@azure/arm-containerservice 23.0.0-beta.1 → 23.0.0-beta.3

package/dist/browser/models/index.d.ts

@@ -120,7 +120,7 @@ export interface ManagedClusterListResult {
 export interface ManagedClusterSKU {
     /** The name of a managed cluster SKU. */
     name?: ManagedClusterSKUName;
-    /** If not specified, the default is 'Free'. See [AKS Pricing Tier](https://learn.microsoft.com/azure/aks/free-standard-pricing-tiers) for more details. */
+    /** The tier of a managed cluster SKU. If not specified, the default is 'Free'. See [AKS Pricing Tier](https://learn.microsoft.com/azure/aks/free-standard-pricing-tiers) for more details. */
     tier?: ManagedClusterSKUTier;
 }
 /** The complex type of the extended location. */
@@ -142,13 +142,13 @@ export interface ManagedClusterIdentity {
      * NOTE: This property will not be serialized. It can only be populated by the server.
      */
     readonly tenantId?: string;
-    /** For more information see [use managed identities in AKS](https://docs.microsoft.com/azure/aks/use-managed-identity). */
+    /** The type of identity used for the managed cluster. For more information see [use managed identities in AKS](https://docs.microsoft.com/azure/aks/use-managed-identity). */
     type?: ResourceIdentityType;
     /** The delegated identity resources assigned to this managed cluster. This can only be set by another Azure Resource Provider, and managed cluster only accept one delegated identity resource. Internal use only. */
     delegatedResources?: {
         [propertyName: string]: DelegatedResource;
     };
-    /** The keys must be ARM resource IDs in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'. */
+    /** The user identity associated with the managed cluster. This identity will be used in control plane. Only one user assigned identity is allowed. The keys must be ARM resource IDs in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'. */
     userAssignedIdentities?: {
         [propertyName: string]: ManagedServiceIdentityUserAssignedIdentitiesValue;
     };
@@ -195,23 +195,23 @@ export interface ManagedClusterAgentPoolProfileProperties {
     readonly eTag?: string;
     /** Number of agents (VMs) to host docker containers. Allowed values must be in the range of 0 to 1000 (inclusive) for user pools and in the range of 1 to 1000 (inclusive) for system pools. The default value is 1. */
     count?: number;
-    /** VM size availability varies by region. If a node contains insufficient compute resources (memory, cpu, etc) pods might fail to run correctly. For more details on restricted VM sizes, see: https://docs.microsoft.com/azure/aks/quotas-skus-regions */
+    /** The size of the agent pool VMs. VM size availability varies by region. If a node contains insufficient compute resources (memory, cpu, etc) pods might fail to run correctly. For more details on restricted VM sizes, see: https://docs.microsoft.com/azure/aks/quotas-skus-regions */
     vmSize?: string;
     /** OS Disk Size in GB to be used to specify the disk size for every machine in the master/agent pool. If you specify 0, it will apply the default osDisk size according to the vmSize specified. */
     osDiskSizeGB?: number;
-    /** The default is 'Ephemeral' if the VM supports it and has a cache disk larger than the requested OSDiskSizeGB. Otherwise, defaults to 'Managed'. May not be changed after creation. For more information see [Ephemeral OS](https://docs.microsoft.com/azure/aks/cluster-configuration#ephemeral-os). */
+    /** The OS disk type to be used for machines in the agent pool. The default is 'Ephemeral' if the VM supports it and has a cache disk larger than the requested OSDiskSizeGB. Otherwise, defaults to 'Managed'. May not be changed after creation. For more information see [Ephemeral OS](https://docs.microsoft.com/azure/aks/cluster-configuration#ephemeral-os). */
     osDiskType?: OSDiskType;
     /** Determines the placement of emptyDir volumes, container runtime data root, and Kubelet ephemeral storage. */
     kubeletDiskType?: KubeletDiskType;
     /** Determines the type of workload a node can run. */
     workloadRuntime?: WorkloadRuntime;
-    /** A base64-encoded string which will be written to /etc/motd after decoding. This allows customization of the message of the day for Linux nodes. It must not be specified for Windows nodes. It must be a static string (i.e., will be printed raw and not be executed as a script). */
+    /** Message of the day for Linux nodes, base64-encoded. A base64-encoded string which will be written to /etc/motd after decoding. This allows customization of the message of the day for Linux nodes. It must not be specified for Windows nodes. It must be a static string (i.e., will be printed raw and not be executed as a script). */
     messageOfTheDay?: string;
-    /** If this is not specified, a VNET and subnet will be generated and used. If no podSubnetID is specified, this applies to nodes and pods, otherwise it applies to just nodes. This is of the form: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/virtualNetworks/{virtualNetworkName}/subnets/{subnetName} */
+    /** The ID of the subnet which agent pool nodes and optionally pods will join on startup. If this is not specified, a VNET and subnet will be generated and used. If no podSubnetID is specified, this applies to nodes and pods, otherwise it applies to just nodes. This is of the form: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/virtualNetworks/{virtualNetworkName}/subnets/{subnetName} */
     vnetSubnetID?: string;
-    /** If omitted, pod IPs are statically assigned on the node subnet (see vnetSubnetID for more details). This is of the form: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/virtualNetworks/{virtualNetworkName}/subnets/{subnetName} */
+    /** The ID of the subnet which pods will join when launched. If omitted, pod IPs are statically assigned on the node subnet (see vnetSubnetID for more details). This is of the form: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/virtualNetworks/{virtualNetworkName}/subnets/{subnetName} */
     podSubnetID?: string;
-    /** The IP allocation mode for pods in the agent pool. Must be used with podSubnetId. The default is 'DynamicIndividual'. */
+    /** Pod IP Allocation Mode. The IP allocation mode for pods in the agent pool. Must be used with podSubnetId. The default is 'DynamicIndividual'. */
     podIPAllocationMode?: PodIPAllocationMode;
     /** The maximum number of pods that can run on a node. */
     maxPods?: number;
@@ -225,16 +225,16 @@ export interface ManagedClusterAgentPoolProfileProperties {
     minCount?: number;
     /** Whether to enable auto-scaler */
     enableAutoScaling?: boolean;
-    /** This also effects the cluster autoscaler behavior. If not specified, it defaults to Delete. */
+    /** The scale down mode to use when scaling the Agent Pool. This also effects the cluster autoscaler behavior. If not specified, it defaults to Delete. */
     scaleDownMode?: ScaleDownMode;
     /** The type of Agent Pool. */
     type?: AgentPoolType;
-    /** A cluster must have at least one 'System' Agent Pool at all times. For additional information on agent pool restrictions and best practices, see: https://docs.microsoft.com/azure/aks/use-system-pools */
+    /** The mode of an agent pool. A cluster must have at least one 'System' Agent Pool at all times. For additional information on agent pool restrictions and best practices, see: https://docs.microsoft.com/azure/aks/use-system-pools */
     mode?: AgentPoolMode;
-    /** Both patch version <major.minor.patch> and <major.minor> are supported. When <major.minor> is specified, the latest supported patch version is chosen automatically. Updating the agent pool with the same <major.minor> once it has been created will not trigger an upgrade, even if a newer patch version is available. As a best practice, you should upgrade all node pools in an AKS cluster to the same Kubernetes version. The node pool version must have the same major version as the control plane. The node pool minor version must be within two minor versions of the control plane version. The node pool version cannot be greater than the control plane version. For more information see [upgrading a node pool](https://docs.microsoft.com/azure/aks/use-multiple-node-pools#upgrade-a-node-pool). */
+    /** The version of Kubernetes specified by the user. Both patch version <major.minor.patch> and <major.minor> are supported. When <major.minor> is specified, the latest supported patch version is chosen automatically. Updating the agent pool with the same <major.minor> once it has been created will not trigger an upgrade, even if a newer patch version is available. As a best practice, you should upgrade all node pools in an AKS cluster to the same Kubernetes version. The node pool version must have the same major version as the control plane. The node pool minor version must be within two minor versions of the control plane version. The node pool version cannot be greater than the control plane version. For more information see [upgrading a node pool](https://docs.microsoft.com/azure/aks/use-multiple-node-pools#upgrade-a-node-pool). */
     orchestratorVersion?: string;
     /**
-     * If orchestratorVersion was a fully specified version <major.minor.patch>, this field will be exactly equal to it. If orchestratorVersion was <major.minor>, this field will contain the full <major.minor.patch> version being used.
+     * The version of Kubernetes running on the Agent Pool. If orchestratorVersion was a fully specified version <major.minor.patch>, this field will be exactly equal to it. If orchestratorVersion was <major.minor>, this field will contain the full <major.minor.patch> version being used.
      * NOTE: This property will not be serialized. It can only be populated by the server.
      */
     readonly currentOrchestratorVersion?: string;
@@ -250,21 +250,21 @@ export interface ManagedClusterAgentPoolProfileProperties {
      * NOTE: This property will not be serialized. It can only be populated by the server.
      */
     readonly provisioningState?: string;
-    /** When an Agent Pool is first created it is initially Running. The Agent Pool can be stopped by setting this field to Stopped. A stopped Agent Pool stops all of its VMs and does not accrue billing charges. An Agent Pool can only be stopped if it is Running and provisioning state is Succeeded */
+    /** Whether the Agent Pool is running or stopped. When an Agent Pool is first created it is initially Running. The Agent Pool can be stopped by setting this field to Stopped. A stopped Agent Pool stops all of its VMs and does not accrue billing charges. An Agent Pool can only be stopped if it is Running and provisioning state is Succeeded */
     powerState?: PowerState;
     /** The list of Availability zones to use for nodes. This can only be specified if the AgentPoolType property is 'VirtualMachineScaleSets'. */
     availabilityZones?: string[];
-    /** Some scenarios may require nodes in a node pool to receive their own dedicated public IP addresses. A common scenario is for gaming workloads, where a console needs to make a direct connection to a cloud virtual machine to minimize hops. For more information see [assigning a public IP per node](https://docs.microsoft.com/azure/aks/use-multiple-node-pools#assign-a-public-ip-per-node-for-your-node-pools). The default is false. */
+    /** Whether each node is allocated its own public IP. Some scenarios may require nodes in a node pool to receive their own dedicated public IP addresses. A common scenario is for gaming workloads, where a console needs to make a direct connection to a cloud virtual machine to minimize hops. For more information see [assigning a public IP per node](https://docs.microsoft.com/azure/aks/use-multiple-node-pools#assign-a-public-ip-per-node-for-your-node-pools). The default is false. */
     enableNodePublicIP?: boolean;
-    /** When set to true, AKS adds a label to the node indicating that the feature is enabled and deploys a daemonset along with host services to sync custom certificate authorities from user-provided list of base64 encoded certificates into node trust stores. Defaults to false. */
+    /** Whether to enable Custom CA Trust feature. When set to true, AKS adds a label to the node indicating that the feature is enabled and deploys a daemonset along with host services to sync custom certificate authorities from user-provided list of base64 encoded certificates into node trust stores. Defaults to false. */
     enableCustomCATrust?: boolean;
-    /** This is of the form: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/publicIPPrefixes/{publicIPPrefixName} */
+    /** The public IP prefix ID which VM nodes should use IPs from. This is of the form: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/publicIPPrefixes/{publicIPPrefixName} */
     nodePublicIPPrefixID?: string;
     /** The Virtual Machine Scale Set priority. If not specified, the default is 'Regular'. */
     scaleSetPriority?: ScaleSetPriority;
-    /** This cannot be specified unless the scaleSetPriority is 'Spot'. If not specified, the default is 'Delete'. */
+    /** The Virtual Machine Scale Set eviction policy to use. This cannot be specified unless the scaleSetPriority is 'Spot'. If not specified, the default is 'Delete'. */
     scaleSetEvictionPolicy?: ScaleSetEvictionPolicy;
-    /** Possible values are any decimal value greater than zero or -1 which indicates the willingness to pay any on-demand price. For more details on spot pricing, see [spot VMs pricing](https://docs.microsoft.com/azure/virtual-machines/spot-vms#pricing) */
+    /** The max price (in US Dollars) you are willing to pay for spot instances. Possible values are any decimal value greater than zero or -1 which indicates default price to be up-to on-demand. Possible values are any decimal value greater than zero or -1 which indicates the willingness to pay any on-demand price. For more details on spot pricing, see [spot VMs pricing](https://docs.microsoft.com/azure/virtual-machines/spot-vms#pricing) */
     spotMaxPrice?: number;
     /** The tags to be persisted on the agent pool virtual machine scale set. */
     tags?: {
@@ -276,7 +276,7 @@ export interface ManagedClusterAgentPoolProfileProperties {
     };
     /** The taints added to new nodes during node pool create and scale. For example, key=value:NoSchedule. */
     nodeTaints?: string[];
-    /** These taints will not be reconciled by AKS and can be removed with a kubectl call. This field can be modified after node pool is created, but nodes will not be recreated with new taints until another operation that requires recreation (e.g. node image upgrade) happens. These taints allow for required configuration to run before the node is ready to accept workloads, for example 'key1=value1:NoSchedule' that then can be removed with `kubectl taint nodes node1 key1=value1:NoSchedule-` */
+    /** Taints added on the nodes during creation that will not be reconciled by AKS. These taints will not be reconciled by AKS and can be removed with a kubectl call. This field can be modified after node pool is created, but nodes will not be recreated with new taints until another operation that requires recreation (e.g. node image upgrade) happens. These taints allow for required configuration to run before the node is ready to accept workloads, for example 'key1=value1:NoSchedule' that then can be removed with `kubectl taint nodes node1 key1=value1:NoSchedule-` */
     nodeInitializationTaints?: string[];
     /** The ID for Proximity Placement Group. */
     proximityPlacementGroupID?: string;
@@ -284,11 +284,11 @@ export interface ManagedClusterAgentPoolProfileProperties {
     kubeletConfig?: KubeletConfig;
     /** The OS configuration of Linux agent nodes. */
     linuxOSConfig?: LinuxOSConfig;
-    /** This is only supported on certain VM sizes and in certain Azure regions. For more information, see: https://docs.microsoft.com/azure/aks/enable-host-encryption */
+    /** Whether to enable host based OS and data drive encryption. This is only supported on certain VM sizes and in certain Azure regions. For more information, see: https://docs.microsoft.com/azure/aks/enable-host-encryption */
     enableEncryptionAtHost?: boolean;
     /** Whether to enable UltraSSD */
     enableUltraSSD?: boolean;
-    /** See [Add a FIPS-enabled node pool](https://docs.microsoft.com/azure/aks/use-multiple-node-pools#add-a-fips-enabled-node-pool-preview) for more details. */
+    /** Whether to use a FIPS-enabled OS. See [Add a FIPS-enabled node pool](https://docs.microsoft.com/azure/aks/use-multiple-node-pools#add-a-fips-enabled-node-pool-preview) for more details. */
     enableFips?: boolean;
     /** GPUInstanceProfile to be used to specify GPU MIG instance profile for supported GPU VM SKU. */
     gpuInstanceProfile?: GPUInstanceProfile;
@@ -296,7 +296,7 @@ export interface ManagedClusterAgentPoolProfileProperties {
     creationData?: CreationData;
     /** AKS will associate the specified agent pool with the Capacity Reservation Group. */
     capacityReservationGroupID?: string;
-    /** This is of the form: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Compute/hostGroups/{hostGroupName}. For more information see [Azure dedicated hosts](https://docs.microsoft.com/azure/virtual-machines/dedicated-hosts). */
+    /** The fully qualified resource ID of the Dedicated Host Group to provision virtual machines from, used only in creation scenario and not allowed to changed once set. This is of the form: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Compute/hostGroups/{hostGroupName}. For more information see [Azure dedicated hosts](https://docs.microsoft.com/azure/virtual-machines/dedicated-hosts). */
     hostGroupID?: string;
     /** The Windows agent pool's specific profile. */
     windowsProfile?: AgentPoolWindowsProfile;
@@ -321,32 +321,32 @@ export interface ManagedClusterAgentPoolProfileProperties {
 }
 /** Settings for upgrading an agentpool */
 export interface AgentPoolUpgradeSettings {
-    /** This can either be set to an integer (e.g. '5') or a percentage (e.g. '50%'). If a percentage is specified, it is the percentage of the total agent pool size at the time of the upgrade. For percentages, fractional nodes are rounded up. If not specified, the default is 10%. For more information, including best practices, see: https://learn.microsoft.com/en-us/azure/aks/upgrade-cluster */
+    /** The maximum number or percentage of nodes that are surged during upgrade. This can either be set to an integer (e.g. '5') or a percentage (e.g. '50%'). If a percentage is specified, it is the percentage of the total agent pool size at the time of the upgrade. For percentages, fractional nodes are rounded up. If not specified, the default is 10%. For more information, including best practices, see: https://learn.microsoft.com/en-us/azure/aks/upgrade-cluster */
     maxSurge?: string;
-    /** This can either be set to an integer (e.g. '1') or a percentage (e.g. '5%'). If a percentage is specified, it is the percentage of the total agent pool size at the time of the upgrade. For percentages, fractional nodes are rounded up. If not specified, the default is 0. For more information, including best practices, see: https://learn.microsoft.com/en-us/azure/aks/upgrade-cluster */
+    /** The maximum number or percentage of nodes that can be simultaneously unavailable during upgrade. This can either be set to an integer (e.g. '1') or a percentage (e.g. '5%'). If a percentage is specified, it is the percentage of the total agent pool size at the time of the upgrade. For percentages, fractional nodes are rounded up. If not specified, the default is 0. For more information, including best practices, see: https://learn.microsoft.com/en-us/azure/aks/upgrade-cluster */
     maxUnavailable?: string;
-    /** This can either be set to an integer (e.g. '5') or a percentage (e.g. '50%'). If a percentage is specified, it is the percentage of the total agent pool size at the time of the upgrade. For percentages, fractional nodes are rounded up. If not specified, the default is maxSurge. This must always be greater than or equal to maxSurge. For more information, including best practices, see: https://learn.microsoft.com/en-us/azure/aks/upgrade-cluster */
+    /** The maximum number or percentage of extra nodes that are allowed to be blocked in the agent pool during an upgrade when undrainable node behavior is Cordon. This can either be set to an integer (e.g. '5') or a percentage (e.g. '50%'). If a percentage is specified, it is the percentage of the total agent pool size at the time of the upgrade. For percentages, fractional nodes are rounded up. If not specified, the default is maxSurge. This must always be greater than or equal to maxSurge. For more information, including best practices, see: https://learn.microsoft.com/en-us/azure/aks/upgrade-cluster */
     maxBlockedNodes?: string;
-    /** The amount of time (in minutes) to wait on eviction of pods and graceful termination per node. This eviction wait time honors waiting on pod disruption budgets. If this time is exceeded, the upgrade fails. If not specified, the default is 30 minutes. */
+    /** The drain timeout for a node. The amount of time (in minutes) to wait on eviction of pods and graceful termination per node. This eviction wait time honors waiting on pod disruption budgets. If this time is exceeded, the upgrade fails. If not specified, the default is 30 minutes. */
     drainTimeoutInMinutes?: number;
-    /** The amount of time (in minutes) to wait after draining a node and before reimaging it and moving on to next node. If not specified, the default is 0 minutes. */
+    /** The soak duration for a node. The amount of time (in minutes) to wait after draining a node and before reimaging it and moving on to next node. If not specified, the default is 0 minutes. */
     nodeSoakDurationInMinutes?: number;
     /** Defines the behavior for undrainable nodes during upgrade. The most common cause of undrainable nodes is Pod Disruption Budgets (PDBs), but other issues, such as pod termination grace period is exceeding the remaining per-node drain timeout or pod is still being in a running state, can also cause undrainable nodes. */
     undrainableNodeBehavior?: UndrainableNodeBehavior;
 }
-/** See [AKS custom node configuration](https://docs.microsoft.com/azure/aks/custom-node-configuration) for more details. */
+/** Kubelet configurations of agent nodes. See [AKS custom node configuration](https://docs.microsoft.com/azure/aks/custom-node-configuration) for more details. */
 export interface KubeletConfig {
-    /** The default is 'none'. See [Kubernetes CPU management policies](https://kubernetes.io/docs/tasks/administer-cluster/cpu-management-policies/#cpu-management-policies) for more information. Allowed values are 'none' and 'static'. */
+    /** The CPU Manager policy to use. The default is 'none'. See [Kubernetes CPU management policies](https://kubernetes.io/docs/tasks/administer-cluster/cpu-management-policies/#cpu-management-policies) for more information. Allowed values are 'none' and 'static'. */
     cpuManagerPolicy?: string;
-    /** The default is true. */
+    /** If CPU CFS quota enforcement is enabled for containers that specify CPU limits. The default is true. */
     cpuCfsQuota?: boolean;
-    /** The default is '100ms.' Valid values are a sequence of decimal numbers with an optional fraction and a unit suffix. For example: '300ms', '2h45m'. Supported units are 'ns', 'us', 'ms', 's', 'm', and 'h'. */
+    /** The CPU CFS quota period value. The default is '100ms.' Valid values are a sequence of decimal numbers with an optional fraction and a unit suffix. For example: '300ms', '2h45m'. Supported units are 'ns', 'us', 'ms', 's', 'm', and 'h'. */
     cpuCfsQuotaPeriod?: string;
-    /** To disable image garbage collection, set to 100. The default is 85% */
+    /** The percent of disk usage after which image garbage collection is always run. To disable image garbage collection, set to 100. The default is 85% */
     imageGcHighThreshold?: number;
-    /** This cannot be set higher than imageGcHighThreshold. The default is 80% */
+    /** The percent of disk usage before which image garbage collection is never run. This cannot be set higher than imageGcHighThreshold. The default is 80% */
     imageGcLowThreshold?: number;
-    /** For more information see [Kubernetes Topology Manager](https://kubernetes.io/docs/tasks/administer-cluster/topology-manager). The default is 'none'. Allowed values are 'none', 'best-effort', 'restricted', and 'single-numa-node'. */
+    /** The Topology Manager policy to use. For more information see [Kubernetes Topology Manager](https://kubernetes.io/docs/tasks/administer-cluster/topology-manager). The default is 'none'. Allowed values are 'none', 'best-effort', 'restricted', and 'single-numa-node'. */
     topologyManagerPolicy?: string;
     /** Allowed list of unsafe sysctls or unsafe sysctl patterns (ending in `*`). */
     allowedUnsafeSysctls?: string[];
@@ -361,13 +361,13 @@ export interface KubeletConfig {
     /** Specifies the default seccomp profile applied to all workloads. If not specified, 'Unconfined' will be used by default. */
     seccompDefault?: SeccompDefault;
 }
-/** See [AKS custom node configuration](https://docs.microsoft.com/azure/aks/custom-node-configuration) for more details. */
+/** OS configurations of Linux agent nodes. See [AKS custom node configuration](https://docs.microsoft.com/azure/aks/custom-node-configuration) for more details. */
 export interface LinuxOSConfig {
     /** Sysctl settings for Linux agent nodes. */
     sysctls?: SysctlConfig;
-    /** Valid values are 'always', 'madvise', and 'never'. The default is 'always'. For more information see [Transparent Hugepages](https://www.kernel.org/doc/html/latest/admin-guide/mm/transhuge.html#admin-guide-transhuge). */
+    /** Whether transparent hugepages are enabled. Valid values are 'always', 'madvise', and 'never'. The default is 'always'. For more information see [Transparent Hugepages](https://www.kernel.org/doc/html/latest/admin-guide/mm/transhuge.html#admin-guide-transhuge). */
     transparentHugePageEnabled?: string;
-    /** Valid values are 'always', 'defer', 'defer+madvise', 'madvise' and 'never'. The default is 'madvise'. For more information see [Transparent Hugepages](https://www.kernel.org/doc/html/latest/admin-guide/mm/transhuge.html#admin-guide-transhuge). */
+    /** Whether the kernel should make aggressive use of memory compaction to make more hugepages available. Valid values are 'always', 'defer', 'defer+madvise', 'madvise' and 'never'. The default is 'madvise'. For more information see [Transparent Hugepages](https://www.kernel.org/doc/html/latest/admin-guide/mm/transhuge.html#admin-guide-transhuge). */
     transparentHugePageDefrag?: string;
     /** The size in MB of a swap file that will be created on each node. */
     swapFileSizeMB?: number;
@@ -433,7 +433,7 @@ export interface SysctlConfig {
 }
 /** The Windows agent pool's specific profile. */
 export interface AgentPoolWindowsProfile {
-    /** The default value is false. Outbound NAT can only be disabled if the cluster outboundType is NAT Gateway and the Windows agent pool does not have node public IP enabled. */
+    /** Whether to disable OutboundNAT in windows nodes. The default value is false. Outbound NAT can only be disabled if the cluster outboundType is NAT Gateway and the Windows agent pool does not have node public IP enabled. */
     disableOutboundNat?: boolean;
 }
 /** Network settings of an agent pool. */
@@ -490,7 +490,7 @@ export interface ScaleProfile {
     /** Specifications on how to scale the VirtualMachines agent pool to a fixed size. */
     manual?: ManualScaleProfile[];
     /** Specifications on how to auto-scale the VirtualMachines agent pool within a predefined size range. */
-    autoscale?: Record<string, unknown>;
+    autoscale?: AutoScaleProfile;
 }
 /** Specifications on number of machines. */
 export interface ManualScaleProfile {
@@ -499,6 +499,15 @@ export interface ManualScaleProfile {
     /** Number of nodes. */
     count?: number;
 }
+/** Specifications on auto-scaling. */
+export interface AutoScaleProfile {
+    /** VM size that AKS will use when creating and scaling e.g. 'Standard_E4s_v3', 'Standard_E16s_v3' or 'Standard_D16s_v5'. */
+    size?: string;
+    /** The minimum number of nodes of the specified sizes. */
+    minCount?: number;
+    /** The maximum number of nodes of the specified sizes. */
+    maxCount?: number;
+}
 /** Current status on a group of nodes of the same vm size. */
 export interface VirtualMachineNodes {
     /** The VM size of the agents used to host this group of nodes. */
@@ -514,7 +523,7 @@ export interface AgentPoolGatewayProfile {
 /** Contains read-only information about the Agent Pool. */
 export interface AgentPoolStatus {
     /**
-     * Preserves the detailed info of failure. If there was no error, this field is omitted.
+     * The error detail information of the agent pool. Preserves the detailed info of failure. If there was no error, this field is omitted.
      * NOTE: This property will not be serialized. It can only be populated by the server.
      */
     readonly provisioningError?: CloudErrorBody;
@@ -529,12 +538,16 @@ export interface LocalDNSProfile {
      */
     readonly state?: LocalDNSState;
     /** VnetDNS overrides apply to DNS traffic from pods with dnsPolicy:default or kubelet (referred to as VnetDNS traffic). */
-    vnetDNSOverrides?: LocalDNSOverrides;
+    vnetDNSOverrides?: {
+        [propertyName: string]: LocalDNSOverride;
+    };
     /** KubeDNS overrides apply to DNS traffic from pods with dnsPolicy:ClusterFirst (referred to as KubeDNS traffic). */
-    kubeDNSOverrides?: LocalDNSOverrides;
+    kubeDNSOverrides?: {
+        [propertyName: string]: LocalDNSOverride;
+    };
 }
 /** Overrides for localDNS profile. */
-export interface LocalDNSOverrides {
+export interface LocalDNSOverride {
     /** Log level for DNS queries in localDNS. */
     queryLogging?: LocalDNSQueryLogging;
     /** Enforce TCP or prefer UDP protocol for connections from localDNS to upstream DNS server. */
@@ -577,14 +590,14 @@ export interface ManagedClusterWindowsProfile {
     adminPassword?: string;
     /** The license type to use for Windows VMs. See [Azure Hybrid User Benefits](https://azure.microsoft.com/pricing/hybrid-benefit/faq/) for more details. */
     licenseType?: LicenseType;
-    /** For more details on CSI proxy, see the [CSI proxy GitHub repo](https://github.com/kubernetes-csi/csi-proxy). */
+    /** Whether to enable CSI proxy. For more details on CSI proxy, see the [CSI proxy GitHub repo](https://github.com/kubernetes-csi/csi-proxy). */
     enableCSIProxy?: boolean;
     /** The Windows gMSA Profile in the Managed Cluster. */
     gmsaProfile?: WindowsGmsaProfile;
 }
 /** Windows gMSA Profile in the managed cluster. */
 export interface WindowsGmsaProfile {
-    /** Specifies whether to enable Windows gMSA in the managed cluster. */
+    /** Whether to enable Windows gMSA. Specifies whether to enable Windows gMSA in the managed cluster. */
     enabled?: boolean;
     /** Specifies the DNS server for Windows gMSA. <br><br> Set it to empty if you have configured the DNS server in the vnet which is used to create the managed cluster. */
     dnsServer?: string;
@@ -621,11 +634,11 @@ export interface UserAssignedIdentity {
     /** The object ID of the user assigned identity. */
     objectId?: string;
 }
-/** See [use AAD pod identity](https://docs.microsoft.com/azure/aks/use-azure-ad-pod-identity) for more details on pod identity integration. */
+/** The pod identity profile of the Managed Cluster. See [use AAD pod identity](https://docs.microsoft.com/azure/aks/use-azure-ad-pod-identity) for more details on pod identity integration. */
 export interface ManagedClusterPodIdentityProfile {
     /** Whether the pod identity addon is enabled. */
     enabled?: boolean;
-    /** Running in Kubenet is disabled by default due to the security related nature of AAD Pod Identity and the risks of IP spoofing. See [using Kubenet network plugin with AAD Pod Identity](https://docs.microsoft.com/azure/aks/use-azure-ad-pod-identity#using-kubenet-network-plugin-with-azure-active-directory-pod-managed-identities) for more information. */
+    /** Whether pod identity is allowed to run on clusters with Kubenet networking. Running in Kubenet is disabled by default due to the security related nature of AAD Pod Identity and the risks of IP spoofing. See [using Kubenet network plugin with AAD Pod Identity](https://docs.microsoft.com/azure/aks/use-azure-ad-pod-identity#using-kubenet-network-plugin-with-azure-active-directory-pod-managed-identities) for more information. */
     allowNetworkPluginKubenet?: boolean;
     /** The pod identities to use in the cluster. */
     userAssignedIdentities?: ManagedClusterPodIdentity[];
@@ -670,7 +683,7 @@ export interface ManagedClusterPodIdentityProvisioningErrorBody {
     /** A list of additional details about the error. */
     details?: ManagedClusterPodIdentityProvisioningErrorBody[];
 }
-/** See [disable AAD Pod Identity for a specific Pod/Application](https://azure.github.io/aad-pod-identity/docs/configure/application_exception/) for more details. */
+/** A pod identity exception, which allows pods with certain labels to access the Azure Instance Metadata Service (IMDS) endpoint without being intercepted by the node-managed identity (NMI) server. See [disable AAD Pod Identity for a specific Pod/Application](https://azure.github.io/aad-pod-identity/docs/configure/application_exception/) for more details. */
 export interface ManagedClusterPodIdentityException {
     /** The name of the pod identity exception. */
     name: string;
@@ -704,7 +717,7 @@ export interface ContainerServiceNetworkProfile {
     networkPluginMode?: NetworkPluginMode;
     /** Network policy used for building the Kubernetes network. */
     networkPolicy?: NetworkPolicy;
-    /** This cannot be specified if networkPlugin is anything other than 'azure'. */
+    /** The network mode Azure CNI is configured with. This cannot be specified if networkPlugin is anything other than 'azure'. */
     networkMode?: NetworkMode;
     /** Network dataplane used in the Kubernetes cluster. */
     networkDataplane?: NetworkDataplane;
@@ -714,9 +727,9 @@ export interface ContainerServiceNetworkProfile {
     serviceCidr?: string;
     /** An IP address assigned to the Kubernetes DNS service. It must be within the Kubernetes service address range specified in serviceCidr. */
     dnsServiceIP?: string;
-    /** This can only be set at cluster creation time and cannot be changed later. For more information see [egress outbound type](https://docs.microsoft.com/azure/aks/egress-outboundtype). */
+    /** The outbound (egress) routing method. This can only be set at cluster creation time and cannot be changed later. For more information see [egress outbound type](https://docs.microsoft.com/azure/aks/egress-outboundtype). */
     outboundType?: OutboundType;
-    /** The default is 'standard'. See [Azure Load Balancer SKUs](https://docs.microsoft.com/azure/load-balancer/skus) for more information about the differences between load balancer SKUs. */
+    /** The load balancer sku for the managed cluster. The default is 'standard'. See [Azure Load Balancer SKUs](https://docs.microsoft.com/azure/load-balancer/skus) for more information about the differences between load balancer SKUs. */
     loadBalancerSku?: LoadBalancerSku;
     /** Profile of the cluster load balancer. */
     loadBalancerProfile?: ManagedClusterLoadBalancerProfile;
@@ -724,11 +737,11 @@ export interface ContainerServiceNetworkProfile {
     natGatewayProfile?: ManagedClusterNATGatewayProfile;
     /** The profile for Static Egress Gateway addon. For more details about Static Egress Gateway, see https://aka.ms/aks/static-egress-gateway. */
     staticEgressGatewayProfile?: ManagedClusterStaticEgressGatewayProfile;
-    /** One IPv4 CIDR is expected for single-stack networking. Two CIDRs, one for each IP family (IPv4/IPv6), is expected for dual-stack networking. */
+    /** The CIDR notation IP ranges from which to assign pod IPs. One IPv4 CIDR is expected for single-stack networking. Two CIDRs, one for each IP family (IPv4/IPv6), is expected for dual-stack networking. */
     podCidrs?: string[];
-    /** One IPv4 CIDR is expected for single-stack networking. Two CIDRs, one for each IP family (IPv4/IPv6), is expected for dual-stack networking. They must not overlap with any Subnet IP ranges. */
+    /** The CIDR notation IP ranges from which to assign service cluster IPs. One IPv4 CIDR is expected for single-stack networking. Two CIDRs, one for each IP family (IPv4/IPv6), is expected for dual-stack networking. They must not overlap with any Subnet IP ranges. */
     serviceCidrs?: string[];
-    /** IP families are used to determine single-stack or dual-stack clusters. For single-stack, the expected value is IPv4. For dual-stack, the expected values are IPv4 and IPv6. */
+    /** The IP families used to specify IP versions available to the cluster. IP families are used to determine single-stack or dual-stack clusters. For single-stack, the expected value is IPv4. For dual-stack, the expected values are IPv4 and IPv6. */
     ipFamilies?: IpFamily[];
     /** Defines access to special link local addresses (Azure Instance Metadata Service, aka IMDS) for pods with hostNetwork=false. if not specified, the default is 'IMDS'. */
     podLinkLocalAccess?: PodLinkLocalAccess;
@@ -802,7 +815,7 @@ export interface ManagedClusterManagedOutboundIPProfile {
 }
 /** The Static Egress Gateway addon configuration for the cluster. */
 export interface ManagedClusterStaticEgressGatewayProfile {
-    /** Indicates if Static Egress Gateway addon is enabled or not. */
+    /** Enable Static Egress Gateway addon. Indicates if Static Egress Gateway addon is enabled or not. */
     enabled?: boolean;
 }
 /** Holds configuration customizations for kube-proxy. Any values not defined will use the kube-proxy defaulting behavior. See https://v<version>.docs.kubernetes.io/docs/reference/command-line-tools-reference/kube-proxy/ where <version> is represented by a <major version>-<minor version> string. Kubernetes version 1.23 would be '1-23'. */
@@ -843,12 +856,17 @@ export interface AdvancedNetworkingObservability {
 export interface AdvancedNetworkingSecurity {
     /** Configure Advanced Networking Security features on Cilium clusters. See individual fields for their default values. */
     enabled?: boolean;
-    /** This allows users to configure Layer 7 network policies (FQDN, HTTP, Kafka). Policies themselves must be configured via the Cilium Network Policy resources, see https://docs.cilium.io/en/latest/security/policy/index.html. This can be enabled only on cilium-based clusters. If not specified, the default value is FQDN if security.enabled is set to true. */
+    /** Enable advanced network policies. This allows users to configure Layer 7 network policies (FQDN, HTTP, Kafka). Policies themselves must be configured via the Cilium Network Policy resources, see https://docs.cilium.io/en/latest/security/policy/index.html. This can be enabled only on cilium-based clusters. If not specified, the default value is FQDN if security.enabled is set to true. */
     advancedNetworkPolicies?: AdvancedNetworkPolicies;
-    /** This can be enabled only on Cilium-based clusters. If not specified, the default value is None. */
+    /** Encryption configuration for Cilium-based clusters. Once enabled all traffic between Cilium managed pods will be encrypted when it leaves the node boundary. */
+    transitEncryption?: AdvancedNetworkingSecurityTransitEncryption;
+}
+/** Encryption configuration for Cilium-based clusters. Once enabled all traffic between Cilium managed pods will be encrypted when it leaves the node boundary. */
+export interface AdvancedNetworkingSecurityTransitEncryption {
+    /** Configures pod-to-pod encryption. This can be enabled only on Cilium-based clusters. If not specified, the default value is None. */
     type?: TransitEncryptionType;
 }
-/** For more details see [managed AAD on AKS](https://docs.microsoft.com/azure/aks/managed-aad). */
+/** AADProfile specifies attributes for Azure Active Directory integration. For more details see [managed AAD on AKS](https://docs.microsoft.com/azure/aks/managed-aad). */
 export interface ManagedClusterAADProfile {
     /** Whether to enable managed AAD. */
     managed?: boolean;
@@ -867,9 +885,9 @@ export interface ManagedClusterAADProfile {
 }
 /** Auto upgrade profile for a managed cluster. */
 export interface ManagedClusterAutoUpgradeProfile {
-    /** For more information see [setting the AKS cluster auto-upgrade channel](https://docs.microsoft.com/azure/aks/upgrade-cluster#set-auto-upgrade-channel). */
+    /** The upgrade channel for auto upgrade. The default is 'none'. For more information see [setting the AKS cluster auto-upgrade channel](https://docs.microsoft.com/azure/aks/upgrade-cluster#set-auto-upgrade-channel). */
     upgradeChannel?: UpgradeChannel;
-    /** The default is Unmanaged, but may change to either NodeImage or SecurityPatch at GA. */
+    /** Manner in which the OS on your nodes is updated. The default is Unmanaged, but may change to either NodeImage or SecurityPatch at GA. */
     nodeOSUpgradeChannel?: NodeOSUpgradeChannel;
 }
 /** Settings for upgrading a cluster. */
@@ -886,54 +904,54 @@ export interface UpgradeOverrideSettings {
 }
 /** Parameters to be applied to the cluster-autoscaler when enabled */
 export interface ManagedClusterPropertiesAutoScalerProfile {
-    /** Valid values are 'true' and 'false' */
+    /** Detects similar node pools and balances the number of nodes between them. Valid values are 'true' and 'false' */
     balanceSimilarNodeGroups?: string;
-    /** If set to true, all daemonset pods on empty nodes will be evicted before deletion of the node. If the daemonset pod cannot be evicted another node will be chosen for scaling. If set to false, the node will be deleted without ensuring that daemonset pods are deleted or evicted. */
+    /** DaemonSet pods will be gracefully terminated from empty nodes. If set to true, all daemonset pods on empty nodes will be evicted before deletion of the node. If the daemonset pod cannot be evicted another node will be chosen for scaling. If set to false, the node will be deleted without ensuring that daemonset pods are deleted or evicted. */
     daemonsetEvictionForEmptyNodes?: boolean;
-    /** If set to true, all daemonset pods on occupied nodes will be evicted before deletion of the node. If the daemonset pod cannot be evicted another node will be chosen for scaling. If set to false, the node will be deleted without ensuring that daemonset pods are deleted or evicted. */
+    /** DaemonSet pods will be gracefully terminated from non-empty nodes. If set to true, all daemonset pods on occupied nodes will be evicted before deletion of the node. If the daemonset pod cannot be evicted another node will be chosen for scaling. If set to false, the node will be deleted without ensuring that daemonset pods are deleted or evicted. */
     daemonsetEvictionForOccupiedNodes?: boolean;
-    /** If set to true, the resources used by daemonset will be taken into account when making scaling down decisions. */
+    /** Should CA ignore DaemonSet pods when calculating resource utilization for scaling down. If set to true, the resources used by daemonset will be taken into account when making scaling down decisions. */
     ignoreDaemonsetsUtilization?: boolean;
-    /** Available values are: 'least-waste', 'most-pods', 'priority', 'random'. */
+    /** Type of node group expander to be used in scale up. Set to be deprecated, please use 'expanders' flag in the future. Available values are: 'least-waste', 'most-pods', 'priority', 'random'. */
     expander?: Expander;
-    /** The default is 10. */
+    /** The maximum number of empty nodes that can be deleted at the same time. This must be a positive integer. The default is 10. */
     maxEmptyBulkDelete?: string;
-    /** The default is 600. */
+    /** The maximum number of seconds the cluster autoscaler waits for pod termination when trying to scale down a node. The default is 600. */
     maxGracefulTerminationSec?: string;
-    /** The default is '15m'. Values must be an integer followed by an 'm'. No unit of time other than minutes (m) is supported. */
+    /** The maximum time the autoscaler waits for a node to be provisioned. The default is '15m'. Values must be an integer followed by an 'm'. No unit of time other than minutes (m) is supported. */
     maxNodeProvisionTime?: string;
-    /** The default is 45. The maximum is 100 and the minimum is 0. */
+    /** The maximum percentage of unready nodes in the cluster. After this percentage is exceeded, cluster autoscaler halts operations. The default is 45. The maximum is 100 and the minimum is 0. */
     maxTotalUnreadyPercentage?: string;
-    /** For scenarios like burst/batch scale where you don't want CA to act before the kubernetes scheduler could schedule all the pods, you can tell CA to ignore unscheduled pods before they're a certain age. The default is '0s'. Values must be an integer followed by a unit ('s' for seconds, 'm' for minutes, 'h' for hours, etc). */
+    /** Ignore unscheduled pods before they're a certain age. For scenarios like burst/batch scale where you don't want CA to act before the kubernetes scheduler could schedule all the pods, you can tell CA to ignore unscheduled pods before they're a certain age. The default is '0s'. Values must be an integer followed by a unit ('s' for seconds, 'm' for minutes, 'h' for hours, etc). */
     newPodScaleUpDelay?: string;
-    /** This must be an integer. The default is 3. */
+    /** The number of allowed unready nodes, irrespective of max-total-unready-percentage. This must be an integer. The default is 3. */
     okTotalUnreadyCount?: string;
-    /** The default is '10'. Values must be an integer number of seconds. */
+    /** How often cluster is reevaluated for scale up or down. The default is '10'. Values must be an integer number of seconds. */
     scanInterval?: string;
-    /** The default is '10m'. Values must be an integer followed by an 'm'. No unit of time other than minutes (m) is supported. */
+    /** How long after scale up that scale down evaluation resumes. The default is '10m'. Values must be an integer followed by an 'm'. No unit of time other than minutes (m) is supported. */
     scaleDownDelayAfterAdd?: string;
-    /** The default is the scan-interval. Values must be an integer followed by an 'm'. No unit of time other than minutes (m) is supported. */
+    /** How long after node deletion that scale down evaluation resumes. The default is the scan-interval. Values must be an integer followed by an 'm'. No unit of time other than minutes (m) is supported. */
     scaleDownDelayAfterDelete?: string;
-    /** The default is '3m'. Values must be an integer followed by an 'm'. No unit of time other than minutes (m) is supported. */
+    /** How long after scale down failure that scale down evaluation resumes. The default is '3m'. Values must be an integer followed by an 'm'. No unit of time other than minutes (m) is supported. */
     scaleDownDelayAfterFailure?: string;
-    /** The default is '10m'. Values must be an integer followed by an 'm'. No unit of time other than minutes (m) is supported. */
+    /** How long a node should be unneeded before it is eligible for scale down. The default is '10m'. Values must be an integer followed by an 'm'. No unit of time other than minutes (m) is supported. */
     scaleDownUnneededTime?: string;
-    /** The default is '20m'. Values must be an integer followed by an 'm'. No unit of time other than minutes (m) is supported. */
+    /** How long an unready node should be unneeded before it is eligible for scale down. The default is '20m'. Values must be an integer followed by an 'm'. No unit of time other than minutes (m) is supported. */
     scaleDownUnreadyTime?: string;
-    /** The default is '0.5'. */
+    /** Node utilization level, defined as sum of requested resources divided by capacity, below which a node can be considered for scale down. The default is '0.5'. */
     scaleDownUtilizationThreshold?: string;
-    /** The default is true. */
+    /** If cluster autoscaler will skip deleting nodes with pods with local storage, for example, EmptyDir or HostPath. The default is true. */
     skipNodesWithLocalStorage?: string;
-    /** The default is true. */
+    /** If cluster autoscaler will skip deleting nodes with pods from kube-system (except for DaemonSet or mirror pods). The default is true. */
     skipNodesWithSystemPods?: string;
 }
 /** Access profile for managed cluster API server. */
 export interface ManagedClusterAPIServerAccessProfile {
-    /** IP ranges are specified in CIDR format, e.g. 137.117.106.88/29. This feature is not compatible with clusters that use Public IP Per Node, or clusters that are using a Basic Load Balancer. For more information see [API server authorized IP ranges](https://docs.microsoft.com/azure/aks/api-server-authorized-ip-ranges). */
+    /** The IP ranges authorized to access the Kubernetes API server. IP ranges are specified in CIDR format, e.g. 137.117.106.88/29. This feature is not compatible with clusters that use Public IP Per Node, or clusters that are using a Basic Load Balancer. For more information see [API server authorized IP ranges](https://docs.microsoft.com/azure/aks/api-server-authorized-ip-ranges). */
     authorizedIPRanges?: string[];
-    /** For more details, see [Creating a private AKS cluster](https://docs.microsoft.com/azure/aks/private-clusters). */
+    /** Whether to create the cluster as a private cluster or not. For more details, see [Creating a private AKS cluster](https://docs.microsoft.com/azure/aks/private-clusters). */
     enablePrivateCluster?: boolean;
-    /** The default is System. For more details see [configure private DNS zone](https://docs.microsoft.com/azure/aks/private-clusters#configure-private-dns-zone). Allowed values are 'system' and 'none'. */
+    /** The private DNS zone mode for the cluster. The default is System. For more details see [configure private DNS zone](https://docs.microsoft.com/azure/aks/private-clusters#configure-private-dns-zone). Allowed values are 'system' and 'none'. */
     privateDNSZone?: string;
     /** Whether to create additional public FQDN for private cluster or not. */
     enablePrivateClusterPublicFqdn?: boolean;
@@ -941,7 +959,7 @@ export interface ManagedClusterAPIServerAccessProfile {
     disableRunCommand?: boolean;
     /** Whether to enable apiserver vnet integration for the cluster or not. */
     enableVnetIntegration?: boolean;
-    /** It is required when: 1. creating a new cluster with BYO Vnet; 2. updating an existing cluster to enable apiserver vnet integration. */
+    /** The subnet to be used when apiserver vnet integration is enabled. It is required when: 1. creating a new cluster with BYO Vnet; 2. updating an existing cluster to enable apiserver vnet integration. */
     subnetId?: string;
 }
 /** A private link resource */
@@ -1032,7 +1050,7 @@ export interface AzureKeyVaultKms {
     enabled?: boolean;
     /** Identifier of Azure Key Vault key. See [key identifier format](https://docs.microsoft.com/en-us/azure/key-vault/general/about-keys-secrets-certificates#vault-name-and-object-name) for more details. When Azure Key Vault key management service is enabled, this field is required and must be a valid key identifier. When Azure Key Vault key management service is disabled, leave the field empty. */
     keyId?: string;
-    /** Network access of key vault. The possible values are `Public` and `Private`. `Public` means the key vault allows public access from all networks. `Private` means the key vault disables public access and enables private link. The default value is `Public`. */
+    /** Network access of the key vault. Network access of key vault. The possible values are `Public` and `Private`. `Public` means the key vault allows public access from all networks. `Private` means the key vault disables public access and enables private link. The default value is `Public`. */
     keyVaultNetworkAccess?: KeyVaultNetworkAccessTypes;
     /** Resource ID of key vault. When keyVaultNetworkAccess is `Private`, this field is required and must be a valid resource ID. When keyVaultNetworkAccess is `Public`, leave the field empty. */
     keyVaultResourceId?: string;
@@ -1196,20 +1214,6 @@ export interface ManagedClusterAzureMonitorProfileAppMonitoringOpenTelemetryLogs
     /** The Open Telemetry host port for Open Telemetry logs and traces. If not specified, the default port is 28331. */
     port?: number;
 }
-/** The Safeguards profile. */
-export interface SafeguardsProfile {
-    /**
-     * List of namespaces specified by AKS to be excluded from Safeguards
-     * NOTE: This property will not be serialized. It can only be populated by the server.
-     */
-    readonly systemExcludedNamespaces?: string[];
-    /** The version of constraints to use */
-    version?: string;
-    /** The Safeguards level to be used. By default, Safeguards is enabled for all namespaces except those that AKS excludes via systemExcludedNamespaces */
-    level: Level;
-    /** List of namespaces excluded from Safeguards checks */
-    excludedNamespaces?: string[];
-}
 /** Service mesh profile for a managed cluster. */
 export interface ServiceMeshProfile {
     /** Mode of the service mesh. */
@@ -1271,28 +1275,28 @@ export interface IstioPluginCertificateAuthority {
 }
 /** The metrics profile for the ManagedCluster. */
 export interface ManagedClusterMetricsProfile {
-    /** The cost analysis configuration for the cluster */
+    /** The configuration for detailed per-Kubernetes resource cost analysis. */
     costAnalysis?: ManagedClusterCostAnalysis;
 }
 /** The cost analysis configuration for the cluster */
 export interface ManagedClusterCostAnalysis {
-    /** The Managed Cluster sku.tier must be set to 'Standard' or 'Premium' to enable this feature. Enabling this will add Kubernetes Namespace and Deployment details to the Cost Analysis views in the Azure portal. If not specified, the default is false. For more information see aka.ms/aks/docs/cost-analysis. */
+    /** Whether to enable cost analysis. The Managed Cluster sku.tier must be set to 'Standard' or 'Premium' to enable this feature. Enabling this will add Kubernetes Namespace and Deployment details to the Cost Analysis views in the Azure portal. If not specified, the default is false. For more information see aka.ms/aks/docs/cost-analysis. */
     enabled?: boolean;
 }
 /** When enabling the operator, a set of AKS managed CRDs and controllers will be installed in the cluster. The operator automates the deployment of OSS models for inference and/or training purposes. It provides a set of preset models and enables distributed inference against them. */
 export interface ManagedClusterAIToolchainOperatorProfile {
-    /** Indicates if AI toolchain operator  enabled or not. */
+    /** Whether to enable AI toolchain operator to the cluster. Indicates if AI toolchain operator  enabled or not. */
     enabled?: boolean;
 }
 export interface ManagedClusterNodeProvisioningProfile {
-    /** Once the mode it set to Auto, it cannot be changed back to Manual. */
+    /** The node provisioning mode. If not specified, the default is Manual. */
     mode?: NodeProvisioningMode;
-    /** This field has no effect unless mode is 'Auto'. Warning: Changing this from Auto to None on an existing cluster will cause the default Karpenter NodePools to be deleted, which will in turn drain and delete the nodes associated with those pools. It is strongly recommended to not do this unless there are idle nodes ready to take the pods evicted by that action. If not specified, the default is Auto. For more information see aka.ms/something */
+    /** The set of default Karpenter NodePools (CRDs) configured for node provisioning. This field has no effect unless mode is 'Auto'. Warning: Changing this from Auto to None on an existing cluster will cause the default Karpenter NodePools to be deleted, which will drain and delete the nodes associated with those pools. It is strongly recommended to not do this unless there are idle nodes ready to take the pods evicted by that action. If not specified, the default is Auto. For more information see aka.ms/aks/nap#node-pools. */
     defaultNodePools?: NodeProvisioningDefaultNodePools;
 }
 /** The bootstrap profile. */
 export interface ManagedClusterBootstrapProfile {
-    /** The source where the artifacts are downloaded from. */
+    /** The artifact source. The source where the artifacts are downloaded from. */
     artifactSource?: ArtifactSource;
     /** The resource Id of Azure Container Registry. The registry must have private network access, premium SKU and zone redundancy. */
     containerRegistryId?: string;
@@ -1315,7 +1319,7 @@ export interface SchedulerInstanceProfile {
 /** Contains read-only information about the Managed Cluster. */
 export interface ManagedClusterStatus {
     /**
-     * Preserves the detailed info of failure. If there was no error, this field is omitted.
+     * The error details information of the managed cluster. Preserves the detailed info of failure. If there was no error, this field is omitted.
      * NOTE: This property will not be serialized. It can only be populated by the server.
      */
     readonly provisioningError?: CloudErrorBody;
@@ -1458,10 +1462,10 @@ export interface MaintenanceConfigurationListResult {
 export interface TimeInWeek {
     /** The day of the week. */
     day?: WeekDay;
-    /** Each integer hour represents a time range beginning at 0m after the hour ending at the next hour (non-inclusive). 0 corresponds to 00:00 UTC, 23 corresponds to 23:00 UTC. Specifying [0, 1] means the 00:00 - 02:00 UTC time range. */
+    /** A list of hours in the day used to identify a time range. Each integer hour represents a time range beginning at 0m after the hour ending at the next hour (non-inclusive). 0 corresponds to 00:00 UTC, 23 corresponds to 23:00 UTC. Specifying [0, 1] means the 00:00 - 02:00 UTC time range. */
     hourSlots?: number[];
 }
-/** For example, between 2021-05-25T13:00:00Z and 2021-05-25T14:00:00Z. */
+/** A time range. For example, between 2021-05-25T13:00:00Z and 2021-05-25T14:00:00Z. */
 export interface TimeSpan {
     /** The start of a time span */
     start?: Date;
@@ -1517,12 +1521,12 @@ export interface AbsoluteMonthlySchedule {
 export interface RelativeMonthlySchedule {
     /** Specifies the number of months between each set of occurrences. */
     intervalMonths: number;
-    /** Specifies on which instance of the allowed days specified in daysOfWeek the maintenance occurs. */
+    /** The week index. Specifies on which instance of the allowed days specified in daysOfWeek the maintenance occurs. */
     weekIndex: Type;
     /** Specifies on which day of the week the maintenance occurs. */
     dayOfWeek: WeekDay;
 }
-/** For example, between '2022-12-23' and '2023-01-05'. */
+/** A date range. For example, between '2022-12-23' and '2023-01-05'. */
 export interface DateSpan {
     /** The start date of the date span. */
     start: Date;
@@ -1569,6 +1573,11 @@ export interface NamespaceProperties {
     annotations?: {
         [propertyName: string]: string;
     };
+    /**
+     * The special FQDN used by the Azure Portal to access the Managed Cluster. This FQDN is for use only by the Azure Portal and should not be used by other clients. The Azure Portal requires certain Cross-Origin Resource Sharing (CORS) headers to be sent in some responses, which Kubernetes APIServer doesn't handle by default. This special FQDN supports CORS, allowing the Azure Portal to function properly.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly portalFqdn?: string;
     /** The default resource quota enforced upon the namespace. Customers can have other Kubernetes resource quota objects under the namespace. All the resource quotas will be enforced. */
     defaultResourceQuota?: ResourceQuota;
     /** The default network policy enforced upon the namespace. Customers can have other Kubernetes network policy objects under the namespace. All the network policies will be enforced. */
@@ -1705,24 +1714,67 @@ export interface MachineListResult {
 }
 /** The properties of the machine */
 export interface MachineProperties {
+    /** The network properties of the machine */
+    network?: MachineNetworkProperties;
     /**
-     * network properties of the machine
+     * Arm resource id of the machine. It can be used to GET underlying VM Instance
      * NOTE: This property will not be serialized. It can only be populated by the server.
      */
-    readonly network?: MachineNetworkProperties;
+    readonly resourceId?: string;
+    /** The hardware and GPU settings of the machine. */
+    hardware?: MachineHardwareProfile;
+    /** The operating system and disk used by the machine. */
+    operatingSystem?: MachineOSProfile;
+    /** The Kubernetes configurations used by the machine. */
+    kubernetes?: MachineKubernetesProfile;
+    /** Machine only allows 'System' and 'User' mode. */
+    mode?: AgentPoolMode;
+    /** The security settings of the machine. */
+    security?: AgentPoolSecurityProfile;
+    /** The priority for the machine. If not specified, the default is 'Regular'. */
+    priority?: ScaleSetPriority;
     /**
-     * Arm resource id of the machine. It can be used to GET underlying VM Instance
+     * The version of node image.
      * NOTE: This property will not be serialized. It can only be populated by the server.
      */
-    readonly resourceId?: string;
+    readonly nodeImageVersion?: string;
+    /**
+     * The current deployment or provisioning state.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly provisioningState?: string;
+    /** The tags to be persisted on the machine. */
+    tags?: {
+        [propertyName: string]: string;
+    };
+    /**
+     * Unique read-only string used to implement optimistic concurrency. The eTag value will change when the resource is updated. Specify an if-match or if-none-match header with the eTag value for a subsequent request to enable optimistic concurrency per the normal etag convention.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly eTag?: string;
+    /**
+     * Contains read-only information about the machine.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly status?: MachineStatus;
 }
-/** network properties of the machine */
+/** The network properties of the machine */
 export interface MachineNetworkProperties {
     /**
      * IPv4, IPv6 addresses of the machine
      * NOTE: This property will not be serialized. It can only be populated by the server.
      */
     readonly ipAddresses?: MachineIpAddress[];
+    /** The ID of the subnet which node and optionally pods will join on startup. If this is not specified, a VNET and subnet will be generated and used. If no podSubnetID is specified, this applies to nodes and pods, otherwise it applies to just nodes. This is of the form: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/virtualNetworks/{virtualNetworkName}/subnets/{subnetName} */
+    vnetSubnetID?: string;
+    /** The ID of the subnet which pods will join when launched. If omitted, pod IPs are statically assigned on the node subnet (see vnetSubnetID for more details). This is of the form: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/virtualNetworks/{virtualNetworkName}/subnets/{subnetName} */
+    podSubnetID?: string;
+    /** Whether the machine is allocated its own public IP. Some scenarios may require the machine to receive their own dedicated public IP addresses. A common scenario is for gaming workloads, where a console needs to make a direct connection to a cloud virtual machine to minimize hops. The default is false. */
+    enableNodePublicIP?: boolean;
+    /** The public IP prefix ID which VM node should use IPs from. This is of the form: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/publicIPPrefixes/{publicIPPrefixName} */
+    nodePublicIPPrefixID?: string;
+    /** IPTags of instance-level public IPs. */
+    nodePublicIPTags?: IPTag[];
 }
 /** The machine IP address details. */
 export interface MachineIpAddress {
@@ -1737,6 +1789,100 @@ export interface MachineIpAddress {
      */
     readonly ip?: string;
 }
+/** The hardware and GPU settings of the machine. */
+export interface MachineHardwareProfile {
+    /** The size of the VM. VM size availability varies by region. If a node contains insufficient compute resources (memory, cpu, etc) pods might fail to run correctly. For more details on restricted VM sizes, see: https://docs.microsoft.com/azure/aks/quotas-skus-regions */
+    vmSize?: string;
+    /** GPUInstanceProfile to be used to specify GPU MIG instance profile for supported GPU VM SKU. */
+    gpuInstanceProfile?: GPUInstanceProfile;
+    /** The GPU settings of the machine. */
+    gpuProfile?: GPUProfile;
+}
+/** The operating system and disk used by the machine. */
+export interface MachineOSProfile {
+    /** The operating system type. The default is Linux. */
+    osType?: OSType;
+    /** Specifies the OS SKU used by the agent pool. If not specified, the default is Ubuntu if OSType=Linux or Windows2019 if OSType=Windows. And the default Windows OSSKU will be changed to Windows2022 after Windows2019 is deprecated. */
+    osSKU?: Ossku;
+    /** OS Disk Size in GB to be used to specify the disk size for every machine in the master/agent pool. If you specify 0, it will apply the default osDisk size according to the vmSize specified. */
+    osDiskSizeGB?: number;
+    /** The OS disk type to be used for machines in the agent pool. The default is 'Ephemeral' if the VM supports it and has a cache disk larger than the requested OSDiskSizeGB. Otherwise, defaults to 'Managed'. May not be changed after creation. For more information see [Ephemeral OS](https://docs.microsoft.com/azure/aks/cluster-configuration#ephemeral-os). */
+    osDiskType?: OSDiskType;
+    /** Whether to use a FIPS-enabled OS. */
+    enableFips?: boolean;
+    /** The Linux machine's specific profile. */
+    linuxProfile?: MachineOSProfileLinuxProfile;
+    /** The Windows machine's specific profile. */
+    windowsProfile?: AgentPoolWindowsProfile;
+}
+/** The Linux machine's specific profile. */
+export interface MachineOSProfileLinuxProfile {
+    /** The OS configuration of Linux machine. */
+    linuxOSConfig?: LinuxOSConfig;
+    /** Message of the day for Linux nodes, base64-encoded. A base64-encoded string which will be written to /etc/motd after decoding. This allows customization of the message of the day for Linux nodes. It must not be specified for Windows nodes. It must be a static string (i.e., will be printed raw and not be executed as a script). */
+    messageOfTheDay?: string;
+}
+/** The Kubernetes configurations used by the machine. */
+export interface MachineKubernetesProfile {
+    /** The node labels on the machine. */
+    nodeLabels?: {
+        [propertyName: string]: string;
+    };
+    /** The version of Kubernetes specified by the user. Both patch version <major.minor.patch> and <major.minor> are supported. When <major.minor> is specified, the latest supported patch version is chosen automatically. */
+    orchestratorVersion?: string;
+    /**
+     * The version of Kubernetes running on the machine. If orchestratorVersion was a fully specified version <major.minor.patch>, this field will be exactly equal to it. If orchestratorVersion was <major.minor>, this field will contain the full <major.minor.patch> version being used.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly currentOrchestratorVersion?: string;
+    /** Determines the placement of emptyDir volumes, container runtime data root, and Kubelet ephemeral storage. */
+    kubeletDiskType?: KubeletDiskType;
+    /** The Kubelet configuration on the machine. */
+    kubeletConfig?: KubeletConfig;
+    /** Taints added on the node during creation that will not be reconciled by AKS. These taints will not be reconciled by AKS and can be removed with a kubectl call. These taints allow for required configuration to run before the node is ready to accept workloads, for example 'key1=value1:NoSchedule' that then can be removed with `kubectl taint nodes node1 key1=value1:NoSchedule-` */
+    nodeInitializationTaints?: string[];
+    /** The taints added to new node during machine create. For example, key=value:NoSchedule. */
+    nodeTaints?: string[];
+    /** The maximum number of pods that can run on a node. */
+    maxPods?: number;
+    /**
+     * The node name in the Kubernetes cluster.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly nodeName?: string;
+    /** Determines the type of workload a node can run. */
+    workloadRuntime?: WorkloadRuntime;
+    /** Configuration for using artifact streaming on AKS. */
+    artifactStreamingProfile?: AgentPoolArtifactStreamingProfile;
+}
+/** Contains read-only information about the machine. */
+export interface MachineStatus {
+    /**
+     * The error details information of the machine. Preserves the detailed info of failure. If there was no error, this field is omitted.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly provisioningError?: CloudErrorBody;
+    /**
+     * Specifies the time at which the machine was created.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly creationTimestamp?: Date;
+    /**
+     * The drift action of the machine. Indicates whether a machine has deviated from its expected state due to changes in managed cluster properties, requiring corrective action.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly driftAction?: DriftAction;
+    /**
+     * Reason for machine drift. Provides detailed information on why the machine has drifted. This field is omitted if the machine is up to date.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly driftReason?: string;
+    /**
+     * Virtual machine state. Indicates the current state of the underlying virtual machine.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly vmState?: VmState;
+}
 /** The list of available versions for an agent pool. */
 export interface AgentPoolAvailableVersions {
     /**
@@ -2160,18 +2306,9 @@ export interface RebalanceLoadBalancersRequestBody {
     /** The load balancer names list. */
     loadBalancerNames?: string[];
 }
-/** Specifications on auto-scaling. */
-export interface AutoScaleProfile {
-    /** VM size that AKS will use when creating and scaling e.g. 'Standard_E4s_v3', 'Standard_E16s_v3' or 'Standard_D16s_v5'. */
-    size?: string;
-    /** The minimum number of nodes of the specified sizes. */
-    minCount?: number;
-    /** The maximum number of nodes of the specified sizes. */
-    maxCount?: number;
-}
 /** Profile for the container service agent pool. */
 export interface ManagedClusterAgentPoolProfile extends ManagedClusterAgentPoolProfileProperties {
-    /** Windows agent pool names must be 6 characters or less. */
+    /** Unique name of the agent pool profile in the context of the subscription and resource group. Windows agent pool names must be 6 characters or less. */
     name: string;
 }
 /** Information of user assigned identity used by this add-on. */
@@ -2211,14 +2348,14 @@ export interface SafeguardsAvailableVersion extends Resource {
 /** The resource model definition for a Azure Resource Manager proxy resource. It will not have tags and a location */
 export interface ProxyResource extends Resource {
 }
-/** See [planned maintenance](https://docs.microsoft.com/azure/aks/planned-maintenance) for more information about planned maintenance. */
+/** Planned maintenance configuration, used to configure when updates can be deployed to a Managed Cluster. See [planned maintenance](https://docs.microsoft.com/azure/aks/planned-maintenance) for more information about planned maintenance. */
 export interface MaintenanceConfiguration extends SubResource {
     /**
      * The system metadata relating to this resource.
      * NOTE: This property will not be serialized. It can only be populated by the server.
      */
     readonly systemData?: SystemData;
-    /** If two array entries specify the same day of the week, the applied configuration is the union of times in both entries. */
+    /** Time slots during the week when planned maintenance is allowed to proceed. If two array entries specify the same day of the week, the applied configuration is the union of times in both entries. */
     timeInWeek?: TimeInWeek[];
     /** Time slots on which upgrade is not allowed. */
     notAllowedTime?: TimeSpan[];
@@ -2255,23 +2392,23 @@ export interface AgentPool extends SubResource {
     readonly eTag?: string;
     /** Number of agents (VMs) to host docker containers. Allowed values must be in the range of 0 to 1000 (inclusive) for user pools and in the range of 1 to 1000 (inclusive) for system pools. The default value is 1. */
     count?: number;
-    /** VM size availability varies by region. If a node contains insufficient compute resources (memory, cpu, etc) pods might fail to run correctly. For more details on restricted VM sizes, see: https://docs.microsoft.com/azure/aks/quotas-skus-regions */
+    /** The size of the agent pool VMs. VM size availability varies by region. If a node contains insufficient compute resources (memory, cpu, etc) pods might fail to run correctly. For more details on restricted VM sizes, see: https://docs.microsoft.com/azure/aks/quotas-skus-regions */
     vmSize?: string;
     /** OS Disk Size in GB to be used to specify the disk size for every machine in the master/agent pool. If you specify 0, it will apply the default osDisk size according to the vmSize specified. */
     osDiskSizeGB?: number;
-    /** The default is 'Ephemeral' if the VM supports it and has a cache disk larger than the requested OSDiskSizeGB. Otherwise, defaults to 'Managed'. May not be changed after creation. For more information see [Ephemeral OS](https://docs.microsoft.com/azure/aks/cluster-configuration#ephemeral-os). */
+    /** The OS disk type to be used for machines in the agent pool. The default is 'Ephemeral' if the VM supports it and has a cache disk larger than the requested OSDiskSizeGB. Otherwise, defaults to 'Managed'. May not be changed after creation. For more information see [Ephemeral OS](https://docs.microsoft.com/azure/aks/cluster-configuration#ephemeral-os). */
     osDiskType?: OSDiskType;
     /** Determines the placement of emptyDir volumes, container runtime data root, and Kubelet ephemeral storage. */
     kubeletDiskType?: KubeletDiskType;
     /** Determines the type of workload a node can run. */
     workloadRuntime?: WorkloadRuntime;
-    /** A base64-encoded string which will be written to /etc/motd after decoding. This allows customization of the message of the day for Linux nodes. It must not be specified for Windows nodes. It must be a static string (i.e., will be printed raw and not be executed as a script). */
+    /** Message of the day for Linux nodes, base64-encoded. A base64-encoded string which will be written to /etc/motd after decoding. This allows customization of the message of the day for Linux nodes. It must not be specified for Windows nodes. It must be a static string (i.e., will be printed raw and not be executed as a script). */
     messageOfTheDay?: string;
-    /** If this is not specified, a VNET and subnet will be generated and used. If no podSubnetID is specified, this applies to nodes and pods, otherwise it applies to just nodes. This is of the form: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/virtualNetworks/{virtualNetworkName}/subnets/{subnetName} */
+    /** The ID of the subnet which agent pool nodes and optionally pods will join on startup. If this is not specified, a VNET and subnet will be generated and used. If no podSubnetID is specified, this applies to nodes and pods, otherwise it applies to just nodes. This is of the form: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/virtualNetworks/{virtualNetworkName}/subnets/{subnetName} */
     vnetSubnetID?: string;
-    /** If omitted, pod IPs are statically assigned on the node subnet (see vnetSubnetID for more details). This is of the form: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/virtualNetworks/{virtualNetworkName}/subnets/{subnetName} */
+    /** The ID of the subnet which pods will join when launched. If omitted, pod IPs are statically assigned on the node subnet (see vnetSubnetID for more details). This is of the form: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/virtualNetworks/{virtualNetworkName}/subnets/{subnetName} */
     podSubnetID?: string;
-    /** The IP allocation mode for pods in the agent pool. Must be used with podSubnetId. The default is 'DynamicIndividual'. */
+    /** Pod IP Allocation Mode. The IP allocation mode for pods in the agent pool. Must be used with podSubnetId. The default is 'DynamicIndividual'. */
     podIPAllocationMode?: PodIPAllocationMode;
     /** The maximum number of pods that can run on a node. */
     maxPods?: number;
@@ -2285,16 +2422,16 @@ export interface AgentPool extends SubResource {
     minCount?: number;
     /** Whether to enable auto-scaler */
     enableAutoScaling?: boolean;
-    /** This also effects the cluster autoscaler behavior. If not specified, it defaults to Delete. */
+    /** The scale down mode to use when scaling the Agent Pool. This also effects the cluster autoscaler behavior. If not specified, it defaults to Delete. */
     scaleDownMode?: ScaleDownMode;
     /** The type of Agent Pool. */
     typePropertiesType?: AgentPoolType;
-    /** A cluster must have at least one 'System' Agent Pool at all times. For additional information on agent pool restrictions and best practices, see: https://docs.microsoft.com/azure/aks/use-system-pools */
+    /** The mode of an agent pool. A cluster must have at least one 'System' Agent Pool at all times. For additional information on agent pool restrictions and best practices, see: https://docs.microsoft.com/azure/aks/use-system-pools */
     mode?: AgentPoolMode;
-    /** Both patch version <major.minor.patch> and <major.minor> are supported. When <major.minor> is specified, the latest supported patch version is chosen automatically. Updating the agent pool with the same <major.minor> once it has been created will not trigger an upgrade, even if a newer patch version is available. As a best practice, you should upgrade all node pools in an AKS cluster to the same Kubernetes version. The node pool version must have the same major version as the control plane. The node pool minor version must be within two minor versions of the control plane version. The node pool version cannot be greater than the control plane version. For more information see [upgrading a node pool](https://docs.microsoft.com/azure/aks/use-multiple-node-pools#upgrade-a-node-pool). */
+    /** The version of Kubernetes specified by the user. Both patch version <major.minor.patch> and <major.minor> are supported. When <major.minor> is specified, the latest supported patch version is chosen automatically. Updating the agent pool with the same <major.minor> once it has been created will not trigger an upgrade, even if a newer patch version is available. As a best practice, you should upgrade all node pools in an AKS cluster to the same Kubernetes version. The node pool version must have the same major version as the control plane. The node pool minor version must be within two minor versions of the control plane version. The node pool version cannot be greater than the control plane version. For more information see [upgrading a node pool](https://docs.microsoft.com/azure/aks/use-multiple-node-pools#upgrade-a-node-pool). */
     orchestratorVersion?: string;
     /**
-     * If orchestratorVersion was a fully specified version <major.minor.patch>, this field will be exactly equal to it. If orchestratorVersion was <major.minor>, this field will contain the full <major.minor.patch> version being used.
+     * The version of Kubernetes running on the Agent Pool. If orchestratorVersion was a fully specified version <major.minor.patch>, this field will be exactly equal to it. If orchestratorVersion was <major.minor>, this field will contain the full <major.minor.patch> version being used.
      * NOTE: This property will not be serialized. It can only be populated by the server.
      */
     readonly currentOrchestratorVersion?: string;
@@ -2310,21 +2447,21 @@ export interface AgentPool extends SubResource {
      * NOTE: This property will not be serialized. It can only be populated by the server.
      */
     readonly provisioningState?: string;
-    /** When an Agent Pool is first created it is initially Running. The Agent Pool can be stopped by setting this field to Stopped. A stopped Agent Pool stops all of its VMs and does not accrue billing charges. An Agent Pool can only be stopped if it is Running and provisioning state is Succeeded */
+    /** Whether the Agent Pool is running or stopped. When an Agent Pool is first created it is initially Running. The Agent Pool can be stopped by setting this field to Stopped. A stopped Agent Pool stops all of its VMs and does not accrue billing charges. An Agent Pool can only be stopped if it is Running and provisioning state is Succeeded */
     powerState?: PowerState;
     /** The list of Availability zones to use for nodes. This can only be specified if the AgentPoolType property is 'VirtualMachineScaleSets'. */
     availabilityZones?: string[];
-    /** Some scenarios may require nodes in a node pool to receive their own dedicated public IP addresses. A common scenario is for gaming workloads, where a console needs to make a direct connection to a cloud virtual machine to minimize hops. For more information see [assigning a public IP per node](https://docs.microsoft.com/azure/aks/use-multiple-node-pools#assign-a-public-ip-per-node-for-your-node-pools). The default is false. */
+    /** Whether each node is allocated its own public IP. Some scenarios may require nodes in a node pool to receive their own dedicated public IP addresses. A common scenario is for gaming workloads, where a console needs to make a direct connection to a cloud virtual machine to minimize hops. For more information see [assigning a public IP per node](https://docs.microsoft.com/azure/aks/use-multiple-node-pools#assign-a-public-ip-per-node-for-your-node-pools). The default is false. */
     enableNodePublicIP?: boolean;
-    /** When set to true, AKS adds a label to the node indicating that the feature is enabled and deploys a daemonset along with host services to sync custom certificate authorities from user-provided list of base64 encoded certificates into node trust stores. Defaults to false. */
+    /** Whether to enable Custom CA Trust feature. When set to true, AKS adds a label to the node indicating that the feature is enabled and deploys a daemonset along with host services to sync custom certificate authorities from user-provided list of base64 encoded certificates into node trust stores. Defaults to false. */
     enableCustomCATrust?: boolean;
-    /** This is of the form: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/publicIPPrefixes/{publicIPPrefixName} */
+    /** The public IP prefix ID which VM nodes should use IPs from. This is of the form: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/publicIPPrefixes/{publicIPPrefixName} */
     nodePublicIPPrefixID?: string;
     /** The Virtual Machine Scale Set priority. If not specified, the default is 'Regular'. */
     scaleSetPriority?: ScaleSetPriority;
-    /** This cannot be specified unless the scaleSetPriority is 'Spot'. If not specified, the default is 'Delete'. */
+    /** The Virtual Machine Scale Set eviction policy to use. This cannot be specified unless the scaleSetPriority is 'Spot'. If not specified, the default is 'Delete'. */
     scaleSetEvictionPolicy?: ScaleSetEvictionPolicy;
-    /** Possible values are any decimal value greater than zero or -1 which indicates the willingness to pay any on-demand price. For more details on spot pricing, see [spot VMs pricing](https://docs.microsoft.com/azure/virtual-machines/spot-vms#pricing) */
+    /** The max price (in US Dollars) you are willing to pay for spot instances. Possible values are any decimal value greater than zero or -1 which indicates default price to be up-to on-demand. Possible values are any decimal value greater than zero or -1 which indicates the willingness to pay any on-demand price. For more details on spot pricing, see [spot VMs pricing](https://docs.microsoft.com/azure/virtual-machines/spot-vms#pricing) */
     spotMaxPrice?: number;
     /** The tags to be persisted on the agent pool virtual machine scale set. */
     tags?: {
@@ -2336,7 +2473,7 @@ export interface AgentPool extends SubResource {
     };
     /** The taints added to new nodes during node pool create and scale. For example, key=value:NoSchedule. */
     nodeTaints?: string[];
-    /** These taints will not be reconciled by AKS and can be removed with a kubectl call. This field can be modified after node pool is created, but nodes will not be recreated with new taints until another operation that requires recreation (e.g. node image upgrade) happens. These taints allow for required configuration to run before the node is ready to accept workloads, for example 'key1=value1:NoSchedule' that then can be removed with `kubectl taint nodes node1 key1=value1:NoSchedule-` */
+    /** Taints added on the nodes during creation that will not be reconciled by AKS. These taints will not be reconciled by AKS and can be removed with a kubectl call. This field can be modified after node pool is created, but nodes will not be recreated with new taints until another operation that requires recreation (e.g. node image upgrade) happens. These taints allow for required configuration to run before the node is ready to accept workloads, for example 'key1=value1:NoSchedule' that then can be removed with `kubectl taint nodes node1 key1=value1:NoSchedule-` */
     nodeInitializationTaints?: string[];
     /** The ID for Proximity Placement Group. */
     proximityPlacementGroupID?: string;
@@ -2344,11 +2481,11 @@ export interface AgentPool extends SubResource {
     kubeletConfig?: KubeletConfig;
     /** The OS configuration of Linux agent nodes. */
     linuxOSConfig?: LinuxOSConfig;
-    /** This is only supported on certain VM sizes and in certain Azure regions. For more information, see: https://docs.microsoft.com/azure/aks/enable-host-encryption */
+    /** Whether to enable host based OS and data drive encryption. This is only supported on certain VM sizes and in certain Azure regions. For more information, see: https://docs.microsoft.com/azure/aks/enable-host-encryption */
     enableEncryptionAtHost?: boolean;
     /** Whether to enable UltraSSD */
     enableUltraSSD?: boolean;
-    /** See [Add a FIPS-enabled node pool](https://docs.microsoft.com/azure/aks/use-multiple-node-pools#add-a-fips-enabled-node-pool-preview) for more details. */
+    /** Whether to use a FIPS-enabled OS. See [Add a FIPS-enabled node pool](https://docs.microsoft.com/azure/aks/use-multiple-node-pools#add-a-fips-enabled-node-pool-preview) for more details. */
     enableFips?: boolean;
     /** GPUInstanceProfile to be used to specify GPU MIG instance profile for supported GPU VM SKU. */
     gpuInstanceProfile?: GPUInstanceProfile;
@@ -2356,7 +2493,7 @@ export interface AgentPool extends SubResource {
     creationData?: CreationData;
     /** AKS will associate the specified agent pool with the Capacity Reservation Group. */
     capacityReservationGroupID?: string;
-    /** This is of the form: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Compute/hostGroups/{hostGroupName}. For more information see [Azure dedicated hosts](https://docs.microsoft.com/azure/virtual-machines/dedicated-hosts). */
+    /** The fully qualified resource ID of the Dedicated Host Group to provision virtual machines from, used only in creation scenario and not allowed to changed once set. This is of the form: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Compute/hostGroups/{hostGroupName}. For more information see [Azure dedicated hosts](https://docs.microsoft.com/azure/virtual-machines/dedicated-hosts). */
     hostGroupID?: string;
     /** The Windows agent pool's specific profile. */
     windowsProfile?: AgentPoolWindowsProfile;
@@ -2379,13 +2516,12 @@ export interface AgentPool extends SubResource {
     /** Configures the per-node local DNS, with VnetDNS and KubeDNS overrides. LocalDNS helps improve performance and reliability of DNS resolution in an AKS cluster. For more details see aka.ms/aks/localdns. */
     localDNSProfile?: LocalDNSProfile;
 }
-/** A machine. Contains details about the underlying virtual machine. A machine may be visible here but not in kubectl get nodes; if so it may be because the machine has not been registered with the Kubernetes API Server yet. */
+/** A machine provides detailed information about its configuration and status. A machine may be visible here but not in kubectl get nodes; if so, it may be because the machine has not been registered with the Kubernetes API Server yet. */
 export interface Machine extends SubResource {
-    /**
-     * The properties of the machine
-     * NOTE: This property will not be serialized. It can only be populated by the server.
-     */
-    readonly properties?: MachineProperties;
+    /** The Availability zone in which machine is located. */
+    zones?: string[];
+    /** The properties of the machine */
+    properties?: MachineProperties;
 }
 /** Mesh upgrade profile properties for a major.minor release. */
 export interface MeshUpgradeProfileProperties extends MeshRevision {
@@ -2422,16 +2558,16 @@ export interface ManagedCluster extends TrackedResource {
      * NOTE: This property will not be serialized. It can only be populated by the server.
      */
     readonly maxAgentPools?: number;
-    /** When you upgrade a supported AKS cluster, Kubernetes minor versions cannot be skipped. All upgrades must be performed sequentially by major version number. For example, upgrades between 1.14.x -> 1.15.x or 1.15.x -> 1.16.x are allowed, however 1.14.x -> 1.16.x is not allowed. See [upgrading an AKS cluster](https://docs.microsoft.com/azure/aks/upgrade-cluster) for more details. */
+    /** The version of Kubernetes the Managed Cluster is requested to run. When you upgrade a supported AKS cluster, Kubernetes minor versions cannot be skipped. All upgrades must be performed sequentially by major version number. For example, upgrades between 1.14.x -> 1.15.x or 1.15.x -> 1.16.x are allowed, however 1.14.x -> 1.16.x is not allowed. See [upgrading an AKS cluster](https://docs.microsoft.com/azure/aks/upgrade-cluster) for more details. */
     kubernetesVersion?: string;
     /**
      * The version of Kubernetes the Managed Cluster is running.
      * NOTE: This property will not be serialized. It can only be populated by the server.
      */
     readonly currentKubernetesVersion?: string;
-    /** This cannot be updated once the Managed Cluster has been created. */
+    /** The DNS prefix of the Managed Cluster. This cannot be updated once the Managed Cluster has been created. */
     dnsPrefix?: string;
-    /** This cannot be updated once the Managed Cluster has been created. */
+    /** The FQDN subdomain of the private cluster with custom private dns zone. This cannot be updated once the Managed Cluster has been created. */
     fqdnSubdomain?: string;
     /**
      * The FQDN of the master pool.
@@ -2444,7 +2580,7 @@ export interface ManagedCluster extends TrackedResource {
      */
     readonly privateFqdn?: string;
     /**
-     * The Azure Portal requires certain Cross-Origin Resource Sharing (CORS) headers to be sent in some responses, which Kubernetes APIServer doesn't handle by default. This special FQDN supports CORS, allowing the Azure Portal to function properly.
+     * The special FQDN used by the Azure Portal to access the Managed Cluster. This FQDN is for use only by the Azure Portal and should not be used by other clients. The Azure Portal requires certain Cross-Origin Resource Sharing (CORS) headers to be sent in some responses, which Kubernetes APIServer doesn't handle by default. This special FQDN supports CORS, allowing the Azure Portal to function properly.
      * NOTE: This property will not be serialized. It can only be populated by the server.
      */
     readonly azurePortalFqdn?: string;
@@ -2460,7 +2596,7 @@ export interface ManagedCluster extends TrackedResource {
     addonProfiles?: {
         [propertyName: string]: ManagedClusterAddonProfile;
     };
-    /** See [use AAD pod identity](https://docs.microsoft.com/azure/aks/use-azure-ad-pod-identity) for more details on AAD pod identity integration. */
+    /** The pod identity profile of the Managed Cluster. See [use AAD pod identity](https://docs.microsoft.com/azure/aks/use-azure-ad-pod-identity) for more details on AAD pod identity integration. */
     podIdentityProfile?: ManagedClusterPodIdentityProfile;
     /** The OIDC issuer profile of the Managed Cluster. */
     oidcIssuerProfile?: ManagedClusterOidcIssuerProfile;
@@ -2472,7 +2608,7 @@ export interface ManagedCluster extends TrackedResource {
     enableRbac?: boolean;
     /** The support plan for the Managed Cluster. If unspecified, the default is 'KubernetesOfficial'. */
     supportPlan?: KubernetesSupportPlan;
-    /** The default value is false. It can be enabled/disabled on creation and updating of the managed cluster. See [https://aka.ms/NamespaceARMResource](https://aka.ms/NamespaceARMResource) for more details on Namespace as a ARM Resource. */
+    /** Enable namespace as Azure resource. The default value is false. It can be enabled/disabled on creation and updating of the managed cluster. See [https://aka.ms/NamespaceARMResource](https://aka.ms/NamespaceARMResource) for more details on Namespace as a ARM Resource. */
     enableNamespaceResources?: boolean;
     /** The network configuration profile. */
     networkProfile?: ContainerServiceNetworkProfile;
@@ -2486,7 +2622,7 @@ export interface ManagedCluster extends TrackedResource {
     autoScalerProfile?: ManagedClusterPropertiesAutoScalerProfile;
     /** The access profile for managed cluster API server. */
     apiServerAccessProfile?: ManagedClusterAPIServerAccessProfile;
-    /** This is of the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Compute/diskEncryptionSets/{encryptionSetName}' */
+    /** The Resource ID of the disk encryption set to use for enabling encryption at rest. This is of the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Compute/diskEncryptionSets/{encryptionSetName}' */
     diskEncryptionSetID?: string;
     /** The user identity associated with the managed cluster. This identity will be used by the kubelet. Only one user assigned identity is allowed. The only accepted key is "kubeletidentity", with value of "resourceId": "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}". */
     identityProfile?: {
@@ -2494,7 +2630,7 @@ export interface ManagedCluster extends TrackedResource {
     };
     /** Private link resources associated with the cluster. */
     privateLinkResources?: PrivateLinkResource[];
-    /** If set to true, getting static credentials will be disabled for this cluster. This must only be used on Managed Clusters that are AAD enabled. For more details see [disable local accounts](https://docs.microsoft.com/azure/aks/managed-aad#disable-local-accounts-preview). */
+    /** If local accounts should be disabled on the Managed Cluster. If set to true, getting static credentials will be disabled for this cluster. This must only be used on Managed Clusters that are AAD enabled. For more details see [disable local accounts](https://docs.microsoft.com/azure/aks/managed-aad#disable-local-accounts-preview). */
     disableLocalAccounts?: boolean;
     /** Configurations for provisioning the cluster with HTTP proxy servers. */
     httpProxyConfig?: ManagedClusterHttpProxyConfig;
@@ -2504,14 +2640,12 @@ export interface ManagedCluster extends TrackedResource {
     storageProfile?: ManagedClusterStorageProfile;
     /** Ingress profile for the managed cluster. */
     ingressProfile?: ManagedClusterIngressProfile;
-    /** Allow or deny public network access for AKS */
+    /** PublicNetworkAccess of the managedCluster. Allow or deny public network access for AKS */
     publicNetworkAccess?: PublicNetworkAccess;
     /** Workload Auto-scaler profile for the managed cluster. */
     workloadAutoScalerProfile?: ManagedClusterWorkloadAutoScalerProfile;
     /** Prometheus addon profile for the container service cluster */
     azureMonitorProfile?: ManagedClusterAzureMonitorProfile;
-    /** The Safeguards profile holds all the safeguards information for a given cluster */
-    safeguardsProfile?: SafeguardsProfile;
     /** Service mesh profile for a managed cluster. */
     serviceMeshProfile?: ServiceMeshProfile;
     /**
@@ -2841,7 +2975,7 @@ export declare enum KnownWorkloadRuntime {
 export type WorkloadRuntime = string;
 /** Known values of {@link PodIPAllocationMode} that the service accepts. */
 export declare enum KnownPodIPAllocationMode {
-    /** Each pod gets a single IP address assigned. This is better for maximizing a small to medium subnet of size \/16 or smaller. The Azure CNI cluster with dynamic IP allocation defaults to this mode if the customer does not explicitly specify a podIPAllocationMode */
+    /** Each node gets allocated with a non-contiguous list of IP addresses assignable to pods. This is better for maximizing a small to medium subnet of size \/16 or smaller. The Azure CNI cluster with dynamic IP allocation defaults to this mode if the customer does not explicitly specify a podIPAllocationMode */
     DynamicIndividual = "DynamicIndividual",
     /** Each node is statically allocated CIDR block(s) of size \/28 = 16 IPs per block to satisfy the maxPods per node. Number of CIDR blocks >= (maxPods \/ 16). The block, rather than a single IP, counts against the Azure Vnet Private IP limit of 65K. Therefore block mode is suitable for running larger workloads with more than the current limit of 65K pods in a cluster. This mode is better suited to scale with larger subnets of \/15 or bigger */
     StaticBlock = "StaticBlock"
@@ -2851,7 +2985,7 @@ export declare enum KnownPodIPAllocationMode {
  * {@link KnownPodIPAllocationMode} can be used interchangeably with PodIPAllocationMode,
  *  this enum contains the known values that the service supports.
  * ### Known values supported by the service
- * **DynamicIndividual**: Each pod gets a single IP address assigned. This is better for maximizing a small to medium subnet of size \/16 or smaller. The Azure CNI cluster with dynamic IP allocation defaults to this mode if the customer does not explicitly specify a podIPAllocationMode \
+ * **DynamicIndividual**: Each node gets allocated with a non-contiguous list of IP addresses assignable to pods. This is better for maximizing a small to medium subnet of size \/16 or smaller. The Azure CNI cluster with dynamic IP allocation defaults to this mode if the customer does not explicitly specify a podIPAllocationMode \
  * **StaticBlock**: Each node is statically allocated CIDR block(s) of size \/28 = 16 IPs per block to satisfy the maxPods per node. Number of CIDR blocks >= (maxPods \/ 16). The block, rather than a single IP, counts against the Azure Vnet Private IP limit of 65K. Therefore block mode is suitable for running larger workloads with more than the current limit of 65K pods in a cluster. This mode is better suited to scale with larger subnets of \/15 or bigger
  */
 export type PodIPAllocationMode = string;
@@ -2950,7 +3084,11 @@ export declare enum KnownAgentPoolMode {
     /** User agent pools are primarily for hosting your application pods. */
     User = "User",
     /** Gateway agent pools are dedicated to providing static egress IPs to pods. For more details, see https:\//aka.ms\/aks\/static-egress-gateway. */
-    Gateway = "Gateway"
+    Gateway = "Gateway",
+    /** ManagedSystem is a system pool managed by AKS. The pool scales dynamically according to cluster usage, and has additional automated monitoring and healing capabilities. There can only be one ManagedSystem pool, and it is recommended to delete all other system pools for the best experience. */
+    ManagedSystem = "ManagedSystem",
+    /** Machines agent pools are dedicated to hosting machines. Only limited operations, such as creation and deletion, are allowed at the pool level. Please use the machine APIs to manage the full machine lifecycle. */
+    Machines = "Machines"
 }
 /**
  * Defines values for AgentPoolMode. \
@@ -2959,7 +3097,9 @@ export declare enum KnownAgentPoolMode {
  * ### Known values supported by the service
  * **System**: System agent pools are primarily for hosting critical system pods such as CoreDNS and metrics-server. System agent pools osType must be Linux. System agent pools VM SKU must have at least 2vCPUs and 4GB of memory. \
  * **User**: User agent pools are primarily for hosting your application pods. \
- * **Gateway**: Gateway agent pools are dedicated to providing static egress IPs to pods. For more details, see https:\/\/aka.ms\/aks\/static-egress-gateway.
+ * **Gateway**: Gateway agent pools are dedicated to providing static egress IPs to pods. For more details, see https:\/\/aka.ms\/aks\/static-egress-gateway. \
+ * **ManagedSystem**: ManagedSystem is a system pool managed by AKS. The pool scales dynamically according to cluster usage, and has additional automated monitoring and healing capabilities. There can only be one ManagedSystem pool, and it is recommended to delete all other system pools for the best experience. \
+ * **Machines**: Machines agent pools are dedicated to hosting machines. Only limited operations, such as creation and deletion, are allowed at the pool level. Please use the machine APIs to manage the full machine lifecycle.
  */
 export type AgentPoolMode = string;
 /** Known values of {@link UndrainableNodeBehavior} that the service accepts. */
@@ -3696,25 +3836,6 @@ export declare enum KnownAddonAutoscaling {
  * **Disabled**: Feature to autoscale AKS-managed add-ons is disabled.
  */
 export type AddonAutoscaling = string;
-/** Known values of {@link Level} that the service accepts. */
-export declare enum KnownLevel {
-    /** Off */
-    Off = "Off",
-    /** Warning */
-    Warning = "Warning",
-    /** Enforcement */
-    Enforcement = "Enforcement"
-}
-/**
- * Defines values for Level. \
- * {@link KnownLevel} can be used interchangeably with Level,
- *  this enum contains the known values that the service supports.
- * ### Known values supported by the service
- * **Off** \
- * **Warning** \
- * **Enforcement**
- */
-export type Level = string;
 /** Known values of {@link ServiceMeshMode} that the service accepts. */
 export declare enum KnownServiceMeshMode {
     /** Istio deployed as an AKS addon. */
@@ -3751,7 +3872,7 @@ export type IstioIngressGatewayMode = string;
 export declare enum KnownNodeProvisioningMode {
     /** Nodes are provisioned manually by the user */
     Manual = "Manual",
-    /** Nodes are provisioned automatically by AKS using Karpenter. Fixed size Node Pools can still be created, but autoscaling Node Pools cannot be. (See aka.ms\/aks\/nap for more details). */
+    /** Nodes are provisioned automatically by AKS using Karpenter (See aka.ms\/aks\/nap for more details). Fixed size Node Pools can still be created, but autoscaling Node Pools cannot be. (See aka.ms\/aks\/nap for more details). */
     Auto = "Auto"
 }
 /**
@@ -3760,12 +3881,12 @@ export declare enum KnownNodeProvisioningMode {
  *  this enum contains the known values that the service supports.
  * ### Known values supported by the service
  * **Manual**: Nodes are provisioned manually by the user \
- * **Auto**: Nodes are provisioned automatically by AKS using Karpenter. Fixed size Node Pools can still be created, but autoscaling Node Pools cannot be. (See aka.ms\/aks\/nap for more details).
+ * **Auto**: Nodes are provisioned automatically by AKS using Karpenter (See aka.ms\/aks\/nap for more details). Fixed size Node Pools can still be created, but autoscaling Node Pools cannot be. (See aka.ms\/aks\/nap for more details).
  */
 export type NodeProvisioningMode = string;
 /** Known values of {@link NodeProvisioningDefaultNodePools} that the service accepts. */
 export declare enum KnownNodeProvisioningDefaultNodePools {
-    /** No Karpenter NodePools are provisioned automatically. Automatic scaling will not happen unless the user creates one or more NodePool instances. */
+    /** No Karpenter NodePools are provisioned automatically. Automatic scaling will not happen unless the user creates one or more NodePool CRD instances. */
     None = "None",
     /** A standard set of Karpenter NodePools are provisioned */
     Auto = "Auto"
@@ -3775,7 +3896,7 @@ export declare enum KnownNodeProvisioningDefaultNodePools {
  * {@link KnownNodeProvisioningDefaultNodePools} can be used interchangeably with NodeProvisioningDefaultNodePools,
  *  this enum contains the known values that the service supports.
  * ### Known values supported by the service
- * **None**: No Karpenter NodePools are provisioned automatically. Automatic scaling will not happen unless the user creates one or more NodePool instances. \
+ * **None**: No Karpenter NodePools are provisioned automatically. Automatic scaling will not happen unless the user creates one or more NodePool CRD instances. \
  * **Auto**: A standard set of Karpenter NodePools are provisioned
  */
 export type NodeProvisioningDefaultNodePools = string;
@@ -3987,6 +4108,38 @@ export declare enum KnownDeletePolicy {
  * **Delete**: Delete both the ARM resource and the Kubernetes namespace together.
  */
 export type DeletePolicy = string;
+/** Known values of {@link DriftAction} that the service accepts. */
+export declare enum KnownDriftAction {
+    /** The machine is up to date. */
+    Synced = "Synced",
+    /** The machine has drifted and needs to be deleted and recreated. */
+    Recreate = "Recreate"
+}
+/**
+ * Defines values for DriftAction. \
+ * {@link KnownDriftAction} can be used interchangeably with DriftAction,
+ *  this enum contains the known values that the service supports.
+ * ### Known values supported by the service
+ * **Synced**: The machine is up to date. \
+ * **Recreate**: The machine has drifted and needs to be deleted and recreated.
+ */
+export type DriftAction = string;
+/** Known values of {@link VmState} that the service accepts. */
+export declare enum KnownVmState {
+    /** The virtual machine is currently running. */
+    Running = "Running",
+    /** The virtual machine has been deleted by the user or due to spot eviction. */
+    Deleted = "Deleted"
+}
+/**
+ * Defines values for VmState. \
+ * {@link KnownVmState} can be used interchangeably with VmState,
+ *  this enum contains the known values that the service supports.
+ * ### Known values supported by the service
+ * **Running**: The virtual machine is currently running. \
+ * **Deleted**: The virtual machine has been deleted by the user or due to spot eviction.
+ */
+export type VmState = string;
 /** Known values of {@link PrivateEndpointConnectionProvisioningState} that the service accepts. */
 export declare enum KnownPrivateEndpointConnectionProvisioningState {
     /** Canceled */
@@ -4551,6 +4704,19 @@ export interface MachinesGetOptionalParams extends coreClient.OperationOptions {
 /** Contains response data for the get operation. */
 export type MachinesGetResponse = Machine;
 /** Optional parameters. */
+export interface MachinesCreateOrUpdateOptionalParams extends coreClient.OperationOptions {
+    /** The request should only proceed if an entity matches this string. */
+    ifMatch?: string;
+    /** The request should only proceed if no entity matches this string. */
+    ifNoneMatch?: string;
+    /** Delay to wait until next poll, in milliseconds. */
+    updateIntervalInMs?: number;
+    /** A serialized poller which can be used to resume an existing paused Long-Running-Operation. */
+    resumeFrom?: string;
+}
+/** Contains response data for the createOrUpdate operation. */
+export type MachinesCreateOrUpdateResponse = Machine;
+/** Optional parameters. */
 export interface MachinesListNextOptionalParams extends coreClient.OperationOptions {
 }
 /** Contains response data for the listNext operation. */