@pulumi/azure 5.63.0 → 5.64.0

package/types/input.d.ts

@@ -16732,6 +16732,8 @@ export declare namespace cognitive {
     interface AccountStorage {
         /**
          * The client ID of the managed identity associated with the storage resource.
+         *
+         * > **NOTE:** Not all `kind` support a `storage` block. For example the `kind` `OpenAI` does not support it.
          */
         identityClientId?: pulumi.Input<string>;
         /**
@@ -16749,9 +16751,9 @@ export declare namespace cognitive {
          */
         name: pulumi.Input<string>;
         /**
-         * The version of Cognitive Services Account Deployment model.
+         * The version of Cognitive Services Account Deployment model. If `version` is not specified, the default version of the model at the time will be assigned.
          */
-        version: pulumi.Input<string>;
+        version?: pulumi.Input<string>;
     }
     interface DeploymentScale {
         /**
@@ -27104,6 +27106,56 @@ export declare namespace elasticsan {
          */
         tier?: pulumi.Input<string>;
     }
+    interface VolumeGroupEncryption {
+        /**
+         * The timestamp of the expiration time for the current version of the customer managed key.
+         */
+        currentVersionedKeyExpirationTimestamp?: pulumi.Input<string>;
+        /**
+         * The ID of the current versioned Key Vault Key in use.
+         */
+        currentVersionedKeyId?: pulumi.Input<string>;
+        /**
+         * The Key Vault key URI for Customer Managed Key encryption, which can be either a full URI or a versionless URI.
+         */
+        keyVaultKeyId: pulumi.Input<string>;
+        /**
+         * The timestamp of the last rotation of the Key Vault Key.
+         */
+        lastKeyRotationTimestamp?: pulumi.Input<string>;
+        /**
+         * The ID of the User Assigned Identity used by this Elastic SAN Volume Group.
+         */
+        userAssignedIdentityId?: pulumi.Input<string>;
+    }
+    interface VolumeGroupIdentity {
+        /**
+         * A list of the User Assigned Identity IDs that should be assigned to this Elastic SAN Volume Group.
+         */
+        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * The Principal ID associated with the Managed Service Identity assigned to this Elastic SAN Volume Group.
+         */
+        principalId?: pulumi.Input<string>;
+        /**
+         * The Tenant ID associated with this Managed Service Identity assigned to this Elastic SAN Volume Group.
+         */
+        tenantId?: pulumi.Input<string>;
+        /**
+         * Specifies the type of Managed Identity that should be assigned to this Elastic SAN Volume Group. Possible values are `SystemAssigned` and `UserAssigned`.
+         */
+        type: pulumi.Input<string>;
+    }
+    interface VolumeGroupNetworkRule {
+        /**
+         * The action to take when the Subnet attempts to access this Elastic SAN Volume Group. The only possible value is `Allow`. Defaults to `Allow`.
+         */
+        action?: pulumi.Input<string>;
+        /**
+         * The ID of the Subnet which should be allowed to access this Elastic SAN Volume Group.
+         */
+        subnetId: pulumi.Input<string>;
+    }
 }
 export declare namespace eventgrid {
     interface DomainIdentity {
@@ -39815,6 +39867,30 @@ export declare namespace netapp {
          */
         username: pulumi.Input<string>;
     }
+    interface AccountIdentity {
+        /**
+         * The identity id of the user assigned identity to use when type is `UserAssigned`
+         */
+        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
+        principalId?: pulumi.Input<string>;
+        tenantId?: pulumi.Input<string>;
+        /**
+         * The identity type, which can be `SystemAssigned` or `UserAssigned`. Only one type at a time is supported by Azure NetApp Files.
+         */
+        type: pulumi.Input<string>;
+    }
+    interface GetAccountIdentity {
+        identityIds?: string[];
+        principalId?: string;
+        tenantId?: string;
+        type: string;
+    }
+    interface GetAccountIdentityArgs {
+        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
+        principalId?: pulumi.Input<string>;
+        tenantId?: pulumi.Input<string>;
+        type: pulumi.Input<string>;
+    }
     interface SnapshotPolicyDailySchedule {
         /**
          * Hour of the day that the snapshots will be created, valid range is from 0 to 23.
@@ -44621,6 +44697,132 @@ export declare namespace recoveryservices {
         alertsForCriticalOperationFailuresEnabled?: pulumi.Input<boolean>;
     }
 }
+export declare namespace redhatopenshift {
+    interface ClusterApiServerProfile {
+        /**
+         * The IP Address the Ingress Profile is associated with.
+         */
+        ipAddress?: pulumi.Input<string>;
+        /**
+         * The URL the API Server Profile is associated with.
+         */
+        url?: pulumi.Input<string>;
+        /**
+         * Cluster API server visibility. Supported values are `Public` and `Private`. Defaults to `Public`. Changing this forces a new resource to be created.
+         */
+        visibility: pulumi.Input<string>;
+    }
+    interface ClusterClusterProfile {
+        /**
+         * The custom domain for the cluster. For more info, see [Prepare a custom domain for your cluster](https://docs.microsoft.com/azure/openshift/tutorial-create-cluster#prepare-a-custom-domain-for-your-cluster-optional). Changing this forces a new resource to be created.
+         */
+        domain: pulumi.Input<string>;
+        /**
+         * Whether Federal Information Processing Standard (FIPS) validated cryptographic modules are used. Defaults to `false`. Changing this forces a new resource to be created.
+         */
+        fipsEnabled?: pulumi.Input<boolean>;
+        /**
+         * The Red Hat pull secret for the cluster. For more info, see [Get a Red Hat pull secret](https://learn.microsoft.com/azure/openshift/tutorial-create-cluster#get-a-red-hat-pull-secret-optional). Changing this forces a new resource to be created.
+         */
+        pullSecret?: pulumi.Input<string>;
+        /**
+         * The resource group that the cluster profile is attached to.
+         */
+        resourceGroupId?: pulumi.Input<string>;
+        /**
+         * The version of the OpenShift cluster. Changing this forces a new resource to be created.
+         */
+        version: pulumi.Input<string>;
+    }
+    interface ClusterIngressProfile {
+        /**
+         * The IP Address the Ingress Profile is associated with.
+         */
+        ipAddress?: pulumi.Input<string>;
+        /**
+         * The name of the Azure Red Hat OpenShift Cluster to create. Changing this forces a new resource to be created.
+         */
+        name?: pulumi.Input<string>;
+        /**
+         * Cluster Ingress visibility. Supported values are `Public` and `Private`. Defaults to `Public`. Changing this forces a new resource to be created.
+         */
+        visibility: pulumi.Input<string>;
+    }
+    interface ClusterMainProfile {
+        /**
+         * The resource ID of an associated disk encryption set. Changing this forces a new resource to be created.
+         */
+        diskEncryptionSetId?: pulumi.Input<string>;
+        /**
+         * Whether main virtual machines are encrypted at host. Defaults to `false`. Changing this forces a new resource to be created.
+         *
+         * **NOTE:** `encryptionAtHostEnabled` is only available for certain VM sizes and the `EncryptionAtHost` feature must be enabled for your subscription. Please see the [Azure documentation](https://learn.microsoft.com/azure/virtual-machines/disks-enable-host-based-encryption-portal?tabs=azure-powershell) for more information.
+         */
+        encryptionAtHostEnabled?: pulumi.Input<boolean>;
+        /**
+         * The ID of the subnet where main nodes will be hosted. Changing this forces a new resource to be created.
+         */
+        subnetId: pulumi.Input<string>;
+        /**
+         * The size of the Virtual Machines for the main nodes. Changing this forces a new resource to be created.
+         */
+        vmSize: pulumi.Input<string>;
+    }
+    interface ClusterNetworkProfile {
+        /**
+         * The outbound (egress) routing method. Possible values are `Loadbalancer` and `UserDefinedRouting`. Defaults to `LoadBalancer`. Changing this forces a new resource to be created.
+         */
+        outboundType?: pulumi.Input<string>;
+        /**
+         * The CIDR to use for pod IP addresses. Changing this forces a new resource to be created.
+         */
+        podCidr: pulumi.Input<string>;
+        /**
+         * The network range used by the OpenShift service. Changing this forces a new resource to be created.
+         */
+        serviceCidr: pulumi.Input<string>;
+    }
+    interface ClusterServicePrincipal {
+        /**
+         * The Client ID for the Service Principal.
+         */
+        clientId: pulumi.Input<string>;
+        /**
+         * The Client Secret for the Service Principal.
+         *
+         * > **Note:** Currently a service principal cannot be associated with more than one ARO clusters on the Azure subscription.
+         */
+        clientSecret: pulumi.Input<string>;
+    }
+    interface ClusterWorkerProfile {
+        /**
+         * The resource ID of an associated disk encryption set. Changing this forces a new resource to be created.
+         */
+        diskEncryptionSetId?: pulumi.Input<string>;
+        /**
+         * The internal OS disk size of the worker Virtual Machines in GB. Changing this forces a new resource to be created.
+         */
+        diskSizeGb: pulumi.Input<number>;
+        /**
+         * Whether worker virtual machines are encrypted at host. Defaults to `false`. Changing this forces a new resource to be created.
+         *
+         * **NOTE:** `encryptionAtHostEnabled` is only available for certain VM sizes and the `EncryptionAtHost` feature must be enabled for your subscription. Please see the [Azure documentation](https://learn.microsoft.com/azure/virtual-machines/disks-enable-host-based-encryption-portal?tabs=azure-powershell) for more information.
+         */
+        encryptionAtHostEnabled?: pulumi.Input<boolean>;
+        /**
+         * The initial number of worker nodes which should exist in the cluster. Changing this forces a new resource to be created.
+         */
+        nodeCount: pulumi.Input<number>;
+        /**
+         * The ID of the subnet where worker nodes will be hosted. Changing this forces a new resource to be created.
+         */
+        subnetId: pulumi.Input<string>;
+        /**
+         * The size of the Virtual Machines for the worker nodes. Changing this forces a new resource to be created.
+         */
+        vmSize: pulumi.Input<string>;
+    }
+}
 export declare namespace redis {
     interface CacheIdentity {
         /**
@@ -47168,7 +47370,7 @@ export declare namespace storage {
     }
     interface AccountNetworkRulesPrivateLinkAccess {
         /**
-         * The resource id of the resource access rule to be granted access.
+         * The ID of the Azure resource that should be allowed access to the target storage account.
          */
         endpointResourceId: pulumi.Input<string>;
         /**

package/types/output.d.ts

@@ -22436,6 +22436,8 @@ export declare namespace cognitive {
     interface AccountStorage {
         /**
          * The client ID of the managed identity associated with the storage resource.
+         *
+         * > **NOTE:** Not all `kind` support a `storage` block. For example the `kind` `OpenAI` does not support it.
          */
         identityClientId?: string;
         /**
@@ -22453,9 +22455,9 @@ export declare namespace cognitive {
          */
         name: string;
         /**
-         * The version of Cognitive Services Account Deployment model.
+         * The version of Cognitive Services Account Deployment model. If `version` is not specified, the default version of the model at the time will be assigned.
          */
-        version: string;
+        version?: string;
     }
     interface DeploymentScale {
         /**
@@ -27572,6 +27574,10 @@ export declare namespace containerapp {
          * The FQDN of the ingress.
          */
         fqdn: string;
+        /**
+         * One or more `ipSecurityRestriction` blocks for IP-filtering rules as defined below.
+         */
+        ipSecurityRestrictions: outputs.containerapp.GetAppIngressIpSecurityRestriction[];
         /**
          * The target port on the container for the Ingress traffic.
          */
@@ -27599,6 +27605,24 @@ export declare namespace containerapp {
          */
         name: string;
     }
+    interface GetAppIngressIpSecurityRestriction {
+        /**
+         * The IP-filter action.
+         */
+        action: string;
+        /**
+         * Description of the IP restriction rule that is being sent to the container-app.
+         */
+        description: string;
+        /**
+         * CIDR notation that matches the incoming IP address.
+         */
+        ipAddressRange: string;
+        /**
+         * The name of the Container App.
+         */
+        name: string;
+    }
     interface GetAppIngressTrafficWeight {
         /**
          * The label to apply to the revision as a name prefix for routing traffic.
@@ -33750,6 +33774,38 @@ export declare namespace datafactory {
          */
         tenantId: string;
     }
+    interface GetTriggerScheduleSchedule {
+        /**
+         * Day(s) of the month on which the trigger is scheduled.
+         */
+        daysOfMonths: number[];
+        /**
+         * Day(s) of the week on which the trigger is scheduled.
+         */
+        daysOfWeeks: string[];
+        /**
+         * Hours of the day on which the trigger is scheduled.
+         */
+        hours: number[];
+        /**
+         * Minutes of the hour on which the trigger is scheduled.
+         */
+        minutes: number[];
+        /**
+         * A `monthly` block as documented below, which specifies the days of the month on which the trigger is scheduled.
+         */
+        monthlies: outputs.datafactory.GetTriggerScheduleScheduleMonthly[];
+    }
+    interface GetTriggerScheduleScheduleMonthly {
+        /**
+         * The occurrence of the specified day during the month.
+         */
+        week: number;
+        /**
+         * The day of the week on which the trigger runs.
+         */
+        weekday: string;
+    }
     interface IntegrationRuntimeManagedCatalogInfo {
         /**
          * Administrator login name for the SQL Server.
@@ -35217,6 +35273,56 @@ export declare namespace elasticsan {
          */
         tier?: string;
     }
+    interface VolumeGroupEncryption {
+        /**
+         * The timestamp of the expiration time for the current version of the customer managed key.
+         */
+        currentVersionedKeyExpirationTimestamp: string;
+        /**
+         * The ID of the current versioned Key Vault Key in use.
+         */
+        currentVersionedKeyId: string;
+        /**
+         * The Key Vault key URI for Customer Managed Key encryption, which can be either a full URI or a versionless URI.
+         */
+        keyVaultKeyId: string;
+        /**
+         * The timestamp of the last rotation of the Key Vault Key.
+         */
+        lastKeyRotationTimestamp: string;
+        /**
+         * The ID of the User Assigned Identity used by this Elastic SAN Volume Group.
+         */
+        userAssignedIdentityId?: string;
+    }
+    interface VolumeGroupIdentity {
+        /**
+         * A list of the User Assigned Identity IDs that should be assigned to this Elastic SAN Volume Group.
+         */
+        identityIds?: string[];
+        /**
+         * The Principal ID associated with the Managed Service Identity assigned to this Elastic SAN Volume Group.
+         */
+        principalId: string;
+        /**
+         * The Tenant ID associated with this Managed Service Identity assigned to this Elastic SAN Volume Group.
+         */
+        tenantId: string;
+        /**
+         * Specifies the type of Managed Identity that should be assigned to this Elastic SAN Volume Group. Possible values are `SystemAssigned` and `UserAssigned`.
+         */
+        type: string;
+    }
+    interface VolumeGroupNetworkRule {
+        /**
+         * The action to take when the Subnet attempts to access this Elastic SAN Volume Group. The only possible value is `Allow`. Defaults to `Allow`.
+         */
+        action?: string;
+        /**
+         * The ID of the Subnet which should be allowed to access this Elastic SAN Volume Group.
+         */
+        subnetId: string;
+    }
 }
 export declare namespace eventgrid {
     interface DomainIdentity {
@@ -49929,6 +50035,24 @@ export declare namespace netapp {
          */
         username: string;
     }
+    interface AccountIdentity {
+        /**
+         * The identity id of the user assigned identity to use when type is `UserAssigned`
+         */
+        identityIds?: string[];
+        principalId: string;
+        tenantId: string;
+        /**
+         * The identity type, which can be `SystemAssigned` or `UserAssigned`. Only one type at a time is supported by Azure NetApp Files.
+         */
+        type: string;
+    }
+    interface GetAccountIdentity {
+        identityIds?: string[];
+        principalId: string;
+        tenantId: string;
+        type: string;
+    }
     interface GetSnapshotPolicyDailySchedule {
         /**
          * Hour of the day that the snapshots will be created.
@@ -56819,6 +56943,132 @@ export declare namespace recoveryservices {
         alertsForCriticalOperationFailuresEnabled?: boolean;
     }
 }
+export declare namespace redhatopenshift {
+    interface ClusterApiServerProfile {
+        /**
+         * The IP Address the Ingress Profile is associated with.
+         */
+        ipAddress: string;
+        /**
+         * The URL the API Server Profile is associated with.
+         */
+        url: string;
+        /**
+         * Cluster API server visibility. Supported values are `Public` and `Private`. Defaults to `Public`. Changing this forces a new resource to be created.
+         */
+        visibility: string;
+    }
+    interface ClusterClusterProfile {
+        /**
+         * The custom domain for the cluster. For more info, see [Prepare a custom domain for your cluster](https://docs.microsoft.com/azure/openshift/tutorial-create-cluster#prepare-a-custom-domain-for-your-cluster-optional). Changing this forces a new resource to be created.
+         */
+        domain: string;
+        /**
+         * Whether Federal Information Processing Standard (FIPS) validated cryptographic modules are used. Defaults to `false`. Changing this forces a new resource to be created.
+         */
+        fipsEnabled?: boolean;
+        /**
+         * The Red Hat pull secret for the cluster. For more info, see [Get a Red Hat pull secret](https://learn.microsoft.com/azure/openshift/tutorial-create-cluster#get-a-red-hat-pull-secret-optional). Changing this forces a new resource to be created.
+         */
+        pullSecret?: string;
+        /**
+         * The resource group that the cluster profile is attached to.
+         */
+        resourceGroupId: string;
+        /**
+         * The version of the OpenShift cluster. Changing this forces a new resource to be created.
+         */
+        version: string;
+    }
+    interface ClusterIngressProfile {
+        /**
+         * The IP Address the Ingress Profile is associated with.
+         */
+        ipAddress: string;
+        /**
+         * The name of the Azure Red Hat OpenShift Cluster to create. Changing this forces a new resource to be created.
+         */
+        name: string;
+        /**
+         * Cluster Ingress visibility. Supported values are `Public` and `Private`. Defaults to `Public`. Changing this forces a new resource to be created.
+         */
+        visibility: string;
+    }
+    interface ClusterMainProfile {
+        /**
+         * The resource ID of an associated disk encryption set. Changing this forces a new resource to be created.
+         */
+        diskEncryptionSetId?: string;
+        /**
+         * Whether main virtual machines are encrypted at host. Defaults to `false`. Changing this forces a new resource to be created.
+         *
+         * **NOTE:** `encryptionAtHostEnabled` is only available for certain VM sizes and the `EncryptionAtHost` feature must be enabled for your subscription. Please see the [Azure documentation](https://learn.microsoft.com/azure/virtual-machines/disks-enable-host-based-encryption-portal?tabs=azure-powershell) for more information.
+         */
+        encryptionAtHostEnabled?: boolean;
+        /**
+         * The ID of the subnet where main nodes will be hosted. Changing this forces a new resource to be created.
+         */
+        subnetId: string;
+        /**
+         * The size of the Virtual Machines for the main nodes. Changing this forces a new resource to be created.
+         */
+        vmSize: string;
+    }
+    interface ClusterNetworkProfile {
+        /**
+         * The outbound (egress) routing method. Possible values are `Loadbalancer` and `UserDefinedRouting`. Defaults to `LoadBalancer`. Changing this forces a new resource to be created.
+         */
+        outboundType?: string;
+        /**
+         * The CIDR to use for pod IP addresses. Changing this forces a new resource to be created.
+         */
+        podCidr: string;
+        /**
+         * The network range used by the OpenShift service. Changing this forces a new resource to be created.
+         */
+        serviceCidr: string;
+    }
+    interface ClusterServicePrincipal {
+        /**
+         * The Client ID for the Service Principal.
+         */
+        clientId: string;
+        /**
+         * The Client Secret for the Service Principal.
+         *
+         * > **Note:** Currently a service principal cannot be associated with more than one ARO clusters on the Azure subscription.
+         */
+        clientSecret: string;
+    }
+    interface ClusterWorkerProfile {
+        /**
+         * The resource ID of an associated disk encryption set. Changing this forces a new resource to be created.
+         */
+        diskEncryptionSetId?: string;
+        /**
+         * The internal OS disk size of the worker Virtual Machines in GB. Changing this forces a new resource to be created.
+         */
+        diskSizeGb: number;
+        /**
+         * Whether worker virtual machines are encrypted at host. Defaults to `false`. Changing this forces a new resource to be created.
+         *
+         * **NOTE:** `encryptionAtHostEnabled` is only available for certain VM sizes and the `EncryptionAtHost` feature must be enabled for your subscription. Please see the [Azure documentation](https://learn.microsoft.com/azure/virtual-machines/disks-enable-host-based-encryption-portal?tabs=azure-powershell) for more information.
+         */
+        encryptionAtHostEnabled?: boolean;
+        /**
+         * The initial number of worker nodes which should exist in the cluster. Changing this forces a new resource to be created.
+         */
+        nodeCount: number;
+        /**
+         * The ID of the subnet where worker nodes will be hosted. Changing this forces a new resource to be created.
+         */
+        subnetId: string;
+        /**
+         * The size of the Virtual Machines for the worker nodes. Changing this forces a new resource to be created.
+         */
+        vmSize: string;
+    }
+}
 export declare namespace redis {
     interface CacheIdentity {
         /**
@@ -59728,7 +59978,7 @@ export declare namespace storage {
     }
     interface AccountNetworkRulesPrivateLinkAccess {
         /**
-         * The resource id of the resource access rule to be granted access.
+         * The ID of the Azure resource that should be allowed access to the target storage account.
          */
         endpointResourceId: string;
         /**