Add swagger defination for IMDS restriction feature (#29044)

* Add swagger defination for IMDS restriction feature * update swagger * fix spell
Azure · May 11, 2024 · 02a95b8 · 02a95b8
1 parent 5506bda
commit 02a95b8
Showing 1 changed file with 26 additions and 0 deletions.
diff --git a/...ce-manager/Microsoft.ContainerService/aks/preview/2024-04-02-preview/managedClusters.json b/...ce-manager/Microsoft.ContainerService/aks/preview/2024-04-02-preview/managedClusters.json
@@ -4917,6 +4917,28 @@
         ]
       }
     },
+    "PodLinkLocalAccess": {
+      "type": "string",
+      "description": "Defines access to special link local addresses (IMDS and wire server) for pods with hostNetwork=false. If not specified, the default is 'IMDS'.",
+      "enum": [
+        "IMDS",
+        "None"
+      ],
+      "x-ms-enum": {
+        "name": "PodLinkLocalAccess",
+        "modelAsString": true,
+        "values": [
+          {
+            "value": "IMDS",
+            "description": "Pods with hostNetwork=false can access IMDS without restriction."
+          },
+          {
+            "value": "None",
+            "description": "Pods with hostNetwork=false cannot access IMDS and wire server."
+          }
+        ]
+      }
+    },
     "ManagedClusterWindowsProfile": {
       "type": "object",
       "properties": {
@@ -5149,6 +5171,10 @@
           "title": "The IP families used to specify IP versions available to the cluster.",
           "description": "IP families are used to determine single-stack or dual-stack clusters. For single-stack, the expected value is IPv4. For dual-stack, the expected values are IPv4 and IPv6."
         },
+        "podLinkLocalAccess": {
+          "$ref": "#/definitions/PodLinkLocalAccess",
+          "description": "Defines access to special link local addresses (IMDS and wire server) for pods with hostNetwork=false. if not specified, the default is 'IMDS'."
+        },
         "kubeProxyConfig": {
           "type": "object",
           "properties": {