pulumi-azure-native 3.9.0a1757522298__py3-none-any.whl → 3.11.0a1761591364__py3-none-any.whl

pulumi_azure_native/containerservice/_inputs.py

@@ -81,6 +81,18 @@ __all__ = [
     'IstioPluginCertificateAuthorityArgsDict',
     'IstioServiceMeshArgs',
     'IstioServiceMeshArgsDict',
+    'JWTAuthenticatorClaimMappingExpressionArgs',
+    'JWTAuthenticatorClaimMappingExpressionArgsDict',
+    'JWTAuthenticatorClaimMappingsArgs',
+    'JWTAuthenticatorClaimMappingsArgsDict',
+    'JWTAuthenticatorExtraClaimMappingExpressionArgs',
+    'JWTAuthenticatorExtraClaimMappingExpressionArgsDict',
+    'JWTAuthenticatorIssuerArgs',
+    'JWTAuthenticatorIssuerArgsDict',
+    'JWTAuthenticatorPropertiesArgs',
+    'JWTAuthenticatorPropertiesArgsDict',
+    'JWTAuthenticatorValidationRuleArgs',
+    'JWTAuthenticatorValidationRuleArgsDict',
     'KubeletConfigArgs',
     'KubeletConfigArgsDict',
     'LabelSelectorRequirementArgs',
@@ -185,6 +197,10 @@ __all__ = [
     'NamespacePropertiesArgsDict',
     'NetworkPoliciesArgs',
     'NetworkPoliciesArgsDict',
+    'NodeCustomizationPropertiesArgs',
+    'NodeCustomizationPropertiesArgsDict',
+    'NodeCustomizationScriptArgs',
+    'NodeCustomizationScriptArgsDict',
     'NodeImageSelectionArgs',
     'NodeImageSelectionArgsDict',
     'PortRangeArgs',
@@ -2298,6 +2314,393 @@ class IstioServiceMeshArgs:
         pulumi.set(self, "revisions", value)
 
 
+if not MYPY:
+    class JWTAuthenticatorClaimMappingExpressionArgsDict(TypedDict):
+        """
+        The claim mapping expression for JWTAuthenticator.
+        """
+        expression: pulumi.Input[builtins.str]
+        """
+        The CEL expression used to access token claims.
+        """
+elif False:
+    JWTAuthenticatorClaimMappingExpressionArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class JWTAuthenticatorClaimMappingExpressionArgs:
+    def __init__(__self__, *,
+                 expression: pulumi.Input[builtins.str]):
+        """
+        The claim mapping expression for JWTAuthenticator.
+        :param pulumi.Input[builtins.str] expression: The CEL expression used to access token claims.
+        """
+        pulumi.set(__self__, "expression", expression)
+
+    @property
+    @pulumi.getter
+    def expression(self) -> pulumi.Input[builtins.str]:
+        """
+        The CEL expression used to access token claims.
+        """
+        return pulumi.get(self, "expression")
+
+    @expression.setter
+    def expression(self, value: pulumi.Input[builtins.str]):
+        pulumi.set(self, "expression", value)
+
+
+if not MYPY:
+    class JWTAuthenticatorClaimMappingsArgsDict(TypedDict):
+        """
+        The claim mappings for JWTAuthenticator.
+        """
+        username: pulumi.Input['JWTAuthenticatorClaimMappingExpressionArgsDict']
+        """
+        The expression to extract username attribute from the token claims.
+        """
+        extra: NotRequired[pulumi.Input[Sequence[pulumi.Input['JWTAuthenticatorExtraClaimMappingExpressionArgsDict']]]]
+        """
+        The expression to extract extra attribute from the token claims. When not provided, no extra attributes are extracted from the token claims.
+        """
+        groups: NotRequired[pulumi.Input['JWTAuthenticatorClaimMappingExpressionArgsDict']]
+        """
+        The expression to extract groups attribute from the token claims. When not provided, no groups are extracted from the token claims.
+        """
+        uid: NotRequired[pulumi.Input['JWTAuthenticatorClaimMappingExpressionArgsDict']]
+        """
+        The expression to extract uid attribute from the token claims. When not provided, no uid is extracted from the token claims.
+        """
+elif False:
+    JWTAuthenticatorClaimMappingsArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class JWTAuthenticatorClaimMappingsArgs:
+    def __init__(__self__, *,
+                 username: pulumi.Input['JWTAuthenticatorClaimMappingExpressionArgs'],
+                 extra: Optional[pulumi.Input[Sequence[pulumi.Input['JWTAuthenticatorExtraClaimMappingExpressionArgs']]]] = None,
+                 groups: Optional[pulumi.Input['JWTAuthenticatorClaimMappingExpressionArgs']] = None,
+                 uid: Optional[pulumi.Input['JWTAuthenticatorClaimMappingExpressionArgs']] = None):
+        """
+        The claim mappings for JWTAuthenticator.
+        :param pulumi.Input['JWTAuthenticatorClaimMappingExpressionArgs'] username: The expression to extract username attribute from the token claims.
+        :param pulumi.Input[Sequence[pulumi.Input['JWTAuthenticatorExtraClaimMappingExpressionArgs']]] extra: The expression to extract extra attribute from the token claims. When not provided, no extra attributes are extracted from the token claims.
+        :param pulumi.Input['JWTAuthenticatorClaimMappingExpressionArgs'] groups: The expression to extract groups attribute from the token claims. When not provided, no groups are extracted from the token claims.
+        :param pulumi.Input['JWTAuthenticatorClaimMappingExpressionArgs'] uid: The expression to extract uid attribute from the token claims. When not provided, no uid is extracted from the token claims.
+        """
+        pulumi.set(__self__, "username", username)
+        if extra is not None:
+            pulumi.set(__self__, "extra", extra)
+        if groups is not None:
+            pulumi.set(__self__, "groups", groups)
+        if uid is not None:
+            pulumi.set(__self__, "uid", uid)
+
+    @property
+    @pulumi.getter
+    def username(self) -> pulumi.Input['JWTAuthenticatorClaimMappingExpressionArgs']:
+        """
+        The expression to extract username attribute from the token claims.
+        """
+        return pulumi.get(self, "username")
+
+    @username.setter
+    def username(self, value: pulumi.Input['JWTAuthenticatorClaimMappingExpressionArgs']):
+        pulumi.set(self, "username", value)
+
+    @property
+    @pulumi.getter
+    def extra(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['JWTAuthenticatorExtraClaimMappingExpressionArgs']]]]:
+        """
+        The expression to extract extra attribute from the token claims. When not provided, no extra attributes are extracted from the token claims.
+        """
+        return pulumi.get(self, "extra")
+
+    @extra.setter
+    def extra(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['JWTAuthenticatorExtraClaimMappingExpressionArgs']]]]):
+        pulumi.set(self, "extra", value)
+
+    @property
+    @pulumi.getter
+    def groups(self) -> Optional[pulumi.Input['JWTAuthenticatorClaimMappingExpressionArgs']]:
+        """
+        The expression to extract groups attribute from the token claims. When not provided, no groups are extracted from the token claims.
+        """
+        return pulumi.get(self, "groups")
+
+    @groups.setter
+    def groups(self, value: Optional[pulumi.Input['JWTAuthenticatorClaimMappingExpressionArgs']]):
+        pulumi.set(self, "groups", value)
+
+    @property
+    @pulumi.getter
+    def uid(self) -> Optional[pulumi.Input['JWTAuthenticatorClaimMappingExpressionArgs']]:
+        """
+        The expression to extract uid attribute from the token claims. When not provided, no uid is extracted from the token claims.
+        """
+        return pulumi.get(self, "uid")
+
+    @uid.setter
+    def uid(self, value: Optional[pulumi.Input['JWTAuthenticatorClaimMappingExpressionArgs']]):
+        pulumi.set(self, "uid", value)
+
+
+if not MYPY:
+    class JWTAuthenticatorExtraClaimMappingExpressionArgsDict(TypedDict):
+        """
+        The extra claim mapping expression for JWTAuthenticator.
+        """
+        key: pulumi.Input[builtins.str]
+        """
+        The key of the extra attribute.
+        """
+        value_expression: pulumi.Input[builtins.str]
+        """
+        The CEL expression used to extract the value of the extra attribute.
+        """
+elif False:
+    JWTAuthenticatorExtraClaimMappingExpressionArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class JWTAuthenticatorExtraClaimMappingExpressionArgs:
+    def __init__(__self__, *,
+                 key: pulumi.Input[builtins.str],
+                 value_expression: pulumi.Input[builtins.str]):
+        """
+        The extra claim mapping expression for JWTAuthenticator.
+        :param pulumi.Input[builtins.str] key: The key of the extra attribute.
+        :param pulumi.Input[builtins.str] value_expression: The CEL expression used to extract the value of the extra attribute.
+        """
+        pulumi.set(__self__, "key", key)
+        pulumi.set(__self__, "value_expression", value_expression)
+
+    @property
+    @pulumi.getter
+    def key(self) -> pulumi.Input[builtins.str]:
+        """
+        The key of the extra attribute.
+        """
+        return pulumi.get(self, "key")
+
+    @key.setter
+    def key(self, value: pulumi.Input[builtins.str]):
+        pulumi.set(self, "key", value)
+
+    @property
+    @pulumi.getter(name="valueExpression")
+    def value_expression(self) -> pulumi.Input[builtins.str]:
+        """
+        The CEL expression used to extract the value of the extra attribute.
+        """
+        return pulumi.get(self, "value_expression")
+
+    @value_expression.setter
+    def value_expression(self, value: pulumi.Input[builtins.str]):
+        pulumi.set(self, "value_expression", value)
+
+
+if not MYPY:
+    class JWTAuthenticatorIssuerArgsDict(TypedDict):
+        """
+        The OIDC issuer details for JWTAuthenticator.
+        """
+        audiences: pulumi.Input[Sequence[pulumi.Input[builtins.str]]]
+        """
+        The set of acceptable audiences the JWT must be issued to. At least one is required. When multiple is set, AudienceMatchPolicy is used in API Server configuration.
+        """
+        url: pulumi.Input[builtins.str]
+        """
+        The issuer URL. The URL must begin with the scheme https and cannot contain a query string or fragment. This must match the "iss" claim in the presented JWT, and the issuer returned from discovery.
+        """
+elif False:
+    JWTAuthenticatorIssuerArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class JWTAuthenticatorIssuerArgs:
+    def __init__(__self__, *,
+                 audiences: pulumi.Input[Sequence[pulumi.Input[builtins.str]]],
+                 url: pulumi.Input[builtins.str]):
+        """
+        The OIDC issuer details for JWTAuthenticator.
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] audiences: The set of acceptable audiences the JWT must be issued to. At least one is required. When multiple is set, AudienceMatchPolicy is used in API Server configuration.
+        :param pulumi.Input[builtins.str] url: The issuer URL. The URL must begin with the scheme https and cannot contain a query string or fragment. This must match the "iss" claim in the presented JWT, and the issuer returned from discovery.
+        """
+        pulumi.set(__self__, "audiences", audiences)
+        pulumi.set(__self__, "url", url)
+
+    @property
+    @pulumi.getter
+    def audiences(self) -> pulumi.Input[Sequence[pulumi.Input[builtins.str]]]:
+        """
+        The set of acceptable audiences the JWT must be issued to. At least one is required. When multiple is set, AudienceMatchPolicy is used in API Server configuration.
+        """
+        return pulumi.get(self, "audiences")
+
+    @audiences.setter
+    def audiences(self, value: pulumi.Input[Sequence[pulumi.Input[builtins.str]]]):
+        pulumi.set(self, "audiences", value)
+
+    @property
+    @pulumi.getter
+    def url(self) -> pulumi.Input[builtins.str]:
+        """
+        The issuer URL. The URL must begin with the scheme https and cannot contain a query string or fragment. This must match the "iss" claim in the presented JWT, and the issuer returned from discovery.
+        """
+        return pulumi.get(self, "url")
+
+    @url.setter
+    def url(self, value: pulumi.Input[builtins.str]):
+        pulumi.set(self, "url", value)
+
+
+if not MYPY:
+    class JWTAuthenticatorPropertiesArgsDict(TypedDict):
+        """
+        The properties of JWTAuthenticator. For details on how to configure the properties of a JWT authenticator, please refer to the Kubernetes documentation: https://kubernetes.io/docs/reference/access-authn-authz/authentication/#using-authentication-configuration. Please note that not all fields available in the Kubernetes documentation are supported by AKS. For troubleshooting, please see https://aka.ms/aks-external-issuers-docs.
+        """
+        claim_mappings: pulumi.Input['JWTAuthenticatorClaimMappingsArgsDict']
+        """
+        The mappings that define how user attributes are extracted from the token claims.
+        """
+        issuer: pulumi.Input['JWTAuthenticatorIssuerArgsDict']
+        """
+        The JWT OIDC issuer details.
+        """
+        claim_validation_rules: NotRequired[pulumi.Input[Sequence[pulumi.Input['JWTAuthenticatorValidationRuleArgsDict']]]]
+        """
+        The rules that are applied to validate token claims to authenticate users. All the expressions must evaluate to true for validation to succeed.
+        """
+        user_validation_rules: NotRequired[pulumi.Input[Sequence[pulumi.Input['JWTAuthenticatorValidationRuleArgsDict']]]]
+        """
+        The rules that are applied to the mapped user before completing authentication. All the expressions must evaluate to true for validation to succeed.
+        """
+elif False:
+    JWTAuthenticatorPropertiesArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class JWTAuthenticatorPropertiesArgs:
+    def __init__(__self__, *,
+                 claim_mappings: pulumi.Input['JWTAuthenticatorClaimMappingsArgs'],
+                 issuer: pulumi.Input['JWTAuthenticatorIssuerArgs'],
+                 claim_validation_rules: Optional[pulumi.Input[Sequence[pulumi.Input['JWTAuthenticatorValidationRuleArgs']]]] = None,
+                 user_validation_rules: Optional[pulumi.Input[Sequence[pulumi.Input['JWTAuthenticatorValidationRuleArgs']]]] = None):
+        """
+        The properties of JWTAuthenticator. For details on how to configure the properties of a JWT authenticator, please refer to the Kubernetes documentation: https://kubernetes.io/docs/reference/access-authn-authz/authentication/#using-authentication-configuration. Please note that not all fields available in the Kubernetes documentation are supported by AKS. For troubleshooting, please see https://aka.ms/aks-external-issuers-docs.
+        :param pulumi.Input['JWTAuthenticatorClaimMappingsArgs'] claim_mappings: The mappings that define how user attributes are extracted from the token claims.
+        :param pulumi.Input['JWTAuthenticatorIssuerArgs'] issuer: The JWT OIDC issuer details.
+        :param pulumi.Input[Sequence[pulumi.Input['JWTAuthenticatorValidationRuleArgs']]] claim_validation_rules: The rules that are applied to validate token claims to authenticate users. All the expressions must evaluate to true for validation to succeed.
+        :param pulumi.Input[Sequence[pulumi.Input['JWTAuthenticatorValidationRuleArgs']]] user_validation_rules: The rules that are applied to the mapped user before completing authentication. All the expressions must evaluate to true for validation to succeed.
+        """
+        pulumi.set(__self__, "claim_mappings", claim_mappings)
+        pulumi.set(__self__, "issuer", issuer)
+        if claim_validation_rules is not None:
+            pulumi.set(__self__, "claim_validation_rules", claim_validation_rules)
+        if user_validation_rules is not None:
+            pulumi.set(__self__, "user_validation_rules", user_validation_rules)
+
+    @property
+    @pulumi.getter(name="claimMappings")
+    def claim_mappings(self) -> pulumi.Input['JWTAuthenticatorClaimMappingsArgs']:
+        """
+        The mappings that define how user attributes are extracted from the token claims.
+        """
+        return pulumi.get(self, "claim_mappings")
+
+    @claim_mappings.setter
+    def claim_mappings(self, value: pulumi.Input['JWTAuthenticatorClaimMappingsArgs']):
+        pulumi.set(self, "claim_mappings", value)
+
+    @property
+    @pulumi.getter
+    def issuer(self) -> pulumi.Input['JWTAuthenticatorIssuerArgs']:
+        """
+        The JWT OIDC issuer details.
+        """
+        return pulumi.get(self, "issuer")
+
+    @issuer.setter
+    def issuer(self, value: pulumi.Input['JWTAuthenticatorIssuerArgs']):
+        pulumi.set(self, "issuer", value)
+
+    @property
+    @pulumi.getter(name="claimValidationRules")
+    def claim_validation_rules(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['JWTAuthenticatorValidationRuleArgs']]]]:
+        """
+        The rules that are applied to validate token claims to authenticate users. All the expressions must evaluate to true for validation to succeed.
+        """
+        return pulumi.get(self, "claim_validation_rules")
+
+    @claim_validation_rules.setter
+    def claim_validation_rules(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['JWTAuthenticatorValidationRuleArgs']]]]):
+        pulumi.set(self, "claim_validation_rules", value)
+
+    @property
+    @pulumi.getter(name="userValidationRules")
+    def user_validation_rules(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['JWTAuthenticatorValidationRuleArgs']]]]:
+        """
+        The rules that are applied to the mapped user before completing authentication. All the expressions must evaluate to true for validation to succeed.
+        """
+        return pulumi.get(self, "user_validation_rules")
+
+    @user_validation_rules.setter
+    def user_validation_rules(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['JWTAuthenticatorValidationRuleArgs']]]]):
+        pulumi.set(self, "user_validation_rules", value)
+
+
+if not MYPY:
+    class JWTAuthenticatorValidationRuleArgsDict(TypedDict):
+        """
+        The validation rule for JWTAuthenticator.
+        """
+        expression: pulumi.Input[builtins.str]
+        """
+        The CEL expression used to validate the claim or attribute.
+        """
+        message: NotRequired[pulumi.Input[builtins.str]]
+        """
+        The validation error message.
+        """
+elif False:
+    JWTAuthenticatorValidationRuleArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class JWTAuthenticatorValidationRuleArgs:
+    def __init__(__self__, *,
+                 expression: pulumi.Input[builtins.str],
+                 message: Optional[pulumi.Input[builtins.str]] = None):
+        """
+        The validation rule for JWTAuthenticator.
+        :param pulumi.Input[builtins.str] expression: The CEL expression used to validate the claim or attribute.
+        :param pulumi.Input[builtins.str] message: The validation error message.
+        """
+        pulumi.set(__self__, "expression", expression)
+        if message is not None:
+            pulumi.set(__self__, "message", message)
+
+    @property
+    @pulumi.getter
+    def expression(self) -> pulumi.Input[builtins.str]:
+        """
+        The CEL expression used to validate the claim or attribute.
+        """
+        return pulumi.get(self, "expression")
+
+    @expression.setter
+    def expression(self, value: pulumi.Input[builtins.str]):
+        pulumi.set(self, "expression", value)
+
+    @property
+    @pulumi.getter
+    def message(self) -> Optional[pulumi.Input[builtins.str]]:
+        """
+        The validation error message.
+        """
+        return pulumi.get(self, "message")
+
+    @message.setter
+    def message(self, value: Optional[pulumi.Input[builtins.str]]):
+        pulumi.set(self, "message", value)
+
+
 if not MYPY:
     class KubeletConfigArgsDict(TypedDict):
         """
@@ -7073,6 +7476,184 @@ class NetworkPoliciesArgs:
         pulumi.set(self, "ingress", value)
 
 
+if not MYPY:
+    class NodeCustomizationPropertiesArgsDict(TypedDict):
+        """
+        The properties of the Node Customization resource.
+        """
+        container_images: NotRequired[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]
+        """
+        The list of container images to cache on nodes. See https://kubernetes.io/docs/concepts/containers/images/#image-names
+        """
+        customization_scripts: NotRequired[pulumi.Input[Sequence[pulumi.Input['NodeCustomizationScriptArgsDict']]]]
+        """
+        The scripts to customize the node before or after image capture.
+        """
+elif False:
+    NodeCustomizationPropertiesArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class NodeCustomizationPropertiesArgs:
+    def __init__(__self__, *,
+                 container_images: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 customization_scripts: Optional[pulumi.Input[Sequence[pulumi.Input['NodeCustomizationScriptArgs']]]] = None):
+        """
+        The properties of the Node Customization resource.
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] container_images: The list of container images to cache on nodes. See https://kubernetes.io/docs/concepts/containers/images/#image-names
+        :param pulumi.Input[Sequence[pulumi.Input['NodeCustomizationScriptArgs']]] customization_scripts: The scripts to customize the node before or after image capture.
+        """
+        if container_images is not None:
+            pulumi.set(__self__, "container_images", container_images)
+        if customization_scripts is not None:
+            pulumi.set(__self__, "customization_scripts", customization_scripts)
+
+    @property
+    @pulumi.getter(name="containerImages")
+    def container_images(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
+        """
+        The list of container images to cache on nodes. See https://kubernetes.io/docs/concepts/containers/images/#image-names
+        """
+        return pulumi.get(self, "container_images")
+
+    @container_images.setter
+    def container_images(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
+        pulumi.set(self, "container_images", value)
+
+    @property
+    @pulumi.getter(name="customizationScripts")
+    def customization_scripts(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['NodeCustomizationScriptArgs']]]]:
+        """
+        The scripts to customize the node before or after image capture.
+        """
+        return pulumi.get(self, "customization_scripts")
+
+    @customization_scripts.setter
+    def customization_scripts(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['NodeCustomizationScriptArgs']]]]):
+        pulumi.set(self, "customization_scripts", value)
+
+
+if not MYPY:
+    class NodeCustomizationScriptArgsDict(TypedDict):
+        """
+        Node customization script
+        """
+        execution_point: pulumi.Input[Union[builtins.str, 'ExecutionPoint']]
+        """
+        The stage at which the script is executed.
+        Specifying `NodeImageBuildTime` will ensure changes are persisted into the node image.
+        """
+        name: pulumi.Input[builtins.str]
+        """
+        The name for the customization script. 
+        Must be unique within the node customization resource.
+        Can only contain lowercase alphanumeric,'-' or '.' characters.
+        """
+        script_type: pulumi.Input[Union[builtins.str, 'ScriptType']]
+        """
+        The runtime environment for the script (e.g. Bash).
+        """
+        reboot_after: NotRequired[pulumi.Input[builtins.bool]]
+        """
+        Whether the node should reboot after successful script execution.
+        """
+        script: NotRequired[pulumi.Input[builtins.str]]
+        """
+        The script content to be executed in plain text. Do not include secrets.
+        """
+elif False:
+    NodeCustomizationScriptArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class NodeCustomizationScriptArgs:
+    def __init__(__self__, *,
+                 execution_point: pulumi.Input[Union[builtins.str, 'ExecutionPoint']],
+                 name: pulumi.Input[builtins.str],
+                 script_type: pulumi.Input[Union[builtins.str, 'ScriptType']],
+                 reboot_after: Optional[pulumi.Input[builtins.bool]] = None,
+                 script: Optional[pulumi.Input[builtins.str]] = None):
+        """
+        Node customization script
+        :param pulumi.Input[Union[builtins.str, 'ExecutionPoint']] execution_point: The stage at which the script is executed.
+               Specifying `NodeImageBuildTime` will ensure changes are persisted into the node image.
+        :param pulumi.Input[builtins.str] name: The name for the customization script. 
+               Must be unique within the node customization resource.
+               Can only contain lowercase alphanumeric,'-' or '.' characters.
+        :param pulumi.Input[Union[builtins.str, 'ScriptType']] script_type: The runtime environment for the script (e.g. Bash).
+        :param pulumi.Input[builtins.bool] reboot_after: Whether the node should reboot after successful script execution.
+        :param pulumi.Input[builtins.str] script: The script content to be executed in plain text. Do not include secrets.
+        """
+        pulumi.set(__self__, "execution_point", execution_point)
+        pulumi.set(__self__, "name", name)
+        pulumi.set(__self__, "script_type", script_type)
+        if reboot_after is not None:
+            pulumi.set(__self__, "reboot_after", reboot_after)
+        if script is not None:
+            pulumi.set(__self__, "script", script)
+
+    @property
+    @pulumi.getter(name="executionPoint")
+    def execution_point(self) -> pulumi.Input[Union[builtins.str, 'ExecutionPoint']]:
+        """
+        The stage at which the script is executed.
+        Specifying `NodeImageBuildTime` will ensure changes are persisted into the node image.
+        """
+        return pulumi.get(self, "execution_point")
+
+    @execution_point.setter
+    def execution_point(self, value: pulumi.Input[Union[builtins.str, 'ExecutionPoint']]):
+        pulumi.set(self, "execution_point", value)
+
+    @property
+    @pulumi.getter
+    def name(self) -> pulumi.Input[builtins.str]:
+        """
+        The name for the customization script. 
+        Must be unique within the node customization resource.
+        Can only contain lowercase alphanumeric,'-' or '.' characters.
+        """
+        return pulumi.get(self, "name")
+
+    @name.setter
+    def name(self, value: pulumi.Input[builtins.str]):
+        pulumi.set(self, "name", value)
+
+    @property
+    @pulumi.getter(name="scriptType")
+    def script_type(self) -> pulumi.Input[Union[builtins.str, 'ScriptType']]:
+        """
+        The runtime environment for the script (e.g. Bash).
+        """
+        return pulumi.get(self, "script_type")
+
+    @script_type.setter
+    def script_type(self, value: pulumi.Input[Union[builtins.str, 'ScriptType']]):
+        pulumi.set(self, "script_type", value)
+
+    @property
+    @pulumi.getter(name="rebootAfter")
+    def reboot_after(self) -> Optional[pulumi.Input[builtins.bool]]:
+        """
+        Whether the node should reboot after successful script execution.
+        """
+        return pulumi.get(self, "reboot_after")
+
+    @reboot_after.setter
+    def reboot_after(self, value: Optional[pulumi.Input[builtins.bool]]):
+        pulumi.set(self, "reboot_after", value)
+
+    @property
+    @pulumi.getter
+    def script(self) -> Optional[pulumi.Input[builtins.str]]:
+        """
+        The script content to be executed in plain text. Do not include secrets.
+        """
+        return pulumi.get(self, "script")
+
+    @script.setter
+    def script(self, value: Optional[pulumi.Input[builtins.str]]):
+        pulumi.set(self, "script", value)
+
+
 if not MYPY:
     class NodeImageSelectionArgsDict(TypedDict):
         """