aks-managed-clusters
Report Package aks-managed-clusters
If you believe this package contains harmful information, please let us know. Your credentials are never shared.
This Bicep AVM module deploys an Azure Kubernetes Service (AKS) Managed Cluster.
$ ipm add --package avm-bicep/aks-managed-clusters --version 0.14.0
No readme file uploaded for this version.
Changelog
The latest version of the changelog can be found here.
0.14.0
Changes
- Updated the diagnostic implementation to avoid automatically enabling both metrics and logs when only one is specified.
- Added
VirtualMachinesas an allowed agent pool type to support AKS static egress gateway private IP scenarios.
Breaking Changes
- None
0.13.1
Changes
- Publishing child module
avm/res/container-service/managed-cluster/agent-pool - Publishing child module
avm/res/container-service/managed-cluster/maintenance-configuration
Breaking Changes
- None
0.13.0
Changes
- Updated ARM API versions to
2025-10-01in the main module and child modules.
Breaking Changes
- None
0.12.0
Changes
- Updated ARM API versions to
2025-09-01in the main module and child modules. - Added new parameters
advancedNetworking,aiToolchainOperatorProfile,bootstrapProfile,fqdnSubdomain,ipFamilies,natGatewayProfile,networkMode,nodeProvisioningProfile,podCidrs,serviceCidrs,staticEgressGatewayProfileandwindowsProfilefollowing the API specification. agent-poolchild module: Added new parameters, following the API specification:capacityReservationGroupResourceId,gatewayProfile,gpuInstanceProfile,gpuProfile,hostGroupId,kubeletConfig,localDNSProfile,messageOfTheDay,networkProfile,podIPAllocationMode,powerStateandvirtualMachinesProfile.agent-poolchild module: Added new allowed values toosSkuparameter:AzureLinux3,Ubuntu2204,Ubuntu2404,Windows2025.maintenance-configurationchild module: Added new parametersnotAllowedTimeandtimeInWeekfor blackout windows and weekly maintenance schedules.
Breaking Changes
- API version updates may introduce new required parameters or behavior changes in the underlying Azure Resource Manager API
- Replaced individual parameters with API-typed parameters:
aadProfile,aksServicePrincipalProfile,backendPoolType,defaultIngressControllerType,httpProxyConfig,identityProfile,loadBalancerSku,networkDataplane,networkPlugin,networkPolicy,nodeProvisioningProfileMode,nodeResourceGroupProfile,outboundType,skuName,skuTier,supportPlanandtags. - Removed individual
adminUsernameandsshPublicKeyparameters in favor oflinuxProfile, which now includes these settings. - Removed individual API server access parameters
authorizedIPRanges,disableRunCommand,enablePrivateCluster,enablePrivateClusterPublicFQDN,privateDNSZonein favor ofapiServerAccessProfile, which now includes these settings. - Removed individual autoscaler parameters
autoScalerProfileScanInterval,autoScalerProfileScaleDownDelayAfterAdd,autoScalerProfileScaleDownDelayAfterDelete,autoScalerProfileScaleDownDelayAfterFailure,autoScalerProfileScaleDownUnneededTime,autoScalerProfileScaleDownUnreadyTime,autoScalerProfileUtilizationThreshold,autoScalerProfileMaxGracefulTerminationSec,autoScalerProfileBalanceSimilarNodeGroups,autoScalerProfileDaemonsetEvictionForEmptyNodes,autoScalerProfileDaemonsetEvictionForOccupiedNodes,autoScalerProfileIgnoreDaemonsetsUtilization,autoScalerProfileExpander,autoScalerProfileMaxEmptyBulkDelete,autoScalerProfileMaxNodeProvisionTime,autoScalerProfileMaxTotalUnreadyPercentage,autoScalerProfileNewPodScaleUpDelay,autoScalerProfileOkTotalUnreadyCount,autoScalerProfileSkipNodesWithLocalStorage,autoScalerProfileSkipNodesWithSystemPodsin favor ofautoScalerProfile, which now includes these settings. - Removed individual auto upgrade parameters
autoUpgradeProfileUpgradeChannelandautoNodeOsUpgradeProfileUpgradeChannelin favor ofautoUpgradeProfile, which now includes these settings. - Removed individual pod identity parameters
podIdentityProfileAllowNetworkPluginKubenet,podIdentityProfileEnable,podIdentityProfileUserAssignedIdentitiesandpodIdentityProfileUserAssignedIdentityExceptionsin favor ofpodIdentityProfile, which now includes these settings. - Removed individual security parameters
enableWorkloadIdentity,enableAzureDefender,securityGatingConfig,enableImageCleaner,enableImageIntegrity,enableNodeRestrictionandimageCleanerIntervalHoursin favor ofsecurityProfile, which now includes these settings. Please note that some security settings have been removed in the API version 2025-09-01. - Removed parameters
kedaAddonandvpaAddon, now they're part ofworkloadAutoScalerProfile. - Removed individual Azure Monitor parameters
appMonitoring,enableContainerInsights,disableCustomMetrics,disablePrometheusMetricsScraping,syslogPortas the properties wre removed from theazureMonitorProfilein the api version2025-09-01. - Removed individual Azure Monitor parameters
enableAzureMonitorProfileMetrics,metricLabelsAllowlistandmetricAnnotationsAllowListin favor ofazureMonitorProfile. - Removed Istio-specific parameters
istioServiceMeshEnabled,istioServiceMeshRevisions,istioServiceMeshInternalIngressGatewayEnabledandistioServiceMeshCertificateAuthorityin favor of genericserviceMeshProfile agent-poolchild module: Updated parametersgpuInstanceProfile,kubeletDiskType,linuxOSConfig,mode,osDiskType,osType,scaleDownMode,scaleSetEvictionPolicy,scaleSetPriority,tags,workloadRuntimeandwindowsProfileto use resource input types fromMicrosoft.ContainerService/managedClusters/agentPools@2025-09-01for consistency with the RP schema and built-in validation.agent-poolchild module: Updated parametersnodeLabels,nodeTaintsto use strong types.agent-poolchild module: Removed parametermaxSurge, now it's part ofupgradeSettings.agent-poolchild module: Removed parametersenableSecureBoot,enableVTPMandsshAccess, now they're part ofsecurityProfile.maintenance-configurationchild module: UpdatedmaintenanceWindowparameter to use strong types fromMicrosoft.ContainerService/managedClusters/maintenanceConfigurations@2025-09-01.- Changed
fluxExtension.configurationstofluxExtension.fluxConfigurationsfor consistency - SKU tier value changed from lowercase
'free'to'Free'(capital F) to match API specification
0.11.1
Changes
- Update
discEncryptionSetResourceIdparameter description
Breaking Changes
- None
0.11.0
Changes
- Updated ARM API versions:
- Updated
Microsoft.ContainerService/managedClustersfrom previous version to2025-05-02-preview - Updated
Microsoft.ContainerService/managedClusters/agentPoolsto2025-05-02-preview - Updated
Microsoft.ContainerService/managedClusters/maintenanceConfigurationsto2025-05-01
- Updated
- Updated some parameter types to reference newer API versions for better type safety
- Updated resource templates and JSON output to use the latest API versions
- Adding Linux and Windows profile config to
Microsoft.ContainerService/managedClusters/agentPools
Breaking Changes
- API version updates may introduce new required parameters or behavior changes in the underlying Azure Resource Manager API
- Some parameter schemas may have changed due to the updated API versions
0.10.1
Changes
- Updated LockType to 'avm-common-types version'
0.6.0, enabling custom notes for locks. - Added types to
tags,httpProxyConfig&identityProfileparameters - Updated version of referenced
avm/res/kubernetes-configuration/extensionmodule to0.3.6and adding a pass-thru of thetargetNamespaceparameter
Breaking Changes
- None
0.10.0
Changes
- Adding load balancer configuration options
- Updated ReadMe with AzAdvertizer reference
Breaking Changes
- None
0.9.0
Changes
- Initial version
Breaking Changes
- None
{
"workingFolder": "packages",
"packages": [
{
"name": "avm-bicep/aks-managed-clusters",
"version": "0.14.0"
}
]
}
Ready to distribute infrastructure
like software packages?
Free trial, no credit card, full access. Set up your first package in under 30 minutes — we'll help if you need it.
➜ winget install ipmhub.ipm➜ ipm login ➜ ipm publish -p acme-msp/landing-zone -f ./ -v 2.1.0Publishing version 2.1.0 for package acme-msp/landing-zone completed successfully.