category: IT Services provider: Microsoft commonfields: id: Azure Kubernetes Services version: -1 configuration: - defaultvalue: Worldwide display: Azure Cloud name: azure_cloud type: 15 options: - Worldwide - US GCC - US GCC-High - DoD - Germany - China - Custom additionalinfo: When selecting the Custom option, the Azure AD endpoint parameter must be filled. More information about National clouds can be found here - https://xsoar.pan.dev/docs/reference/articles/microsoft-integrations---authentication#using-national-cloud section: Connect advanced: true required: false - display: Application ID name: app_id defaultvalue: ab217a43-e09b-4f80-ae93-482fc7a3d1a3 type: 0 required: false section: Connect - display: Authentication Type name: auth_type required: true type: 15 additionalinfo: Type of authentication. Can be Authorization Code Flow (recommended), Device Code Flow, Azure Managed Identities or Client Credentials flow. defaultvalue: Device Code options: - Authorization Code - Device Code - Azure Managed Identities - Client Credentials section: Connect - display: Tenant ID name: tenant_id type: 0 required: false section: Connect - display: Client Secret name: credentials type: 9 displaypassword: Client Secret hiddenusername: true required: false section: Connect - display: Application redirect URI name: redirect_uri type: 0 required: false section: Connect - additionalinfo: For user-auth mode - received from the authorization step. See Detailed Instructions (?) section displaypassword: Authorization code name: auth_code hiddenusername: true type: 9 display: Authorization code required: false section: Connect - name: managed_identities_client_id type: 9 additionalinfo: The Managed Identities client ID for authentication. Relevant only if the integration is running on Azure VM. displaypassword: Azure Managed Identities Client ID hiddenusername: true required: false section: Connect advanced: true - display: Default Subscription ID name: subscription_id required: true type: 0 additionalinfo: There are two options to set the specified value, either in the configuration or directly within the commands. However, setting values in both places will cause an override by the command value. section: Connect - display: Default Resource Group Name name: resource_group_name required: true type: 0 section: Connect additionalinfo: There are two options to set the specified value, either in the configuration or directly within the commands. However, setting values in both places will cause an override by the command value. - display: Trust any certificate (not secure) name: insecure type: 8 required: false section: Connect advanced: true - display: Use system proxy settings name: proxy type: 8 required: false section: Connect advanced: true - defaultvalue: https://login.microsoftonline.com display: Azure AD endpoint name: azure_ad_endpoint type: 0 advanced: true additionalinfo: Use this option when required to customize the URL to the Entra ID endpoint. More information can be found here - https://xsoar.pan.dev/docs/reference/articles/microsoft-integrations---authentication#using-national-cloud section: Connect required: false description: Deploy and manage containerized applications with a fully managed Kubernetes service. display: Azure Kubernetes Services name: Azure Kubernetes Services script: commands: - description: Tests the connectivity to Azure. name: azure-ks-auth-test - description: Run this command to start the authorization process and follow the instructions in the command results. name: azure-ks-auth-start - description: Run this command to complete the authorization process. Should be used after running the azure-ks-auth-start command. name: azure-ks-auth-complete - description: Run this command if for some reason you need to rerun the authentication process. name: azure-ks-auth-reset - description: Gets a list of managed clusters in the specified subscription. name: azure-ks-clusters-list outputs: - contextPath: AzureKS.ManagedCluster.id description: Resource ID. type: String - contextPath: AzureKS.ManagedCluster.location description: Resource location. type: String - contextPath: AzureKS.ManagedCluster.name description: Resource name. type: String - contextPath: AzureKS.ManagedCluster.tags description: Resource tags. type: Unknown - contextPath: AzureKS.ManagedCluster.type description: Resource type. type: String - contextPath: AzureKS.ManagedCluster.properties.provisioningState description: The current deployment or provisioning state, which only appears in the response. type: String - contextPath: AzureKS.ManagedCluster.properties.kubernetesVersion description: Version of Kubernetes specified when creating the managed cluster. type: String - contextPath: AzureKS.ManagedCluster.properties.maxAgentPools description: The maximum number of agent pools for the managed cluster. type: Number - contextPath: AzureKS.ManagedCluster.properties.dnsPrefix description: DNS prefix specified when creating the managed cluster. type: String - contextPath: AzureKS.ManagedCluster.properties.fqdn description: FQDN for the master pool. type: String - contextPath: AzureKS.ManagedCluster.properties.agentPoolProfiles.name description: Unique name of the agent pool profile in the context of the subscription and resource group. type: String - contextPath: AzureKS.ManagedCluster.properties.agentPoolProfiles.count description: Number of agents (VMs) to host Docker containers. Allowed values must be in the range of 0 to 100 (inclusive) for user pools and in the range of 1 to 100 (inclusive) for system pools. type: Number - contextPath: AzureKS.ManagedCluster.properties.agentPoolProfiles.vmSize description: Size of agent VMs. type: String - contextPath: AzureKS.ManagedCluster.properties.agentPoolProfiles.maxPods description: Maximum number of pods that can run on a node. type: Number - contextPath: AzureKS.ManagedCluster.properties.agentPoolProfiles.osType description: The operating system type, either Linux or Windows. type: String - contextPath: AzureKS.ManagedCluster.properties.agentPoolProfiles.provisioningState description: The current deployment or provisioning state. type: String - contextPath: AzureKS.ManagedCluster.properties.agentPoolProfiles.orchestratorVersion description: Version of the orchestrator specified when creating the managed cluster. type: String - contextPath: AzureKS.ManagedCluster.properties.linuxProfile.adminUsername description: The name of the administrator account. type: String - contextPath: AzureKS.ManagedCluster.properties.linuxProfile.ssh.publicKeys.keyData description: Certificate public key used to authenticate with VMs through SSH. type: String - contextPath: AzureKS.ManagedCluster.properties.servicePrincipalProfile.clientId description: The ID for the service principal. type: String - contextPath: AzureKS.ManagedCluster.properties.nodeResourceGroup description: Name of the resource group containing agent pool nodes. type: String - contextPath: AzureKS.ManagedCluster.properties.enableRBAC description: Whether to enable Kubernetes Role-Based Access Control (RBAC). type: Boolean - contextPath: AzureKS.ManagedCluster.properties.diskEncryptionSetID description: Resource ID of the disk encryption set to use for enabling encryption at rest. type: String - contextPath: AzureKS.ManagedCluster.properties.networkProfile.networkPlugin description: Network plugin used for building Kubernetes network. type: String - contextPath: AzureKS.ManagedCluster.properties.networkProfile.podCidr description: A CIDR notation IP range from which to assign pod IPs when kubenet is used. type: String - contextPath: AzureKS.ManagedCluster.properties.networkProfile.serviceCidr description: A CIDR notation IP range from which to assign service cluster IPs. type: String - contextPath: AzureKS.ManagedCluster.properties.networkProfile.dnsServiceIP description: An IP address assigned to the Kubernetes DNS service. type: String - contextPath: AzureKS.ManagedCluster.properties.networkProfile.dockerBridgeCidr description: A CIDR notation IP range assigned to the Docker bridge network. type: String - contextPath: AzureKS.ManagedCluster.properties.addonProfiles.omsagent.enabled description: Whether the Operations Management Suite Agent is enabled. type: Boolean - contextPath: AzureKS.ManagedCluster.properties.addonProfiles.omsagent.config.logAnalyticsWorkspaceResourceID description: The resource ID of an existing Log Analytics Workspace to use for storing monitoring data. type: String - contextPath: AzureKS.ManagedCluster.properties.addonProfiles.httpApplicationRouting.enabled description: Whether the ingress is configured with automatic public DNS name creation. type: Boolean - contextPath: AzureKS.ManagedCluster.properties.addonProfiles.httpApplicationRouting.config.HTTPApplicationRoutingZoneName description: The subscription DNS zone name. type: String arguments: - default: false isArray: false description: "The subscription ID. Note: This argument will override the instance parameter ‘Default Subscription ID'." name: subscription_id - arguments: - description: "The subscription ID. Note: This argument will override the instance parameter ‘Default Subscription ID'." name: subscription_id required: false type: String isArray: false - description: "The resource group name. Note: This argument will override the instance parameter ‘Default Resource Group Name'." name: resource_group_name required: false type: String isArray: false - description: 'The name of the managed cluster resource. Can be retrieved using the azure-ks-clusters-list command.' name: resource_name default: false isArray: false required: true - auto: PREDEFINED description: 'Resource location, Can be retrieved using the azure-ks-clusters-list command.' name: location predefined: - 'australiacentral' - 'australiacentral2' - australiaeast - australiasoutheast - brazilse - brazilsouth - canadacentral - canadaeast - centralfrance - centralindia - centralus - centraluseuap - eastasia - eastus - eastus2 - eastus2euap - germanyn - germanywc - japaneast - japanwest - koreacentral - koreasouth - northcentralus - northeurope - norwaye - norwayw - southafricanorth - southafricawest - southcentralus - southeastasia - southfrance - southindia - switzerlandn - switzerlandw - uaecentral - uaenorth - uknorth - uksouth - uksouth2 - ukwest - westcentralus - westeurope - westindia - westus - westus2 required: true - description: 'Whether to configure ingress with automatic public DNS name creation. Possible values: "true" and "false".' name: http_application_routing_enabled auto: PREDEFINED predefined: - 'true' - 'false' - auto: PREDEFINED description: 'Whether to turn on Log Analytics monitoring. If enabled and monitoring_resource_id is not specified, will use the current configured workspace resource ID. Possible values: "true" and "false".' name: monitoring_agent_enabled predefined: - 'true' - 'false' - description: The name of an existing Log Analytics workspace to use for storing monitoring data. Can be retrieved in the Log Analytics workspace from the Azure portal. name: monitoring_resource_name description: Updates a managed cluster with the specified configuration. name: azure-ks-cluster-addon-update - description: Generate the login url used for Authorization code flow. name: azure-ks-generate-login-url arguments: [] - description: Gets all subscriptions for a tenant. name: azure-ks-subscriptions-list outputs: - contextPath: AzureKS.Subscription.id description: 'The unique identifier of the Azure Kubernetes subscription.' type: String - contextPath: AzureKS.Subscription.authorizationSource description: 'The source of authorization for the Azure Kubernetes subscription.' type: String - contextPath: AzureKS.Subscription.managedByTenants description: 'The tenants that have access to manage the Azure Kubernetes subscription.' type: Unknown - contextPath: AzureKS.Subscription.subscriptionId description: 'The ID of the Azure Kubernetes subscription.' type: String - contextPath: AzureKS.Subscription.tenantId description: 'The ID of the tenant associated with the Azure Kubernetes subscription.' type: String - contextPath: AzureKS.Subscription.displayName description: 'The display name of the Azure Kubernetes subscription.' type: String - contextPath: AzureKS.Subscription.state description: 'The current state of the Azure Kubernetes subscription.' type: String - contextPath: AzureKS.Subscription.subscriptionPolicies.locationPlacementId description: 'The ID of the location placement policy for the Azure Kubernetes subscription.' type: String - contextPath: AzureKS.Subscription.subscriptionPolicies.quotaId description: 'The ID of the quota policy for the Azure Kubernetes subscription.' type: String - contextPath: AzureKS.Subscription.subscriptionPolicies.spendingLimit description: 'The spending limit policy for the Azure Kubernetes subscription.' type: String - contextPath: AzureKS.Subscription.count.type description: 'The type of the Azure Kubernetes subscription count.' type: String - contextPath: AzureKS.Subscription.count.value description: 'The value of the Azure Kubernetes subscription count.' type: Number - description: Gets all resource groups for a subscription. name: azure-ks-resource-group-list arguments: - default: false description: "The subscription ID. Note: This argument will override the instance parameter ‘Default Subscription ID'." isArray: false name: subscription_id required: false secret: false - name: limit description: Limit on the number of resource groups to return. required: false defaultValue: 50 - default: false name: tag description: A single tag in the form of `{"Tag Name":"Tag Value"}` to filter the list by. required: false outputs: - contextPath: AzureKS.ResourceGroup.id description: 'The unique identifier of the Azure Kubernetes resource group.' type: String - contextPath: AzureKS.ResourceGroup.name description: 'The name of the Azure Kubernetes resource group.' type: String - contextPath: AzureKS.ResourceGroup.type description: 'The type of the Azure Kubernetes resource group.' type: String - contextPath: AzureKS.ResourceGroup.location description: 'The location of the Azure Kubernetes resource group.' type: String - contextPath: AzureKS.ResourceGroup.properties.provisioningState description: 'The provisioning state of the Azure Kubernetes resource group.' type: String - contextPath: AzureKS.ResourceGroup.tags.Owner description: 'The owner tag of the Azure Kubernetes resource group.' type: String - contextPath: AzureKS.ResourceGroup.tags description: 'The tags associated with the Azure Kubernetes resource group.' type: Unknown - contextPath: AzureKS.ResourceGroup.tags.Name description: 'The name tag of the Azure Kubernetes resource group.' type: String - contextPath: AzureKS.ResourceGroup.managedBy description: 'The entity that manages the Azure Kubernetes resource group.' type: String - contextPath: AzureKS.ResourceGroup.tags.aks-managed-cluster-name description: 'The AKS managed cluster name tag associated with the Azure Kubernetes resource group.' type: String - contextPath: AzureKS.ResourceGroup.tags.aks-managed-cluster-rg description: 'The AKS managed cluster resource group tag associated with the Azure Kubernetes resource group.' type: String - contextPath: AzureKS.ResourceGroup.tags.type description: 'The type tag associated with the Azure Kubernetes resource group.' type: String dockerimage: demisto/crypto:1.0.0.10120494 runonce: false script: '-' subtype: python3 type: python feed: false isfetch: false longRunning: false longRunningPort: false fromversion: 5.0.0 tests: - Azure Kubernetes Services - Test sectionorder: - Connect - Collect