| _key | core | string | |
| aad_profile | core | json | The Azure Active Directory configuration. |
| agent_pool_profiles | core | json | The agent pool properties. |
| api_server_access_profile | core | json | The access profile for managed cluster API server. |
| auto_scaler_profile | core | json | Parameters to be applied to the cluster-autoscaler when enabled |
| auto_upgrade_profile | core | json | The auto upgrade configuration. |
| azure_monitor_profile | core | json | |
| azure_portal_fqdn | core | string | The Azure Portal requires certain Cross-Origin Resource Sharing (CORS) headers to be sent in some responses, which Kubernetes APIServer doesn't handle by default. This special FQDN supports CORS, allowing the Azure Portal to function properly. |
| bootstrap_profile | core | json | Profile of the cluster bootstrap configuration. |
| current_kubernetes_version | core | string | If kubernetesVersion was a fully specified version <major.minor.patch>, this field will be exactly equal to it. If kubernetesVersion was <major.minor>, this field will contain the full <major.minor.patch> version being used. |
| disable_local_accounts | core | bool | If set to true, getting static credentials will be disabled for this cluster. This must only be used on Managed Clusters that are AAD enabled. For more details see [disable local accounts](https://docs.microsoft.com/azure/aks/managed-aad#disable-local-accounts-preview). |
| disk_encryption_set_id | core | string | This is of the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Compute/diskEncryptionSets/{encryptionSetName}' |
| dns_prefix | core | string | This cannot be updated once the Managed Cluster has been created. |
| e_tag | core | string | Unique read-only string used to implement optimistic concurrency. The eTag value will change when the resource is updated. Specify an if-match or if-none-match header with the eTag value for a subsequent request to enable optimistic concurrency per the normal etag convention. |
| enable_pod_security_policy | core | bool | (DEPRECATED) Whether to enable Kubernetes pod security policy (preview). PodSecurityPolicy was deprecated in Kubernetes v1.21, and removed from Kubernetes in v1.25. Learn more at https://aka.ms/k8s/psp and https://aka.ms/aks/psp. |
| enable_rbac | core | bool | Whether to enable Kubernetes Role-Based Access Control. |
| fqdn | core | string | The FQDN of the master pool. |
| fqdn_subdomain | core | string | This cannot be updated once the Managed Cluster has been created. |
| http_proxy_config | core | json | Configurations for provisioning the cluster with HTTP proxy servers. |
| id | core | string | Fully qualified resource ID for the resource. E.g. "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}" |
| identity | core | json | The identity of the managed cluster, if configured. |
| ingress_profile | core | json | Ingress profile for the managed cluster. |
| kubernetes_version | core | string | Both patch version <major.minor.patch> (e.g. 1.20.13) and <major.minor> (e.g. 1.20) are supported. When <major.minor> is specified, the latest supported GA patch version is chosen automatically. Updating the cluster with the same <major.minor> once it has been created (e.g. 1.14.x -> 1.14) will not trigger an upgrade, even if a newer patch version is available. When you upgrade a supported AKS cluster, Kubernetes minor versions cannot be skipped. All upgrades must be performed sequentially by major version number. For example, upgrades between 1.14.x -> 1.15.x or 1.15.x -> 1.16.x are allowed, however 1.14.x -> 1.16.x is not allowed. See [upgrading an AKS cluster](https://docs.microsoft.com/azure/aks/upgrade-cluster) for more details. |
| linux_profile | core | json | The profile for Linux VMs in the Managed Cluster. |
| location | core | string | The geo-location where the resource lives |
| max_agent_pools | core | int64 | The max number of agent pools for the managed cluster. |
| metrics_profile | core | json | Optional cluster metrics configuration. |
| name | core | string | The name of the resource |
| network_profile | core | json | The network configuration profile. |
| node_resource_group | core | string | The name of the resource group containing agent pool nodes. |
| node_resource_group_profile | core | json | Profile of the node resource group configuration. |
| oidc_issuer_profile | core | json | The OIDC issuer profile of the Managed Cluster. |
| pod_identity_profile | core | json | See [use AAD pod identity](https://docs.microsoft.com/azure/aks/use-azure-ad-pod-identity) for more details on AAD pod identity integration. |
| power_state | core | json | The Power State of the cluster. |
| private_fqdn | core | string | The FQDN of private cluster. |
| private_link_resources | core | json | Private link resources associated with the cluster. |
| provisioning_state | core | string | The current provisioning state. |
| public_network_access | core | string | Allow or deny public network access for AKS |
| resource_group | core | string | |
| resource_uid | core | string | The resourceUID uniquely identifies ManagedClusters that reuse ARM ResourceIds (i.e: create, delete, create sequence) |
| security_profile | core | json | Security profile for the managed cluster. |
| service_mesh_profile | core | json | |
| service_principal_profile | core | json | Information about a service principal identity for the cluster to use for manipulating Azure APIs. |
| sku | core | json | The managed cluster SKU. |
| storage_profile | core | json | Storage profile for the managed cluster. |
| subscription_id | core | string | |
| subscription_name | core | string | |
| support_plan | core | string | The support plan for the Managed Cluster. If unspecified, the default is 'KubernetesOfficial'. |
| system_data | core | json | Azure Resource Manager metadata containing createdBy and modifiedBy information. |
| tags | core | hstore_csv | |
| type | core | string | The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts" |
| upgrade_settings | core | json | Settings for upgrading a cluster. |
| windows_profile | core | json | The profile for Windows VMs in the Managed Cluster. |
| workload_auto_scaler_profile | core | json | |
