

Object

適用於工作負載自動調整程式配置檔的KEDA （Kubernetes 事件驅動自動調整）設定。

名稱	類型	Description
enabled	boolean	是否要啟用 KEDA。

ManagedClusterWorkloadAutoScalerProfileVerticalPodAutoscaler

Object

工作負載自動調整程式設定檔的 VPA （垂直 Pod 自動調整程式）設定。

名稱	類型	預設值	Description
enabled	boolean	False	是否要啟用 VPA。預設值為 False。

ManagedServiceIdentityUserAssignedIdentitiesValue

Object

使用者指派的身分識別屬性。

名稱	類型	Description
clientId	string	使用者指派身分識別的用戶端標識碼。
principalId	string	使用者指派身分識別的主體標識碼。

ManualScaleProfile

Object

機器數目的規格。

名稱	類型	Description
count	integer (int32)	節點數目。
size	string	AKS 在建立和調整時將使用的 VM 大小，例如 'Standard_E4s_v3'、'Standard_E16s_v3' 或 'Standard_D16s_v5'。

NetworkDataplane

列舉型別

Kubernetes 叢集中所使用的網路數據平面。

值	Description
azure	使用 Azure 網路資料平面。
cilium	使用 Cilium 網路資料平面。如需詳細資訊，請參閱 Azure CNI Powered by Cilium。

NetworkMode

列舉型別

Azure CNI 所設定的網路模式。如果 networkPlugin 不是 'azure'，則無法指定這個功能。

值	Description
transparent	不會建立任何橋接器。 Intra-VM Pod 到 Pod 通訊是透過 Azure CNI 所建立的 IP 路由。如需詳細資訊，請參閱透明模式。
bridge	這已不再支援

NetworkPlugin

列舉型別

用於建置 Kubernetes 網路的網路外掛程式。

值	Description
azure	使用 Azure CNI 網路外掛程式。如需詳細資訊，請參閱 Azure CNI（進階）網路。
kubenet	使用 Kubenet 網路外掛程式。如需詳細資訊，請參閱 Kubenet （基本）網路。
none	未預先安裝 CNI 外掛程式。如需詳細資訊，請參閱 BYO CNI。

NetworkPluginMode

列舉型別

網路外掛程式應該使用的模式。

值	Description
overlay	與 networkPlugin=azure 搭配使用時，Pod 會從 PodCIDR 位址空間獲得 IP，但會使用 Azure 路由網域，而不是 Kubenet 的路由表方法。如需詳細資訊，請造訪 https://aka.ms/aks/azure-cni-overlay。

NetworkPolicy

列舉型別

用於建置 Kubernetes 網路的網路原則。

值	Description
none	不會強制執行網路原則。未指定 NetworkPolicy 時，這是預設值。
calico	使用 Calico 網路原則。如需詳細資訊，請參閱 azure 和 Calico 原則之間的差異。
azure	使用 Azure 網路原則。如需詳細資訊，請參閱 azure 和 Calico 原則之間的差異。
cilium	使用 Cilium 強制執行網路原則。這需要 networkDataplane 為『cilium』。

NginxIngressControllerType

列舉型別

默認 NginxIngressController 自訂資源的輸入類型

值	Description
AnnotationControlled	將會建立預設的 NginxIngressController。用戶可以編輯預設的 NginxIngressController 自定義資源，以設定負載平衡器批注。
External	將會建立預設的 NginxIngressController，而操作員會使用它佈建外部負載平衡器。任何要讓預設負載平衡器內部的註釋都會遭到覆寫。
Internal	將會建立預設的 NginxIngressController，而操作員會使用它來佈建內部負載平衡器。任何要讓預設負載平衡器外部的註釋都會遭到覆寫。
None	不會建立預設的輸入控制器。如果系統存在，系統將不會刪除它。如有需要，用戶應該手動刪除預設的 NginxIngressController 自定義資源。

NodeOSUpgradeChannel

列舉型別

節點作系統升級通道。更新節點上OS的方式。預設值為 NodeImage。

值	Description
None	OS 或滾動 VHD 都不會嘗試更新您的計算機 OS。這表示您要對安全性更新負責
Unmanaged	作業系統更新將透過作業系統內建修補基礎架構自動套用。新調整的機器一開始將會取消修補，而且會由OS的基礎結構在某個時間點修補。此選項的行為取決於有問題的OS。 Ubuntu 和 Mariner 會透過自動升級套用安全性修補程式，大約一天大約是 06：00 UTC。 Windows 不會自動套用安全性修補程式，因此對它們來說，此選項相當於「無」，直至另行通知
NodeImage	AKS 會使用新修補的 VHD 更新節點，其中包含每週的安全性修正程式和錯誤修正。使用 VHD 更新機器，將會在維護期間和激增設定之後，輪流重新映射至該 VHD。選擇此選項作為 AKS 裝載映射時，不會產生額外的 VHD 成本。
SecurityPatch	AKS 會下載並更新節點，並使用經過測試的安全性更新。這些更新會接受維護期間設定，併產生新的 VHD，以在新節點上使用。在某些情況下，您無法就地套用更新，在這種情況下，現有的節點也會重新映像到新產生的 VHD，以套用變更。此選項會產生在資源群組中裝載新安全性修補程式 VHD 的額外成本，以便及時取用。

NodeProvisioningDefaultNodePools

列舉型別

為節點預置配置的預設 Karpenter 節點池（CRD）集。除非mode為 'Auto'，否則此欄位無效。警告：在現有集群上將其從 Auto 更改為 None 將導致預設的 Karpenter NodePools 被刪除，這將耗盡並刪除與這些池關聯的節點。強烈建議不要這樣做，除非有空閒節點準備好接收該作驅逐的 Pod。如果未指定，則預設值為 Auto。有關更多資訊，請參閱 aka.ms/aks/nap#node-pools。

值	Description
None	不會自動佈建 Karpenter 節點集區。除非使用者創建一個或多個 NodePool CRD 實例，否則不會發生自動擴展。
Auto	佈建一組標準的 Karpenter 節點集區

NodeProvisioningMode

列舉型別

節點布建模式。如果未指定，則預設值為Manual。

值	Description
Manual	節點由使用者手動佈建
Auto	AKS 會使用 Karpenter 自動佈建節點（如需詳細資訊，請參閱 aka.ms/aks/nap）。仍然可以建立固定大小的節點集區，但無法自動調整節點集區。（如需詳細資訊，請參閱 aka.ms/aks/nap）。

OSDiskType

列舉型別

要用於代理程式集區中機器的 OS 磁碟類型。如果 VM 支援，且快取磁碟大於要求的 OSDiskSizeGB，則預設值為「暫時」。否則，預設為「受控」。建立之後可能不會變更。更多資訊請參見 Ephemeral OS。

值	Description
Managed	Azure 會將虛擬機器的作業系統磁碟複寫至 Azure 儲存體，以避免在 VM 需要重新定位至另一部主機時遺失資料。由於容器並非設計為保存本機狀態，因此此行為會提供有限的值，同時提供一些缺點，包括較慢的節點布建和較高的讀取/寫入延遲。
Ephemeral	暫時性 OS 磁碟只會儲存在主機上，就像暫存磁碟一樣。這可提供較低的讀取/寫入延遲，以及更快的節點調整和叢集升級。

OSSKU

列舉型別

指定代理程式集區所使用的 OS SKU。如果OSType為Linux，則預設值為Ubuntu。當 Kubernetes <= 1.24 或 Windows2022 時，如果 OSType >為 Windows，則預設值為 Windows2019。

值	Description
Ubuntu	使用Ubuntu作為節點映像的OS。
AzureLinux	使用 AzureLinux 作為節點映像的 OS。 Azure Linux 是Microsoft所建置的容器優化Linux散發版本，如需詳細資訊，請造訪 https://aka.ms/azurelinux。
AzureLinux3	使用 AzureLinux3 作為節點映像的 OS。 Azure Linux 是Microsoft所建置的容器優化Linux散發版本，如需詳細資訊，請造訪 https://aka.ms/azurelinux。有關限制，請訪問 https://aka.ms/aks/node-images。如需作業系統移轉指引，請參閱 https://aka.ms/aks/upgrade-os-version。
CBLMariner	已被取代的 OSSKU。 Microsoft建議新的部署改為選擇『AzureLinux』。
Windows2019	使用 Windows2019 作為節點映像的 OS。不支援系統節點集區。 Windows2019 僅支援 Windows2019 容器;它無法執行 Windows2022 容器，反之亦然。
Windows2022	使用 Windows2022 作為節點映像的 OS。不支援系統節點集區。 Windows2022 僅支援 Windows2022 容器;它無法執行 Windows2019 容器，反之亦然。
Ubuntu2204	使用Ubuntu2204作為節點映像的作系統，但是，並非所有節點池都支援Ubuntu 22.04。如需限制和支援的 Kubernetes 版本，請參閱 https://aka.ms/aks/supported-ubuntu-versions
Ubuntu2404	使用Ubuntu2404作為節點映像的作系統，但是，並非所有節點池都支援Ubuntu 24.04。有關限制和支援的 kubernetes 版本，請參閱 https://aka.ms/aks/supported-ubuntu-versions

OSType

列舉型別

作系統類型。預設值為Linux。

值	Description
Linux	使用 Linux。
Windows	使用 Windows。

OutboundType

列舉型別

輸出（輸出）路由方法。這隻能在叢集建立期間設定，且稍後無法變更。更多資訊請參見出口類型。

值	Description
loadBalancer	負載平衡器用於透過 AKS 指派的公用 IP 輸出。這支援類型為『loadBalancer』的 Kubernetes 服務。如需詳細資訊，請參閱輸出類型 loadbalancer。
userDefinedRouting	輸出路徑必須由使用者定義。這是進階案例，需要適當的網路設定。如需詳細資訊，請參閱輸出類型 userDefinedRouting。
managedNATGateway	AKS 受控 NAT 閘道用於輸出。
userAssignedNATGateway	與叢集子網路相關聯的使用者指派的 NAT 閘道用於輸出。這是進階案例，需要適當的網路設定。
none	AKS 叢集未設定任何輸出類型。所有 AKS 節點都遵循 Azure VM 預設輸出行為。請參閱 https://azure.microsoft.com/en-us/updates/default-outbound-access-for-vms-in-azure-will-be-retired-transition-to-a-new-method-of-internet-access/

PodIPAllocationMode

列舉型別

Pod IP 分配模式。代理程式集區中 Pod 的 IP 配置模式。必須與 podSubnetId 搭配使用。預設值為『DynamicIndividual』。

值	Description
DynamicIndividual	每個節點都會分配可指派給 Pod 的非連續 IP 位址清單。這更適合將大小為 /16 或更小的小型到中型子網最大化。如果客戶未明確指定 podIPAllocationMode，則具有動態 IP 配置的 Azure CNI 叢集預設為此模式
StaticBlock	每個節點都會靜止分配大小為 /28 = 每個區塊 16 個 IP 的 CIDR 區塊，以滿足每個節點的 maxPods。 ciDR 區塊數目 >= （maxPods / 16）。此區塊而非單一IP會根據 Azure Vnet 私人IP限制計算為65K。因此，區塊模式適用於在叢集中執行大於目前 65K Pod 限制的較大工作負載。此模式更適合使用 /15 或更大的子網進行調整

PortRange

Object

埠範圍。

名稱	類型	Description
portEnd	integer (int32) minimum: 1 maximum: 65535	範圍中包含的最大埠。它的範圍應從 1 到 65535，且大於或等於 portStart。
portStart	integer (int32) minimum: 1 maximum: 65535	範圍中包含的最小埠。它的範圍應從 1 到 65535，且小於或等於 portEnd。
protocol	Protocol	埠的網路通訊協定。

PowerState

Object

描述叢集的電源狀態

名稱	類型	Description
code	Code	告知叢集是否正在執行或已停止

PrivateLinkResource

Object

私人鏈接資源

名稱	類型	Description
groupId	string	資源的群組標識碼。
id	string	private link 資源的 ID。
name	string	私人鏈接資源的名稱。詳情請參見命名規則。
privateLinkServiceID	string (arm-id)	資源的私人連結服務識別碼，此欄位只會在內部公開給 NRP。
requiredMembers	string[]	資源的 RequiredMembers
type	string	資源類型。

Protocol

列舉型別

埠的網路通訊協定。

值	Description
TCP	TCP 通訊協定。
UDP	UDP 通訊協定。

ProxyRedirectionMechanism

列舉型別

流量重新導向的模式。

值	Description
InitContainers	Istio 會向每個 Pod 注入一個 init 容器來重定向流量（需要 NET_ADMIN 和 NET_RAW）。
CNIChaining	Istio 將安裝一個鏈結的 CNI 外掛程式來重新導向流量（建議）。

PublicNetworkAccess

列舉型別

PublicNetworkAccess 的 PublicNetworkAccess 中。允許或拒絕 AKS 的公共網路 access

值	Description
Enabled	允許對 managedCluster 進行入埠/出埠。
Disabled	已停用 managedCluster 的傳入流量，則允許來自 managedCluster 的流量。

ResourceIdentityType

列舉型別

用於受控叢集的身分識別類型。欲了解更多資訊，請參閱 AKS 中的 use 管理身份。

值	Description
SystemAssigned	使用隱含建立的系統指派受控識別來管理叢集資源。控制平面中的主要元件（例如 kube-controller-manager）會使用系統指派的受控識別來操作 Azure 資源。
UserAssigned	使用使用者指定的身分來管理叢集資源。控制平面中的主要元件（例如 kube-controller-manager）會使用指定的使用者指派受控識別來操作 Azure 資源。
None	請勿針對受控叢集使用受控識別，而是使用服務主體。

ResourceReference

Object

Azure 資源的參考。

名稱	類型	Description
id	string (arm-id)	完全合格的 Azure 資源 ID。

RestrictionLevel

列舉型別

套用至叢集節點資源群組的限制層級。如果未指定，預設值為 'Unrestricted'

值	Description
Unrestricted	受管理節點資源群組上允許所有 RBAC 許可權
ReadOnly	受管理節點資源群組上只允許 */read RBAC 權限

ScaleDownMode

列舉型別

描述如何將 VM 新增至代理程式集區或從代理程式集區移除。請參閱計費狀態。

值	Description
Delete	在相應增加期間建立新執行個體，並在相應減少期間移除執行個體。
Deallocate	嘗試在相應增加期間啟動解除配置的執行個體（如果存在），並在相應減少期間解除配置執行個體。

ScaleProfile

Object

如何調整 VirtualMachines 代理程式集區的規格。

名稱	類型	Description
manual	ManualScaleProfile[]	如何將 VirtualMachines 代理程式集區調整為固定大小的規格。

ScaleSetEvictionPolicy

列舉型別

虛擬機器擴展集收回原則。驅逐政策會明確說明當虛擬機被驅逐時to do什麼。預設值為刪除。欲了解更多驅逐資訊，請參見 spot VMs

值	Description
Delete	節點集區基礎擴展集中的節點會在收回時刪除。
Deallocate	節點集區基礎擴展集中的節點會在收回時設定為已停止解除配置狀態。針對計算配額，停止解除分配狀態計數中的節點，並可能導致叢集調整或升級的問題。

ScaleSetPriority

列舉型別

虛擬機擴展集優先順序。

值	Description
Spot	將使用Spot優先順序VM。現成節點沒有 SLA。如需詳細資訊，請參閱 AKS 上的位置。
Regular	將使用常規虛擬機器。

ServiceMeshMode

列舉型別

服務網格的模式。

值	Description
Istio	Istio 部署為 AKS 附加元件。
Disabled	網格已停用。

ServiceMeshProfile

Object

受控叢集的服務網格配置檔。

名稱	類型	Description
istio	IstioServiceMesh	Istio 服務網格設定。
mode	ServiceMeshMode	服務網格的模式。

SysctlConfig

Object

Linux 代理程序節點的 Sysctl 設定。

名稱	類型	Description
fsAioMaxNr	integer (int32)	Sysctl 設定 fs.aio-max-nr。
fsFileMax	integer (int32)	Sysctl 設定 fs.file-max。
fsInotifyMaxUserWatches	integer (int32)	Sysctl 設定fs.inotify.max_user_watches。
fsNrOpen	integer (int32)	Sysctl 設定fs.nr_open。
kernelThreadsMax	integer (int32)	Sysctl 設定 kernel.threads-max。
netCoreNetdevMaxBacklog	integer (int32)	Sysctl 設定net.core.netdev_max_backlog。
netCoreOptmemMax	integer (int32)	Sysctl 設定net.core.optmem_max。
netCoreRmemDefault	integer (int32)	Sysctl 設定net.core.rmem_default。
netCoreRmemMax	integer (int32)	Sysctl 設定net.core.rmem_max。
netCoreSomaxconn	integer (int32)	Sysctl 設定 net.core.somaxconn。
netCoreWmemDefault	integer (int32)	Sysctl 設定net.core.wmem_default。
netCoreWmemMax	integer (int32)	Sysctl 設定net.core.wmem_max。
netIpv4IpLocalPortRange	string	Sysctl 設定net.ipv4.ip_local_port_range。
netIpv4NeighDefaultGcThresh1	integer (int32)	Sysctl 設定net.ipv4.neigh.default.gc_thresh1。
netIpv4NeighDefaultGcThresh2	integer (int32)	Sysctl 設定net.ipv4.neigh.default.gc_thresh2。
netIpv4NeighDefaultGcThresh3	integer (int32)	Sysctl 設定net.ipv4.neigh.default.gc_thresh3。
netIpv4TcpFinTimeout	integer (int32)	Sysctl 設定net.ipv4.tcp_fin_timeout。
netIpv4TcpKeepaliveProbes	integer (int32)	Sysctl 設定net.ipv4.tcp_keepalive_probes。
netIpv4TcpKeepaliveTime	integer (int32)	Sysctl 設定net.ipv4.tcp_keepalive_time。
netIpv4TcpMaxSynBacklog	integer (int32)	Sysctl 設定net.ipv4.tcp_max_syn_backlog。
netIpv4TcpMaxTwBuckets	integer (int32)	Sysctl 設定net.ipv4.tcp_max_tw_buckets。
netIpv4TcpTwReuse	boolean	Sysctl 設定net.ipv4.tcp_tw_reuse。
netIpv4TcpkeepaliveIntvl	integer (int32) minimum: 10 maximum: 90	Sysctl 設定net.ipv4.tcp_keepalive_intvl。
netNetfilterNfConntrackBuckets	integer (int32) minimum: 65536 maximum: 524288	Sysctl 設定net.netfilter.nf_conntrack_buckets。
netNetfilterNfConntrackMax	integer (int32) minimum: 131072 maximum: 2097152	Sysctl 設定net.netfilter.nf_conntrack_max。
vmMaxMapCount	integer (int32)	Sysctl 設定vm.max_map_count。
vmSwappiness	integer (int32)	Sysctl 設定 vm.swappiness。
vmVfsCachePressure	integer (int32)	Sysctl 設定vm.vfs_cache_pressure。

systemData

Object

與建立和上次修改資源相關的元數據。

名稱	類型	Description
createdAt	string (date-time)	資源建立的時間戳（UTC）。
createdBy	string	建立資源的身分識別。
createdByType	createdByType	建立資源的身分識別類型。
lastModifiedAt	string (date-time)	上次修改的資源時間戳（UTC）
lastModifiedBy	string	上次修改資源的身分識別。
lastModifiedByType	createdByType	上次修改資源的身分識別類型。

TransitEncryptionType

列舉型別

配置 Pod 到 Pod 加密。這隻能在 Cilium 型叢集上啟用。如果未指定，預設值為 None。

值	Description
WireGuard	啟用 WireGuard 加密。請參閱使用 https://docs.cilium.io/en/latest/security/network/encryption-wireguard/ 案例和實作詳細資料
None	停用傳輸加密

UndrainableNodeBehavior

列舉型別

定義升級期間無法透支節點的行為。無法透支節點最常見的原因是 Pod 中斷預算（PDB），但其他問題，例如 Pod 終止寬限期超過剩餘的個別節點清空逾時，或 Pod 仍在執行中狀態，也可能導致無法執行的節點。

值

Description

Cordon

AKS 會在升級期間封鎖封鎖的節點，並將其取代為突波節點。封鎖的節點將會受到封鎖，並以激增節點取代。封鎖的節點將會有標籤『kubernetes.azure.com/upgrade-status:Quarantined』。每個已封鎖節點都會保留激增節點。系統會盡最大努力嘗試刪除所有其他激增節點。如果有足夠的激增節點來取代封鎖的節點，則升級作業和受控叢集將會處於失敗狀態。否則，升級作業和受控叢集將會處於取消狀態。

Schedule

AKS 會將封鎖的節點標示為可排程，但封鎖的節點不會升級。系統會盡最大努力嘗試刪除所有激增節點。如果有任何封鎖的節點，升級作業和受控叢集將會處於失敗狀態。

UpgradeChannel

列舉型別

自動升級的升級通道。預設值為『none』。更多資訊請參見 setting AKS 叢集自動升級通道。

值	Description
rapid	在最新支援的次要版本上自動將叢集升級至最新支援的修補程式版本。如果叢集位於 N-2 次要版本的 Kubernetes 版本，其中 N 是最新支援的次要版本，則叢集會先升級至 N-1 次要版本上最新支援的修補程式版本。例如，如果叢集執行版本 1.17.7 和 1.17.9、1.18.4、1.18.6 和 1.19.1，您的叢集會先升級至 1.18.6 版，然後升級至 1.19.1。
stable	自動將叢集升級至次要版本 N-1 上支援的最新修補程式版本，其中 N 是最新支援的次要版本。例如，如果叢集正在執行 1.17.7 版和 1.17.9 版、1.18.4、1.18.6 版和 1.19.1 版，您的叢集就會升級至 1.18.6。
patch	當叢集可用時，自動將叢集升級至最新的支援修補程式版本，同時保持次要版本不變。例如，如果叢集正在執行 1.17.7 版和 1.17.9 版、1.18.4、1.18.6 版和 1.19.1 版，您的叢集就會升級至 1.17.9。
node-image	自動將節點映像升級至可用的最新版本。請考慮改用 nodeOSUpgradeChannel，因為這可讓您將節點 OS 修補與 Kubernetes 版本修補分開設定
none	停用自動升級，並將叢集保留為目前版本的 Kubernetes。

UpgradeOverrideSettings

Object

升級叢集時覆寫的設定。

名稱	類型	Description
forceUpgrade	boolean	是否要強制升級叢集。請注意，此選項會指示升級作業略過升級保護，例如檢查已淘汰的 API 使用量。請謹慎啟用此選項。
until	string (date-time)	直到覆寫生效為止。請注意，這隻會符合升級的開始時間，即使升級 `until` 繼續進行時到期，升級的有效性也不會變更。預設不會設定此欄位。必須設定覆寫才會生效。

UserAssignedIdentity

Object

使用者指派身分識別的詳細數據。

名稱	類型	Description
clientId	string	使用者指派身分識別的用戶端標識碼。
objectId	string	使用者指派身分識別的物件標識碼。
resourceId	string (arm-id)	使用者指派身分識別的資源標識碼。

VirtualMachineNodes

Object

相同 VM 大小的節點群組目前狀態。

名稱	類型	Description
count	integer (int32)	節點數目。
size	string	用來裝載此節點群組之代理程式的 VM 大小。

VirtualMachinesProfile

Object

VirtualMachines 代理程式集區的規格。

名稱	類型	Description
scale	ScaleProfile	如何調整 VirtualMachines 代理程式集區的規格。

WindowsGmsaProfile

Object

受控叢集中的 Windows gMSA 配置檔。

名稱	類型	Description
dnsServer	string	指定 Windows gMSA 的 DNS 伺服器。如果您已在用來建立受控叢集的 vnet 中設定 DNS 伺服器，請將它設定為空白。
enabled	boolean	是否要啟用 Windows gMSA。指定是否要在受控叢集中啟用 Windows gMSA。
rootDomainName	string	指定 Windows gMSA 的根功能變數名稱。如果您已在用來建立受控叢集的 vnet 中設定 DNS 伺服器，請將它設定為空白。

WorkloadRuntime

列舉型別

決定節點可執行的工作負載類型。

值	Description
OCIContainer	節點會使用 Kubelet 來執行標準 OCI 容器工作負載。
WasmWasi	節點會使用 Krustlet 使用 WASI 提供者來執行 WASM 工作負載（預覽）。
KataVmIsolation	節點可以使用（Kata + Cloud Hypervisor + Hyper-V）來啟用巢狀虛擬機器型網繭。由於使用 Hyper-V，AKS 節點 OS 本身是 Hyper-V 的巢狀 VM（根 OS）。因此，它只能與支援巢狀虛擬化的 VM 系列搭配使用，例如 Dv3 系列。

共用方式為

Managed Clusters - Create Or Update

URI 參數

要求標頭

要求本文

回應

安全性

azure_auth

範圍

範例

Create Managed Cluster using an agent pool snapshot

範例要求

範例回覆

Create Managed Cluster with Advanced Networking Transit Encryption

範例要求

範例回覆

Create Managed Cluster with AKS-managed NAT gateway as outbound type

範例要求

範例回覆

Create Managed Cluster with Azure KeyVault Secrets Provider Addon

範例要求

範例回覆

Create Managed Cluster with Capacity Reservation Group

範例要求

範例回覆

Create Managed Cluster with Custom CA Trust Certificates

範例要求

範例回覆

Create Managed Cluster with Dedicated Host Group

範例要求

範例回覆

Create Managed Cluster with EncryptionAtHost enabled

範例要求

範例回覆

Create Managed Cluster with FIPS enabled OS

範例要求

範例回覆

Create Managed Cluster with GPUMIG

範例要求

範例回覆

Create Managed Cluster with HTTP proxy configured

範例要求

範例回覆

Create Managed Cluster with LongTermSupport

範例要求

範例回覆

Create Managed Cluster with Node Public IP Prefix

範例要求

範例回覆

Create Managed Cluster with OSSKU

範例要求

範例回覆

Create Managed Cluster with PodIdentity enabled

範例要求

範例回覆

Create Managed Cluster with PPG

範例要求

範例回覆

Create Managed Cluster with RunCommand disabled

範例要求

範例回覆

Create Managed Cluster with Security Profile configured

範例要求

範例回覆

Create Managed Cluster with UltraSSD enabled

範例要求

範例回覆

Create Managed Cluster with user-assigned NAT gateway as outbound type

範例要求

範例回覆

Create Managed Cluster with Web App Routing Ingress Profile configured

範例要求

範例回覆

Create Managed Private Cluster with fqdn subdomain specified

範例要求

範例回覆

Create Managed Private Cluster with Public FQDN specified

範例要求

範例回覆

Create/Update AAD Managed Cluster with EnableAzureRBAC