az aks update
Update a managed Kubernetes cluster. Azure CLI reference
171 options Its page in the Azure CLI reference
Options
Show its 171 options
--aad-admin-group-object-idsComma-separated list of aad group object IDs that will be set as cluster admin.--aad-tenant-idThe ID of an Azure Active Directory tenant.--acns-advanced-networkpoliciesEnable advanced network policies (None, FQDN or L7) on a cluster when enabling advanced networking features with "--enable-acns".--acns-datapath-acceleration-modeSet the datapath acceleration mode for Azure Container Networking Solution (ACNS) Performance.--acns-transit-encryption-typeSet transit encryption type for ACNS security.--aks-custom-headersComma-separated key-value pairs to specify custom headers.--ampls-resource-idResource ID of Azure Monitor Private Link scope for Monitoring Addon.--api-server-authorized-ip-rangesComma-separated list of authorized apiserver IP ranges.--apiserver-subnet-idThe ID of a subnet in an existing VNet into which to assign control plane apiserver pods(requires --enable-apiserver-vnet-integration)--assign-identitySpecify an existing user assigned identity to manage cluster resource group.--assign-kubelet-identityUpdate cluster's kubelet identity to an existing user assigned identity.--assignee-principal-type, -tUse this parameter in conjunction with --attach-acr to explicitly set the principal type in the ACR role assignment.--attach-acrGrant the 'acrpull' role assignment to the ACR specified by name or resource ID.--auto-upgrade-channelSpecify the upgrade channel for autoupgrade.--azure-container-storage-nodepoolsdefine the comma separated nodepool list to install azure container storage--azure-keyvault-kms-key-idIdentifier of Azure Key Vault key.--azure-keyvault-kms-key-vault-network-accessNetwork Access of Azure Key Vault.--azure-keyvault-kms-key-vault-resource-idResource ID of Azure Key Vault.--azure-monitor-workspace-resource-idResource ID of the Azure Monitor Workspace--bootstrap-artifact-sourceConfigure artifact source when bootstraping the cluster.--bootstrap-container-registry-resource-idConfigure container registry resource ID.--cluster-autoscaler-profile, --ca-profileComma-separated list of key=value pairs for configuring cluster autoscaler.--container-storage-versionset azure container storage version, the latest version will be installed by default--custom-ca-trust-certificates, --ca-certsPath to a file containing up to 10 blank line separated certificates.--data-collection-settingsPath to JSON file containing data collection settings for Monitoring addon.--defender-configPath to JSON file containing Microsoft Defender profile configurations.--detach-acrDisable the 'acrpull' role assignment to the ACR specified by name or resource ID.--disable-acns-observabilityUsed to disable advanced networking observability features on a clusters when enabling advanced networking features with "--enable-acns".--disable-acns-securityUsed to disable advanced networking security features on a clusters when enabling advanced networking features with "--enable-acns".--disable-acnsDisable all advanced networking functionalities on a cluster.--disable-ahubDisable Azure Hybrid User Benefits (AHUB) feature for cluster.--disable-ai-toolchain-operatorDisable AI toolchain operator.--disable-app-routing-istio, --disable-ariDisable Gateway API based ingress on App Routing via Istio.--disable-azure-container-storagedisable azure container storage or any one of the storage pool types.--disable-azure-keyvault-kmsDisable Azure KeyVault Key Management Service.--disable-azure-monitor-app-monitoringDisable Azure Monitor Application Monitoring auto-instrumentation for a Kubernetes cluster.--disable-azure-monitor-logsDisable Azure Monitor logs (Container Insights) for the cluster.--disable-azure-monitor-metricsDisable Azure Monitor Metrics Profile.--disable-azure-rbacDisable Azure RBAC to control authorization checks on cluster.--disable-blob-driverDisable AzureBlob CSI Driver.--disable-cluster-autoscaler, -dDisable cluster autoscaler.--disable-container-network-logsDisable container network log collection functionalities on a cluster.--disable-control-plane-metrics, --disable-cp-metricsDisable collection of Azure Monitor managed Prometheus control plane metrics.--disable-cost-analysisDisable exporting Kubernetes Namespace and Deployment details to the Cost Analysis views in the Azure portal.--disable-defenderDisable defender profile.--disable-disk-driverDisable AzureDisk CSI Driver.--disable-file-driverDisable AzureFile CSI Driver.--disable-force-upgradeDisable forceUpgrade cluster upgrade settings override.--disable-gateway-apiDisable managed installation of Gateway API CRDs.--disable-http-proxyDisable HTTP Proxy Configuration on the cluster.--disable-image-cleanerDisable ImageCleaner Service.--disable-kedaDisable KEDA workload auto-scaler.--disable-local-accountsIf set to true, getting static credential will be disabled for this cluster.--disable-opentelemetry-logs-tracesDisable the OpenTelemetry (OTLP) logs and traces receiver.--disable-opentelemetry-metricsDisable the OpenTelemetry (OTLP) metrics receiver.--disable-private-clusterDisable private cluster for apiserver vnet integration cluster.--disable-prometheus-metrics-scrapingDisable Prometheus metrics scraping by the Azure Monitor agent.--disable-public-fqdnDisable public fqdn feature for private cluster.--disable-run-commandDisable Run command feature for the cluster.--disable-secret-rotationDisable secret rotation.--disable-snapshot-controllerDisable CSI Snapshot Controller.--disable-static-egress-gatewayDisable Static Egress Gateway addon to the cluster.--disable-upstream-kubescheduler-user-configurationDisable user-defined scheduler configuration for kube-scheduler upstream on the cluster.--disable-vpaDisable vertical pod autoscaler for cluster.--disable-windows-gmsaDisable Windows gmsa on cluster.--disable-workload-identityDisable workload identity addon.--enable-aadEnable managed AAD feature for cluster.--enable-acnsEnable advanced network functionalities on a cluster.--enable-ahubEnable Azure Hybrid User Benefits (AHUB) feature for cluster.--enable-ai-toolchain-operatorEnable AI toolchain operator to the cluster--enable-apiserver-vnet-integrationEnable integration of user vnet with control plane apiserver pods.--enable-app-routing-istio, --enable-ariEnable Gateway API based ingress on App Routing via Istio without service mesh functionality.--enable-azure-container-storageenable azure container storage.--enable-azure-keyvault-kmsEnable Azure KeyVault Key Management Service.--enable-azure-monitor-app-monitoringEnable Azure Monitor Application Monitoring auto-instrumentation for a Kubernetes cluster.--enable-azure-monitor-logsEnable Azure Monitor logs (Container Insights) for the cluster using managed identity authentication.--enable-azure-monitor-metricsEnable a kubernetes cluster with the Azure Monitor managed service for Prometheus integration.--enable-azure-rbacEnable Azure RBAC to control authorization checks on cluster.--enable-blob-driverEnable AzureBlob CSI Driver.--enable-cluster-autoscaler, -eEnable cluster autoscaler.--enable-container-network-logsEnable container network log collection functionalities on a cluster.--enable-control-plane-metrics, --enable-cp-metricsEnable collection of Azure Monitor managed Prometheus control plane metrics for managed cluster components (controlplane-apiserver and controlplane-etcd targets by default).--enable-cost-analysisEnable exporting Kubernetes Namespace and Deployment details to the Cost Analysis views in the Azure portal.--enable-defenderEnable Microsoft Defender security profile.--enable-disk-driverEnable AzureDisk CSI Driver.--enable-file-driverEnable AzureFile CSI Driver.--enable-force-upgradeEnable forceUpgrade cluster upgrade settings override.--enable-gateway-apiEnable managed installation of Gateway API CRDs from the standard release channel.--enable-high-log-scale-modeEnable High Log Scale Mode for Container Logs.--enable-http-proxyEnable HTTP Proxy Configuration on the cluster.--enable-image-cleanerEnable ImageCleaner Service.--enable-kedaEnable KEDA workload auto-scaler.--enable-local-accountsIf set to true, will enable getting static credential for this cluster.--enable-managed-identityUpdate current cluster to use managed identity to manage cluster resource group.--enable-msi-auth-for-monitoringEnable Managed Identity Auth for Monitoring addon.--enable-oidc-issuerEnable OIDC issuer.--enable-opentelemetry-logs-tracesEnable the OpenTelemetry (OTLP) logs and traces receiver.--enable-opentelemetry-metricsEnable the OpenTelemetry (OTLP) metrics receiver.--enable-private-clusterEnable private cluster for apiserver vnet integration cluster.--enable-prometheus-metrics-scrapingEnable Prometheus metrics scraping by the Azure Monitor agent.--enable-public-fqdnEnable public fqdn feature for private cluster.--enable-run-commandEnable Run command feature for the cluster.--enable-secret-rotationEnable secret rotation.--enable-snapshot-controllerEnable Snapshot Controller.--enable-static-egress-gatewayEnable Static Egress Gateway addon to the cluster.--enable-syslogEnable syslog data collection for Monitoring addon.--enable-upstream-kubescheduler-user-configurationEnable user-defined scheduler configuration for kube-scheduler upstream on the cluster.--enable-vpaEnable vertical pod autoscaler for cluster.--enable-windows-gmsaEnable Windows gmsa on cluster.--enable-windows-recording-rulesEnable Windows Recording Rules when enabling the Azure Monitor Metrics addon--enable-workload-identityEnable workload identity addon.--ephemeral-disk-nvme-perf-tier, --ephemeral-disk-volume-typeset ephemeral disk volume type for azure container storage--gmsa-dns-serverSpecify DNS server for Windows gmsa on cluster.--gmsa-root-domain-nameSpecify root domain name for Windows gmsa on cluster.--grafana-resource-idResource ID of the Azure Managed Grafana Workspace--http-proxy-configHTTP Proxy configuration for this cluster.--if-matchThe value provided will be compared to the ETag of the managed cluster, if it matches the operation will proceed.--if-none-matchSet to '*' to allow a new cluster to be created, but to prevent updating an existing cluster.--image-cleaner-interval-hoursImageCleaner scanning interval.--ip-familiesA comma-separated list of IP versions to use for cluster networking.--k8s-support-planChoose from "KubernetesOfficial" or "AKSLongTermSupport", with "AKSLongTermSupport" you get 1 extra year of CVE patchs.--kms-infrastructure-encryptionEnable encryption at rest of Kubernetes resource objects using service-managed keys.--ksm-metric-annotations-allow-list, --ksm-metric-labels-allow-listComma-separated list of additional Kubernetes label keys that will be used in the resource' labels metric.--load-balancer-backend-pool-typeLoad balancer backend pool type.--load-balancer-idle-timeoutLoad balancer idle timeout in minutes.--load-balancer-managed-outbound-ip-countLoad balancer managed outbound IP count.--load-balancer-managed-outbound-ipv6-countLoad balancer managed outbound IPv6 IP count.--load-balancer-outbound-ip-prefixesLoad balancer outbound IP prefix resource IDs.--load-balancer-outbound-ipsLoad balancer outbound IP resource IDs.--load-balancer-outbound-portsLoad balancer outbound allocated ports.--load-balancer-skuAzure Load Balancer SKU selection for your cluster.--max-countMaximum nodes count used for autoscaler, when "--enable-cluster-autoscaler" specified.--migrate-vmas-to-vmsMigrate cluster with VMAS node pool to VMS node pool.--min-countMinimum nodes count used for autoscaler, when "--enable-cluster-autoscaler" specified.--nat-gateway-idle-timeoutNAT gateway idle timeout in minutes.--nat-gateway-managed-outbound-ip-countNAT gateway managed outbound IP count.--nat-gateway-managed-outbound-ipv6-count, --nat-gw-ipv6-countNAT gateway managed outbound IPv6 count.--nat-gateway-outbound-ip-prefixes, --nat-gw-prefixesComma-separated public IP prefix resource IDs for the cluster NAT gateway.--nat-gateway-outbound-ips, --nat-gw-ipsComma-separated public IP resource IDs for the cluster NAT gateway.--network-dataplaneThe network dataplane to use.--network-plugin-modeUpdate the mode of a network plugin to migrate to a different pod networking setup.--network-pluginThe Kubernetes network plugin to use.--network-policyUpdate Network Policy Engine.--node-os-upgrade-channelManner in which the OS on your nodes is updated.--node-provisioning-default-poolsThe set of default Karpenter NodePools configured for node provisioning.--node-provisioning-modeSet the node provisioning mode of the cluster.--nodepool-labelsThe node labels for all node pool.--nodepool-taintsThe node taints for all node pool.--nrg-lockdown-restriction-levelRestriction level on the managed node resource group.--opentelemetry-logs-traces-port-grpcgRPC port for the OpenTelemetry logs and traces receiver.--opentelemetry-logs-traces-port-httpHTTP/protobuf port for the OpenTelemetry logs and traces receiver.--opentelemetry-metrics-port-grpcgRPC port for the OpenTelemetry metrics receiver.--opentelemetry-metrics-port-httpHTTP/protobuf port for the OpenTelemetry metrics receiver.--outbound-type-skuSKU of the managed NAT Gateway (Standard or StandardV2).--outbound-typeHow outbound traffic will be configured for a cluster.--pod-cidrUpdate the pod CIDR for a cluster.--private-dns-zoneThe private dns zone mode for private cluster.--rotation-poll-intervalSet interval of rotation poll.--skuSpecify SKU name for managed clusters.--storage-pool-nameset storage pool name for azure container storage--storage-pool-optionset ephemeral disk storage pool option for azure container storage--storage-pool-sizeset storage pool size for azure container storage--storage-pool-skuset azure disk type storage pool sku for azure container storage--syslog-portTCP port that the Azure Monitor agent listens on for syslog data.--tagsThe tags of the managed cluster.--tierSpecify SKU tier for managed clusters.--update-cluster-autoscaler, -uUpdate min-count or max-count for cluster autoscaler.--upgrade-override-untilUntil when the cluster upgradeSettings overrides are effective.--windows-admin-passwordUser account password to use on windows node VMs.--workspace-resource-idThe resource ID of an existing Log Analytics Workspace to use for storing monitoring data.--yes, -yDo not prompt for confirmation.