@pulumi/azure 5.84.0-alpha.1720764155 → 5.84.0-alpha.1721111802

package/types/output.d.ts

@@ -12295,7 +12295,7 @@ export declare namespace appservice {
          */
         nodeVersion?: string;
         /**
-         * The version of PHP to run. Possible values are `7.4`, `8.0`, `8.1` and `8.2`.
+         * The version of PHP to run. Possible values are `7.4`, `8.0`, `8.1`, `8.2` and `8.3`.
          *
          * > **NOTE:** version `7.4` is deprecated and will be removed from the provider in a future version.
          */
@@ -13429,7 +13429,7 @@ export declare namespace appservice {
          */
         nodeVersion?: string;
         /**
-         * The version of PHP to run. Possible values are `7.4`, `8.0`, `8.1` and `8.2`.
+         * The version of PHP to run. Possible values are `7.4`, `8.0`, `8.1`, `8.2` and `8.3`.
          *
          * > **NOTE:** version `7.4` is deprecated and will be removed from the provider in a future version.
          */
@@ -19818,9 +19818,14 @@ export declare namespace automation {
         occurrence: number;
     }
     interface SoftwareUpdateConfigurationLinux {
+        /**
+         * @deprecated this property is deprecated and will be removed in version 4.0 of the provider, please use `classificationsIncluded` instead.
+         */
         classificationIncluded: string;
         /**
          * Specifies the list of update classifications included in the Software Update Configuration. Possible values are `Unclassified`, `Critical`, `Security` and `Other`.
+         *
+         * > **NOTE:** The `classificationsIncluded` property will become `Required` in version 4.0 of the Provider.
          */
         classificationsIncludeds: string[];
         /**
@@ -19968,11 +19973,13 @@ export declare namespace automation {
     }
     interface SoftwareUpdateConfigurationWindows {
         /**
-         * @deprecated windows classification can be set as a list, use `classificationsIncluded` instead.
+         * @deprecated this property is deprecated and will be removed in version 4.0 of the provider, please use `classificationsIncluded` instead.
          */
         classificationIncluded: string;
         /**
          * Specifies the list of update classification. Possible values are `Unclassified`, `Critical`, `Security`, `UpdateRollup`, `FeaturePack`, `ServicePack`, `Definition`, `Tools` and `Updates`.
+         *
+         * > **NOTE:** The `classificationsIncluded` property will become `Required` in version 4.0 of the Provider.
          */
         classificationsIncludeds: string[];
         /**
@@ -30339,6 +30346,10 @@ export declare namespace containerservice {
         userAssignedIdentityId: string;
     }
     interface GetKubernetesClusterServiceMeshProfile {
+        /**
+         * A `certificateAuthority` block as documented below.
+         */
+        certificateAuthorities: outputs.containerservice.GetKubernetesClusterServiceMeshProfileCertificateAuthority[];
         /**
          * Is Istio External Ingress Gateway enabled?
          */
@@ -30352,6 +30363,28 @@ export declare namespace containerservice {
          */
         mode: string;
     }
+    interface GetKubernetesClusterServiceMeshProfileCertificateAuthority {
+        /**
+         * The certificate chain object name in Azure Key Vault.
+         */
+        certChainObjectName: string;
+        /**
+         * The intermediate certificate object name in Azure Key Vault.
+         */
+        certObjectName: string;
+        /**
+         * The intermediate certificate private key object name in Azure Key Vault.
+         */
+        keyObjectName: string;
+        /**
+         * The resource ID of the Key Vault.
+         */
+        keyVaultId: string;
+        /**
+         * The root certificate object name in Azure Key Vault.
+         */
+        rootCertObjectName: string;
+    }
     interface GetKubernetesClusterServicePrincipal {
         /**
          * The Client ID of the user-defined Managed Identity assigned to the Kubelets.
@@ -32211,6 +32244,10 @@ export declare namespace containerservice {
         userAssignedIdentityId: string;
     }
     interface KubernetesClusterServiceMeshProfile {
+        /**
+         * A `certificateAuthority` block as defined below. When this property is specified, `keyVaultSecretsProvider` is also required to be set. This configuration allows you to bring your own root certificate and keys for Istio CA in the Istio-based service mesh add-on for Azure Kubernetes Service.
+         */
+        certificateAuthority?: outputs.containerservice.KubernetesClusterServiceMeshProfileCertificateAuthority;
         /**
          * Is Istio External Ingress Gateway enabled?
          *
@@ -32226,6 +32263,30 @@ export declare namespace containerservice {
          */
         mode: string;
     }
+    interface KubernetesClusterServiceMeshProfileCertificateAuthority {
+        /**
+         * The certificate chain object name in Azure Key Vault.
+         */
+        certChainObjectName: string;
+        /**
+         * The intermediate certificate object name in Azure Key Vault.
+         */
+        certObjectName: string;
+        /**
+         * The intermediate certificate private key object name in Azure Key Vault.
+         *
+         * > **Note:** For more information on [Istio-based service mesh add-on with plug-in CA certificates and how to generate these certificates](https://learn.microsoft.com/en-us/azure/aks/istio-plugin-ca),
+         */
+        keyObjectName: string;
+        /**
+         * The resource ID of the Key Vault.
+         */
+        keyVaultId: string;
+        /**
+         * The root certificate object name in Azure Key Vault.
+         */
+        rootCertObjectName: string;
+    }
     interface KubernetesClusterServicePrincipal {
         /**
          * The Client ID for the Service Principal.
@@ -34237,7 +34298,9 @@ export declare namespace databricks {
         /**
          * Are public IP Addresses not allowed? Possible values are `true` or `false`. Defaults to `false`.
          *
-         * > **Note:** Updating `noPublicIp` parameter is only allowed if the value is changing from `false` to `true` and and only for VNet-injected workspaces.
+         * > **Note:** Updating `noPublicIp` parameter is only allowed if the value is changing from `false` to `true` and only for VNet-injected workspaces.
+         *
+         * > **Note:** In `v3.104.0` and higher of the provider the `noPublicIp` parameter will now default to `true` instead of `false`.
          */
         noPublicIp: boolean;
         /**
@@ -34265,7 +34328,7 @@ export declare namespace databricks {
          */
         storageAccountName: string;
         /**
-         * Storage account SKU name. Possible values include `Standard_LRS`, `Standard_GRS`, `Standard_RAGRS`, `Standard_GZRS`, `Standard_RAGZRS`, `Standard_ZRS`, `Premium_LRS` or `Premium_ZRS`. Defaults to `Standard_GRS`. Changing this forces a new resource to be created.
+         * Storage account SKU name. Possible values include `Standard_LRS`, `Standard_GRS`, `Standard_RAGRS`, `Standard_GZRS`, `Standard_RAGZRS`, `Standard_ZRS`, `Premium_LRS` or `Premium_ZRS`. Defaults to `Standard_GRS`.
          */
         storageAccountSkuName: string;
         /**
@@ -36807,6 +36870,10 @@ export declare namespace devtest {
          * Specifies the name of the Dev Test Virtual Network. Changing this forces a new resource to be created.
          */
         name: string;
+        /**
+         * A `sharedPublicIpAddress` block as defined below.
+         */
+        sharedPublicIpAddress?: outputs.devtest.VirtualNetworkSubnetSharedPublicIpAddress;
         /**
          * Can this subnet be used for creating Virtual Machines? Possible values are `Allow`, `Default` and `Deny`. Defaults to `Allow`.
          */
@@ -36816,6 +36883,22 @@ export declare namespace devtest {
          */
         usePublicIpAddress?: string;
     }
+    interface VirtualNetworkSubnetSharedPublicIpAddress {
+        /**
+         * A list of `allowedPorts` blocks as defined below.
+         */
+        allowedPorts?: outputs.devtest.VirtualNetworkSubnetSharedPublicIpAddressAllowedPort[];
+    }
+    interface VirtualNetworkSubnetSharedPublicIpAddressAllowedPort {
+        /**
+         * The port on the Virtual Machine that the traffic will be sent to.
+         */
+        backendPort?: number;
+        /**
+         * The transport protocol that the traffic will use. Possible values are `TCP` and `UDP`.
+         */
+        transportProtocol?: string;
+    }
     interface WindowsVirtualMachineGalleryImageReference {
         /**
          * The Offer of the Gallery Image. Changing this forces a new resource to be created.
@@ -57454,21 +57537,21 @@ export declare namespace nginx {
     }
     interface DeploymentFrontendPrivate {
         /**
-         * Specify the method for allocating the private IP. Possible values are `Static` and `Dynamic`.
+         * Specify the method for allocating the private IP. Possible values are `Static` and `Dynamic`. Changing this forces a new NGINX Deployment to be created.
          */
         allocationMethod: string;
         /**
-         * Specify the private IP Address.
+         * Specify the private IP Address. Changing this forces a new NGINX Deployment to be created.
          */
         ipAddress: string;
         /**
-         * Specify the Subnet Resource ID for this NGINX Deployment.
+         * Specify the Subnet Resource ID for this NGINX Deployment. Changing this forces a new NGINX Deployment to be created.
          */
         subnetId: string;
     }
     interface DeploymentFrontendPublic {
         /**
-         * Specifies a list of Public IP Resource ID to this NGINX Deployment.
+         * Specifies a list of Public IP Resource ID to this NGINX Deployment. Changing this forces a new NGINX Deployment to be created.
          */
         ipAddresses?: string[];
     }
@@ -57498,7 +57581,7 @@ export declare namespace nginx {
     }
     interface DeploymentNetworkInterface {
         /**
-         * Specify The Subnet Resource ID for this NGINX Deployment.
+         * Specify The Subnet Resource ID for this NGINX Deployment. Changing this forces a new NGINX Deployment to be created.
          */
         subnetId: string;
     }
@@ -64186,7 +64269,7 @@ export declare namespace waf {
     }
     interface PolicyManagedRulesManagedRuleSetRuleGroupOverrideRule {
         /**
-         * Describes the override action to be applied when rule matches. Possible values are `Allow`, `AnomalyScoring`, `Block` and `Log`.
+         * Describes the override action to be applied when rule matches. Possible values are `Allow`, `AnomalyScoring`, `Block`, `JSChallenge` and `Log`. `JSChallenge` is only valid for rulesets of type `Microsoft_BotManagerRuleSet`.
          */
         action?: string;
         /**