| _key | core | string | |
| addon_features | core | array<string> | List of add-on features to enable on the cluster. |
| admin_password | core | string | VM admin user password. |
| admin_user_name | core | string | VM admin user name. |
| allocated_outbound_ports | core | int64 | The number of outbound ports allocated for SNAT for each node in the backend pool of the default load balancer. The default value is 0 which provides dynamic port allocation based on pool size. |
| allow_rdp_access | core | bool | Setting this to true enables RDP access to the VM. The default NSG rule opens RDP port to Internet which can be overridden with custom Network Security Rules. The default value for this setting is false. |
| application_type_versions_cleanup_policy | core | json | The policy used to clean up unused versions. |
| auto_generated_domain_name_label_scope | core | string | This property is the entry point to using a public CA cert for your cluster cert. It specifies the level of reuse allowed for the custom FQDN created, matching the subject of the public CA cert. |
| auxiliary_subnets | core | json | Auxiliary subnets for the cluster. |
| azure_active_directory | core | json | The AAD authentication settings of the cluster. |
| client_connection_port | core | int64 | The port used for client connections to the cluster. |
| clients | core | json | Client certificates that are allowed to manage the cluster. |
| cluster_certificate_thumbprints | core | array<string> | List of thumbprints of the cluster certificates. |
| cluster_code_version | core | string | The Service Fabric runtime version of the cluster. This property is required when **clusterUpgradeMode** is set to 'Manual'. To get list of available Service Fabric versions for new clusters use [ClusterVersion API](./ClusterVersion.md). To get the list of available version for existing clusters use **availableClusterVersions**. |
| cluster_id | core | string | A service generated unique identifier for the cluster resource. |
| cluster_state | core | string | The current state of the cluster. |
| cluster_upgrade_cadence | core | string | Indicates when new cluster runtime version upgrades will be applied after they are released. By default is Wave0. Only applies when **clusterUpgradeMode** is set to 'Automatic'. |
| cluster_upgrade_mode | core | string | |
| ddos_protection_plan_id | core | string | Specify the resource id of a DDoS network protection plan that will be associated with the virtual network of the cluster. |
| dns_name | core | string | The cluster dns name. |
| enable_auto_os_upgrade | core | bool | Enables automatic OS upgrade for node types created using OS images with version 'latest'. The default value for this setting is false. |
| enable_http_gateway_exclusive_auth_mode | core | bool | If true, token-based authentication is not allowed on the HttpGatewayEndpoint. This is required to support TLS versions 1.3 and above. If token-based authentication is used, HttpGatewayTokenAuthConnectionPort must be defined. |
| enable_ipv6 | core | bool | Setting this to true creates IPv6 address space for the default VNet used by the cluster. This setting cannot be changed once the cluster is created. The default value for this setting is false. |
| enable_service_public_ip | core | bool | Setting this to true will link the IPv4 address as the ServicePublicIP of the IPv6 address. It can only be set to True if IPv6 is enabled on the cluster. |
| etag | core | string | Azure resource etag. |
| fabric_settings | core | json | The list of custom fabric settings to configure the cluster. |
| fqdn | core | string | The fully qualified domain name associated with the public load balancer of the cluster. |
| http_gateway_connection_port | core | int64 | The port used for HTTP connections to the cluster. |
| http_gateway_token_auth_connection_port | core | int64 | The port used for token-auth based HTTPS connections to the cluster. Cannot be set to the same port as HttpGatewayEndpoint. |
| id | core | string | Azure resource identifier. |
| ip_tags | core | json | The list of IP tags associated with the default public IP address of the cluster. |
| ipv4_address | core | string | The IPv4 address associated with the public load balancer of the cluster. |
| ipv6_address | core | string | IPv6 address for the cluster if IPv6 is enabled. |
| load_balancing_rules | core | json | Load balancing rules that are applied to the public load balancer of the cluster. |
| location | core | string | Azure resource location. |
| name | core | string | Azure resource name. |
| network_security_rules | core | json | Custom Network Security Rules that are applied to the Virtual Network of the cluster. |
| provisioning_state | core | string | The provisioning state of the managed cluster resource. |
| public_i_pv6_prefix_id | core | string | Specify the resource id of a public IPv6 prefix that the load balancer will allocate a public IPv6 address from. This setting cannot be changed once the cluster is created. |
| public_ip_prefix_id | core | string | Specify the resource id of a public IPv4 prefix that the load balancer will allocate a public IPv4 address from. This setting cannot be changed once the cluster is created. |
| resource_group | core | string | |
| service_endpoints | core | json | Service endpoints for subnets in the cluster. |
| sku | core | json | The sku of the managed cluster |
| subnet_id | core | string | If specified, the node types for the cluster are created in this subnet instead of the default VNet. The **networkSecurityRules** specified for the cluster are also applied to this subnet. This setting cannot be changed once the cluster is created. |
| subscription_id | core | string | |
| subscription_name | core | string | |
| system_data | core | json | |
| tags | core | hstore | |
| type | core | string | Azure resource type. |
| upgrade_description | core | json | The policy to use when upgrading the cluster. |
| use_custom_vnet | core | bool | For new clusters, this parameter indicates that it uses Bring your own VNet, but the subnet is specified at node type level; and for such clusters, the subnetId property is required for node types. |
| zonal_resiliency | core | bool | Indicates if the cluster has zone resiliency. |
| zonal_update_mode | core | string | Indicates the update mode for Cross Az clusters. |
