_help.py

# coding=utf-8
# --------------------------------------------------------------------------------------------
# Copyright (c) Microsoft Corporation. All rights reserved.
# Licensed under the MIT License. See License.txt in the project root for license information.
# --------------------------------------------------------------------------------------------

# pylint: disable=too-many-lines
import os.path

from knack.help_files import helps

ACS_SERVICE_PRINCIPAL_CACHE = os.path.join(
    '$HOME', '.azure', 'acsServicePrincipal.json')
AKS_SERVICE_PRINCIPAL_CACHE = os.path.join(
    '$HOME', '.azure', 'aksServicePrincipal.json')

# AKS command help
helps['aks create'] = f"""
    type: command
    short-summary: Create a new managed Kubernetes cluster.
    parameters:
        - name: --generate-ssh-keys
          type: string
          short-summary: Generate SSH public and private key files if missing.
        - name: --service-principal
          type: string
          short-summary: Service principal used for authentication to Azure APIs.
          long-summary:  If not specified, a new service principal is created and cached at
                         {AKS_SERVICE_PRINCIPAL_CACHE} to be used by subsequent `az aks` commands.
        - name: --skip-subnet-role-assignment
          type: bool
          short-summary: Skip role assignment for subnet (advanced networking).
          long-summary:  If specified, please make sure your service principal has the access to your subnet.
        - name: --zones -z
          type: string array
          short-summary: Space-separated list of availability zones where agent nodes will be placed.
        - name: --client-secret
          type: string
          short-summary: Secret associated with the service principal. This argument is required if
                         `--service-principal` is specified.
        - name: --node-vm-size -s
          type: string
          short-summary: Size of Virtual Machines to create as Kubernetes nodes. If the user does not specify one, server will select a default VM size for her/him.
        - name: --dns-name-prefix -p
          type: string
          short-summary: Prefix for hostnames that are created. If not specified, generate a hostname using the
                         managed cluster and resource group names.
        - name: --node-count -c
          type: int
          short-summary: Number of nodes in the Kubernetes node pool. It is required when --enable-cluster-autoscaler specified. After creating a cluster, you can change the
                         size of its node pool with `az aks scale`.
        - name: --node-osdisk-size
          type: int
          short-summary: Size in GiB of the OS disk for each node in the node pool. Minimum 30 GiB.
        - name: --node-osdisk-type
          type: string
          short-summary: OS disk type to be used for machines in a given agent pool. Defaults to 'Ephemeral' when possible in conjunction with VM size and OS disk size. May not be changed for this pool after creation. ('Ephemeral' or 'Managed')
        - name: --node-osdisk-diskencryptionset-id -d
          type: string
          short-summary: ResourceId of the disk encryption set to use for enabling encryption at rest on agent node os disk.
        - name: --kubernetes-version -k
          type: string
          short-summary: Version of Kubernetes to use for creating the cluster, such as "1.7.12" or "1.8.7".
          populator-commands:
          - "`az aks get-versions`"
        - name: --ssh-key-value
          type: string
          short-summary: Public key path or key contents to install on node VMs for SSH access. For example,
                         'ssh-rsa AAAAB...snip...UcyupgH azureuser@linuxvm'.
        - name: --admin-username -u
          type: string
          short-summary: User account to create on node VMs for SSH access.
        - name: --windows-admin-username
          type: string
          short-summary: User account to create on windows node VMs.
          long-summary: |-
            Rules for windows-admin-username:
                - restriction: Cannot end in "."
                - Disallowed values: "administrator", "admin", "user", "user1", "test", "user2", "test1", "user3", "admin1", "1", "123", "a", "actuser", "adm", "admin2", "aspnet", "backup", "console", "david", "guest", "john", "owner", "root", "server", "sql", "support", "support_388945a0", "sys", "test2", "test3", "user4", "user5".
                - Minimum-length: 1 character
                - Max-length: 20 characters
            Reference: https://docs.microsoft.com/en-us/dotnet/api/microsoft.azure.management.compute.models.virtualmachinescalesetosprofile.adminusername?view=azure-dotnet
        - name: --windows-admin-password
          type: string
          short-summary: User account password to use on windows node VMs.
          long-summary: |-
            Rules for windows-admin-password:
                - Minimum-length: 14 characters
                - Max-length: 123 characters
                - Complexity requirements: 3 out of 4 conditions below need to be fulfilled
                  * Has lower characters
                  * Has upper characters
                  * Has a digit
                  * Has a special character (Regex match [\\W_])
                - Disallowed values:  "abc@123", "P@$$w0rd", "P@ssw0rd", "P@ssword123", "Pa$$word", "pass@word1", "Password!", "Password1", "Password22", "iloveyou!"
            Reference: https://docs.microsoft.com/en-us/dotnet/api/microsoft.azure.management.compute.models.virtualmachinescalesetosprofile.adminpassword?view=azure-dotnet
        - name: --enable-ahub
          type: bool
          short-summary: Enable Azure Hybrid User Benefits (AHUB) for Windows VMs.
        - name: --enable-aad
          type: bool
          short-summary: Enable managed AAD feature for cluster.
        - name: --enable-azure-rbac
          type: bool
          short-summary: Enable Azure RBAC to control authorization checks on cluster.
        - name: --aad-admin-group-object-ids
          type: string
          short-summary: Comma-separated list of aad group object IDs that will be set as cluster admin.
        - name: --aad-tenant-id
          type: string
          short-summary: The ID of an Azure Active Directory tenant.
        - name: --dns-service-ip
          type: string
          short-summary: An IP address assigned to the Kubernetes DNS service.
          long-summary: This address must be within the Kubernetes service address range specified by "--service-cidr".
                        For example, 10.0.0.10.
        - name: --docker-bridge-address
          type: string
          short-summary: A specific IP address and netmask for the Docker bridge, using standard CIDR notation.
          long-summary: This address must not be in any Subnet IP ranges, or the Kubernetes service address range.
                        For example, 172.17.0.1/16.
        - name: --load-balancer-sku
          type: string
          short-summary: Azure Load Balancer SKU selection for your cluster. basic or standard.
          long-summary: Select between Basic or Standard Azure Load Balancer SKU for your AKS cluster.
        - name: --load-balancer-managed-outbound-ip-count
          type: int
          short-summary: Load balancer managed outbound IP count.
          long-summary: Desired number of managed outbound IPs for load balancer outbound connection. Valid for Standard SKU load balancer cluster only.
        - name: --load-balancer-managed-outbound-ipv6-count
          type: int
          short-summary: Load balancer managed outbound IPv6 IP count.
          long-summary: Desired number of managed outbound IPv6 IPs for load balancer outbound connection. Valid for dual-stack (--ip-families IPv4,IPv6) only.
        - name: --load-balancer-outbound-ips
          type: string
          short-summary: Load balancer outbound IP resource IDs.
          long-summary: Comma-separated public IP resource IDs for load balancer outbound connection. Valid for Standard SKU load balancer cluster only.
        - name: --load-balancer-outbound-ip-prefixes
          type: string
          short-summary: Load balancer outbound IP prefix resource IDs.
          long-summary: Comma-separated public IP prefix resource IDs for load balancer outbound connection. Valid for Standard SKU load balancer cluster only.
        - name: --load-balancer-outbound-ports
          type: int
          short-summary: Load balancer outbound allocated ports.
          long-summary: Desired static number of outbound ports per VM in the load balancer backend pool. By default, set to 0 which uses the default allocation based on the number of VMs. Please specify a value in the range of [0, 64000] that is a multiple of 8.
        - name: --load-balancer-idle-timeout
          type: int
          short-summary: Load balancer idle timeout in minutes.
          long-summary: Desired idle timeout for load balancer outbound flows, default is 30 minutes. Please specify a value in the range of [4, 100].
        - name: --load-balancer-backend-pool-type
          type: string
          short-summary: Load balancer backend pool type.
          long-summary: Load balancer backend pool type, supported values are nodeIP and nodeIPConfiguration.
        - name: --cluster-service-load-balancer-health-probe-mode
          type: string
          short-summary: Set the cluster service health probe mode.
          long-summary: Set the cluster service health probe mode. Default is "Servicenodeport".
        - name: --nat-gateway-managed-outbound-ip-count
          type: int
          short-summary: NAT gateway managed outbound IP count.
          long-summary: Desired number of managed outbound IPs for NAT gateway outbound connection. Please specify a value in the range of [1, 16]. Valid for Standard SKU load balancer cluster with managedNATGateway or managedNATGatewayV2 outbound type only.
        - name: --nat-gateway-idle-timeout
          type: int
          short-summary: NAT gateway idle timeout in minutes.
          long-summary: Desired idle timeout for NAT gateway outbound flows, default is 4 minutes. Please specify a value in the range of [4, 120]. Valid for Standard SKU load balancer cluster with managedNATGateway or managedNATGatewayV2 outbound type only.
        - name: --outbound-type
          type: string
          short-summary: How outbound traffic will be configured for a cluster.
          long-summary: Select between loadBalancer, userDefinedRouting, managedNATGateway, managedNATGatewayV2, userAssignedNATGateway, none and block. If not set, defaults to type loadBalancer. managedNATGatewayV2 uses Azure NAT Gateway Standard V2 SKU and supports IPv6, user-provided public IPs, and user-provided IP prefixes.
        - name: --enable-addons -a
          type: string
          short-summary: Enable the Kubernetes addons in a comma-separated list.
          long-summary: |-
            These addons are available:
            - monitoring                      :  turn on Log Analytics monitoring. Uses the Log Analytics Default Workspace if it exists, else creates one. Specify "--workspace-resource-id" to use an existing workspace. If monitoring addon is enabled --no-wait argument will have no effect
            - virtual-node                    : enable AKS Virtual Node. Requires --aci-subnet-name to provide the name of an existing subnet for the Virtual Node to use. aci-subnet-name must be in the same vnet which is specified by --vnet-subnet-id (required as well).
            - azure-policy                    : enable Azure policy. The Azure Policy add-on for AKS enables at-scale enforcements and safeguards on your clusters in a centralized, consistent manner. Required if enabling deployment safeguards. Learn more at aka.ms/aks/policy.
            - application-load-balancer       : enable the Application Load Balancer (Application Gateway for Containers) addon (PREVIEW).
            - ingress-appgw                   : enable Application Gateway Ingress Controller addon.
            - confcom                         : enable confcom addon, this will enable SGX device plugin by default(PREVIEW).
            - open-service-mesh               : enable Open Service Mesh addon (PREVIEW).
            - gitops                          : enable GitOps (PREVIEW).
            - azure-keyvault-secrets-provider : enable Azure Keyvault Secrets Provider addon.
            - web_application_routing         : enable the App Routing addon (PREVIEW). Specify "--dns-zone-resource-id" to configure DNS.
        - name: --enable-azure-monitor-logs
          type: bool
          short-summary: Enable Azure Monitor logs for the cluster.
          long-summary: This is equivalent to using "--enable-addons monitoring". Turn on Log Analytics monitoring. Uses the Log Analytics Default Workspace if it exists, else creates one. Specify "--workspace-resource-id" to use an existing workspace. If monitoring addon is enabled --no-wait argument will have no effect
        - name: --disable-rbac
          type: bool
          short-summary: Disable Kubernetes Role-Based Access Control.
        - name: --max-pods -m
          type: int
          short-summary: The maximum number of pods deployable to a node.
          long-summary: If not specified, defaults based on network-plugin. 30 for "azure", 110 for "kubenet", or 250 for "none".
        - name: --network-plugin
          type: string
          short-summary: The Kubernetes network plugin to use.
          long-summary: Specify "azure" for routable pod IPs from VNET, "kubenet" for non-routable pod IPs with an overlay network, or "none" for no networking configured.
        - name: --network-plugin-mode
          type: string
          short-summary: The network plugin mode to use.
          long-summary: |
              Used to control the mode the network plugin should operate in. For example, "overlay" used with
              --network-plugin=azure will use an overlay network (non-VNET IPs) for pods in the cluster.
        - name: --network-policy
          type: string
          short-summary: (PREVIEW) The Kubernetes network policy to use.
          long-summary: |
              Using together with "azure" network plugin.
              Specify "azure" for Azure network policy manager, "calico" for calico network policy controller, "cilium" for Azure CNI Overlay powered by Cilium.
              Defaults to "" (network policy disabled).
        - name: --network-dataplane
          type: string
          short-summary: The network dataplane to use.
          long-summary: |
              Network dataplane used in the Kubernetes cluster.
              Specify "azure" to use the Azure dataplane (default) or "cilium" to enable Cilium dataplane.
        - name: --enable-cilium-dataplane
          type: bool
          short-summary: Use Cilium as the networking dataplane for the Kubernetes cluster.
          long-summary: |
              Used together with the "azure" network plugin.
              Requires either --pod-subnet-id or --network-plugin-mode=overlay.
              This flag is deprecated in favor of --network-dataplane=cilium.
        - name: --enable-acns
          type: bool
          short-summary: Enable advanced network functionalities on a cluster. Enabling this will incur additional costs. For non-cilium clusters, acns security will be disabled by default until further notice.
        - name: --disable-acns-observability
          type: bool
          short-summary: Used to disable advanced networking observability features on a clusters when enabling advanced networking features with "--enable-acns".
        - name: --disable-acns-security
          type: bool
          short-summary: Used to disable advanced networking security features on a clusters when enabling advanced networking features with "--enable-acns".
        - name: --acns-advanced-networkpolicies
          type: string
          short-summary: Used to enable advanced network policies (None, FQDN or L7) on a cluster when enabling advanced networking features with "--enable-acns".
        - name: --acns-datapath-acceleration-mode
          type: string
          short-summary: Used to set the acceleration mode (None or BpfVeth) on a cluster when enabling advanced networking features with "--enable-acns".
        - name: --enable-retina-flow-logs
          type: bool
          short-summary: Enable advanced network flow log collection functionalities on a cluster. This flag is deprecated in favor of --enable-container-network-logs.
        - name: --enable-container-network-logs
          type: bool
          short-summary: Enable container network log collection functionalities on a cluster. Automatically enables --enable-high-log-scale-mode.
        - name: --no-ssh-key -x
          type: string
          short-summary: Do not use or create a local SSH key.
          long-summary: To access nodes after creating a cluster with this option, use the Azure Portal.
        - name: --pod-cidr
          type: string
          short-summary: A CIDR notation IP range from which to assign pod IPs when Azure CNI Overlay or Kubenet is used (On 31 March 2028, Kubenet will be retired).
          long-summary: This range must not overlap with any Subnet IP ranges. For example, 172.244.0.0/16. See https://aka.ms/aks/azure-cni-overlay.
        - name: --service-cidr
          type: string
          short-summary: A CIDR notation IP range from which to assign service cluster IPs.
          long-summary: This range must not overlap with any Subnet IP ranges. For example, 10.0.0.0/16.
        - name: --service-cidrs
          type: string
          short-summary: A comma separated list of CIDR notation IP ranges from which to assign service cluster IPs.
          long-summary: Each range must not overlap with any Subnet IP ranges. For example, 10.0.0.0/16.
        - name: --pod-cidrs
          type: string
          short-summary: A comma-separated list of CIDR notation IP ranges from which to assign pod IPs when Azure CNI Overlay or Kubenet is used (On 31 March 2028, Kubenet will be retired).
          long-summary: Each range must not overlap with any Subnet IP ranges. For example, 172.244.0.0/16. See https://aka.ms/aks/azure-cni-overlay.
        - name: --ip-families
          type: string
          short-summary: A comma separated list of IP versions to use for cluster networking.
          long-summary: Each IP version should be in the format IPvN. For example, IPv4.
        - name: --vnet-subnet-id
          type: string
          short-summary: The ID of a subnet in an existing VNet into which to deploy the cluster.
        - name: --pod-subnet-id
          type: string
          short-summary: The ID of a subnet in an existing VNet into which to assign pods in the cluster (requires azure network-plugin)
        - name: --ppg
          type: string
          short-summary: The ID of a PPG.
        - name: --os-sku
          type: string
          short-summary: The os-sku of the agent node pool. Ubuntu, Ubuntu2204, Ubuntu2404, CBLMariner, AzureLinux, AzureLinux3, AzureLinuxOSGuard, AzureLinux3OSGuard, or Flatcar when os-type is Linux, default is Ubuntu if not set; Windows2019, Windows2022, Windows2025, or WindowsAnnual when os-type is Windows, the current default is Windows2022 if not set.
        - name: --enable-fips-image
          type: bool
          short-summary: Use FIPS-enabled OS on agent nodes.
        - name: --workspace-resource-id
          type: string
          short-summary: The resource ID of an existing Log Analytics Workspace to use for storing monitoring data. If not specified, uses the default Log Analytics Workspace if it exists, otherwise creates one.
        - name: --enable-msi-auth-for-monitoring
          type: bool
          short-summary: Send monitoring data to Log Analytics using the cluster's assigned identity (instead of the Log Analytics Workspace's shared key).
        - name: --enable-syslog
          type: bool
          short-summary: Enable syslog data collection for Monitoring addon
        - name: --data-collection-settings
          type: string
          short-summary: Path to JSON file containing data collection settings for Monitoring addon.
        - name: --enable-high-log-scale-mode
          type: bool
          short-summary: Enable High Log Scale Mode for Container Logs. Auto-enabled when --enable-container-network-logs is specified.
        - name: --ampls-resource-id
          type: string
          short-summary: Resource ID of Azure Monitor Private Link scope for Monitoring Addon.
        - name: --enable-cluster-autoscaler
          type: bool
          short-summary: Enable cluster autoscaler, default value is false.
          long-summary: If specified, please make sure the kubernetes version is larger than 1.10.6.
        - name: --min-count
          type: int
          short-summary: Minimun nodes count used for autoscaler, when "--enable-cluster-autoscaler" specified. Please specify the value in the range of [1, 1000].
        - name: --max-count
          type: int
          short-summary: Maximum nodes count used for autoscaler, when "--enable-cluster-autoscaler" specified. Please specify the value in the range of [1, 1000].
        - name: --vm-set-type
          type: string
          short-summary: Agent pool vm set type. VirtualMachineScaleSets, AvailabilitySet or VirtualMachines(Preview).
        - name: --node-resource-group
          type: string
          short-summary: The node resource group is the resource group where all customer's resources will be created in, such as virtual machines.
        - name: --k8s-support-plan
          type: string
          short-summary: Choose from "KubernetesOfficial" or "AKSLongTermSupport", with "AKSLongTermSupport" you get 1 extra year of CVE patchs.
        - name: --nrg-lockdown-restriction-level
          type: string
          short-summary: Restriction level on the managed node resource group.
          long-summary: The restriction level of permissions allowed on the cluster's managed node resource group, supported values are Unrestricted, and ReadOnly (recommended ReadOnly).
        - name: --sku
          type: string
          short-summary: Specify SKU name for managed clusters. '--sku base' enables a base managed cluster. '--sku automatic' enables an automatic managed cluster.
        - name: --tier
          type: string
          short-summary: Specify SKU tier for managed clusters. '--tier standard' enables a standard managed cluster service with a financially backed SLA. '--tier free' does not have a financially backed SLA.
        - name: --attach-acr
          type: string
          short-summary: Grant the 'acrpull' role assignment to the ACR specified by name or resource ID.
        - name: --enable-apiserver-vnet-integration
          type: bool
          short-summary: Enable integration of user vnet with control plane apiserver pods.
        - name: --apiserver-subnet-id
          type: string
          short-summary: The ID of a subnet in an existing VNet into which to assign control plane apiserver pods(requires --enable-apiserver-vnet-integration)
        - name: --enable-private-cluster
          type: string
          short-summary: Enable private cluster.
        - name: --private-dns-zone
          type: string
          short-summary: Private dns zone mode for private cluster. "none" mode is in preview.
          long-summary: Allowed values are "system", "none" (Preview) or your custom private dns zone resource id. If not set, defaults to type system. Requires --enable-private-cluster to be used.
        - name: --fqdn-subdomain
          type: string
          short-summary: Prefix for FQDN that is created for private cluster with custom private dns zone scenario.
        - name: --disable-public-fqdn
          type: bool
          short-summary: Disable public fqdn feature for private cluster.
        - name: --enable-node-public-ip
          type: bool
          short-summary: Enable VMSS node public IP.
        - name: --node-public-ip-prefix-id
          type: string
          short-summary: Public IP prefix ID used to assign public IPs to VMSS nodes.
        - name: --enable-managed-identity
          type: bool
          short-summary: Using managed identity to manage cluster resource group. You can explicitly specify "--service-principal" and "--client-secret" to disable managed identity, otherwise it will be enabled.
        - name: --assign-identity
          type: string
          short-summary: Specify an existing user assigned identity to manage cluster resource group.
        - name: --assign-kubelet-identity
          type: string
          short-summary: Specify an existing user assigned identity for kubelet's usage, which is typically used to pull image from ACR.
        - name: --api-server-authorized-ip-ranges
          type: string
          short-summary: Comma-separated list of authorized apiserver IP ranges. Set to 0.0.0.0/32 to restrict apiserver traffic to node pools.
        - name: --aks-custom-headers
          type: string
          short-summary: Send custom headers. When specified, format should be Key1=Value1,Key2=Value2
        - name: --appgw-name
          type: string
          short-summary: Name of the application gateway to create/use in the node resource group. Use with ingress-azure addon.
        - name: --appgw-subnet-cidr
          type: string
          short-summary: Subnet CIDR to use for a new subnet created to deploy the Application Gateway. Use with ingress-azure addon.
        - name: --appgw-id
          type: string
          short-summary: Resource Id of an existing Application Gateway to use with AGIC. Use with ingress-azure addon.
        - name: --appgw-subnet-id
          type: string
          short-summary: Resource Id of an existing Subnet used to deploy the Application Gateway. Use with ingress-azure addon.
        - name: --appgw-watch-namespace
          type: string
          short-summary: Specify the namespace, which AGIC should watch. This could be a single string value, or a comma-separated list of namespaces.
        - name: --enable-sgxquotehelper
          type: bool
          short-summary: Enable SGX quote helper for confcom addon.
        - name: --auto-upgrade-channel
          type: string
          short-summary: Specify the upgrade channel for autoupgrade. It could be rapid, stable, patch, node-image or none, none means disable autoupgrade.
        - name: --node-os-upgrade-channel
          type: string
          short-summary: Manner in which the OS on your nodes is updated. It could be NodeImage, None, SecurityPatch or Unmanaged.
        - name: --kubelet-config
          type: string
          short-summary: Kubelet configurations for agent nodes.
        - name: --linux-os-config
          type: string
          short-summary: OS configurations for Linux agent nodes.
        - name: --http-proxy-config
          type: string
          short-summary: Http Proxy configuration for this cluster.
        - name: --kube-proxy-config
          type: string
          short-summary: kube-proxy configuration for this cluster.
        - name: --enable-pod-identity
          type: bool
          short-summary: (PREVIEW) Enable pod identity addon.
        - name: --enable-pod-identity-with-kubenet
          type: bool
          short-summary: (PREVIEW) Enable pod identity addon for cluster using Kubnet network plugin.
        - name: --enable-workload-identity
          type: bool
          short-summary: (PREVIEW) Enable workload identity addon.
        - name: --disable-disk-driver
          type: bool
          short-summary: Disable AzureDisk CSI Driver.
        - name: --disk-driver-version
          type: string
          short-summary: Specify AzureDisk CSI Driver version.
        - name: --disable-file-driver
          type: bool
          short-summary: Disable AzureFile CSI Driver.
        - name: --disable-snapshot-controller
          type: bool
          short-summary: Disable CSI Snapshot Controller.
        - name: --enable-blob-driver
          type: bool
          short-summary: Enable AzureBlob CSI Driver.
        - name: --aci-subnet-name
          type: string
          short-summary: The name of a subnet in an existing VNet into which to deploy the virtual nodes.
        - name: --tags
          type: string
          short-summary: The tags of the managed cluster. The managed cluster instance and all resources managed by the cloud provider will be tagged.
        - name: --enable-encryption-at-host
          type: bool
          short-summary: Enable EncryptionAtHost on agent node pool.
        - name: --enable-ultra-ssd
          type: bool
          short-summary: Enable UltraSSD on agent node pool.
        - name: --enable-secret-rotation
          type: bool
          short-summary: Enable secret rotation. Use with azure-keyvault-secrets-provider addon.
        - name: --rotation-poll-interval
          type: string
          short-summary: Set interval of rotation poll. Use with azure-keyvault-secrets-provider addon.
        - name: --disable-local-accounts
          type: bool
          short-summary: (Preview) If set to true, getting static credential will be disabled for this cluster.
        - name: --workload-runtime
          type: string
          short-summary: Determines the type of workload a node can run. Defaults to OCIContainer.
        - name: --gpu-instance-profile
          type: string
          short-summary: GPU instance profile to partition multi-gpu Nvidia GPUs.
        - name: --enable-windows-gmsa
          type: bool
          short-summary: Enable Windows gmsa.
        - name: --gmsa-dns-server
          type: string
          short-summary: Specify DNS server for Windows gmsa for this cluster.
          long-summary: |-
             You do not need to set this if you have set DNS server in the VNET used by the cluster.
             You must set or not set --gmsa-dns-server and --gmsa-root-domain-name at the same time when setting --enable-windows-gmsa.
        - name: --gmsa-root-domain-name
          type: string
          short-summary: Specify root domain name for Windows gmsa for this cluster.
          long-summary: |-
             You do not need to set this if you have set DNS server in the VNET used by the cluster.
             You must set or not set --gmsa-dns-server and --gmsa-root-domain-name at the same time when setting --enable-windows-gmsa.
        - name: --snapshot-id
          type: string
          short-summary: The source nodepool snapshot id used to create this cluster.
        - name: --cluster-snapshot-id
          type: string
          short-summary: The source cluster snapshot id is used to create new cluster.
        - name: --enable-oidc-issuer
          type: bool
          short-summary: Enable OIDC issuer.
        - name: --crg-id
          type: string
          short-summary: The crg-id used to associate the new cluster with the existed Capacity Reservation Group resource.
        - name: --host-group-id
          type: string
          short-summary: (PREVIEW) The fully qualified dedicated host group id used to provision agent node pool.
        - name: --message-of-the-day
          type: string
          short-summary: Path to a file containing the desired message of the day. Only valid for linux nodes. Will be written to /etc/motd.
        - name: --enable-azure-keyvault-kms
          type: bool
          short-summary: Enable Azure KeyVault Key Management Service.
        - name: --azure-keyvault-kms-key-id
          type: string
          short-summary: Identifier of Azure Key Vault key.
        - name: --azure-keyvault-kms-key-vault-network-access
          type: string
          short-summary: Network Access of Azure Key Vault.
          long-summary: Allowed values are "Public", "Private". If not set, defaults to type "Public". Requires --azure-keyvault-kms-key-id to be used.
        - name: --azure-keyvault-kms-key-vault-resource-id
          type: string
          short-summary: Resource ID of Azure Key Vault.
        - name: --kms-infrastructure-encryption
          type: string
          short-summary: Enable encryption at rest of Kubernetes resource objects using service-managed keys.
          long-summary: Enable infrastructure encryption for Kubernetes resource objects. This feature provides encryption at rest for cluster secrets and configuration using service-managed keys. For more information see https://aka.ms/aks/kubernetesResourceObjectEncryption.
        - name: --enable-image-cleaner
          type: bool
          short-summary: Enable ImageCleaner Service.
        - name: --image-cleaner-interval-hours
          type: int
          short-summary: ImageCleaner scanning interval.
        - name: --enable-image-integrity
          type: bool
          short-summary: Enable ImageIntegrity Service.
        - name: --enable-service-account-image-pull
          type: bool
          short-summary: Enable service account based image pull. For more information, see https://aka.ms/aks/identity-binding/acr-image-pull/docs.
        - name: --service-account-image-pull-default-managed-identity-id
          type: string
          short-summary: The default managed identity resource ID used for image pulls at the cluster level.
        - name: --dns-zone-resource-id
          type: string
          short-summary: The resource ID of the DNS zone resource to use with the App Routing addon.
        - name: --dns-zone-resource-ids
          type: string
          short-summary: A comma separated list of resource IDs of the DNS zone resource to use with the App Routing addon.
        - name: --ca-certs --custom-ca-trust-certificates
          type: string
          short-summary: Path to a file containing up to 10 blank line separated certificates. Only valid for linux nodes.
          long-summary: These certificates are used by Custom CA Trust features and will be added to trust stores of nodes.
        - name: --enable-keda
          type: bool
          short-summary: Enable KEDA workload auto-scaler.
        - name: --disable-run-command
          type: bool
          short-summary: Disable Run command feature for the cluster.
        - name: --enable-defender
          type: bool
          short-summary: Enable Microsoft Defender security profile.
        - name: --defender-config
          type: string
          short-summary: Path to JSON file containing Microsoft Defender profile configurations.
        - name: --enable-vpa
          type: bool
          short-summary: Enable vertical pod autoscaler for cluster.
        - name: --enable-optimized-addon-scaling
          type: bool
          short-summary: Enable optimized addon scaling feature for cluster.
        - name: --nodepool-allowed-host-ports
          type: string
          short-summary: Expose host ports on the node pool. When specified, format should be a comma-separated list of ranges with protocol, eg. 80/TCP,443/TCP,4000-5000/TCP.
        - name: --nodepool-asg-ids
          type: string
          short-summary: The IDs of the application security groups to which the node pool's network interface should belong. When specified, format should be a comma-separated list of IDs.
        - name: --node-public-ip-tags
          type: string
          short-summary: The ipTags of the node public IPs.
        - name: --safeguards-level
          type: string
          short-summary: The deployment safeguards Level. Accepted Values are [Off, Warning, Enforcement]. Requires azure policy addon to be enabled
        - name: --safeguards-version
          type: string
          short-summary: The version of deployment safeguards to use. Default "v1.0.0" Use the ListSafeguardsVersions API to discover available versions
        - name: --safeguards-excluded-ns
          type: string
          short-summary: Comma-separated list of Kubernetes namespaces to exclude from deployment safeguards
        - name: --enable-asm --enable-azure-service-mesh
          type: bool
          short-summary: Enable Azure Service Mesh.
        - name: --revision
          type: string
          short-summary: Azure Service Mesh revision to install.
        - name: --enable-azuremonitormetrics
          type: bool
          short-summary: Enable Azure Monitor Metrics Profile
        - name: --enable-azure-monitor-metrics
          type: bool
          short-summary: Enable Azure Monitor Metrics Profile
        - name: --azure-monitor-workspace-resource-id
          type: string
          short-summary: Resource ID of the Azure Monitor Workspace
        - name: --ksm-metric-labels-allow-list
          type: string
          short-summary: Comma-separated list of additional Kubernetes label keys that will be used in the resource' labels metric. By default the metric contains only name and namespace labels. To include additional labels provide a list of resource names in their plural form and Kubernetes label keys you would like to allow for them (e.g. '=namespaces=[k8s-label-1,k8s-label-n,...],pods=[app],...)'. A single '*' can be provided per resource instead to allow any labels, but that has severe performance implications (e.g. '=pods=[*]').
        - name: --ksm-metric-annotations-allow-list
          type: string
          short-summary: Comma-separated list of additional Kubernetes label keys that will be used in the resource' labels metric. By default the metric contains only name and namespace labels. To include additional labels provide a list of resource names in their plural form and Kubernetes label keys you would like to allow for them (e.g.'=namespaces=[k8s-label-1,k8s-label-n,...],pods=[app],...)'. A single '*' can be provided per resource instead to allow any labels, but that has severe performance implications (e.g. '=pods=[*]').
        - name: --grafana-resource-id
          type: string
          short-summary: Resource ID of the Azure Managed Grafana Workspace
        - name: --enable-windows-recording-rules
          type: bool
          short-summary: Enable Windows Recording Rules when enabling the Azure Monitor Metrics addon
        - name: --enable-azure-monitor-app-monitoring
          type: bool
          short-summary: Enable Azure Monitor Application Monitoring
        - name: --enable-opentelemetry-metrics
          type: bool
          short-summary: Enable OpenTelemetry metrics collection. Requires Azure Monitor metrics to be enabled.
        - name: --opentelemetry-metrics-port
          type: int
          short-summary: Port for OpenTelemetry metrics collection (default port will be used if not specified)
        - name: --disable-opentelemetry-metrics
          type: bool
          short-summary: Disable OpenTelemetry metrics collection
        - name: --enable-opentelemetry-logs
          type: bool
          short-summary: Enable OpenTelemetry logs collection. Requires Azure Monitor logs to be enabled.
        - name: --opentelemetry-logs-port
          type: int
          short-summary: Port for OpenTelemetry logs collection (default port will be used if not specified)
        - name: --disable-opentelemetry-logs
          type: bool
          short-summary: Disable OpenTelemetry logs collection
        - name: --nodepool-labels
          type: string
          short-summary: The node labels for all node pools in this cluster. See https://aka.ms/node-labels for syntax of labels.
        - name: --nodepool-taints
          type: string
          short-summary: The node taints for all node pools in this cluster.
        - name: --node-init-taints --nodepool-initialization-taints
          type: string
          short-summary: The node initialization taints for node pools created with aks create operation.
        - name: --enable-cost-analysis
          type: bool
          short-summary: Enable exporting Kubernetes Namespace and Deployment details to the Cost Analysis views in the Azure portal. For more information see aka.ms/aks/docs/cost-analysis.
        - name: --node-provisioning-mode
          type: string
          short-summary: Set the node provisioning mode of the cluster. Valid values are "Auto" and "Manual". For more information on "Auto" mode see aka.ms/aks/nap.
        - name: --node-provisioning-default-pools
          type: string
          short-summary: The set of default Karpenter NodePools configured for node provisioning. Valid values are "Auto" and "None".
          long-summary: |-
              The set of default Karpenter NodePools configured for node provisioning. Valid values are "Auto" and "None".
              Auto: A standard set of Karpenter NodePools are provisioned.
              None: No Karpenter NodePools are provisioned.
              WARNING: Changing this from Auto to None on an existing cluster will cause the default Karpenter NodePools to be deleted, which will in turn drain and delete the nodes associated with those pools. It is strongly recommended to not do this unless there are idle nodes ready to take the pods evicted by that action.
        - name: --enable-application-load-balancer
          type: bool
          short-summary: Enable Application Load Balancer (Application Gateway for Containers) addon.
        - name: --enable-app-routing
          type: bool
          short-summary: Enable Application Routing addon.
        - name: --app-routing-default-nginx-controller --ardnc
          type: string
          short-summary: Configure default nginx ingress controller type. Valid values are annotationControlled (default behavior), external, internal, or none.
        - name: --enable-default-domain
          type: bool
          short-summary: Enable default domain for Application Routing addon.
        - name: --enable-ai-toolchain-operator
          type: bool
          short-summary: Enable AI toolchain operator to the cluster.
        - name: --ssh-access
          type: string
          short-summary: Configure SSH setting for the first system pool in this cluster. Use "disabled" to disable SSH access, "localuser" to enable SSH access using private key. Note, this configuration will not take effect for later created new node pools, please use option `az aks nodepool add --ssh-access` to configure SSH access for new node pools.
        - name: --pod-ip-allocation-mode
          type: string
          short-summary: Set the ip allocation mode for how Pod IPs from the Azure Pod Subnet are allocated to the nodes in the AKS cluster. The choice is between dynamic batches of individual IPs or static allocation of a set of CIDR blocks. Accepted Values are "DynamicIndividual" or "StaticBlock".
          long-summary: |
              Used together with the "azure" network plugin.
              Requires --pod-subnet-id.
        - name: --enable-secure-boot
          type: bool
          short-summary: Enable Secure Boot on all node pools in the cluster. Must use VMSS agent pool type.
        - name: --enable-vtpm
          type: bool
          short-summary: Enable vTPM on all node pools in the cluster. Must use VMSS agent pool type.
        - name: --bootstrap-artifact-source
          type: string
          short-summary: Configure artifact source when bootstraping the cluster.
          long-summary: |
              The artifacts include the addon image. Use "Direct" to download artifacts from MCR, "Cache" to downalod artifacts from Azure Container Registry.
        - name: --bootstrap-container-registry-resource-id
          type: string
          short-summary: Configure container registry resource ID. Must use "Cache" as bootstrap artifact source.
        - name: --if-match
          type: string
          short-summary: The value provided will be compared to the ETag of the managed cluster, if it matches the operation will proceed. If it does not match, the request will be rejected to prevent accidental overwrites. This must not be specified when creating a new cluster.
        - name: --if-none-match
          type: string
          short-summary: Set to '*' to allow a new cluster to be created, but to prevent updating an existing cluster. Other values will be ignored.
        - name: --enable-static-egress-gateway
          type: bool
          short-summary: Enable Static Egress Gateway addon to the cluster.
        - name: --enable-imds-restriction
          type: bool
          short-summary: Enable IMDS restriction in the cluster. Non-hostNetwork Pods will not be able to access IMDS.
        - name: --vm-sizes
          type: string
          short-summary: Comma-separated list of sizes. Must use VirtualMachines agent pool type.
        - name: --enable-managed-system-pool
          type: bool
          short-summary: Create a default ManagedSystem mode that is fully managed by AKS.
          long-summary: When set, the default system node pool is created with ManagedSystem mode, where all properties except name and mode are managed by AKS. Learn more at https://aka.ms/aks/nodepool/mode.
        - name: --enable-upstream-kubescheduler-user-configuration
          type: bool
          short-summary: Enable user-defined scheduler configuration for kube-scheduler upstream on the cluster
        - name: --enable-gateway-api
          type: bool
          short-summary: Enable managed installation of Gateway API CRDs from the standard release channel.
        - name: --enable-app-routing-istio --enable-ari
          type: bool
          short-summary: Enable Gateway API based ingress on App Routing via Istio without service mesh functionality.
          long-summary: |
              This enables an ingress-only version of Istio that reconciles Gateway API resources for App Routing.
              It does not provide service mesh functionality (e.g. mTLS, traffic management between services).
              Cannot be used simultaneously with the Istio service mesh add-on (--enable-azure-service-mesh).
        - name: --enable-hosted-system
          type: bool
          short-summary: Create a cluster with fully hosted system components. This applies only when creating a new automatic cluster.
    examples:
        - name: Create a Kubernetes cluster with an existing SSH public key.
          text: az aks create -g MyResourceGroup -n MyManagedCluster --ssh-key-value /path/to/publickey
        - name: Create a Kubernetes cluster with a specific version.
          text: az aks create -g MyResourceGroup -n MyManagedCluster --kubernetes-version 1.13.9
        - name: Create a Kubernetes cluster with a larger node pool.
          text: az aks create -g MyResourceGroup -n MyManagedCluster --node-count 7
        - name: Create a kubernetes cluster with cluster autosclaler enabled.
          text: az aks create -g MyResourceGroup -n MyManagedCluster --kubernetes-version 1.13.9 --node-count 3 --enable-cluster-autoscaler --min-count 1 --max-count 5
        - name: Create a kubernetes cluster with k8s 1.13.9 but use vmas.
          text: az aks create -g MyResourceGroup -n MyManagedCluster --kubernetes-version 1.13.9 --vm-set-type AvailabilitySet
        - name: Create a kubernetes cluster with default kubernetes vesrion, default SKU load balancer(standard) and default vm set type(VirtualMachineScaleSets).
          text: az aks create -g MyResourceGroup -n MyManagedCluster
        - name: Create a kubernetes cluster with standard SKU load balancer and two AKS created IPs for the load balancer outbound connection usage.
          text: az aks create -g MyResourceGroup -n MyManagedCluster --load-balancer-managed-outbound-ip-count 2
        - name: Create a kubernetes cluster with standard SKU load balancer and use the provided public IPs for the load balancer outbound connection usage.
          text: az aks create -g MyResourceGroup -n MyManagedCluster --load-balancer-outbound-ips <ip-resource-id-1,ip-resource-id-2>
        - name: Create a kubernetes cluster with standard SKU load balancer and use the provided public IP prefixes for the load balancer outbound connection usage.
          text: az aks create -g MyResourceGroup -n MyManagedCluster --load-balancer-outbound-ip-prefixes <ip-prefix-resource-id-1,ip-prefix-resource-id-2>
        - name: Create a kubernetes cluster with a standard SKU load balancer, with two outbound AKS managed IPs an idle flow timeout of 5 minutes and 8000 allocated ports per machine
          text: az aks create -g MyResourceGroup -n MyManagedCluster --load-balancer-managed-outbound-ip-count 2 --load-balancer-idle-timeout 5 --load-balancer-outbound-ports 8000
        - name: Create a kubernetes cluster with a AKS managed NAT gateway, with two outbound AKS managed IPs an idle flow timeout of 4 minutes
          text: az aks create -g MyResourceGroup -n MyManagedCluster --nat-gateway-managed-outbound-ip-count 2 --nat-gateway-idle-timeout 4
        - name: Create a kubernetes cluster with basic SKU load balancer and AvailabilitySet vm set type.
          text: az aks create -g MyResourceGroup -n MyManagedCluster --load-balancer-sku basic --vm-set-type AvailabilitySet
        - name: Create a kubernetes cluster with authorized apiserver IP ranges.
          text: az aks create -g MyResourceGroup -n MyManagedCluster --api-server-authorized-ip-ranges 193.168.1.0/24,194.168.1.0/24,195.168.1.0
        - name: Create a kubernetes cluster with server side encryption using your owned key.
          text: az aks create -g MyResourceGroup -n MyManagedCluster --node-osdisk-diskencryptionset-id <disk-encryption-set-resource-id>
        - name: Create a kubernetes cluster with userDefinedRouting, standard load balancer SKU and a custom subnet preconfigured with a route table
          text: az aks create -g MyResourceGroup -n MyManagedCluster --outbound-type userDefinedRouting --load-balancer-sku standard --vnet-subnet-id customUserSubnetVnetID
        - name: Create a kubernetes cluster with supporting Windows agent pools with AHUB enabled.
          text: az aks create -g MyResourceGroup -n MyManagedCluster --load-balancer-sku Standard --network-plugin azure --windows-admin-username azure --windows-admin-password 'replacePassword1234$' --enable-ahub
        - name: Create a kubernetes cluster with managed AAD enabled.
          text: az aks create -g MyResourceGroup -n MyManagedCluster --enable-aad --aad-admin-group-object-ids <id-1,id-2> --aad-tenant-id <id>
        - name: Create a kubernetes cluster with ephemeral os enabled.
          text: az aks create -g MyResourceGroup -n MyManagedCluster --node-osdisk-type Ephemeral --node-osdisk-size 48
        - name: Create a kubernetes cluster with custom tags
          text: az aks create -g MyResourceGroup -n MyManagedCluster --tags "foo=bar" "baz=qux"
        - name: Create a kubernetes cluster with EncryptionAtHost enabled.
          text: az aks create -g MyResourceGroup -n MyManagedCluster --enable-encryption-at-host
        - name: Create a kubernetes cluster with UltraSSD enabled.
          text: az aks create -g MyResourceGroup -n MyManagedCluster --enable-ultra-ssd
        - name: Create a kubernetes cluster with custom control plane identity and kubelet identity.
          text: az aks create -g MyResourceGroup -n MyManagedCluster --assign-identity <control-plane-identity-resource-id> --assign-kubelet-identity <kubelet-identity-resource-id>
        - name: Create a kubernetes cluster with Azure RBAC enabled.
          text: az aks create -g MyResourceGroup -n MyManagedCluster --enable-aad --enable-azure-rbac
        - name: Create a kubernetes cluster with a specific os-sku
          text: az aks create -g MyResourceGroup -n MyManagedCluster --os-sku Ubuntu
        - name: Create a kubernetes cluster with enabling Windows gmsa and with setting DNS server in the vnet used by the cluster.
          text: az aks create -g MyResourceGroup -n MyManagedCluster --load-balancer-sku Standard --network-plugin azure --windows-admin-username azure --windows-admin-password 'replacePassword1234$' --enable-windows-gmsa
        - name: Create a kubernetes cluster with enabling Windows gmsa but without setting DNS server in the vnet used by the cluster.
          text: az aks create -g MyResourceGroup -n MyManagedCluster --load-balancer-sku Standard --network-plugin azure --windows-admin-username azure --windows-admin-password 'replacePassword1234$' --enable-windows-gmsa --gmsa-dns-server "10.240.0.4" --gmsa-root-domain-name "contoso.com"
        - name: create a kubernetes cluster with a nodepool snapshot id.
          text: az aks create -g MyResourceGroup -n MyManagedCluster --kubernetes-version 1.20.9 --snapshot-id "/subscriptions/00000/resourceGroups/AnotherResourceGroup/providers/Microsoft.ContainerService/snapshots/mysnapshot1"
        - name: create a kubernetes cluster with a cluster snapshot id.
          text: az aks create -g MyResourceGroup -n MyManagedCluster --cluster-snapshot-id "/subscriptions/00000/resourceGroups/AnotherResourceGroup/providers/Microsoft.ContainerService/managedclustersnapshots/mysnapshot1"
        - name: create a kubernetes cluster with a Capacity Reservation Group(CRG) ID.
          text: az aks create -g MyResourceGroup -n MyMC --kubernetes-version 1.20.9 --node-vm-size VMSize --assign-identity CRG-RG-ID --enable-managed-identity --crg-id "subscriptions/SubID/resourceGroups/RGName/providers/Microsoft.ContainerService/CapacityReservationGroups/MyCRGID"
        - name: create a kubernetes cluster with support of hostgroup id.
          text: az aks create -g MyResourceGroup -n MyMC --kubernetes-version 1.20.13 --location westus2 --host-group-id /subscriptions/00000/resourceGroups/AnotherResourceGroup/providers/Microsoft.ContainerService/hostGroups/myHostGroup --node-vm-size VMSize --enable-managed-identity --assign-identity <user_assigned_identity_resource_id>
        - name: Create a kubernetes cluster with no CNI installed.
          text: az aks create -g MyResourceGroup -n MyManagedCluster --network-plugin none
        - name: Create a kubernetes cluster with safeguards set to "Warning"
          text: az aks create -g MyResourceGroup -n MyManagedCluster --safeguards-level Warning --enable-addons azure-policy
        - name: Create a kubernetes cluster with safeguards set to "Warning" and some namespaces excluded
          text: az aks create -g MyResourceGroup -n MyManagedCluster --safeguards-level Warning --safeguards-excluded-ns ns1,ns2 --enable-addons azure-policy
        - name: Create a kubernetes cluster with Azure Service Mesh enabled.
          text: az aks create -g MyResourceGroup -n MyManagedCluster --enable-azure-service-mesh
        - name: Create a kubernetes cluster with Azure Monitor Metrics enabled.
          text: az aks create -g MyResourceGroup -n MyManagedCluster --enable-azuremonitormetrics
        - name: Create a kubernetes cluster with Azure Monitor App Monitoring enabled
          text: az aks create -g MyResourceGroup -n MyManagedCluster --enable-azure-monitor-app-monitoring
        - name: Create a kubernetes cluster with OpenTelemetry metrics collection enabled
          text: az aks create -g MyResourceGroup -n MyManagedCluster --enable-opentelemetry-metrics --enable-azuremonitormetrics
        - name: Create a kubernetes cluster with OpenTelemetry logs collection enabled
          text: az aks create -g MyResourceGroup -n MyManagedCluster --enable-opentelemetry-logs --enable-addons monitoring
        - name: Create a kubernetes cluster with Azure Monitor logs enabled (shorthand)
          text: az aks create -g MyResourceGroup -n MyManagedCluster --enable-azure-monitor-logs
        - name: Create a kubernetes cluster with OpenTelemetry metrics on custom port
          text: az aks create -g MyResourceGroup -n MyManagedCluster --enable-opentelemetry-metrics --opentelemetry-metrics-port 8888 --enable-azuremonitormetrics
        - name: Create a kubernetes cluster with OpenTelemetry logs on custom port
          text: az aks create -g MyResourceGroup -n MyManagedCluster --enable-opentelemetry-logs --opentelemetry-logs-port 4317 --enable-azure-monitor-logs
        - name: Create a kubernetes cluster with a nodepool having ip allocation mode set to "StaticBlock"
          text: az aks create -g MyResourceGroup -n MyManagedCluster --os-sku Ubuntu --max-pods MaxPodsPerNode --network-plugin azure --vnet-subnet-id /subscriptions/00000/resourceGroups/AnotherResourceGroup/providers/Microsoft.Network/virtualNetworks/MyVnet/subnets/NodeSubnet --pod-subnet-id /subscriptions/00000/resourceGroups/AnotherResourceGroup/providers/Microsoft.Network/virtualNetworks/MyVnet/subnets/PodSubnet --pod-ip-allocation-mode StaticBlock
        - name: Create a kubernetes cluster with a VirtualMachines nodepool
          text: az aks create -g MyResourceGroup -n MyManagedCluster --vm-set-type VirtualMachines --vm-sizes "VMSize1,VMSize2" --node-count 3
        - name: Create a kubernetes cluster with a fully managed system node pool
          text: az aks create -g MyResourceGroup -n MyManagedCluster --enable-managed-system-pool
        - name: Create a kubernetes cluster with a managed installation of Gateway API CRDs from the standard release channel.
          text: az aks create -g MyResourceGroup -n MyManagedCluster --enable-gateway-api
        - name: Create an automatic cluster with hosted system components enabled.
          text: az aks create -g MyResourceGroup -n MyManagedCluster --sku automatic --enable-hosted-system

"""

helps['aks delete'] = """
    type: command
    short-summary: Delete a managed Kubernetes cluster.
    parameters:
        - name: --if-match
          type: string
          short-summary: The value provided will be compared to the ETag of the managed cluster, if it matches the operation will proceed. If it does not match, the request will be rejected to prevent accidental overwrites.
        - name: --if-none-match
          type: string
          short-summary: Not applicable for delete operations. This option will be ignored if provided.
        - name: --ignore-pod-disruption-budget
          type: bool
          short-summary: Delete those pods on a node without considering Pod Disruption Budget.
    examples:
        - name: Delete a managed Kubernetes cluster.
          text: az aks delete --name MyManagedCluster --resource-group MyResourceGroup
          crafted: true
"""

helps['aks scale'] = """
    type: command
    short-summary: Scale the node pool in a managed Kubernetes cluster.
    parameters:
        - name: --node-count -c
          type: int
          short-summary: Number of nodes in the Kubernetes node pool.
        - name: --aks-custom-headers
          type: string
          short-summary: Send custom headers. When specified, format should be Key1=Value1,Key2=Value2
"""

helps['aks stop'] = """
    type: command
    short-summary: Stop a managed cluster.
    long-summary: This can only be performed on Azure Virtual Machine Scale set backed clusters. Stopping a
        cluster stops the control plane and agent nodes entirely, while maintaining all object and
        cluster state. A cluster does not accrue charges while it is stopped. See `stopping a
        cluster <https://docs.microsoft.com/azure/aks/start-stop-cluster>`_ for more details about
        stopping a cluster.
"""

helps['aks upgrade'] = """
    type: command
    short-summary: Upgrade a managed Kubernetes cluster to a newer version.
    long-summary: "Kubernetes will be unavailable during cluster upgrades."
    parameters:
        - name: --kubernetes-version -k
          type: string
          short-summary: Version of Kubernetes to upgrade the cluster to, such as "1.11.12".
          populator-commands:
          - "`az aks get-upgrades`"
        - name: --control-plane-only
          type: bool
          short-summary: Upgrade the cluster control plane only. If not specified, control plane AND all node pools will be upgraded.
        - name: --node-image-only
          type: bool
          short-summary: Only upgrade node image for agent pools.
        - name: --cluster-snapshot-id
          type: string
          short-summary: The source cluster snapshot id is used to upgrade existing cluster.
        - name: --aks-custom-headers
          type: string
          short-summary: Send custom headers. When specified, format should be Key1=Value1,Key2=Value2
        - name: --enable-force-upgrade
          type: bool
          short-summary: Enable forceUpgrade cluster upgrade settings override.
        - name: --disable-force-upgrade
          type: bool
          short-summary: Disable forceUpgrade cluster upgrade settings override.
        - name: --upgrade-override-until
          type: string
          short-summary: Until when the cluster upgradeSettings overrides are effective.
          long-summary: It needs to be in a valid date-time format that's within the next 30 days. For example, 2023-04-01T13:00:00Z. Note that if --force-upgrade is set to true and --upgrade-override-until is not set, by default it will be set to 3 days from now.
        - name: --if-match
          type: string
          short-summary: The value provided will be compared to the ETag of the managed cluster, if it matches the operation will proceed. If it does not match, the request will be rejected to prevent accidental overwrites. This must not be specified when creating a new cluster.
        - name: --if-none-match
          type: string
          short-summary: Set to '*' to allow a new cluster to be created, but to prevent updating an existing cluster. Other values will be ignored.
    examples:
      - name: Upgrade a existing managed cluster to a managed cluster snapshot.
        text: az aks upgrade -g MyResourceGroup -n MyManagedCluster --cluster-snapshot-id "/subscriptions/00000/resourceGroups/AnotherResourceGroup/providers/Microsoft.ContainerService/managedclustersnapshots/mysnapshot1"
"""

helps['aks update'] = """
    type: command
    short-summary: Update the properties of a managed Kubernetes cluster.
    long-summary: Update the properties of a managed Kubernetes cluster. Can be used for example to enable/disable cluster-autoscaler.  When called with no optional arguments this attempts to move the cluster to its goal state without changing the current cluster configuration. This can be used to move out of a non succeeded state.
    parameters:
        - name: --enable-cluster-autoscaler -e
          type: bool
          short-summary: Enable cluster autoscaler.
        - name: --disable-cluster-autoscaler -d
          type: bool
          short-summary: Disable cluster autoscaler.
        - name: --update-cluster-autoscaler -u
          type: bool
          short-summary: Update min-count or max-count for cluster autoscaler.
        - name: --min-count
          type: int
          short-summary: Minimun nodes count used for autoscaler, when "--enable-cluster-autoscaler" specified. Please specify the value in the range of [1, 1000]
        - name: --max-count
          type: int
          short-summary: Maximum nodes count used for autoscaler, when "--enable-cluster-autoscaler" specified. Please specify the value in the range of [1, 1000]
        - name: --sku
          type: string
          short-summary: Specify SKU name for managed clusters. '--sku base' enables a base managed cluster. '--sku automatic' enables an automatic managed cluster.
        - name: --tier
          type: string
          short-summary: Specify SKU tier for managed clusters. '--tier standard' enables a standard managed cluster service with a financially backed SLA. '--tier free' changes a standard managed cluster to a free one.
        - name: --load-balancer-sku
          type: string
          short-summary: Azure Load Balancer SKU selection for your cluster. only standard is accepted.
          long-summary: Upgrade to Standard Azure Load Balancer SKU for your AKS cluster.
        - name: --load-balancer-managed-outbound-ip-count
          type: int
          short-summary: Load balancer managed outbound IP count.
          long-summary: Desired number of managed outbound IPs for load balancer outbound connection. Valid for Standard SKU load balancer cluster only.
        - name: --load-balancer-managed-outbound-ipv6-count
          type: int
          short-summary: Load balancer managed outbound IPv6 IP count.
          long-summary: Desired number of managed outbound IPv6 IPs for load balancer outbound connection. Valid for dual-stack (--ip-families IPv4,IPv6) only.
        - name: --load-balancer-outbound-ips
          type: string
          short-summary: Load balancer outbound IP resource IDs.
          long-summary: Comma-separated public IP resource IDs for load balancer outbound connection. Valid for Standard SKU load balancer cluster only.
        - name: --load-balancer-outbound-ip-prefixes
          type: string
          short-summary: Load balancer outbound IP prefix resource IDs.
          long-summary: Comma-separated public IP prefix resource IDs for load balancer outbound connection. Valid for Standard SKU load balancer cluster only.
        - name: --load-balancer-outbound-ports
          type: int
          short-summary: Load balancer outbound allocated ports.
          long-summary: Desired static number of outbound ports per VM in the load balancer backend pool. By default, set to 0 which uses the default allocation based on the number of VMs. Please specify a value in the range of [0, 64000] that is a multiple of 8.
        - name: --load-balancer-idle-timeout
          type: int
          short-summary: Load balancer idle timeout in minutes.
          long-summary: Desired idle timeout for load balancer outbound flows, default is 30 minutes. Please specify a value in the range of [4, 100].
        - name: --load-balancer-backend-pool-type
          type: string
          short-summary: Load balancer backend pool type.
          long-summary: Load balancer backend pool type, supported values are nodeIP and nodeIPConfiguration.
        - name: --cluster-service-load-balancer-health-probe-mode
          type: string
          short-summary: Set the cluster service health probe mode.
          long-summary: Set the cluster service health probe mode. Default is "Servicenodeport".
        - name: --nat-gateway-managed-outbound-ip-count
          type: int
          short-summary: NAT gateway managed outbound IP count.
          long-summary: Desired number of managed outbound IPs for NAT gateway outbound connection. Please specify a value in the range of [1, 16]. Valid for Standard SKU load balancer cluster with managedNATGateway or managedNATGatewayV2 outbound type only.
        - name: --nat-gateway-idle-timeout
          type: int
          short-summary: NAT gateway idle timeout in minutes.
          long-summary: Desired idle timeout for NAT gateway outbound flows, default is 4 minutes. Please specify a value in the range of [4, 120]. Valid for Standard SKU load balancer cluster with managedNATGateway or managedNATGatewayV2 outbound type only.
        - name: --outbound-type
          type: string
          short-summary: How outbound traffic will be configured for a cluster.
          long-summary: This option will change the way how the outbound connections are managed in the AKS cluster. Available options are loadbalancer, managedNATGateway, managedNATGatewayV2, userAssignedNATGateway, userDefinedRouting, none and block. For clusters using a custom virtual network, supported values are loadbalancer, userAssignedNATGateway and userDefinedRouting. For clusters using an AKS-managed virtual network, supported values are loadbalancer, managedNATGateway, managedNATGatewayV2 and userDefinedRouting.
        - name: --nrg-lockdown-restriction-level
          type: string
          short-summary: Restriction level on the managed node resource.
          long-summary: The restriction level of permissions allowed on the cluster's managed node resource group, supported values are Unrestricted, and ReadOnly (recommended ReadOnly).
        - name: --attach-acr
          type: string
          short-summary: Grant the 'acrpull' role assignment to the ACR specified by name or resource ID.
        - name: --detach-acr
          type: string
          short-summary: Disable the 'acrpull' role assignment to the ACR specified by name or resource ID.
        - name: --api-server-authorized-ip-ranges
          type: string
          short-summary: Comma-separated list of authorized apiserver IP ranges. Set to "" to allow all traffic on a previously restricted cluster. Set to 0.0.0.0/32 to restrict apiserver traffic to node pools.
        - name: --enable-aad
          type: bool
          short-summary: Enable managed AAD feature for cluster.
        - name: --aad-admin-group-object-ids
          type: string
          short-summary: Comma-separated list of aad group object IDs that will be set as cluster admin.
        - name: --aad-tenant-id
          type: string
          short-summary: The ID of an Azure Active Directory tenant.
        - name: --enable-ahub
          type: bool
          short-summary: Enable Azure Hybrid User Benefits (AHUB) feature for cluster.
        - name: --disable-ahub
          type: bool
          short-summary: Disable Azure Hybrid User Benefits (AHUB) feature for cluster.
        - name: --aks-custom-headers
          type: string
          short-summary: Send custom headers. When specified, format should be Key1=Value1,Key2=Value2
        - name: --if-match
          type: string
          short-summary: The value provided will be compared to the ETag of the managed cluster, if it matches the operation will proceed. If it does not match, the request will be rejected to prevent accidental overwrites. This must not be specified when creating a new cluster.
        - name: --if-none-match
          type: string
          short-summary: Set to '*' to allow a new cluster to be created, but to prevent updating an existing cluster. Other values will be ignored.
        - name: --auto-upgrade-channel
          type: string
          short-summary: Specify the upgrade channel for autoupgrade. It could be rapid, stable, patch, node-image or none, none means disable autoupgrade.
        - name: --node-os-upgrade-channel
          type: string
          short-summary: Manner in which the OS on your nodes is updated. It could be NodeImage, None, SecurityPatch or Unmanaged.
        - name: --enable-force-upgrade
          type: bool
          short-summary: Enable forceUpgrade cluster upgrade settings override.
        - name: --disable-force-upgrade
          type: bool
          short-summary: Disable forceUpgrade cluster upgrade settings override.
        - name: --upgrade-override-until
          type: string
          short-summary: Until when the cluster upgradeSettings overrides are effective. It needs to be in a valid date-time format that's within the next 30 days. For example, 2023-04-01T13:00:00Z. Note that if --force-upgrade is set to true and --upgrade-override-until is not set, by default it will be set to 3 days from now.
        - name: --enable-managed-identity
          type: bool
          short-summary: Update current cluster to managed identity to manage cluster resource group.
        - name: --assign-identity
          type: string
          short-summary: Specify an existing user assigned identity to manage cluster resource group.
        - name: --assign-kubelet-identity
          type: string
          short-summary: Update cluster's kubelet identity to an existing user assigned identity. Note, this operation will recreate all agent node in the cluster.
        - name: --enable-pod-identity
          type: bool
          short-summary: (PREVIEW) Enable Pod Identity addon for cluster.
        - name: --enable-pod-identity-with-kubenet
          type: bool
          short-summary: (PREVIEW) Enable pod identity addon for cluster using Kubnet network plugin.
        - name: --disable-pod-identity
          type: bool
          short-summary: (PREVIEW) Disable Pod Identity addon for cluster.
        - name: --enable-workload-identity
          type: bool
          short-summary: (PREVIEW) Enable Workload Identity addon for cluster.
        - name: --disable-workload-identity
          type: bool
          short-summary: (PREVIEW) Disable Workload Identity addon for cluster.
        - name: --enable-azure-monitor-logs
          type: bool
          short-summary: Enable Azure Monitor logs for the cluster.
          long-summary: This is equivalent to using "az aks enable-addons -a monitoring". Enables Log Analytics monitoring for the cluster. Uses the Log Analytics Default Workspace if it exists, else creates one. Specify "--workspace-resource-id" to use an existing workspace. If monitoring addon is enabled --no-wait argument will have no effect
        - name: --disable-azure-monitor-logs
          type: bool
          short-summary: Disable Azure Monitor logs for the cluster.
          long-summary: This is equivalent to using "az aks disable-addons -a monitoring". Disables Log Analytics monitoring for the cluster.
        - name: --workspace-resource-id
          type: string
          short-summary: The resource ID of an existing Log Analytics Workspace to use for storing monitoring data. If not specified, uses the default Log Analytics Workspace if it exists, otherwise creates one.
        - name: --enable-msi-auth-for-monitoring
          type: bool
          short-summary: Send monitoring data to Log Analytics using the cluster's assigned identity (instead of the Log Analytics Workspace's shared key).
        - name: --enable-syslog
          type: bool
          short-summary: Enable syslog data collection for Monitoring addon
        - name: --data-collection-settings
          type: string
          short-summary: Path to JSON file containing data collection settings for Monitoring addon.
        - name: --enable-high-log-scale-mode
          type: bool
          short-summary: Enable High Log Scale Mode for Container Logs. Auto-enabled when --enable-container-network-logs is specified.
        - name: --ampls-resource-id
          type: string
          short-summary: Resource ID of Azure Monitor Private Link scope for Monitoring Addon.
        - name: --enable-secret-rotation
          type: bool
          short-summary: Enable secret rotation. Use with azure-keyvault-secrets-provider addon.
        - name: --disable-secret-rotation
          type: bool
          short-summary: Disable secret rotation. Use with azure-keyvault-secrets-provider addon.
        - name: --rotation-poll-interval
          type: string
          short-summary: Set interval of rotation poll. Use with azure-keyvault-secrets-provider addon.
        - name: --k8s-support-plan
          type: string
          short-summary: Choose from "KubernetesOfficial" or "AKSLongTermSupport", with "AKSLongTermSupport" you get 1 extra year of CVE patchs.
        - name: --enable-disk-driver
          type: bool
          short-summary: Enable AzureDisk CSI Driver.
        - name: --ip-families
          type: string
          short-summary: A comma separated list of IP versions to use for cluster networking.
          long-summary: Each IP version should be in the format IPvN. For example, IPv4.
        - name: --pod-cidr
          type: string
          short-summary: A CIDR notation IP range from which to assign pod IPs when kubenet is used.
          long-summary: This range must not overlap with any Subnet IP ranges. For example, 172.244.0.0/16.
        - name: --network-plugin
          type: string
          short-summary: The Kubernetes network plugin to use.
          long-summary: Specify "azure" for routable pod IPs from VNET, "kubenet" for non-routable pod IPs with an overlay network, or "none" for no networking configured.
        - name: --network-plugin-mode
          type: string
          short-summary: The network plugin mode to use.
          long-summary: |
              Used to control the mode the network plugin should operate in. For example, "overlay" used with
              --network-plugin=azure will use an overlay network (non-VNET IPs) for pods in the cluster.
        - name: --network-policy
          type: string
          short-summary: Update the mode of a network policy.
          long-summary: |
              Specify "azure" for Azure network policy manager, "cilium" for Azure CNI Overlay powered by Cilium.
              Defaults to "" (network policy disabled).
        - name: --network-dataplane
          type: string
          short-summary: The network dataplane to use.
          long-summary: |
              Network dataplane used in the Kubernetes cluster.
              Specify "azure" to use the Azure dataplane (default) or "cilium" to enable Cilium dataplane.
        - name: --disk-driver-version
          type: string
          short-summary: Specify AzureDisk CSI Driver version.
        - name: --disable-disk-driver
          type: bool
          short-summary: Disable AzureDisk CSI Driver.
        - name: --enable-file-driver
          type: bool
          short-summary: Enable AzureFile CSI Driver.
        - name: --disable-file-driver
          type: bool
          short-summary: Disable AzureFile CSI Driver.
        - name: --enable-snapshot-controller
          type: bool
          short-summary: Enable Snapshot Controller.
        - name: --disable-snapshot-controller
          type: bool
          short-summary: Disable CSI Snapshot Controller.
        - name: --enable-blob-driver
          type: bool
          short-summary: Enable AzureBlob CSI Driver.
        - name: --disable-blob-driver
          type: bool
          short-summary: Disable AzureBlob CSI Driver.
        - name: --tags
          type: string
          short-summary: The tags of the managed cluster. The managed cluster instance and all resources managed by the cloud provider will be tagged.
        - name: --windows-admin-password
          type: string
          short-summary: User account password to use on windows node VMs.
          long-summary: |-
            Rules for windows-admin-password:
                - Minimum-length: 14 characters
                - Max-length: 123 characters
                - Complexity requirements: 3 out of 4 conditions below need to be fulfilled
                  * Has lower characters
                  * Has upper characters
                  * Has a digit
                  * Has a special character (Regex match [\\W_])
                - Disallowed values:  "abc@123", "P@$$w0rd", "P@ssw0rd", "P@ssword123", "Pa$$word", "pass@word1", "Password!", "Password1", "Password22", "iloveyou!"
            Reference: https://docs.microsoft.com/en-us/dotnet/api/microsoft.azure.management.compute.models.virtualmachinescalesetosprofile.adminpassword?view=azure-dotnet
        - name: --enable-azure-rbac
          type: bool
          short-summary: Enable Azure RBAC to control authorization checks on cluster.
        - name: --disable-azure-rbac
          type: bool
          short-summary: Disable Azure RBAC to control authorization checks on cluster.
        - name: --disable-local-accounts
          type: bool
          short-summary: (Preview) If set to true, getting static credential will be disabled for this cluster.
        - name: --enable-local-accounts
          type: bool
          short-summary: (Preview) If set to true, will enable getting static credential for this cluster.
        - name: --enable-public-fqdn
          type: bool
          short-summary: Enable public fqdn feature for private cluster.
        - name: --disable-public-fqdn
          type: bool
          short-summary: Disable public fqdn feature for private cluster.
        - name: --enable-windows-gmsa
          type: bool
          short-summary: Enable Windows gmsa on cluster.
        - name: --gmsa-dns-server
          type: string
          short-summary: Specify DNS server for Windows gmsa on cluster.
          long-summary: |-
             You do not need to set this if you have set DNS server in the VNET used by the cluster.
             You must set or not set --gmsa-dns-server and --gmsa-root-domain-name at the same time when setting --enable-windows-gmsa.
        - name: --gmsa-root-domain-name
          type: string
          short-summary: Specify root domain name for Windows gmsa on cluster.
          long-summary: |-
             You do not need to set this if you have set DNS server in the VNET used by the cluster.
             You must set or not set --gmsa-dns-server and --gmsa-root-domain-name at the same time when setting --enable-windows-gmsa.
        - name: --enable-oidc-issuer
          type: bool
          short-summary: Enable OIDC issuer.
        - name: --http-proxy-config
          type: string
          short-summary: HTTP Proxy configuration for this cluster.
        - name: --kube-proxy-config
          type: string
          short-summary: kube-proxy configuration for this cluster.
        - name: --enable-azure-keyvault-kms
          type: bool
          short-summary: Enable Azure KeyVault Key Management Service.
        - name: --disable-azure-keyvault-kms
          type: bool
          short-summary: Disable Azure KeyVault Key Management Service.
        - name: --azure-keyvault-kms-key-id
          type: string
          short-summary: Identifier of Azure Key Vault key.
        - name: --azure-keyvault-kms-key-vault-network-access
          type: string
          short-summary: Network Access of Azure Key Vault.
          long-summary: Allowed values are "Public", "Private". If not set, defaults to type "Public". Requires --azure-keyvault-kms-key-id to be used.
        - name: --azure-keyvault-kms-key-vault-resource-id
          type: string
          short-summary: Resource ID of Azure Key Vault.
        - name: --kms-infrastructure-encryption
          type: string
          short-summary: Enable encryption at rest of Kubernetes resource objects using service-managed keys.
          long-summary: Enable infrastructure encryption for Kubernetes resource objects. This feature provides encryption at rest for cluster secrets and configuration using service-managed keys. For more information see https://aka.ms/aks/kubernetesResourceObjectEncryption.
        - name: --enable-image-cleaner
          type: bool
          short-summary: Enable ImageCleaner Service.
        - name: --disable-image-cleaner
          type: bool
          short-summary: Disable ImageCleaner Service.
        - name: --image-cleaner-interval-hours
          type: int
          short-summary: ImageCleaner scanning interval.
        - name: --enable-image-integrity
          type: bool
          short-summary: Enable ImageIntegrity Service.
        - name: --disable-image-integrity
          type: bool
          short-summary: Disable ImageIntegrity Service.
        - name: --enable-service-account-image-pull
          type: bool
          short-summary: Enable service account based image pull. For more information, see https://aka.ms/aks/identity-binding/acr-image-pull/docs.
        - name: --disable-service-account-image-pull
          type: bool
          short-summary: Disable service account based image pull.
        - name: --service-account-image-pull-default-managed-identity-id
          type: string
          short-summary: The default managed identity resource ID used for image pulls at the cluster level.
        - name: --enable-apiserver-vnet-integration
          type: bool
          short-summary: Enable integration of user vnet with control plane apiserver pods.
        - name: --apiserver-subnet-id
          type: string
          short-summary: The ID of a subnet in an existing VNet into which to assign control plane apiserver pods(requires --enable-apiserver-vnet-integration)
        - name: --enable-keda
          type: bool
          short-summary: Enable KEDA workload auto-scaler.
        - name: --disable-keda
          type: bool
          short-summary: Disable KEDA workload auto-scaler.
        - name: --enable-run-command
          type: bool
          short-summary: Enable Run command feature for the cluster.
        - name: --disable-run-command
          type: bool
          short-summary: Disable Run command feature for the cluster.
        - name: --enable-defender
          type: bool
          short-summary: Enable Microsoft Defender security profile.
        - name: --disable-defender
          type: bool
          short-summary: Disable defender profile.
        - name: --defender-config
          type: string
          short-summary: Path to JSON file containing Microsoft Defender profile configurations.
        - name: --enable-azuremonitormetrics
          type: bool
          short-summary: Enable Azure Monitor Metrics Profile
        - name: --enable-azure-monitor-metrics
          type: bool
          short-summary: Enable Azure Monitor Metrics Profile
        - name: --azure-monitor-workspace-resource-id
          type: string
          short-summary: Resource ID of the Azure Monitor Workspace
        - name: --ksm-metric-labels-allow-list
          type: string
          short-summary: Comma-separated list of additional Kubernetes label keys that will be used in the resource' labels metric. By default the metric contains only name and namespace labels. To include additional labels provide a list of resource names in their plural form and Kubernetes label keys you would like to allow for them (e.g. '=namespaces=[k8s-label-1,k8s-label-n,...],pods=[app],...)'. A single '*' can be provided per resource instead to allow any labels, but that has severe performance implications (e.g. '=pods=[*]').
        - name: --ksm-metric-annotations-allow-list
          type: string
          short-summary: Comma-separated list of additional Kubernetes label keys that will be used in the resource' labels metric. By default the metric contains only name and namespace labels. To include additional labels provide a list of resource names in their plural form and Kubernetes label keys you would like to allow for them (e.g.'=namespaces=[k8s-label-1,k8s-label-n,...],pods=[app],...)'. A single '*' can be provided per resource instead to allow any labels, but that has severe performance implications (e.g. '=pods=[*]').
        - name: --grafana-resource-id
          type: string
          short-summary: Resource ID of the Azure Managed Grafana Workspace
        - name: --enable-windows-recording-rules
          type: bool
          short-summary: Enable Windows Recording Rules when enabling the Azure Monitor Metrics addon
        - name: --disable-azuremonitormetrics
          type: bool
          short-summary: Disable Azure Monitor Metrics Profile. This will delete all DCRA's associated with the cluster, any linked DCRs with the data stream = prometheus-stream and the recording rule groups created by the addon for this AKS cluster.
        - name: --disable-azure-monitor-metrics
          type: bool
          short-summary: Disable Azure Monitor Metrics Profile. This will delete all DCRA's associated with the cluster, any linked DCRs with the data stream = prometheus-stream and the recording rule groups created by the addon for this AKS cluster.
        - name: --enable-azure-monitor-app-monitoring
          type: bool
          short-summary: Enable Azure Monitor Application Monitoring
        - name: --disable-azure-monitor-app-monitoring
          type: bool
          short-summary: Disable Azure Monitor Application Monitoring
        - name: --enable-opentelemetry-metrics
          type: bool
          short-summary: Enable OpenTelemetry metrics collection. Requires Azure Monitor metrics to be enabled.
        - name: --opentelemetry-metrics-port
          type: int
          short-summary: Port for OpenTelemetry metrics collection (default port will be used if not specified)
        - name: --disable-opentelemetry-metrics
          type: bool
          short-summary: Disable OpenTelemetry metrics collection
        - name: --enable-opentelemetry-logs
          type: bool
          short-summary: Enable OpenTelemetry logs collection. Requires Azure Monitor logs to be enabled.
        - name: --opentelemetry-logs-port
          type: int
          short-summary: Port for OpenTelemetry logs collection (default port will be used if not specified)
        - name: --disable-opentelemetry-logs
          type: bool
          short-summary: Disable OpenTelemetry logs collection
        - name: --enable-private-cluster
          type: bool
          short-summary: Enable private cluster for apiserver vnet integration cluster.
        - name: --disable-private-cluster
          type: bool
          short-summary: Disable private cluster for apiserver vnet integration cluster.
        - name: --private-dns-zone
          type: string
          short-summary: The private dns zone mode for private cluster.
        - name: --enable-vpa
          type: bool
          short-summary: Enable vertical pod autoscaler for cluster.
        - name: --disable-vpa
          type: bool
          short-summary: Disable vertical pod autoscaler for cluster.
        - name: --enable-optimized-addon-scaling
          type: bool
          short-summary: Enable optimized addon scaling feature for cluster.
        - name: --disable-optimized-addon-scaling
          type: bool
          short-summary: Disable optimized addon scaling feature for cluster.
        - name: --cluster-snapshot-id
          type: string
          short-summary: The source cluster snapshot id is used to update existing cluster.
        - name: --ssh-key-value
          type: string
          short-summary: Public key path or key contents to install on node VMs for SSH access. For example,
                         'ssh-rsa AAAAB...snip...UcyupgH azureuser@linuxvm'.
        - name: --ca-certs --custom-ca-trust-certificates
          type: string
          short-summary: Path to a file containing up to 10 blank line separated certificates. Only valid for linux nodes.
          long-summary: These certificates are used by Custom CA Trust features and will be added to trust stores of nodes.
        - name: --safeguards-level
          type: string
          short-summary: The deployment safeguards Level. Accepted Values are [Off, Warning, Enforcement]. Requires azure policy addon to be enabled
        - name: --safeguards-version
          type: string
          short-summary: The version of deployment safeguards to use. Default "v1.0.0" Use the ListSafeguardsVersions API to discover available versions
        - name: --safeguards-excluded-ns
          type: string
          short-summary: Comma-separated list of Kubernetes namespaces to exclude from deployment safeguards. Use "" to clear a previously non-empty list
        - name: --nodepool-taints
          type: string
          short-summary: The node taints for all node pool.
        - name: --nodepool-labels
          type: string
          short-summary: The node labels for all node pool. See https://aka.ms/node-labels for syntax of labels.
        - name: --enable-acns
          type: bool
          short-summary: Enable advanced network functionalities on a cluster. Enabling this will incur additional costs. For non-cilium clusters, acns security will be disabled by default until further notice.
        - name: --disable-acns
          type: bool
          short-summary: Disable all advanced networking functionalities on a cluster.
        - name: --disable-acns-observability
          type: bool
          short-summary: Used to disable advanced networking observability features on a clusters when enabling advanced networking features with "--enable-acns".
        - name: --disable-acns-security
          type: bool
          short-summary: Used to disable advanced networking security features on a clusters when enabling advanced networking features with "--enable-acns".
        - name: --acns-advanced-networkpolicies
          type: string
          short-summary: Used to enable advanced network policies (None, FQDN or L7) on a cluster when enabling advanced networking features with "--enable-acns".
        - name: --acns-datapath-acceleration-mode
          type: string
          short-summary: Used to set the acceleration mode (None or BpfVeth) on a cluster when enabling advanced networking features with "--enable-acns".
        - name: --enable-retina-flow-logs
          type: bool
          short-summary: Enable advanced network flow log collection functionalities on a cluster. This flag is deprecated in favor of --enable-container-network-logs.
        - name: --enable-container-network-logs
          type: bool
          short-summary: Enable container network log collection functionalities on a cluster. Automatically enables --enable-high-log-scale-mode.
        - name: --disable-retina-flow-logs
          type: bool
          short-summary: Disable advanced network flow log collection functionalities on a cluster. This flag is deprecated in favor of --disable-container-network-logs.
        - name: --disable-container-network-logs
          type: bool
          short-summary: Disable container network log collection functionalities on a cluster.
        - name: --enable-cost-analysis
          type: bool
          short-summary: Enable exporting Kubernetes Namespace and Deployment details to the Cost Analysis views in the Azure portal. For more information see aka.ms/aks/docs/cost-analysis.
        - name: --disable-cost-analysis
          type: bool
          short-summary: Disable exporting Kubernetes Namespace and Deployment details to the Cost Analysis views in the Azure portal.
        - name: --node-provisioning-mode
          type: string
          short-summary: Set the node provisioning mode of the cluster. Valid values are "Auto" and "Manual". For more information on "Auto" mode see aka.ms/aks/nap.
        - name: --node-provisioning-default-pools
          type: string
          short-summary: The set of default Karpenter NodePools configured for node provisioning. Valid values are "Auto" and "None".
          long-summary: |-
              The set of default Karpenter NodePools configured for node provisioning. Valid values are "Auto" and "None".
              Auto: A standard set of Karpenter NodePools are provisioned.
              None: No Karpenter NodePools are provisioned.
              WARNING: Changing this from Auto to None on an existing cluster will cause the default Karpenter NodePools to be deleted, which will in turn drain and delete the nodes associated with those pools. It is strongly recommended to not do this unless there are idle nodes ready to take the pods evicted by that action.
        - name: --enable-ai-toolchain-operator
          type: bool
          short-summary: Enable AI toolchain operator to the cluster
        - name: --disable-ai-toolchain-operator
          type: bool
          short-summary: Disable AI toolchain operator.
        - name: --node-init-taints --nodepool-initialization-taints
          type: string
          short-summary: The node initialization taints for all node pools in cluster.
        - name: --bootstrap-artifact-source
          type: string
          short-summary: Configure artifact source when bootstraping the cluster.
          long-summary: |
              The artifacts include the addon image. Use "Direct" to download artifacts from MCR, "Cache" to downalod artifacts from Azure Container Registry.
        - name: --bootstrap-container-registry-resource-id
          type: string
          short-summary: Configure container registry resource ID. Must use "Cache" as bootstrap artifact source.
        - name: --enable-static-egress-gateway
          type: bool
          short-summary: Enable Static Egress Gateway addon to the cluster.
        - name: --disable-static-egress-gateway
          type: bool
          short-summary: Disable Static Egress Gateway addon to the cluster.
        - name: --enable-imds-restriction
          type: bool
          short-summary: Enable IMDS restriction in the cluster. Non-hostNetwork Pods will not be able to access IMDS.
        - name: --disable-imds-restriction
          type: bool
          short-summary: Disable IMDS restriction in the cluster. All Pods in the cluster will be able to access IMDS.
        - name: --migrate-vmas-to-vms
          type: bool
          short-summary: Migrate cluster with VMAS node pool to VMS node pool.
        - name: --disable-http-proxy
          type: bool
          short-summary: Disable HTTP Proxy Configuration on the cluster.
        - name: --enable-http-proxy
          type: bool
          short-summary: Enable HTTP Proxy Configuration on the cluster.
        - name: --enable-upstream-kubescheduler-user-configuration
          type: bool
          short-summary: Enable user-defined scheduler configuration for kube-scheduler upstream on the cluster
        - name: --disable-upstream-kubescheduler-user-configuration
          type: bool
          short-summary: Disable user-defined scheduler configuration for kube-scheduler upstream on the cluster
        - name: --enable-gateway-api
          type: bool
          short-summary: Enable managed installation of Gateway API CRDs from the standard release channel.
        - name: --disable-gateway-api
          type: bool
          short-summary: Disable managed installation of Gateway API CRDs.
        - name: --enable-app-routing-istio --enable-ari
          type: bool
          short-summary: Enable Gateway API based ingress on App Routing via Istio without service mesh functionality.
          long-summary: |
              This enables an ingress-only version of Istio that reconciles Gateway API resources for App Routing.
              It does not provide service mesh functionality (e.g. mTLS, traffic management between services).
              Cannot be used simultaneously with the Istio service mesh add-on (--enable-azure-service-mesh).
        - name: --disable-app-routing-istio --disable-ari
          type: bool
          short-summary: Disable Gateway API based ingress on App Routing via Istio.
        - name: --enable-application-load-balancer
          type: bool
          short-summary: Enable Application Load Balancer (Application Gateway for Containers) addon.
        - name: --disable-application-load-balancer
          type: bool
          short-summary: Disable Application Load Balancer (Application Gateway for Containers) addon.
    examples:
      - name: Reconcile the cluster back to its current state.
        text: az aks update -g MyResourceGroup -n MyManagedCluster
      - name: Enable cluster-autoscaler within node count range [1,5]
        text: az aks update --enable-cluster-autoscaler --min-count 1 --max-count 5 -g MyResourceGroup -n MyManagedCluster
      - name: Disable cluster-autoscaler for an existing cluster
        text: az aks update --disable-cluster-autoscaler -g MyResourceGroup -n MyManagedCluster
      - name: Update min-count or max-count for cluster autoscaler.
        text: az aks update --update-cluster-autoscaler --min-count 1 --max-count 10 -g MyResourceGroup -n MyManagedCluster
      - name: Upgrade load balancer sku to standard
        text: az aks update --load-balancer-sku standard -g MyResourceGroup -n MyManagedCluster
      - name: Update a kubernetes cluster with standard SKU load balancer to use two AKS created IPs for the load balancer outbound connection usage.
        text: az aks update -g MyResourceGroup -n MyManagedCluster --load-balancer-managed-outbound-ip-count 2
      - name: Update a kubernetes cluster with standard SKU load balancer to use the provided public IPs for the load balancer outbound connection usage.
        text: az aks update -g MyResourceGroup -n MyManagedCluster --load-balancer-outbound-ips <ip-resource-id-1,ip-resource-id-2>
      - name: Update a kubernetes cluster with standard SKU load balancer to use the provided public IP prefixes for the load balancer outbound connection usage.
        text: az aks update -g MyResourceGroup -n MyManagedCluster --load-balancer-outbound-ip-prefixes <ip-prefix-resource-id-1,ip-prefix-resource-id-2>
      - name: Update a kubernetes cluster with new outbound type
        text: az aks update -g MyResourceGroup -n MyManagedCluster --outbound-type managedNATGateway
      - name: Update a kubernetes cluster with two outbound AKS managed IPs an idle flow timeout of 5 minutes and 8000 allocated ports per machine
        text: az aks update -g MyResourceGroup -n MyManagedCluster --load-balancer-managed-outbound-ip-count 2 --load-balancer-idle-timeout 5 --load-balancer-outbound-ports 8000
      - name: Update a kubernetes cluster of managedNATGateway outbound type with two outbound AKS managed IPs an idle flow timeout of 4 minutes
        text: az aks update -g MyResourceGroup -n MyManagedCluster --nat-gateway-managed-outbound-ip-count 2 --nat-gateway-idle-timeout 4
      - name: Update a kubernetes cluster with authorized apiserver ip ranges.
        text: az aks update -g MyResourceGroup -n MyManagedCluster --api-server-authorized-ip-ranges 193.168.1.0/24,194.168.1.0/24
      - name: Disable authorized apiserver ip ranges feature for a kubernetes cluster.
        text: az aks update -g MyResourceGroup -n MyManagedCluster --api-server-authorized-ip-ranges ""
      - name: Restrict apiserver traffic in a kubernetes cluster to agentpool nodes.
        text: az aks update -g MyResourceGroup -n MyManagedCluster --api-server-authorized-ip-ranges 0.0.0.0/32
      - name: Update a AKS-managed AAD cluster with tenant ID or admin group object IDs.
        text: az aks update -g MyResourceGroup -n MyManagedCluster --aad-admin-group-object-ids <id-1,id-2> --aad-tenant-id <id>
      - name: Migrate a AKS AAD-Integrated cluster or a non-AAD cluster to a AKS-managed AAD cluster.
        text: az aks update -g MyResourceGroup -n MyManagedCluster --enable-aad --aad-admin-group-object-ids <id-1,id-2> --aad-tenant-id <id>
      - name: Enable Azure Hybrid User Benefits featture for a kubernetes cluster.
        text: az aks update -g MyResourceGroup -n MyManagedCluster --enable-ahub
      - name: Disable Azure Hybrid User Benefits featture for a kubernetes cluster.
        text: az aks update -g MyResourceGroup -n MyManagedCluster --disable-ahub
      - name: Update the cluster to use system assigned managed identity in control plane.
        text: az aks update -g MyResourceGroup -n MyManagedCluster --enable-managed-identity
      - name: Update the cluster to use user assigned managed identity in control plane.
        text: az aks update -g MyResourceGroup -n MyManagedCluster --enable-managed-identity --assign-identity <user_assigned_identity_resource_id>
      - name: Enable pod identity addon.
        text: az aks update -g MyResourceGroup -n MyManagedCluster --enable-pod-identity
      - name: Disable pod identity addon.
        text: az aks update -g MyResourceGroup -n MyManagedCluster --disable-pod-identity
      - name: Update the tags of a kubernetes cluster
        text: az aks update -g MyResourceGroup -n MyManagedCLuster --tags "foo=bar" "baz=qux"
      - name: Update Windows password of a kubernetes cluster
        text: az aks update -g MyResourceGroup -n MyManagedCLuster --windows-admin-password "Repl@cePassw0rd12345678"
      - name: Update a managed AAD AKS cluster to use Azure RBAC
        text: az aks update -g MyResourceGroup -n MyManagedCluster --enable-azure-rbac
      - name: Disable Azure RBAC in a managed AAD AKS cluster
        text: az aks update -g MyResourceGroup -n MyManagedCluster --disable-azure-rbac
      - name: Enable Windows gmsa for a kubernetes cluster with setting DNS server in the vnet used by the cluster.
        text: az aks update -g MyResourceGroup -n MyManagedCluster --enable-windows-gmsa
      - name: Enable Windows gmsa for a kubernetes cluster without setting DNS server in the vnet used by the cluster.
        text: az aks update -g MyResourceGroup -n MyManagedCluster --enable-windows-gmsa --gmsa-dns-server "10.240.0.4" --gmsa-root-domain-name "contoso.com"
      - name: Update a existing managed cluster to a managed cluster snapshot.
        text: az aks update -g MyResourceGroup -n MyManagedCluster --cluster-snapshot-id "/subscriptions/00000/resourceGroups/AnotherResourceGroup/providers/Microsoft.ContainerService/managedclustersnapshots/mysnapshot1"
      - name: Update a kubernetes cluster with safeguards set to "Warning". Assumes azure policy addon is already enabled
        text: az aks update -g MyResourceGroup -n MyManagedCluster --safeguards-level Warning
      - name: Update a kubernetes cluster with safeguards set to "Warning" and some namespaces excluded. Assumes azure policy addon is already enabled
        text: az aks update -g MyResourceGroup -n MyManagedCluster --safeguards-level Warning --safeguards-excluded-ns ns1,ns2
      - name: Enable Azure Monitor logs for a kubernetes cluster
        text: az aks update -g MyResourceGroup -n MyManagedCluster --enable-azure-monitor-logs
      - name: Disable Azure Monitor logs for a kubernetes cluster
        text: az aks update -g MyResourceGroup -n MyManagedCluster --disable-azure-monitor-logs
      - name: Update a kubernetes cluster to clear any namespaces excluded from safeguards. Assumes azure policy addon is already enabled
        text: az aks update -g MyResourceGroup -n MyManagedCluster --safeguards-excluded-ns ""
      - name: Update a kubernetes cluster to enable a managed installation of Gateway API CRDs from the standard release channel.
        text: az aks update -g MyResourceGroup -n MyManagedCluster --enable-gateway-api
      - name: Update a kubernetes cluster to disable the managed installation of Gateway API CRDs.
        text: az aks update -g MyResourceGroup -n MyManagedCluster --disable-gateway-api
      - name: Enable OpenTelemetry metrics collection on an existing cluster
        text: az aks update -g MyResourceGroup -n MyManagedCluster --enable-opentelemetry-metrics
      - name: Enable OpenTelemetry logs collection on an existing cluster
        text: az aks update -g MyResourceGroup -n MyManagedCluster --enable-opentelemetry-logs
      - name: Configure OpenTelemetry metrics with custom port
        text: az aks update -g MyResourceGroup -n MyManagedCluster --enable-opentelemetry-metrics --opentelemetry-metrics-port 8888
      - name: Configure OpenTelemetry logs with custom port
        text: az aks update -g MyResourceGroup -n MyManagedCluster --enable-opentelemetry-logs --opentelemetry-logs-port 4317
      - name: Disable OpenTelemetry metrics collection on an existing cluster
        text: az aks update -g MyResourceGroup -n MyManagedCluster --disable-opentelemetry-metrics
      - name: Disable OpenTelemetry logs collection on an existing cluster
        text: az aks update -g MyResourceGroup -n MyManagedCluster --disable-opentelemetry-logs
"""

helps['aks kollect'] = """
    type: command
    short-summary: Collecting diagnostic information for the Kubernetes cluster.
    long-summary: |-
        Collect diagnostic information for the Kubernetes cluster and store it in the specified storage account.
        You can provide the storage account in three ways:
          storage account name and a shared access signature with write permission.
          resource Id to a storage account you own.
          the storagea account in diagnostics settings for your managed cluster.
    parameters:
        - name: --storage-account
          type: string
          short-summary: Name or ID of the storage account to save the diagnostic information.
        - name: --sas-token
          type: string
          short-summary: The SAS token with writable permission for the storage account.
        - name: --container-logs
          type: string
          short-summary: The list of container logs to collect.
          long-summary: |-
            The list of container logs to collect. Its value can be either all containers
            in a namespace, for example, kube-system, or a specific container in a
            namespace, for example, kube-system/tunnelfront.
        - name: --kube-objects
          type: string
          short-summary: The list of kubernetes objects to describe.
          long-summary: |-
            The list of kubernetes objects to describe. Its value can be either all objects of a type
            in a namespace, for example, kube-system/pod, or a specific object of a type in a namespace,
            for example, kube-system/deployment/tunnelfront.
        - name: --node-logs
          type: string
          short-summary: The list of node logs to collect for Linux nodes. For example, /var/log/cloud-init.log
        - name: --node-logs-windows
          type: string
          short-summary: The list of node logs to collect for Windows nodes. For example, C:\\AzureData\\CustomDataSetupScript.log
    examples:
      - name: using storage account name and a shared access signature token with write permission
        text: az aks kollect -g MyResourceGroup -n MyManagedCluster --storage-account MyStorageAccount --sas-token "MySasToken"
      - name: using the resource id of a storagea account resource you own.
        text: az aks kollect -g MyResourceGroup -n MyManagedCluster --storage-account "MyStoreageAccountResourceId"
      - name: using the storagea account in diagnostics settings for your managed cluster.
        text: az aks kollect -g MyResourceGroup -n MyManagedCluster
      - name: customize the container logs to collect.
        text: az aks kollect -g MyResourceGroup -n MyManagedCluster --container-logs "mynamespace1/mypod1 myns2"
      - name: customize the kubernetes objects to collect.
        text: az aks kollect -g MyResourceGroup -n MyManagedCluster --kube-objects "mynamespace1/service myns2/deployment/deployment1"
      - name: customize the node log files to collect.
        text: az aks kollect -g MyResourceGroup -n MyManagedCluster --node-logs "/var/log/azure-vnet.log /var/log/azure-vnet-ipam.log"
"""

helps['aks kanalyze'] = """
    type: command
    short-summary: Display diagnostic results for the Kubernetes cluster after kollect is done.
"""

helps['aks maintenanceconfiguration'] = """
    type: group
    short-summary: Commands to manage maintenance configurations in managed Kubernetes cluster.
"""

helps['aks maintenanceconfiguration show'] = """
    type: command
    short-summary: show the details of a maintenance configuration in managed Kubernetes cluster.
"""

helps['aks maintenanceconfiguration delete'] = """
    type: command
    short-summary: Delete a maintenance configuration in managed Kubernetes cluster.
"""

helps['aks maintenanceconfiguration list'] = """
    type: command
    short-summary: List maintenance configurations in managed Kubernetes cluster.
"""

helps['aks maintenanceconfiguration add'] = """
    type: command
    short-summary: Add a maintenance configuration in managed Kubernetes cluster.
    parameters:
        - name: --weekday
          type: string
          short-summary: A day in week on which maintenance is allowed. E.g. Monday. Applicable to default maintenance configuration only.
        - name: --start-hour
          type: string
          short-summary: The start time of 1 hour window which maintenance is allowd. E.g. 1 means it's allowd between 1:00 am and 2:00 am. Applicable to default maintenance configuration only.
        - name: --schedule-type
          type: string
          short-summary: Choose either 'Daily', 'Weekly', 'AbsoluteMonthly' or 'RelativeMonthly' for your maintenance schedule. Only applicable to 'aksManagedAutoUpgradeSchedule' and 'aksManagedNodeOSUpgradeSchedule' maintenance configuration.
        - name: --start-date
          type: string
          short-summary: The date the maintenance configuration activates. If not specified, the maintenance window will be active right away."
        - name: --start-time
          type: string
          short-summary: The start time of the maintenance window. Accepted values are from '00:00' to '23:59'. '--utc-offset' applies to this field. For example, '02:00' with '--utc-offset +02:00' means UTC time '00:00'.
        - name: --duration
          type: int
          short-summary: The length of maintenance window range from 4 to 24 hours.
        - name: --utc-offset
          type: string
          short-summary: The UTC offset in format +/-HH:mm. For example, '+05:30' for IST and '-07:00' for PST. If not specified, the default is '+00:00'.
        - name: --interval-days
          type: int
          short-summary: The number of days between each set of occurrences for daily schedule type.
        - name: --interval-weeks
          type: int
          short-summary: The number of weeks between each set of occurrences. Applicable to weekly schedule types only.
        - name: --interval-months
          type: int
          short-summary: The number of months between each set of occurrences. Applicable to absolute and relative monthly schedule types.
        - name: --day-of-week
          type: string
          short-summary: Specify on which day of the week the maintenance occurs. E.g. "Monday". Applicable to weekly and relative monthly schedule types.
        - name: --day-of-month
          type: int
          short-summary: Specify on which day of the month the maintenance occurs. E.g. 1 indicates the 1st of the month. Applicable to absolute monthly schedule type only.
        - name: --week-index
          type: string
          short-summary: Specify on which instance of the allowed days specified in '--day-of-week' the maintenance occurs. Applicable to relative monthly schedule type only.
        - name: --config-file
          type: string
          short-summary: The maintenance configuration json file.
    examples:
        - name: Add default maintenance configuration with --weekday and --start-hour.
          text: |
            az aks maintenanceconfiguration add -g MyResourceGroup --cluster-name test1 -n default --weekday Monday  --start-hour 1
              The maintenance is allowed on Monday 1:00am to 2:00am
        - name: Add default maintenance configuration with --weekday. The maintenance is allowd on any time of that day.
          text: |
            az aks maintenanceconfiguration add -g MyResourceGroup --cluster-name test1 -n default --weekday Monday
              The maintenance is allowed on Monday.
        - name: Add default maintenance configuration with maintenance configuration json file
          text: |
            az aks maintenanceconfiguration add -g MyResourceGroup --cluster-name test1 -n default --config-file ./test.json
                The content of json file looks below. It means the maintenance is allowed on UTC time Tuesday 1:00am - 3:00 am and Wednesday 1:00am - 2:00am, 6:00am-7:00am
                No maintenance is allowed from 2020-11-26T03:00:00Z to 2020-11-30T12:00:00Z and from 2020-12-26T03:00:00Z to 2020-12-26T12:00:00Z even if they are allowed in the above weekly setting
                {
                      "timeInWeek": [
                        {
                          "day": "Tuesday",
                          "hourSlots": [
                            1,
                            2
                          ]
                        },
                        {
                          "day": "Wednesday",
                          "hourSlots": [
                            1,
                            6
                          ]
                        }
                      ],
                      "notAllowedTime": [
                        {
                          "start": "2021-11-26T03:00:00Z",
                          "end": "2021-11-30T12:00:00Z"
                        },
                        {
                          "start": "2021-12-26T03:00:00Z",
                          "end": "2021-12-26T12:00:00Z"
                        }
                      ]
              }
        - name: Add aksManagedNodeOSUpgradeSchedule maintenance configuration with daily schedule.
          text: |
            az aks maintenanceconfiguration add -g MyResourceGroup --cluster-name test1 -n aksManagedNodeOSUpgradeSchedule --schedule-type Daily --interval-days 2 --duration 12 --utc-offset=-08:00 --start-date 2023-01-16 --start-time 00:00
              The maintenance is allowed from 00:00 to 12:00 (adjusted with UTC offset: -08:00) every two days, and this configuration will be effective from 2023-01-16.
        - name: Add aksManagedNodeOSUpgradeSchedule maintenance configuration with weekly schedule.
          text: |
            az aks maintenanceconfiguration add -g MyResourceGroup --cluster-name test1 -n aksManagedNodeOSUpgradeSchedule --schedule-type Weekly --day-of-week Friday --interval-weeks 3 --duration 8 --utc-offset +05:30 --start-date 2023-01-16 --start-time 09:30
              The maintenance is allowed on Friday from 09:30 to 17:30 (adjusted with UTC offset: +05:30) every three weeks, and this configuration will be effective from 2023-01-16.
        - name: Add aksManagedAutoUpgradeSchedule maintenance configuration with absolute monthly schedule.
          text: |
            az aks maintenanceconfiguration add -g MyResourceGroup --cluster-name test1 -n aksManagedAutoUpgradeSchedule --schedule-type AbsoluteMonthly --day-of-month 15 --interval-months 1 --duration 6 --utc-offset +05:30 --start-date 2023-01-16 --start-time 09:30
              The maintenance is allowed on the 15th of the month from 09:30 to 15:30 (adjusted with UTC offset: +05:30) every month, and this configuration will be effective from 2023-01-16.
        - name: Add aksManagedAutoUpgradeSchedule maintenance configuration with relative monthly schedule.
          text: |
            az aks maintenanceconfiguration add -g MyResourceGroup --cluster-name test1 -n aksManagedAutoUpgradeSchedule --schedule-type RelativeMonthly --day-of-week Tuesday --week-index Last --interval-months 3 --duration 6 --start-date 2023-01-16 --start-time 09:30
              The maintenance is allowed on the last Tuesday from 09:30 to 15:30 in default UTC time every 3 months, and this configuration will be effective from 2023-01-16.
        - name: Add aksManagedAutoUpgradeSchedule maintenance configuration with json file.
          text: |
            az aks maintenanceconfiguration add -g MyResourceGroup --cluster-name test1 -n aksManagedAutoUpgradeSchedule --config-file ./test.json
                The content of json file looks below. It means the maintenance is allowed on the 1st of the month from 09:00 to 13:00 (adjusted with UTC offset: -08:00) every 3 months, and this configuration will be effective from 2023-01-16.
                No maintenance is allowed from 2022-12-23 to 2023-01-05 and from 2023-11-23 to 2023-11-26 even if they are allowed in the above monthly setting
                {
                    "maintenanceWindow": {
                        "schedule": {
                            "absoluteMonthly": {
                                "intervalMonths": 3,
                                "dayOfMonth": 1
                            }
                        },
                        "durationHours": 4,
                        "utcOffset": "-08:00",
                        "startTime": "09:00",
                        "notAllowedDates": [
                            {
                                "start": "2022-12-23",
                                "end": "2023-01-05"
                            },
                            {
                                "start": "2023-11-23",
                                "end": "2023-11-26"
                            }
                        ]
                    }
                }
"""

helps['aks maintenanceconfiguration update'] = """
    type: command
    short-summary: Update a maintenance configuration of a managed Kubernetes cluster.
    parameters:
        - name: --weekday
          type: string
          short-summary: A day in week on which maintenance is allowed. E.g. Monday. Applicable to default maintenance configuration only.
        - name: --start-hour
          type: string
          short-summary: The start time of 1 hour window which maintenance is allowd. E.g. 1 means it's allowd between 1:00 am and 2:00 am. Applicable to default maintenance configuration only.
        - name: --schedule-type
          type: string
          short-summary: Choose either 'Daily', 'Weekly', 'AbsoluteMonthly' or 'RelativeMonthly' for your maintenance schedule. Only applicable to 'aksManagedAutoUpgradeSchedule' and 'aksManagedNodeOSUpgradeSchedule' maintenance configuration.
        - name: --start-date
          type: string
          short-summary: The date the maintenance configuration activates. If not specified, the maintenance window will be active right away."
        - name: --start-time
          type: string
          short-summary: The start time of the maintenance window. Accepted values are from '00:00' to '23:59'. '--utc-offset' applies to this field. For example, '02:00' with '--utc-offset +02:00' means UTC time '00:00'.
        - name: --duration
          type: int
          short-summary: The length of maintenance window range from 4 to 24 hours.
        - name: --utc-offset
          type: string
          short-summary: The UTC offset in format +/-HH:mm. For example, '+05:30' for IST and '-07:00' for PST. If not specified, the default is '+00:00'.
        - name: --interval-days
          type: int
          short-summary: The number of days between each set of occurrences for daily schedule type.
        - name: --interval-weeks
          type: int
          short-summary: The number of weeks between each set of occurrences. Applicable to weekly schedule types only.
        - name: --interval-months
          type: int
          short-summary: The number of months between each set of occurrences. Applicable to absolute and relative monthly schedule types.
        - name: --day-of-week
          type: string
          short-summary: Specify on which day of the week the maintenance occurs. E.g. "Monday". Applicable to weekly and relative monthly schedule types.
        - name: --day-of-month
          type: int
          short-summary: Specify on which day of the month the maintenance occurs. E.g. 1 indicates the 1st of the month. Applicable to absolute monthly schedule type only.
        - name: --week-index
          type: string
          short-summary: Specify on which instance of the allowed days specified in '--day-of-week' the maintenance occurs. Applicable to relative monthly schedule type only.
        - name: --config-file
          type: string
          short-summary: The maintenance configuration json file.
    examples:
        - name: Update default maintenance configuration with --weekday and --start-hour.
          text: |
            az aks maintenanceconfiguration update -g MyResourceGroup --cluster-name test1 -n default --weekday Monday  --start-hour 1
              The maintenance is allowed on Monday 1:00am to 2:00am
        - name: Update default maintenance configuration with --weekday.The maintenance is allowd on any time of that day.
          text: |
            az aks maintenanceconfiguration update -g MyResourceGroup --cluster-name test1 -n default --weekday Monday
              The maintenance is allowed on Monday.
        - name: Update default maintenance configuration with maintenance configuration json file
          text: |
            az aks maintenanceconfiguration update -g MyResourceGroup --cluster-name test1 -n default --config-file ./test.json
                The content of json file looks below. It means the maintenance is allowed on UTC time Tuesday 1:00am - 3:00 am and Wednesday 1:00am - 2:00am, 6:00am-7:00am
                No maintenance is allowed from 2020-11-26T03:00:00Z to 2020-11-30T12:00:00Z and from 2020-12-26T03:00:00Z to 2020-12-26T12:00:00Z even if they are allowed in the above weekly setting
                {
                      "timeInWeek": [
                        {
                          "day": "Tuesday",
                          "hourSlots": [
                            1,
                            2
                          ]
                        },
                        {
                          "day": "Wednesday",
                          "hourSlots": [
                            1,
                            6
                          ]
                        }
                      ],
                      "notAllowedTime": [
                        {
                          "start": "2021-11-26T03:00:00Z",
                          "end": "2021-11-30T12:00:00Z"
                        },
                        {
                          "start": "2021-12-26T03:00:00Z",
                          "end": "2021-12-26T12:00:00Z"
                        }
                      ]
              }
        - name: Update aksManagedNodeOSUpgradeSchedule maintenance configuration with daily schedule.
          text: |
            az aks maintenanceconfiguration update -g MyResourceGroup --cluster-name test1 -n aksManagedNodeOSUpgradeSchedule --schedule-type Daily --interval-days 2 --duration 12 --utc-offset=-08:00 --start-date 2023-01-16 --start-time 00:00
              The maintenance is allowed from 00:00 to 12:00 (adjusted with UTC offset: -08:00) every two days. This configuration will be effective from 2023-01-16.
        - name: Update aksManagedNodeOSUpgradeSchedule maintenance configuration with weekly schedule.
          text: |
            az aks maintenanceconfiguration update -g MyResourceGroup --cluster-name test1 -n aksManagedNodeOSUpgradeSchedule --schedule-type Weekly --day-of-week Friday --interval-weeks 3 --duration 8 --utc-offset +05:30 --start-date 2023-01-16 --start-time 09:30
              The maintenance is allowed on Friday from 09:30 to 17:30 (adjusted with UTC offset: +05:30) every three weeks. This configuration will be effective from 2023-01-16.
        - name: Update aksManagedAutoUpgradeSchedule maintenance configuration with absolute monthly schedule.
          text: |
            az aks maintenanceconfiguration update -g MyResourceGroup --cluster-name test1 -n aksManagedAutoUpgradeSchedule --schedule-type AbsoluteMonthly --day-of-month 15 --interval-months 1 --duration 6 --utc-offset +05:30 --start-date 2023-01-16 --start-time 09:30
              The maintenance is allowed on the 15th of the month from 09:30 to 15:30 (adjusted with UTC offset: +05:30) every month. This configuration will be effective from 2023-01-16.
        - name: Update aksManagedAutoUpgradeSchedule maintenance configuration with relative monthly schedule.
          text: |
            az aks maintenanceconfiguration update -g MyResourceGroup --cluster-name test1 -n aksManagedAutoUpgradeSchedule --schedule-type RelativeMonthly --day-of-week Tuesday --week-index Last --interval-months 3 --duration 6 --start-date 2023-01-16 --start-time 09:30
              The maintenance is allowed on the last Tuesday from 09:30 to 15:30 in default UTC time every 3 months. This configuration will be effective from 2023-01-16.
        - name: Update aksManagedAutoUpgradeSchedule maintenance configuration with json file.
          text: |
            az aks maintenanceconfiguration update -g MyResourceGroup --cluster-name test1 -n aksManagedAutoUpgradeSchedule --config-file ./test.json
                The content of json file looks below. It means the maintenance is allowed on the 1st of the month from 09:00 to 13:00 (adjusted with UTC offset: -08:00) every 3 months, and this configuration will be effective from 2023-01-16.
                No maintenance is allowed from 2022-12-23 to 2023-01-05 and from 2023-11-23 to 2023-11-26 even if they are allowed in the above monthly setting
                {
                    "maintenanceWindow": {
                        "schedule": {
                            "absoluteMonthly": {
                                "intervalMonths": 3,
                                "dayOfMonth": 1
                            }
                        },
                        "durationHours": 4,
                        "utcOffset": "-08:00",
                        "startTime": "09:00",
                        "notAllowedDates": [
                            {
                                "start": "2022-12-23",
                                "end": "2023-01-05"
                            },
                            {
                                "start": "2023-11-23",
                                "end": "2023-11-26"
                            }
                        ]
                    }
                }
"""

helps['aks namespace'] = """
    type: group
    short-summary: Commands to manage namespace in managed Kubernetes cluster.
"""

helps['aks namespace add'] = """
    type: command
    short-summary: Add namespace to the managed Kubernetes cluster.
    parameters:
        - name: --cluster-name
          type: string
          short-summary: Name of the managed cluster.
        - name: --tags
          type: string
          short-summary: The tags of the managed namespace.
        - name: --labels
          type: string
          short-summary: Labels for the managed namespace.
        - name: --annotations
          type: string
          short-summary: Annotations for the managed namespace.
        - name: --cpu-request
          type: string
          short-summary: CPU request of the namespace.
        - name: --cpu-limit
          type: string
          short-summary: CPU limit of the namespace.
        - name: --memory-request
          type: string
          short-summary: Memory request of the namespace.
        - name: --memory-limit
          type: string
          short-summary: Memory limit of the namespace.
        - name: --ingress-policy
          type: string
          short-summary: Ingress policy for the network. The default value is AllowSameNamespace.
        - name: --egress-policy
          type: string
          short-summary: Egress policy for the network. The default value is AllowAll.
        - name: --adoption-policy
          type: string
          short-summary: Action if Kubernetes namespace with same name already exists. The default value is Never.
        - name: --delete-policy
          type: string
          short-summary: Delete options of a namespace. The default value is Keep.
        - name: --aks-custom-headers
          type: string
          short-summary: Send custom headers. When specified, format should be Key1=Value1,Key2=Value2.
        - name: --no-wait
          type: bool
          short-summary: Do not wait for the long-running operation to finish.
    examples:
        - name: Create a namespace in an existing AKS cluster.
          text: az aks namespace add -g MyResourceGroup --cluster-name MyClusterName --name NamespaceName --cpu-request 500m --cpu-limit 800m --memory-request 1Gi --memory-limit 2Gi
        - name: Create a namespace in an existing AKS cluster with labels, annotations and tags
          text: az aks namespace add -g MyResourceGroup --cluster-name MyClusterName --name NamespaceName --labels a=b p=q --annotations a=b p=q --tags a=b p=q --cpu-request 500m --cpu-limit 800m --memory-request 1Gi --memory-limit 2Gi
"""

helps['aks namespace update'] = """
    type: command
    short-summary: Update namespace on the managed Kubernetes cluster.
    parameters:
        - name: --cluster-name
          type: string
          short-summary: Name of the managed cluster.
        - name: --tags
          type: string
          short-summary: The tags of the managed namespace.
        - name: --labels
          type: string
          short-summary: Labels for the managed namespace.
        - name: --annotations
          type: string
          short-summary: Annotations for the managed namespace.
        - name: --cpu-request
          type: string
          short-summary: CPU request of the namespace.
        - name: --cpu-limit
          type: string
          short-summary: CPU limit of the namespace.
        - name: --memory-request
          type: string
          short-summary: Memory request of the namespace.
        - name: --memory-limit
          type: string
          short-summary: Memory limit of the namespace.
        - name: --ingress-policy
          type: string
          short-summary: Ingress policy rule for the network.
        - name: --egress-policy
          type: string
          short-summary: Egress policy rule for the network.
        - name: --adoption-policy
          type: string
          short-summary: Action if Kubernetes namespace with same name already exists.
        - name: --delete-policy
          type: string
          short-summary: Delete options of a namespace
        - name: --aks-custom-headers
          type: string
          short-summary: Send custom headers. When specified, format should be Key1=Value1,Key2=Value2
        - name: --no-wait
          type: bool
          short-summary: Do not wait for the long-running operation to finish
    examples:
        - name: update namespace in an existing AKS cluster.
          text: az aks namespace update -g MyResourceGroup --cluster-name MyClusterName --name NamespaceName --labels a=b p=q --annotations a=b p=q --tags a=b p=q --cpu-request 600m --cpu-limit 800m --memory-request 2Gi --memory-limit 3Gi --adoption-policy Always
"""

helps['aks namespace show'] = """
    type: command
    short-summary: show the details of a managed namespace in managed Kubernetes cluster.
"""

helps['aks namespace list'] = """
    type: command
    short-summary: List managed namespaces in managed Kubernetes cluster.
"""

helps['aks namespace delete'] = """
    type: command
    short-summary: Delete a managed namespace in managed Kubernetes cluster.
"""

helps['aks namespace get-credentials'] = """
type: command
short-summary: Get access credentials for a managed namespace.
parameters:
  - name: --file -f
    type: string
    short-summary: Kubernetes configuration file to update. Use "-" to print YAML to stdout instead.
  - name: --overwrite-existing
    type: bool
    short-summary: Overwrite any existing cluster entry with the same name.
  - name: --output -o
    type: string
    long-summary: Credentials are always in YAML format, so this argument is effectively ignored.
examples:
  - name: Get access credentials for a managed namespace. (autogenerated)
    text: az aks namespace get-credentials --resource-group MyResourceGroup --cluster-name MyManagedCluster --name ManagedNamespaceName
    crafted: true
"""

helps['aks nodepool'] = """
    type: group
    short-summary: Commands to manage node pools in managed Kubernetes cluster.
"""
helps['aks nodepool show'] = """
    type: command
    short-summary: Show the details for a node pool in the managed Kubernetes cluster.
"""

helps['aks nodepool list'] = """
    type: command
    short-summary: List node pools in the managed Kubernetes cluster.
"""

helps['aks nodepool add'] = """
    type: command
    short-summary: Add a node pool to the managed Kubernetes cluster.
    parameters:
        - name: --node-vm-size -s
          type: string
          short-summary: Size of Virtual Machines to create as Kubernetes nodes. If the user does not specify one, server will select a default VM size for her/him.
        - name: --node-count -c
          type: int
          short-summary: Number of nodes in the Kubernetes agent pool. After creating a cluster, you can change the
                         size of its node pool with `az aks scale`.
        - name: --kubernetes-version -k
          type: string
          short-summary: Version of Kubernetes to use for creating the cluster, such as "1.7.12" or "1.8.7".
          populator-commands:
          - "`az aks get-versions`"
        - name: --node-osdisk-size
          type: int
          short-summary: Size in GiB of the OS disk for each node in the agent pool. Minimum 30 GiB.
        - name: --node-osdisk-type
          type: string
          short-summary: OS disk type to be used for machines in a given agent pool. Defaults to 'Ephemeral' when possible in conjunction with VM size and OS disk size. May not be changed for this pool after creation. ('Ephemeral' or 'Managed')
        - name: --max-pods -m
          type: int
          short-summary: The maximum number of pods deployable to a node.
          long-summary: If not specified, defaults based on network-plugin. 30 for "azure", 110 for "kubenet", or 250 for "none".
        - name: --zones -z
          type: string array
          short-summary: Space-separated list of availability zones where agent nodes will be placed. Must use VMSS agent pool type.
        - name: --vnet-subnet-id
          type: string
          short-summary: The ID of a subnet in an existing VNet into which to deploy the cluster.
        - name: --pod-subnet-id
          type: string
          short-summary: The ID of a subnet in an existing VNet into which to assign pods in the cluster (requires azure network-plugin)
        - name: --ppg
          type: string
          short-summary: The ID of a PPG. Must use VMSS agent pool type.
        - name: --os-type
          type: string
          short-summary: The OS Type. Linux or Windows. Windows not supported yet for "VirtualMachines" VM set type.
        - name: --os-sku
          type: string
          short-summary: The os-sku of the agent node pool. Ubuntu, Ubuntu2204, Ubuntu2404, CBLMariner, AzureLinux, AzureLinux3, AzureLinuxOSGuard, AzureLinux3OSGuard, or Flatcar when os-type is Linux, default is Ubuntu if not set; Windows2019, Windows2022, Windows2025, or WindowsAnnual when os-type is Windows, the current default is Windows2022 if not set.
        - name: --enable-fips-image
          type: bool
          short-summary: Use FIPS-enabled OS on agent nodes.
        - name: --enable-cluster-autoscaler -e
          type: bool
          short-summary: Enable cluster autoscaler. Must use VMSS agent pool type.
        - name: --min-count
          type: int
          short-summary: Minimun nodes count used for autoscaler, when "--enable-cluster-autoscaler" specified. Please specify the value in the range of [0, 1000] for user nodepool, and [1,1000] for system nodepool.
        - name: --max-count
          type: int
          short-summary: Maximum nodes count used for autoscaler, when "--enable-cluster-autoscaler" specified. Please specify the value in the range of [0, 1000] for user nodepool, and [1,1000] for system nodepool.
        - name: --scale-down-mode
          type: string
          short-summary: "Describes how VMs are added to or removed from nodepools."
        - name: --node-taints
          type: string
          short-summary: The node taints for the node pool.
        - name: --priority
          type: string
          short-summary: The priority of the node pool.
        - name: --eviction-policy
          type: string
          short-summary: The eviction policy of the Spot node pool. It can only be set when --priority is Spot.
        - name: --spot-max-price
          type: float
          short-summary: It can only be set when --priority is Spot. Specify the maximum price you are willing to pay in US Dollars. Possible values are any decimal value greater than zero or -1 which indicates default price to be up-to on-demand. It can only include up to 5 decimal places.
        - name: --enable-node-public-ip
          type: bool
          short-summary: Enable VMSS node public IP. Must use VMSS agent pool type.
        - name: --node-public-ip-prefix-id
          type: string
          short-summary: Public IP prefix ID used to assign public IPs to VMSS nodes. Must use VMSS agent pool type.
        - name: --labels
          type: string
          short-summary: The node labels for the node pool. See https://aka.ms/node-labels for syntax of labels.
        - name: --mode
          type: string
          short-summary: The mode for a node pool which defines a node pool's primary function. If set as "System", AKS prefers system pods scheduling to node pools with mode `System`. If set as "ManagedSystem", all other properties except name and mode will be reset and managed by AKS. Learn more at https://aka.ms/aks/nodepool/mode.
        - name: --vm-set-type
          type: string
          short-summary: Agent pool vm set type. VirtualMachineScaleSets, AvailabilitySet or VirtualMachines(Preview).
        - name: --aks-custom-headers
          type: string
          short-summary: Send custom headers. When specified, format should be Key1=Value1,Key2=Value2
        - name: --max-surge
          type: string
          short-summary: Extra nodes used to speed upgrade. When specified, it represents the number or percent used, eg. 5 or 33%
        - name: --drain-timeout
          type: int
          short-summary: When nodes are drain how many minutes to wait for all pods to be evicted
        - name: --node-soak-duration
          type: int
          short-summary: The amount of time (in minutes) to wait after draining a node and before reimaging it and moving on to next node.
        - name: --max-unavailable
          type: string
          short-summary: The maximum number or percentage of nodes that can be simultaneously unavailable during upgrade. When specified, it represents the number or percent used, eg. 1 or 5%
        - name: --max-blocked-nodes
          type: string
          short-summary: The maximum number or percentage of extra nodes that are allowed to be blocked in the agent pool during an upgrade when undrainable node behavior is Cordon. When specified, it represents the number or percent used, eg. 1 or 5%.
        - name: --kubelet-config
          type: string
          short-summary: Kubelet configurations for agent nodes.
        - name: --linux-os-config
          type: string
          short-summary: OS configurations for Linux agent nodes.
        - name: --enable-encryption-at-host
          type: bool
          short-summary: Enable EncryptionAtHost on agent node pool.
        - name: --enable-ultra-ssd
          type: bool
          short-summary: Enable UltraSSD on agent node pool. Must use VMSS agent pool type.
        - name: --workload-runtime
          type: string
          short-summary: Determines the type of workload a node can run. Defaults to OCIContainer.
        - name: --gpu-instance-profile
          type: string
          short-summary: GPU instance profile to partition multi-gpu Nvidia GPUs.
        - name: --snapshot-id
          type: string
          short-summary: The source snapshot id used to create this nodepool. Must use VMSS agent pool type.
        - name: --crg-id
          type: string
          short-summary: The crg-id used to associate the new nodepool with the existed Capacity Reservation Group resource. Must use VMSS agent pool type.
        - name: --host-group-id
          type: string
          short-summary: (PREVIEW) The fully qualified dedicated host group id used to provision agent node pool. Must use VMSS agent pool type.
        - name: --message-of-the-day
          type: string
          short-summary: Path to a file containing the desired message of the day. Only valid for linux nodes. Will be written to /etc/motd.
        - name: --disable-windows-outbound-nat
          type: bool
          short-summary: Disable Windows OutboundNAT on Windows agent node pool. Must use VMSS agent pool type.
        - name: --allowed-host-ports
          type: string
          short-summary: Expose host ports on the node pool. When specified, format should be a comma-separated list of ranges with protocol, eg. 80/TCP,443/TCP,4000-5000/TCP. Must use VMSS agent pool type.
        - name: --asg-ids
          type: string
          short-summary: The IDs of the application security groups to which the node pool's network interface should belong. When specified, format should be a comma-separated list of IDs. Must use VMSS agent pool type.
        - name: --node-public-ip-tags
          type: string
          short-summary: The ipTags of the node public IPs. Must use VMSS agent pool type.
        - name: --enable-artifact-streaming
          type: bool
          short-summary: Enable artifact streaming for VirtualMachineScaleSets managed by a node pool, to speed up the cold-start of containers on a node through on-demand image loading. To use this feature, container images must also enable artifact streaming on ACR. If not specified, the default is false.
        - name: --enable-managed-gpu
          type: bool
          short-summary: Enable the Managed GPU experience, which installs additional components like DCGM metrics for monitoring on top of the GPU driver. For more details, visit aka.ms/aks/managed-gpu.
        - name: --skip-gpu-driver-install
          type: bool
          short-summary: To skip GPU driver auto installation by AKS on a nodepool using GPU vm size if customers want to manage GPU driver installation by their own. If not specified, the default is false.
        - name: --gpu-driver
          type: string
          short-summary: Whether to install driver for GPU node pool. Possible values are "Install" or "None". Default is "Install".
        - name: --driver-type
          type: string
          short-summary: Specify the type of GPU driver to install when creating Windows agent pools. Valid values are "GRID" and "CUDA". If not provided, AKS selects the driver based on system compatibility. This option cannot be changed once the AgentPool has been created. The default is system selected.
        - name: --gpu-mig-strategy
          type: string
          short-summary: Specify the MIG (Multi-Instance GPU) strategy for managed MIG support. Valid values are "Single" and "Mixed". When not specified, managed MIG is disabled.
        - name: --ssh-access
          type: string
          short-summary: Configure SSH setting for the node pool. Use "disabled" to disable SSH access, "localuser" to enable SSH access using private key.
        - name: --pod-ip-allocation-mode
          type: string
          short-summary: Set the ip allocation mode for how Pod IPs from the Azure Pod Subnet are allocated to the nodes in the AKS cluster. The choice is between dynamic batches of individual IPs or static allocation of a set of CIDR blocks. Accepted Values are "DynamicIndividual" or "StaticBlock".
          long-summary: |
              Used together with the "azure" network plugin.
              Requires --pod-subnet-id.
        - name: --enable-secure-boot
          type: bool
          short-summary: Enable Secure Boot on agent node pool. Must use VMSS agent pool type.
        - name: --enable-vtpm
          type: bool
          short-summary: Enable vTPM on agent node pool. Must use VMSS agent pool type.
        - name: --if-match
          type: string
          short-summary: The value provided will be compared to the ETag of the agentpool, if it matches the operation will proceed. If it does not match, the request will be rejected to prevent accidental overwrites. This must not be specified when creating a new agentpool.
        - name: --if-none-match
          type: string
          short-summary: Set to '*' to allow a new agentpool to be created, but to prevent updating an existing agentpool. Other values will be ignored.
        - name: --gateway-prefix-size
          type: int
          short-summary: The size of Public IPPrefix attached to the Gateway-mode node pool. The node pool must be in Gateway mode.
        - name: --vm-sizes
          type: string
          short-summary: Comma-separated list of sizes. Must use VirtualMachines agent pool type.
        - name: --undrainable-node-behavior
          type: string
          short-summary: Define the behavior for undrainable nodes during upgrade. The value should be "Cordon" or "Schedule". The default value is "Schedule".
        - name: --localdns-config
          type: string
          short-summary: Set the localDNS Profile for a nodepool with a JSON config file.
        - name: --upgrade-strategy
          type: string
          short-summary: Upgrade strategy for the node pool. Allowed values are "Rolling" or "BlueGreen". Default is "Rolling".
        - name: --drain-batch-size
          type: string
          short-summary: Number or percentage of nodes to drain per batch during blue-green upgrades. Accepts an integer (e.g. '5') or percentage (e.g. '50%'). Default is 10%.
          long-summary: |-
            Specifies how many nodes to drain in each batch during a blue-green upgrade. Must be a non-zero value, either as an integer (e.g. '5') or a percentage (e.g. '50%') of the total blue nodes at the start of the upgrade. Fractional nodes are rounded up. For more details and best practices, see https://learn.microsoft.com/en-us/azure/aks/upgrade-cluster
        - name: --drain-timeout-bg
          type: int
          short-summary: Timeout (in minutes) to evict pods and gracefully terminate per node during blue-green upgrades. Default is 30 minutes.
          long-summary: Maximum time (in minutes) to wait for pod eviction and graceful termination per node during blue-green upgrades. Honors pod disruption budgets. If exceeded, the upgrade fails. Default is 30 minutes.
        - name: --batch-soak-duration
          type: int
          short-summary: Wait time (in minutes) after draining a batch of nodes before proceeding to the next batch. Default is 15 minutes. Only for blue-green upgrades.
        - name: --final-soak-duration
          type: int
          short-summary: Wait time (in minutes) after all old nodes are drained before removing them. Default is 60 minutes. Only for blue-green upgrades.
    examples:
        - name: Create a nodepool in an existing AKS cluster with ephemeral os enabled.
          text: az aks nodepool add -g MyResourceGroup -n nodepool1 --cluster-name MyManagedCluster --node-osdisk-type Ephemeral --node-osdisk-size 48
        - name: Create a nodepool with EncryptionAtHost enabled.
          text: az aks nodepool add -g MyResourceGroup -n nodepool1 --cluster-name MyManagedCluster --enable-encryption-at-host
        - name: Create a nodepool with a specific os-sku
          text: az aks nodepool add -g MyResourceGroup -n nodepool1 --cluster-name MyManagedCluster  --os-sku Ubuntu
        - name: Create a nodepool which can run wasm workloads.
          text: az aks nodepool add -g MyResourceGroup -n nodepool1 --cluster-name MyManagedCluster  --workload-runtime WasmWasi
        - name: create a kubernetes cluster with a snapshot id.
          text: az aks nodepool add -g MyResourceGroup -n nodepool1 --cluster-name MyManagedCluster --kubernetes-version 1.20.9 --snapshot-id "/subscriptions/00000/resourceGroups/AnotherResourceGroup/providers/Microsoft.ContainerService/snapshots/mysnapshot1"
        - name: create a nodepool with a Capacity Reservation Group(CRG) ID.
          text: az aks nodepool add -g MyResourceGroup -n MyNodePool --cluster-name MyMC --node-vm-size VMSize --crg-id "/subscriptions/SubID/resourceGroups/ResourceGroupName/providers/Microsoft.ContainerService/CapacityReservationGroups/MyCRGID"
        - name: create a nodepool in an existing AKS cluster with host group id
          text: az aks nodepool add -g MyResourceGroup -n MyNodePool --cluster-name MyMC --host-group-id /subscriptions/00000/resourceGroups/AnotherResourceGroup/providers/Microsoft.ContainerService/hostGroups/myHostGroup --node-vm-size VMSize
        - name: Create a nodepool with ip allocation mode set to "StaticBlock" and using a pod subnet ID
          text: az aks nodepool add -g MyResourceGroup -n nodepool1 --cluster-name MyManagedCluster  --os-sku Ubuntu --pod-subnet-id /subscriptions/00000/resourceGroups/AnotherResourceGroup/providers/Microsoft.Network/virtualNetworks/MyVnet/subnets/MySubnet --pod-ip-allocation-mode StaticBlock
        - name: Create a nodepool of type VirtualMachines
          text: az aks nodepool add -g MyResourceGroup -n nodepool1 --cluster-name MyManagedCluster --vm-set-type VirtualMachines --vm-sizes "Standard_D4s_v3,Standard_D8s_v3" --node-count 3
        - name: Create a nodepool with ManagedSystem mode
          text: az aks nodepool add -g MyResourceGroup -n managedsystem1 --cluster-name MyManagedCluster --mode ManagedSystem
        - name: Create a node pool with blue-green upgrade strategy and default parameters
          text: az aks nodepool add -g MyResourceGroup -n nodepool1 --cluster-name MyManagedCluster --upgrade-strategy BlueGreen
"""

helps['aks nodepool scale'] = """
    type: command
    short-summary: Scale the node pool in a managed Kubernetes cluster.
    parameters:
        - name: --node-count -c
          type: int
          short-summary: Number of nodes in the Kubernetes node pool.
        - name: --aks-custom-headers
          type: string
          short-summary: Send custom headers. When specified, format should be Key1=Value1,Key2=Value2
"""

helps['aks nodepool upgrade'] = """
    type: command
    short-summary: Upgrade the node pool in a managed Kubernetes cluster.
    parameters:
        - name: --kubernetes-version -k
          type: string
          short-summary: Version of Kubernetes to upgrade the node pool to, such as "1.11.12".
        - name: --node-image-only
          type: bool
          short-summary: Only upgrade agent pool's node image.
        - name: --max-surge
          type: string
          short-summary: Extra nodes used to speed upgrade. When specified, it represents the number or percent used, eg. 5 or 33%
        - name: --drain-timeout
          type: int
          short-summary: When nodes are drain how many minutes to wait for all pods to be evicted
        - name: --node-soak-duration
          type: int
          short-summary: The amount of time (in minutes) to wait after draining a node and before reimaging it and moving on to next node.
        - name: --max-unavailable
          type: string
          short-summary: The maximum number or percentage of nodes that can be simultaneously unavailable during upgrade. When specified, it represents the number or percent used, eg. 1 or 5%
        - name: --max-blocked-nodes
          type: string
          short-summary: The maximum number or percentage of extra nodes that are allowed to be blocked in the agent pool during an upgrade when undrainable node behavior is Cordon. When specified, it represents the number or percent used, eg. 1 or 5%.
        - name: --aks-custom-headers
          type: string
          short-summary: Send custom headers. When specified, format should be Key1=Value1,Key2=Value2
        - name: --snapshot-id
          type: string
          short-summary: The source snapshot id used to upgrade this nodepool. Must use VMSS agent pool type.
        - name: --if-match
          type: string
          short-summary: The value provided will be compared to the ETag of the node pool, if it matches the operation will proceed. If it does not match, the request will be rejected to prevent accidental overwrites. This must not be specified when creating a new agentpool. For upgrade node image version requests this will be ignored.
        - name: --if-none-match
          type: string
          short-summary: Set to '*' to allow a new node pool to be created, but to prevent updating an existing node pool. Other values will be ignored.
        - name: --undrainable-node-behavior
          type: string
          short-summary: Define the behavior for undrainable nodes during upgrade. The value should be "Cordon" or "Schedule". The default value is "Schedule".
        - name: --upgrade-strategy
          type: string
          short-summary: Upgrade strategy for the node pool. Allowed values are "Rolling" or "BlueGreen". Default is "Rolling".
        - name: --drain-batch-size
          type: string
          short-summary: Number or percentage of nodes to drain per batch during blue-green upgrades. Accepts an integer (e.g. '5') or percentage (e.g. '50%'). Default is 10%.
          long-summary: |-
            Specifies how many nodes to drain in each batch during a blue-green upgrade. Must be a non-zero value, either as an integer (e.g. '5') or a percentage (e.g. '50%') of the total blue nodes at the start of the upgrade. Fractional nodes are rounded up. For more details and best practices, see: https://learn.microsoft.com/en-us/azure/aks/upgrade-cluster
        - name: --drain-timeout-bg
          type: int
          short-summary: Timeout (in minutes) to evict pods and gracefully terminate per node during blue-green upgrades. Default is 30 minutes.
          long-summary: Maximum time (in minutes) to wait for pod eviction and graceful termination per node during blue-green upgrades. Honors pod disruption budgets. If exceeded, the upgrade fails. Default is 30 minutes.
        - name: --batch-soak-duration
          type: int
          short-summary: Wait time (in minutes) after draining a batch of nodes before proceeding to the next batch. Default is 15 minutes. Only for blue-green upgrades.
        - name: --final-soak-duration
          type: int
          short-summary: Wait time (in minutes) after all old nodes are drained before removing them. Default is 60 minutes. Only for blue-green upgrades.
"""

helps['aks nodepool update'] = """
    type: command
    short-summary: Update a node pool properties.
    long-summary: Update a node pool to enable/disable cluster-autoscaler or change min-count or max-count.  When called with no optional arguments this attempts to move the node pool to its goal state without changing the current node pool configuration. This can be used to move out of a non succeeded state.
    parameters:
        - name: --enable-cluster-autoscaler -e
          type: bool
          short-summary: Enable cluster autoscaler. Must use VMSS agent pool type.
        - name: --disable-cluster-autoscaler -d
          type: bool
          short-summary: Disable cluster autoscaler.
        - name: --update-cluster-autoscaler -u
          type: bool
          short-summary: Update min-count or max-count for cluster autoscaler.
        - name: --min-count
          type: int
          short-summary: Minimun nodes count used for autoscaler, when "--enable-cluster-autoscaler" specified. Please specify the value in the range of [0, 1000] for user nodepool, and [1,1000] for system nodepool.
        - name: --max-count
          type: int
          short-summary: Maximum nodes count used for autoscaler, when "--enable-cluster-autoscaler" specified. Please specify the value in the range of [0, 1000] for user nodepool, and [1,1000] for system nodepool.
        - name: --scale-down-mode
          type: string
          short-summary: "Describes how VMs are added to or removed from nodepools."
        - name: --max-surge
          type: string
          short-summary: Extra nodes used to speed upgrade. When specified, it represents the number or percent used, eg. 5 or 33%
        - name: --drain-timeout
          type: int
          short-summary: When nodes are drain how many minutes to wait for all pods to be evicted
        - name: --node-soak-duration
          type: int
          short-summary: The amount of time (in minutes) to wait after draining a node and before reimaging it and moving on to next node.
        - name: --max-unavailable
          type: string
          short-summary: The maximum number or percentage of nodes that can be simultaneously unavailable during upgrade. When specified, it represents the number or percent used, eg. 1 or 5%
        - name: --max-blocked-nodes
          type: string
          short-summary: The maximum number or percentage of extra nodes that are allowed to be blocked in the agent pool during an upgrade when undrainable node behavior is Cordon. When specified, it represents the number or percent used, eg. 1 or 5%.
        - name: --mode
          type: string
          short-summary: The mode for a node pool which defines a node pool's primary function. If set as "System", AKS prefers system pods scheduling to node pools with mode `System`. If set as "ManagedSystem", all other properties except name and mode will be rejected and managed by AKS. Learn more at https://aka.ms/aks/nodepool/mode.
        - name: --labels
          type: string
          short-summary: The node labels for the node pool. See https://aka.ms/node-labels for syntax of labels.
        - name: --node-taints
          type: string
          short-summary: The node taints for the node pool.
        - name: --aks-custom-headers
          type: string
          short-summary: Send custom headers. When specified, format should be Key1=Value1,Key2=Value2
        - name: --allowed-host-ports
          type: string
          short-summary: Expose host ports on the node pool. When specified, format should be a comma-separated list of ranges with protocol, eg. 80/TCP,443/TCP,4000-5000/TCP. Must use VMSS agent pool type.
        - name: --asg-ids
          type: string
          short-summary: The IDs of the application security groups to which the node pool's network interface should belong. When specified, format should be a comma-separated list of IDs. Must use VMSS agent pool type.
        - name: --enable-artifact-streaming
          type: bool
          short-summary: Enable artifact streaming for VirtualMachineScaleSets managed by a node pool, to speed up the cold-start of containers on a node through on-demand image loading. To use this feature, container images must also enable artifact streaming on ACR. If not specified, the default is false.
        - name: --disable-artifact-streaming
          type: bool
          short-summary: Disable artifact streaming for VirtualMachineScaleSets managed by a node pool.
        - name: --enable-managed-gpu
          type: bool
          short-summary: Enable the Managed GPU experience, which installs additional components like DCGM metrics for monitoring on top of the GPU driver. For more details, visit aka.ms/aks/managed-gpu.
        - name: --os-sku
          type: string
          short-summary: The os-sku of the agent node pool.
        - name: --ssh-access
          type: string
          short-summary: Update SSH setting for the node pool. Use "disabled" to disable SSH access, "localuser" to enable SSH access using private key.
        - name: --enable-secure-boot
          type: bool
          short-summary: Enable Secure Boot on an existing Trusted Launch enabled agent node pool. Must use VMSS agent pool type.
        - name: --disable-secure-boot
          type: bool
          short-summary: Disable Secure Boot on on an existing Trusted Launch enabled agent node pool.
        - name: --enable-vtpm
          type: bool
          short-summary: Enable vTPM on an existing Trusted Launch enabled agent node pool. Must use VMSS agent pool type.
        - name: --disable-vtpm
          type: bool
          short-summary: Disable vTPM on an existing Trusted Launch enabled agent node pool.
        - name: --if-match
          type: string
          short-summary: The value provided will be compared to the ETag of the node pool, if it matches the operation will proceed. If it does not match, the request will be rejected to prevent accidental overwrites. This must not be specified when creating a new agentpool.
        - name: --if-none-match
          type: string
          short-summary: Set to '*' to allow a new node pool to be created, but to prevent updating an existing node pool. Other values will be ignored.
        - name: --enable-fips-image
          type: bool
          short-summary: Switch to use FIPS-enabled OS on agent nodes.
        - name: --disable-fips-image
          type: bool
          short-summary: Switch to use non-FIPS-enabled OS on agent nodes.
        - name: --undrainable-node-behavior
          type: string
          short-summary: Define the behavior for undrainable nodes during upgrade. The value should be "Cordon" or "Schedule". The default value is "Schedule".
        - name: --localdns-config
          type: string
          short-summary: Set the localDNS Profile for a nodepool with a JSON config file.
        - name: --node-vm-size -s
          type: string
          short-summary: VM size for Kubernetes nodes. For VMSS pools, changing this triggers a rolling upgrade to replace nodes with the new size (preview). For VirtualMachines pools, only configurable when updating autoscale settings.
        - name: --upgrade-strategy
          type: string
          short-summary: Upgrade strategy for the node pool. Allowed values are "Rolling" or "BlueGreen". Default is "Rolling".
        - name: --drain-batch-size
          type: string
          short-summary: Number or percentage of nodes to drain per batch during blue-green upgrades. Accepts an integer (e.g. '5') or percentage (e.g. '50%'). Default is 10%.
          long-summary: |-
            Specifies how many nodes to drain in each batch during a blue-green upgrade. Must be a non-zero value, either as an integer (e.g. '5') or a percentage (e.g. '50%') of the total blue nodes at the start of the upgrade. Fractional nodes are rounded up. For more details and best practices, see: https://learn.microsoft.com/en-us/azure/aks/upgrade-cluster
        - name: --drain-timeout-bg
          type: int
          short-summary: Timeout (in minutes) to evict pods and gracefully terminate per node during blue-green upgrades. Default is 30 minutes.
          long-summary: Maximum time (in minutes) to wait for pod eviction and graceful termination per node during blue-green upgrades. Honors pod disruption budgets. If exceeded, the upgrade fails. Default is 30 minutes.
        - name: --batch-soak-duration
          type: int
          short-summary: Wait time (in minutes) after draining a batch of nodes before proceeding to the next batch. Default is 15 minutes. Only for blue-green upgrades.
        - name: --final-soak-duration
          type: int
          short-summary: Wait time (in minutes) after all old nodes are drained before removing them. Default is 60 minutes. Only for blue-green upgrades.
        - name: --gpu-driver
          type: string
          short-summary: Whether to install driver for GPU node pool. Possible values are "Install" or "None".
    examples:
      - name: Reconcile the nodepool back to its current state.
        text: az aks nodepool update -g MyResourceGroup -n nodepool1 --cluster-name MyManagedCluster
      - name: Enable cluster-autoscaler within node count range [1,5]
        text: az aks nodepool update --enable-cluster-autoscaler --min-count 1 --max-count 5 -g MyResourceGroup -n nodepool1 --cluster-name MyManagedCluster
      - name: Disable cluster-autoscaler for an existing cluster
        text: az aks nodepool update --disable-cluster-autoscaler -g MyResourceGroup -n nodepool1 --cluster-name MyManagedCluster
      - name: Update min-count or max-count for cluster autoscaler.
        text: az aks nodepool update --update-cluster-autoscaler --min-count 1 --max-count 10 -g MyResourceGroup -n nodepool1 --cluster-name MyManagedCluster
      - name: Change a node pool to system mode
        text: az aks nodepool update --mode System -g MyResourceGroup -n nodepool1 --cluster-name MyManagedCluster
      - name: Update cluster autoscaler vm size, min-count and max-count for virtual machines node pool
        text: az aks nodepool update -g MyResourceGroup -n nodepool1 --cluster-name MyManagedCluster --update-cluster-autoscaler --node-vm-size "Standard_D2s_v3" --min-count 2 --max-count 4
      - name: Resize VM size for a VMSS node pool (preview, requires AFEC registration)
        text: az aks nodepool update -g MyResourceGroup -n nodepool1 --cluster-name MyManagedCluster --node-vm-size Standard_D4s_v3
      - name: Update a node pool with blue-green upgrade settings
        text: az aks nodepool update -g MyResourceGroup -n nodepool1 --cluster-name MyManagedCluster --drain-batch-size 50% --drain-timeout-bg 5 --batch-soak-duration 10 --final-soak-duration 10
"""

helps['aks nodepool get-upgrades'] = """
type: command
short-summary: Get the available upgrade versions for an agent pool of the managed Kubernetes cluster.
examples:
  - name: Get the available upgrade versions for an agent pool of the managed Kubernetes cluster.
    text: az aks nodepool get-upgrades --resource-group MyResourceGroup --cluster-name MyManagedCluster --nodepool-name MyNodePool
    crafted: true
"""

helps['aks nodepool get-rollback-versions'] = """
type: command
short-summary: Get the available rollback versions for an agent pool of the managed Kubernetes cluster.
long-summary: |
    Get the list of historically used Kubernetes and node image versions that can be used for rollback operations.
examples:
  - name: Get the available rollback versions for an agent pool.
    text: az aks nodepool get-rollback-versions --resource-group MyResourceGroup --cluster-name MyManagedCluster --nodepool-name MyNodePool
    crafted: true
"""

helps['aks nodepool rollback'] = """
type: command
short-summary: Rollback an agent pool to the most recently used configuration (N-1).
long-summary: |
    Rollback an agent pool to the most recently used version based on rollback history.
    This will rollback both the Kubernetes version and node image version to their most recent previous state.
    For downgrades to older versions (N-2 or earlier), use a separate downgrade operation.
parameters:
  - name: --aks-custom-headers
    type: string
    short-summary: Send custom headers. When specified, format should be Key1=Value1,Key2=Value2.
  - name: --if-match
    type: string
    short-summary: The revision of the resource being updated. This should match the current revision.
  - name: --if-none-match
    type: string
    short-summary: Set to '*' to allow a new resource to be created, but to prevent updating an existing resource.
examples:
  - name: Rollback a nodepool to the most recently used version.
    text: az aks nodepool rollback --resource-group MyResourceGroup --cluster-name MyManagedCluster --nodepool-name MyNodePool
    crafted: true
"""

helps['aks nodepool stop'] = """
    type: command
    short-summary: Stop running agent pool in the managed Kubernetes cluster.
    parameters:
        - name: --aks-custom-headers
          type: string
          short-summary: Send custom headers. When specified, format should be Key1=Value1,Key2=Value2
    examples:
        - name: Stop agent pool in the managed cluster
          text: az aks nodepool stop --nodepool-name nodepool1 -g MyResourceGroup --cluster-name MyManagedCluster
"""

helps['aks nodepool start'] = """
    type: command
    short-summary: Start stopped agent pool in the managed Kubernetes cluster.
    parameters:
        - name: --aks-custom-headers
          type: string
          short-summary: Send custom headers. When specified, format should be Key1=Value1,Key2=Value2
    examples:
        - name: Start agent pool in the managed cluster
          text: az aks nodepool start --nodepool-name nodepool1 -g MyResourceGroup --cluster-name MyManagedCluster
"""

helps['aks nodepool delete'] = """
    type: command
    short-summary: Delete the agent pool in the managed Kubernetes cluster.
    parameters:
        - name: --ignore-pod-disruption-budget -i
          type: bool
          short-summary: (PREVIEW) ignore-pod-disruption-budget deletes an existing nodepool without considering Pod Disruption Budget.
        - name: --if-match
          type: string
          short-summary: The value provided will be compared to the ETag of the node pool, if it matches the operation will proceed. If it does not match, the request will be rejected to prevent accidental overwrites. This must not be specified when creating a new agentpool.

    examples:
        - name: Delete an agent pool with ignore-pod-disruption-budget
          text: az aks nodepool delete --resource-group MyResourceGroup --cluster-name MyManagedCluster --name nodepool1 --ignore-pod-disruption-budget=true
"""

helps['aks nodepool operation-abort'] = """
    type: command
    short-summary: Abort last running operation on nodepool.
    parameters:
        - name: --aks-custom-headers
          type: string
          short-summary: Send custom headers. When specified, format should be Key1=Value1,Key2=Value2
    examples:
        - name: Abort operation on agent pool
          text: az aks nodepool operation-abort -g myResourceGroup --nodepool-name nodepool1 --cluster-name myAKSCluster
"""

helps['aks nodepool delete-machines'] = """
    type: command
    short-summary: Delete specific machines in an agentpool for a managed cluster.
    parameters:
        - name: --machine-names
          type: string array
          short-summary: Space-separated list of machine names from the agent pool to be deleted.
    examples:
        - name: Delete specific machines in an agent pool
          text: az aks nodepool delete-machines -g myResourceGroup --nodepool-name nodepool1 --cluster-name myAKSCluster --machine-names machine1
"""

helps['aks nodepool manual-scale'] = """
    type: group
    short-summary: Commands to manage nodepool virtualMachineProfile.scale.manual.
"""

helps['aks nodepool manual-scale add'] = """
    type: command
    short-summary: Add a new manual to a VirtualMachines agentpool in the managed Kubernetes cluster.
    parameters:
        - name: --vm-sizes
          type: string
          short-summary: Comma-separated list of sizes in the manual.
        - name: --node-count -c
          type: int
          short-summary: Number of nodes in the manual.
"""

helps['aks nodepool manual-scale update'] = """
    type: command
    short-summary: Update an existing manual of a VirtualMachines agentpool in the managed Kubernetes cluster.
    parameters:
        - name: --current-vm-sizes
          type: string
          short-summary: Comma-separated list of sizes in the manual to be updated.
        - name: --vm-sizes
          type: string
          short-summary: Comma-separated list of new sizes.
        - name: --node-count -c
          type: int
          short-summary: Number of nodes in the manual.
"""

helps['aks nodepool manual-scale delete'] = """
    type: command
    short-summary: Delete an existing manual to a VirtualMachines agentpool in the managed Kubernetes cluster.
    parameters:
        - name: --current-vm-sizes
          type: string
          short-summary: Comma-separated list of sizes in the manual to be deleted.
"""

helps['aks machine'] = """
   type: group
   short-summary: Get information about machines in a nodepool of a managed clusters
"""

helps['aks machine add'] = """
   type: command
   short-summary: Add a machine to the specified node pool
   parameters:
       - name: --cluster-name
         type: string
         short-summary: Name of the managed cluster.
       - name: --nodepool-name
         type: string
         short-summary: Name of the agentpool of a managed cluster.
       - name: --machine-name
         type: string
         short-summary: Host name of the machine.
       - name: --zones -z
         type: string array
         short-summary: Space-separated list of availability zones where a machine will be placed.
       - name: --priority
         type: string
         short-summary: The priority of the machine.
       - name: --tags
         type: string
         short-summary: The tags of the machine.
       - name: --vm-size
         type: string
         short-summary: The size of the machine
       - name: --os-type
         type: string
         short-summary: The operating system type of the machine.
       - name: --os-sku
         type: string
         short-summary: The os-sku of the agent node pool.
       - name: --kubernetes-version
         type: string
         short-summary: Version of Kubernetes to use for creating the machine, such as "1.7.12" or "1.8.7".
       - name: --enable-fips-image
         type: bool
         short-summary: Switch to use FIPS-enabled OS on the machine.
       - name: --disable-fips-image
         type: bool
         short-summary: Switch to use non-FIPS-enabled OS on the machine.
       - name: --vnet-subnet-id
         type: string
         short-summary: The ID of a subnet in an existing VNet into which to deploy the machine.
       - name: --pod-subnet-id
         type: string
         short-summary: The ID of a subnet in an existing VNet into which to assign pods in the machine (requires azure network-plugin).
       - name: --enable-node-public-ip
         type: bool
         short-summary: Enable the machine public IP.
       - name: --node-public-ip-prefix-id
         type: string
         short-summary: Public IP prefix ID used to assign public IPs to the machine.
       - name: --node-public-ip-tags
         type: string
         short-summary: The ipTags of the machine public IPs.
"""

helps['aks machine update'] = """
   type: command
   short-summary: Update the specified machine in an agentpool
   parameters:
       - name: --cluster-name
         type: string
         short-summary: Name of the managed cluster.
       - name: --nodepool-name
         type: string
         short-summary: Name of the agentpool of a managed cluster.
       - name: --machine-name
         type: string
         short-summary: Host name of the machine.
       - name: --tags
         type: string
         short-summary: The tags of the machine.
       - name: --labels
         type: string
         short-summary: The labels of the machine.
       - name: --node-taints
         type: string
         short-summary: The taints of the machine.
"""

helps['aks machine list'] = """
   type: command
   short-summary: List the details for all machines in an agentpool
   parameters:
       - name: --cluster-name
         type: string
         short-summary: Name of the managed cluster
       - name: --nodepool-name
         type: string
         short-summary: Name of the agentpool of a managed cluster
   examples:
       - name: List the details for all machines in an agentpool
         text: az aks machine list --resource-group <resourceGroupName> --cluster-name <clusterName> --nodepool-name <apName>
"""

helps['aks machine show'] = """
   type: command
   short-summary: Show the details of a specific machine in an agentpool of a managedcluster.
   parameters:
       - name: --cluster-name
         type: string
         short-summary: Name of the managed cluster
       - name: --nodepool-name
         type: string
         short-summary: Name of the agentpool of a managed cluster
       - name: --machine-name
         type: string
         short-summary: Name of the machine
   examples:
       - name: Show the details of a specific machine in an agentpool of a managedcluster.
         text: az aks machine show --resource-group <resourceGroupName> --cluster-name <clusterName> --nodepool-name <apName> --machine-name <machineName>
"""

helps['aks operation'] = """
    type: group
    short-summary: Commands to manage and view operations on managed Kubernetes cluster.
"""

helps['aks operation show'] = """
    type: command
    short-summary: Show the details for a specific operation on managed Kubernetes cluster.
    parameters:
        - name: --name -n
          type: string
          short-summary: The name of the managed cluster
        - name: --nodepool-name
          type: string
          short-summary: The name of the nodepool.
        - name: --resource-group -g
          type: string
          short-summary: Name of the resource group.
        - name: --operation-id
          type: string
          short-summary: The ID of the operation.
"""

helps['aks operation show-latest'] = """
    type: command
    short-summary: Show the details for the latest operation on managed Kubernetes cluster.
    parameters:
        - name: --name -n
          type: string
          short-summary: The name of the managed cluster
        - name: --nodepool-name
          type: string
          short-summary: The name of the nodepool.
        - name: --resource-group -g
          type: string
          short-summary: Name of the resource group.
"""

helps['aks operation-abort'] = """
    type: command
    short-summary: Abort last running operation on managed cluster.
    parameters:
        - name: --aks-custom-headers
          type: string
          short-summary: Send custom headers. When specified, format should be Key1=Value1,Key2=Value2
    examples:
        - name: Abort operation on managed cluster
          text: az aks operation-abort -g myResourceGroup -n myAKSCluster
"""

helps['aks addon'] = """
    type: group
    short-summary: Commands to manage and view single addon conditions.
"""

helps['aks addon list-available'] = """
    type: command
    short-summary: List available Kubernetes addons.
"""

helps['aks addon list'] = """
    type: command
    short-summary: List status of all Kubernetes addons in given cluster.
"""

helps['aks addon show'] = """
    type: command
    short-summary: Show status and configuration for an enabled Kubernetes addon in a given cluster.
    parameters:
      - name: --addon -a
        type: string
        short-summary: Specify the Kubernetes addon.
    examples:
      - name: Show configuration for "monitoring" addon.
        text: az aks addon show -g myResourceGroup -n myAKSCluster -a monitoring
        crafted: true
"""

helps['aks addon disable'] = """
    type: command
    short-summary: Disable an enabled Kubernetes addon in a cluster.
    parameters:
      - name: --addon -a
        type: string
        short-summary: Specify the Kubernetes addon to disable.
    examples:
      - name: Disable the "monitoring" addon.
        text: az aks addon disable -g myResourceGroup -n myAKSCluster -a monitoring
        crafted: true
"""

helps['aks addon enable'] = """
type: command
short-summary: Enable a Kubernetes addon.
long-summary: |-
    These addons are available:
        http_application_routing        - configure ingress with automatic public DNS name creation.
        monitoring                      - turn on Log Analytics monitoring. Uses the Log Analytics Default Workspace if it exists, else creates one. Specify "--workspace-resource-id" to use an existing workspace.
                                          If monitoring addon is enabled --no-wait argument will have no effect
        virtual-node                    - enable AKS Virtual Node. Requires --subnet-name to provide the name of an existing subnet for the Virtual Node to use.
        azure-policy                    - enable Azure policy. The Azure Policy add-on for AKS enables at-scale enforcements and safeguards on your clusters in a centralized, consistent manner.
                                          Learn more at aka.ms/aks/policy.
        application-load-balancer       - enable the Application Load Balancer (Application Gateway for Containers) addon (PREVIEW).
        ingress-appgw                   - enable Application Gateway Ingress Controller addon.
        open-service-mesh               - enable Open Service Mesh addon (PREVIEW).
        gitops                          - enable GitOps (PREVIEW).
        azure-keyvault-secrets-provider - enable Azure Keyvault Secrets Provider addon.
        web_application_routing         - enable the App Routing addon (PREVIEW). Specify "--dns-zone-resource-id" to configure DNS.
parameters:
  - name: --addon -a
    type: string
    short-summary: Specify the Kubernetes addon to enable.
  - name: --workspace-resource-id
    type: string
    short-summary: The resource ID of an existing Log Analytics Workspace to use for storing monitoring data.
  - name: --enable-msi-auth-for-monitoring
    type: bool
    short-summary: Send monitoring data to Log Analytics using the cluster's assigned identity (instead of the Log Analytics Workspace's shared key).
  - name: --enable-syslog
    type: bool
    short-summary: Enable syslog data collection for Monitoring addon
  - name: --data-collection-settings
    type: string
    short-summary: Path to JSON file containing data collection settings for Monitoring addon.
  - name: --enable-high-log-scale-mode
    type: bool
    short-summary: Enable High Log Scale Mode for Container Logs. Auto-enabled when --enable-container-network-logs is specified.
  - name: --ampls-resource-id
    type: string
    short-summary: Resource ID of Azure Monitor Private Link scope for Monitoring Addon.
  - name: --subnet-name -s
    type: string
    short-summary: The subnet name for the virtual node to use.
  - name: --appgw-name
    type: string
    short-summary: Name of the application gateway to create/use in the node resource group. Use with ingress-azure addon.
  - name: --appgw-subnet-prefix
    type: string
    short-summary: Subnet Prefix to use for a new subnet created to deploy the Application Gateway. Use with ingress-azure addon.
  - name: --appgw-subnet-cidr
    type: string
    short-summary: Subnet CIDR to use for a new subnet created to deploy the Application Gateway. Use with ingress-azure addon.
  - name: --appgw-id
    type: string
    short-summary: Resource Id of an existing Application Gateway to use with AGIC. Use with ingress-azure addon.
  - name: --appgw-subnet-id
    type: string
    short-summary: Resource Id of an existing Subnet used to deploy the Application Gateway. Use with ingress-azure addon.
  - name: --appgw-watch-namespace
    type: string
    short-summary: Specify the namespace, which AGIC should watch. This could be a single string value, or a comma-separated list of namespaces. Use with ingress-azure addon.
  - name: --enable-sgxquotehelper
    type: bool
    short-summary: Enable SGX quote helper for confcom addon.
  - name: --enable-secret-rotation
    type: bool
    short-summary: Enable secret rotation. Use with azure-keyvault-secrets-provider addon.
  - name: --rotation-poll-interval
    type: string
    short-summary: Set interval of rotation poll. Use with azure-keyvault-secrets-provider addon.
  - name: --dns-zone-resource-id
    type: string
    short-summary: The resource ID of the DNS zone resource to use with the App Routing addon.
  - name: --dns-zone-resource-ids
    type: string
    short-summary: A comma separated list of resource IDs of the DNS zone resource to use with the App Routing addon.
examples:
  - name: Enable a Kubernetes addon. (autogenerated)
    text: az aks addon enable --addon virtual-node --name MyManagedCluster --resource-group MyResourceGroup --subnet-name VirtualNodeSubnet
    crafted: true
  - name: Enable ingress-appgw addon with subnet prefix.
    text: az aks addon enable --name MyManagedCluster --resource-group MyResourceGroup --addon ingress-appgw --appgw-subnet-cidr 10.2.0.0/16 --appgw-name gateway
    crafted: true
  - name: Enable open-service-mesh addon.
    text: az aks addon enable --name MyManagedCluster --resource-group MyResourceGroup -a open-service-mesh
    crafted: true
"""

helps['aks addon update'] = """
type: command
short-summary: Update an already enabled Kubernetes addon.
parameters:
  - name: --addon -a
    type: string
    short-summary: Specify the Kubernetes addon to update.
  - name: --workspace-resource-id
    type: string
    short-summary: The resource ID of an existing Log Analytics Workspace to use for storing monitoring data.
  - name: --enable-msi-auth-for-monitoring
    type: bool
    short-summary: Send monitoring data to Log Analytics using the cluster's assigned identity (instead of the Log Analytics Workspace's shared key).
  - name: --enable-syslog
    type: bool
    short-summary: Enable syslog data collection for Monitoring addon
  - name: --data-collection-settings
    type: string
    short-summary: Path to JSON file containing data collection settings for Monitoring addon.
  - name: --enable-high-log-scale-mode
    type: bool
    short-summary: Enable High Log Scale Mode for Container Logs. Auto-enabled when --enable-container-network-logs is specified.
  - name: --ampls-resource-id
    type: string
    short-summary: Resource ID of Azure Monitor Private Link scope for Monitoring Addon.
  - name: --subnet-name -s
    type: string
    short-summary: The subnet name for the virtual node to use.
  - name: --appgw-name
    type: string
    short-summary: Name of the application gateway to create/use in the node resource group. Use with ingress-azure addon.
  - name: --appgw-subnet-prefix
    type: string
    short-summary: Subnet Prefix to use for a new subnet created to deploy the Application Gateway. Use with ingress-azure addon.
  - name: --appgw-subnet-cidr
    type: string
    short-summary: Subnet CIDR to use for a new subnet created to deploy the Application Gateway. Use with ingress-azure addon.
  - name: --appgw-id
    type: string
    short-summary: Resource Id of an existing Application Gateway to use with AGIC. Use with ingress-azure addon.
  - name: --appgw-subnet-id
    type: string
    short-summary: Resource Id of an existing Subnet used to deploy the Application Gateway. Use with ingress-azure addon.
  - name: --appgw-watch-namespace
    type: string
    short-summary: Specify the namespace, which AGIC should watch. This could be a single string value, or a comma-separated list of namespaces. Use with ingress-azure addon.
  - name: --enable-sgxquotehelper
    type: bool
    short-summary: Enable SGX quote helper for confcom addon.
  - name: --enable-secret-rotation
    type: bool
    short-summary: Enable secret rotation. Use with azure-keyvault-secrets-provider addon.
  - name: --rotation-poll-interval
    type: string
    short-summary: Set interval of rotation poll. Use with azure-keyvault-secrets-provider addon.
  - name: --dns-zone-resource-id
    type: string
    short-summary: The resource ID of the DNS zone resource to use with the App Routing addon.
  - name: --dns-zone-resource-ids
    type: string
    short-summary: A comma separated list of resource IDs of the DNS zone resource to use with the App Routing addon.
examples:
  - name: Update a Kubernetes addon. (autogenerated)
    text: az aks addon update --addon virtual-node --name MyManagedCluster --resource-group MyResourceGroup --subnet-name VirtualNodeSubnet
    crafted: true
  - name: Update ingress-appgw addon with subnet prefix.
    text: az aks addon update --name MyManagedCluster --resource-group MyResourceGroup --addon ingress-appgw --appgw-subnet-cidr 10.2.0.0/16 --appgw-name gateway
    crafted: true
  - name: Update monitoring addon with workspace resource id.
    text: az aks addon update -g $rg -n $cn -a monitoring --workspace-resource-id=/subscriptions/0000000-00000000-00000-000-000/resourcegroups/myresourcegroup/providers/microsoft.operationalinsights/workspaces/defaultlaworkspace
    crafted: true
"""


helps['aks enable-addons'] = """
type: command
short-summary: Enable Kubernetes addons.
long-summary: |-
    These addons are available:
        http_application_routing        - configure ingress with automatic public DNS name creation.
        monitoring                      - turn on Log Analytics monitoring. Uses the Log Analytics Default Workspace if it exists, else creates one. Specify "--workspace-resource-id" to use an existing workspace.
                                          If monitoring addon is enabled --no-wait argument will have no effect
        virtual-node                    - enable AKS Virtual Node. Requires --subnet-name to provide the name of an existing subnet for the Virtual Node to use.
        azure-policy                    - enable Azure policy. The Azure Policy add-on for AKS enables at-scale enforcements and safeguards on your clusters in a centralized, consistent manner.
                                          Learn more at aka.ms/aks/policy.
        application-load-balancer       - enable the Application Load Balancer (Application Gateway for Containers) addon (PREVIEW).
        ingress-appgw                   - enable Application Gateway Ingress Controller addon.
        open-service-mesh               - enable Open Service Mesh addon (PREVIEW).
        gitops                          - enable GitOps (PREVIEW).
        azure-keyvault-secrets-provider - enable Azure Keyvault Secrets Provider addon.
        web_application_routing         - enable the App Routing addon (PREVIEW). Specify "--dns-zone-resource-id" to configure DNS.
parameters:
  - name: --addons -a
    type: string
    short-summary: Enable the Kubernetes addons in a comma-separated list.
  - name: --workspace-resource-id
    type: string
    short-summary: The resource ID of an existing Log Analytics Workspace to use for storing monitoring data.
  - name: --enable-msi-auth-for-monitoring
    type: bool
    short-summary: Send monitoring data to Log Analytics using the cluster's assigned identity (instead of the Log Analytics Workspace's shared key).
  - name: --enable-syslog
    type: bool
    short-summary: Enable syslog data collection for Monitoring addon
  - name: --data-collection-settings
    type: string
    short-summary: Path to JSON file containing data collection settings for Monitoring addon.
  - name: --enable-high-log-scale-mode
    type: bool
    short-summary: Enable High Log Scale Mode for Container Logs. Auto-enabled when --enable-container-network-logs is specified.
  - name: --ampls-resource-id
    type: string
    short-summary: Resource ID of Azure Monitor Private Link scope for Monitoring Addon.
  - name: --subnet-name -s
    type: string
    short-summary: The subnet name for the virtual node to use.
  - name: --appgw-name
    type: string
    short-summary: Name of the application gateway to create/use in the node resource group. Use with ingress-azure addon.
  - name: --appgw-subnet-prefix
    type: string
    short-summary: Subnet Prefix to use for a new subnet created to deploy the Application Gateway. Use with ingress-azure addon.
  - name: --appgw-subnet-cidr
    type: string
    short-summary: Subnet CIDR to use for a new subnet created to deploy the Application Gateway. Use with ingress-azure addon.
  - name: --appgw-id
    type: string
    short-summary: Resource Id of an existing Application Gateway to use with AGIC. Use with ingress-azure addon.
  - name: --appgw-subnet-id
    type: string
    short-summary: Resource Id of an existing Subnet used to deploy the Application Gateway. Use with ingress-azure addon.
  - name: --appgw-watch-namespace
    type: string
    short-summary: Specify the namespace, which AGIC should watch. This could be a single string value, or a comma-separated list of namespaces. Use with ingress-azure addon.
  - name: --enable-sgxquotehelper
    type: bool
    short-summary: Enable SGX quote helper for confcom addon.
  - name: --enable-secret-rotation
    type: bool
    short-summary: Enable secret rotation. Use with azure-keyvault-secrets-provider addon.
  - name: --rotation-poll-interval
    type: string
    short-summary: Set interval of rotation poll. Use with azure-keyvault-secrets-provider addon.
  - name: --dns-zone-resource-id
    type: string
    short-summary: The resource ID of the DNS zone resource to use with the App Routing addon.
  - name: --dns-zone-resource-ids
    type: string
    short-summary: A comma separated list of resource IDs of the DNS zone resource to use with the App Routing addon.
  - name: --aks-custom-headers
    type: string
    short-summary: Send custom headers. When specified, format should be Key1=Value1,Key2=Value2
examples:
  - name: Enable Kubernetes addons. (autogenerated)
    text: az aks enable-addons --addons virtual-node --name MyManagedCluster --resource-group MyResourceGroup --subnet-name VirtualNodeSubnet
    crafted: true
  - name: Enable ingress-appgw addon with subnet prefix.
    text: az aks enable-addons --name MyManagedCluster --resource-group MyResourceGroup --addons ingress-appgw --appgw-subnet-cidr 10.2.0.0/16 --appgw-name gateway
    crafted: true
  - name: Enable open-service-mesh addon.
    text: az aks enable-addons --name MyManagedCluster --resource-group MyResourceGroup --addons open-service-mesh
    crafted: true
"""

helps['aks show'] = """
type: command
short-summary: Show the details for a managed Kubernetes cluster.
parameters:
  - name: --aks-custom-headers
    type: string
    short-summary: Send custom headers. When specified, format should be Key1=Value1,Key2=Value2
examples:
  - name: Show the details for a managed Kubernetes cluster
    text: az aks show -g MyResourceGroup -n MyManagedCluster
    crafted: true
"""

helps['aks get-versions'] = """
type: command
short-summary: Get the versions available for creating a managed Kubernetes cluster.
examples:
  - name: Get the versions available for creating a managed Kubernetes cluster
    text: az aks get-versions --location westus2
    crafted: true
"""

helps['aks get-credentials'] = """
type: command
short-summary: Get access credentials for a managed Kubernetes cluster.
parameters:
  - name: --admin -a
    type: bool
    short-summary: "Get cluster administrator credentials.  Default: cluster user credentials."
  - name: --user -u
    type: string
    short-summary: "Get credentials for the user. Only valid when --admin is False.  Default: cluster user credentials."
  - name: --file -f
    type: string
    short-summary: Kubernetes configuration file to update. Use "-" to print YAML to stdout instead.
  - name: --overwrite-existing
    type: bool
    short-summary: Overwrite any existing cluster entry with the same name.
  - name: --output -o
    type: string
    long-summary: Credentials are always in YAML format, so this argument is effectively ignored.
  - name: --public-fqdn
    type: bool
    short-summary: Get private cluster credential with server address to be public fqdn.
  - name: --format
    type: string
    short-summary: Specify the format of the returned credential. Available values are ["exec", "azure"].
                  Only take effect when requesting clusterUser credential of AAD clusters.
  - name: --aks-custom-headers
    type: string
    short-summary: Send custom headers. When specified, format should be Key1=Value1,Key2=Value2
examples:
  - name: Get access credentials for a managed Kubernetes cluster. (autogenerated)
    text: az aks get-credentials --name MyManagedCluster --resource-group MyResourceGroup
    crafted: true
"""

helps['aks rotate-certs'] = """
    type: command
    short-summary: Rotate certificates and keys on a managed Kubernetes cluster
    long-summary: Kubernetes will be unavailable during cluster certificate rotation.
"""

helps['aks pod-identity'] = """
    type: group
    short-summary: Commands to manage pod identities in managed Kubernetes cluster.
"""

helps['aks pod-identity add'] = """
    type: command
    short-summary: Add a pod identity to a managed Kubernetes cluster
    examples:
    - name: Add pod identity
      text: az aks pod-identity add --cluster-name MyManagedCluster --resource-group MyResourceGroup --namespace my-namespace --name my-identity --identity-resource-id <my-identity-resource-id>
"""

helps['aks pod-identity delete'] = """
    type: command
    short-summary: Remove a pod identity from a managed Kubernetes cluster
"""

helps['aks pod-identity list'] = """
    type: command
    short-summary: List pod identities in a managed Kubernetes cluster
"""

helps['aks pod-identity exception'] = """
    type: group
    short-summary: Commands to manage pod identity exceptions in managed Kubernetes cluster.
"""

helps['aks pod-identity exception add'] = """
    type: command
    short-summary: Add a pod identity exception to a managed Kubernetes cluster
"""

helps['aks pod-identity exception delete'] = """
    type: command
    short-summary: Remove a pod identity exception from a managed Kubernetes cluster
"""

helps['aks pod-identity exception update'] = """
    type: command
    short-summary: Update a pod identity exception in a managed Kubernetes cluster
"""

helps['aks pod-identity exception list'] = """
    type: command
    short-summary: List pod identity exceptions in a managed Kubernetes cluster
"""

helps['aks egress-endpoints'] = """
    type: group
    short-summary: Commands to manage egress endpoints in managed Kubernetes cluster.
"""

helps['aks egress-endpoints list'] = """
    type: command
    short-summary: List egress endpoints that are required or recommended to be whitelisted for a cluster.
"""

helps['aks snapshot'] = """
    type: group
    short-summary: Commands to manage cluster snapshots.
"""

helps['aks snapshot show'] = """
    type: command
    short-summary: Show the details of a cluster snapshot.
"""

helps['aks snapshot list'] = """
    type: command
    short-summary: List cluster snapshots.
"""

helps['aks snapshot create'] = """
    type: command
    short-summary: Create a snapshot of a cluster.
    parameters:
        - name: --cluster-id
          type: string
          short-summary: The source cluster id from which to create this snapshot.
        - name: --tags
          type: string
          short-summary: The tags of the snapshot.
        - name: --aks-custom-headers
          type: string
          short-summary: Send custom headers. When specified, format should be Key1=Value1,Key2=Value2

    examples:
        - name: Create a cluster snapshot.
          text: az aks snapshot create -g MyResourceGroup -n snapshot1 --cluster-id "/subscriptions/00000/resourceGroups/AnotherResourceGroup/providers/Microsoft.ContainerService/managedClusters/akscluster1"
        - name: Create a cluster snapshot with custom tags.
          text: az aks snapshot create -g MyResourceGroup -n snapshot1 --cluster-id "/subscriptions/00000/resourceGroups/AnotherResourceGroup/providers/Microsoft.ContainerService/managedClusters/akscluster1" --tags "foo=bar" "key1=val1"
"""

helps['aks snapshot delete'] = """
    type: command
    short-summary: Delete a cluster snapshot.
"""

helps['aks nodepool snapshot'] = """
    type: group
    short-summary: Commands to manage nodepool snapshots.
"""

helps['aks nodepool snapshot show'] = """
    type: command
    short-summary: Show the details of a nodepool snapshot.
"""

helps['aks nodepool snapshot list'] = """
    type: command
    short-summary: List nodepool snapshots.
"""

helps['aks nodepool snapshot update'] = """
    type: command
    short-summary: Update tags on a snapshot of a nodepool.

    examples:
        - name: Update tags on a nodepool snapshot.
          text: az aks nodepool snapshot update -g MyResourceGroup -n snapshot1 --tags "foo=bar" "key1=val1"
        - name: Clear tags on a nodepool snapshot.
          text: az aks nodepool snapshot update -g MyResourceGroup -n snapshot1 --tags ""
"""

helps['aks nodepool snapshot create'] = """
    type: command
    short-summary: Create a nodepool snapshot.
    parameters:
        - name: --nodepool-id
          type: string
          short-summary: The source nodepool id from which to create this snapshot.
        - name: --tags
          type: string
          short-summary: The tags of the snapshot.
        - name: --aks-custom-headers
          type: string
          short-summary: Send custom headers. When specified, format should be Key1=Value1,Key2=Value2

    examples:
        - name: Create a nodepool snapshot.
          text: az aks nodepool snapshot create -g MyResourceGroup -n snapshot1 --nodepool-id "/subscriptions/00000/resourceGroups/AnotherResourceGroup/providers/Microsoft.ContainerService/managedClusters/akscluster1/agentPools/nodepool1"
        - name: Create a nodepool snapshot with custom tags.
          text: az aks nodepool snapshot create -g MyResourceGroup -n snapshot1 --nodepool-id "/subscriptions/00000/resourceGroups/AnotherResourceGroup/providers/Microsoft.ContainerService/managedClusters/akscluster1/agentPools/nodepool1" --tags "foo=bar" "key1=val1"
"""

helps['aks nodepool snapshot delete'] = """
    type: command
    short-summary: Delete a nodepool snapshot.
"""

helps['aks draft'] = """
    type: group
    short-summary: Commands to build deployment files in a project directory and deploy to an AKS cluster.
"""

helps['aks draft create'] = """
    type: command
    short-summary: Generate a Dockerfile and the minimum required Kubernetes deployment files (helm, kustomize, manifests) for your project directory.
    parameters:
        - name: --destination
          type: string
          short-summary: Specify the path to the project directory (default is .).
        - name: --app
          type: string
          short-summary: Specify the name of the helm release.
        - name: --language
          type: string
          short-summary: Specify the language used to create the Kubernetes deployment.
        - name: --create-config
          type: string
          short-summary: Specify the path to the configuration file.
        - name: --dockerfile-only
          type: bool
          short-summary: Only generate Dockerfile for the Kubernetes deployment.
        - name: --deployment-only
          type: bool
          short-summary: Only generate deployment files (helm, kustomize, manifests) for the Kubernetes deployment.
        - name: --path
          type: string
          short-summary: Automatically download and use the Draft binary at the specified location.
    examples:
      - name: Prompt to generate a Dockerfile and deployment files in the current directory.
        text: az aks draft create
      - name: Generate only the Dockerfile in the current directory.
        text: az aks draft create --dockerfile-only=true
      - name: Generate only the deployment files in the current directory.
        text: az aks draft create --deployment-only=true
      - name: Generate a Dockerfile and an deployment file in a Java project with an app name at a specific project directory.
        text: az aks draft create --language=java --app=some_app --destination=/projects/some_project
"""

helps['aks draft setup-gh'] = """
    type: command
    short-summary: Set up GitHub OIDC for your application
    parameters:
        - name: --app
          type: string
          short-summary: Specify the Azure Active Directory applicaton name.
        - name: --subscription-id
          type: string
          short-summary: Specify the Azure subscription ID.
        - name: --resource-group
          type: string
          short-summary: Specify the name of the Azure resource group.
        - name: --provider
          type: string
          short-summary: Specify the cloud provider (default is azure).
        - name: --gh-repo
          type: string
          short-summary: Specify the the GitHub repository (organization/repo_name).
        - name: --path
          type: string
          short-summary: Automatically download and use the Draft binary at the specified location.
    examples:
      - name: Prompt to setup the GitHub OIDC for a repository.
        text: az aks draft setup-gh
      - name: Setup the GitHub OIDC on Azure for a specific repository.
        text: az aks draft setup-gh --provider=azure --gh-repo=some_organization/some_repo
      - name: Setup the GitHub OIDC on Azure with subscription ID and resource group.
        text: az aks draft setup-gh --provider=azure --subscription-id=some_subscription --resource-group=some_rg
      - name: Setup the GitHub OIDC with an application name on Azure with subscription ID and resource group for a specific repository.
        text: az aks draft setup-gh --app=some_app --provider=azure --subscription-id=some_subscription --resource-group=some_rg --gh-repo=some_organization/some_repo
"""

helps['aks draft generate-workflow'] = """
    type: command
    short-summary: Generate a GitHub workflow for automatic build and deploy to AKS
    long-summary: Before running this command, Make sure you have set up GitHub OIDC for your application.
                  You also need to create a resource group, a container registry and a Kubernetes cluster on Azure and
                  link the three resources using `az aks update -n <cluster-name> -g <resource-group-name> --attach-acr <acr-name>`.
    parameters:
        - name: --resource-group
          type: string
          short-summary: Specify the name of the Azure resource group.
        - name: --destination
          type: string
          short-summary: Specify the path to the project directory (default is .).
        - name: --cluster-name
          type: string
          short-summary: Specify the AKS cluster name.
        - name: --registry-name
          type: string
          short-summary: Specify the path to the project directory.
        - name: --container-name
          type: string
          short-summary: Specify the name of the container image.
        - name: --branch
          type: string
          short-summary: Specify the GitHub branch to automatically deploy from.
        - name: --path
          type: string
          short-summary: Automatically download and use the Draft binary at the specified location.
    examples:
      - name: Prompt to generate a GitHub workflow in the current directory.
        text: az aks draft generate-workflow
      - name: Prompt to generate a GitHub workflow in a specific project directory.
        text: az aks draft generate-workflow --destination=/projects/some_project
      - name: Generate a GitHub workflow with a resource group, an AKS cluster name, a container registry name in a specific project directory.
        text: az aks draft generate-workflow --resource-group=some_rg --cluster-name=some_cluster --registry-name=some_registry --destination=/projects/some_project
      - name: Generate a GitHub workflow that deploys from the main branch with a resource group, an AKS cluster name, a container registry name, and a container image name in a specific project directory.
        text: az aks draft generate-workflow --branch=main --resource-group=some_rg --cluster-name=some_cluster --registry-name=some_registry --container-name=some_image --destination=/projects/some_project
"""

helps['aks draft up'] = """
    type: command
    short-summary: Run `az aks draft setup-gh` then `az aks draft generate-workflow`.
    long-summary: This command combines `az aks draft setup-gh` and `az aks draft generate-workflow` to set up GitHub OIDC and generate a GitHub workflow for automatic build and deploy to AKS.
                  Before running this command, create a resource group, a container registry and a Kubernetes cluster on Azure and
                  link the three resources using `az aks update -n <cluster-name> -g <resource-group-name> --attach-acr <acr-name>`.
    parameters:
        - name: --app
          type: string
          short-summary: Specify the name of the application.
        - name: --subscription-id
          type: string
          short-summary: Specify the Azure subscription ID.
        - name: --resource-group
          type: string
          short-summary: Specify the name of the Azure resource group.
        - name: --provider
          type: string
          short-summary: Specify the cloud provider (default is azure).
        - name: --gh-repo
          type: string
          short-summary: Specify the the GitHub repository (organization/repo_name).
        - name: --cluster-name
          type: string
          short-summary: Specify the AKS cluster name.
        - name: --registry-name
          type: string
          short-summary: Specify the path to the project directory.
        - name: --container-name
          type: string
          short-summary: Specify the name of the container image.
        - name: --destination
          type: string
          short-summary: Specify the path to the project directory (default is .).
        - name: --branch
          type: string
          short-summary: Specify the GitHub branch to automatically deploy from.
        - name: --path
          type: string
          short-summary: Automatically download and use the Draft binary at the specified location.
    examples:
      - name: Prompt to setup the GitHub OIDC then generate a GitHub workflow in the current directory.
        text: az aks draft up
      - name: Prompt to setup the GitHub OIDC then generate a GitHub workflow in a specific project directory.
        text: az aks draft up --destination=/projects/some_project
      - name: Prompt to setup the GitHub OIDC for a specific repository then generate a GitHub workflow in a specific project directory.
        text: az aks draft up --gh-repo=some_organization/some_repo --destination=/projects/some_project
"""

helps['aks draft update'] = """
    type: command
    short-summary: Update your application to be internet accessible.
    long-summary: This command automatically updates your yaml files as necessary so that your
                  application will be able to receive external requests.
    parameters:
        - name: --host
          type: string
          short-summary: Specify the host of the ingress resource.
        - name: --certificate
          type: string
          short-summary: Specify the URI of the Keyvault certificate to present.
        - name: --destination
          type: string
          short-summary: Specify the path to the project directory (default is .).
        - name: --path
          type: string
          short-summary: Automatically download and use the Draft binary at the specified location.
    examples:
      - name: Prompt to update the application to be internet accessible.
        text: az aks draft update
      - name: Prompt to update the application to be internet accessible in a specific project directory.
        text: az aks draft update --destination=/projects/some_project
      - name: Update the application to be internet accessible with a host of the ingress resource and a Keyvault certificate in a specific project directory.
        text: az aks draft update --host=some_host --certificate=some_certificate --destination=/projects/some_project
"""

helps['aks mesh'] = """
    type: group
    short-summary: Commands to manage Azure Service Mesh.
    long-summary: A group of commands to manage Azure Service Mesh in given cluster.
"""

helps['aks mesh enable'] = """
    type: command
    short-summary: Enable Azure Service Mesh.
    long-summary: This command enables Azure Service Mesh in given cluster.
    parameters:
      - name: --revision
        type: string
        short-summary: Azure Service Mesh revision to install.
      - name: --key-vault-id
        type: string
        short-summary: The Azure Keyvault id with plugin CA info.
      - name: --ca-cert-object-name
        type: string
        short-summary: Intermediate cert object name in the Azure Keyvault.
      - name: --ca-key-object-name
        type: string
        short-summary: Intermediate key object name in the Azure Keyvault.
      - name: --cert-chain-object-name
        type: string
        short-summary: Cert chain object name in the Azure Keyvault.
      - name: --root-cert-object-name
        type: string
        short-summary: Root cert object name in the Azure Keyvault.
    examples:
      - name: Enable Azure Service Mesh with selfsigned CA.
        text: az aks mesh enable --resource-group MyResourceGroup --name MyManagedCluster
      - name: Enable Azure Service Mesh with plugin CA.
        text: az aks mesh enable --resource-group MyResourceGroup --name MyManagedCluster --key-vault-id /subscriptions/8ecadfc9-d1a3-4ea4-b844-0d9f87e4d7c8/resourceGroups/foo/providers/Microsoft.KeyVault/vaults/foo --ca-cert-object-name my-ca-cert --ca-key-object-name my-ca-key --cert-chain-object-name my-cert-chain --root-cert-object-name my-root-cert

"""

helps['aks mesh disable'] = """
    type: command
    short-summary: Disable Azure Service Mesh.
    long-summary: This command disables Azure Service Mesh in given cluster.
"""

helps['aks mesh enable-ingress-gateway'] = """
    type: command
    short-summary: Enable an Azure Service Mesh ingress gateway.
    long-summary: This command enables an Azure Service Mesh ingress gateway in given cluster.
    parameters:
      - name: --ingress-gateway-type
        type: string
        short-summary: Specify the type of ingress gateway.
        long-summary: Allowed values are "External" which is backed by a load balancer with an external IP address; "Internal" which is backed by a load balancer with an internal IP address.
    examples:
      - name: Enable an internal ingress gateway.
        text: az aks mesh enable-ingress-gateway --resource-group MyResourceGroup --name MyManagedCluster --ingress-gateway-type Internal
"""

helps['aks mesh disable-ingress-gateway'] = """
    type: command
    short-summary: Disable an Azure Service Mesh ingress gateway.
    long-summary: This command disables an Azure Service Mesh ingress gateway in given cluster.
    parameters:
      - name: --ingress-gateway-type
        type: string
        short-summary: Specify the type of ingress gateway.
        long-summary: Allowed values are "External" which is backed by a load balancer with an external IP address, "Internal" which is backed by a load balancer with an internal IP address.
    examples:
      - name: Disable an internal ingress gateway.
        text: az aks mesh disable-ingress-gateway --resource-group MyResourceGroup --name MyManagedCluster --ingress-gateway-type Internal
"""

helps['aks mesh enable-egress-gateway'] = """
    type: command
    short-summary: Enable an Azure Service Mesh egress gateway.
    long-summary: This command enables an Azure Service Mesh egress gateway in given cluster.
    parameters:
      - name: --istio-eg-gtw-name --istio-egressgateway-name
        type: string
        short-summary: Specify the name of the Istio egress gateway.
        long-summary: This required field specifies the name of the Istio egress gateway. Must be between 1 and 253 characters, must consist of lower case alphanumeric characters, '-' or '.', and must start and end with an alphanumeric character.
      - name: --istio-eg-gtw-ns --istio-egressgateway-namespace
        type: string
        short-summary: Specify the namespace of the Istio egress gateway.
        long-summary: This optional field specifies the namespace of the Istio egress gateway. Defaults to "aks-istio-egress" if unspecified.
      - name: --gateway-configuration-name --gtw-config-name
        type: string
        short-summary: Specify the name of the StaticGatewayConfiguration resource.
        long-summary: This required field specifies the name of the StaticGatewayConfiguration resource for the Istio egress gateway. See https://aka.ms/aks-static-egress-gateway on how to create and configure a Static Egress Gateway agentpool.
    examples:
      - name: Enable an Istio egress gateway. Static egress gateway must be enabled prior to creating an Istio egress gateway. See https://aka.ms/aks-static-egress-gateway on how to create and configure a Static Egress Gateway agentpool.
        text: az aks mesh enable-egress-gateway --resource-group MyResourceGroup --name MyManagedCluster --istio-egressgateway-name my-istio-egress-1 --istio-egressgateway-namespace my-namespace-1 --gateway-configuration-name sgc-istio-egress-1
"""

helps['aks mesh disable-egress-gateway'] = """
    type: command
    short-summary: Disable an Azure Service Mesh egress gateway.
    long-summary: This command disables an Azure Service Mesh egress gateway in given cluster.
    parameters:
      - name: --istio-eg-gtw-name --istio-egressgateway-name
        type: string
        short-summary: Specify the name of the Istio egress gateway.
        long-summary: This required field specifies the name of the Istio egress gateway. Must be between 1 and 253 characters, must consist of lower case alphanumeric characters, '-' or '.', and must start and end with an alphanumeric character.
      - name: --istio-eg-gtw-ns --istio-egressgateway-namespace
        type: string
        short-summary: Specify the namespace of the Istio egress gateway.
        long-summary: This optional field specifies the namespace of the Istio egress gateway. Defaults to "aks-istio-egress" if unspecified.
    examples:
      - name: Disable an Istio egress gateway.
        text: az aks mesh disable-egress-gateway --resource-group MyResourceGroup --name MyManagedCluster --istio-egressgateway-name my-istio-egress-1 --istio-egressgateway-namespace my-namespace-1
"""

helps['aks mesh get-revisions'] = """
    type: command
    short-summary: Discover available Azure Service Mesh revisions and their compatibility.
    long-summary: This command discovers available Azure Service Mesh revisions and their compatibility information for the given location.
    examples:
      - name: Discover Azure Service Mesh revisions.
        text: az aks mesh get-revisions --location westus2
        crafted: true
"""

helps['aks mesh get-upgrades'] = """
    type: command
    short-summary: Discover available Azure Service Mesh upgrades.
    long-summary: This command discovers available Azure Service Mesh upgrades for the mesh revision installed on the cluster.
    examples:
      - name: Discover Azure Service Mesh upgrades.
        text: az aks mesh get-upgrades --resource-group MyResourceGroup --name MyManagedCluster
"""

helps['aks mesh upgrade start'] = """
    type: command
    short-summary: Initiate Azure Service Mesh upgrade.
    long-summary: This command initiates upgrade of Azure Service Mesh to the specified revision.
    parameters:
      - name: --revision
        type: string
        short-summary: Azure Service Mesh revision to upgrade to.
    examples:
      - name: Initiate Azure Service Mesh upgrade.
        text: az aks mesh upgrade start --resource-group MyResourceGroup --name MyManagedCluster --revision asm-1-18
"""

helps['aks mesh upgrade'] = """
    type: group
    short-summary: Commands to manage the upgrades for Azure Service Mesh.
    long-summary: A group of commands to manage the upgrades for Azure Service Mesh in given cluster.
"""

helps['aks mesh upgrade complete'] = """
    type: command
    short-summary: Complete Azure Service Mesh upgrade.
    long-summary: This command completes Azure Service Mesh canary upgrade by removing the previous revision.
    examples:
      - name: Complete Azure Service Mesh upgrade.
        text: az aks mesh upgrade complete --resource-group MyResourceGroup --name MyManagedCluster
"""

helps['aks mesh upgrade rollback'] = """
    type: command
    short-summary: Rollback Azure Service Mesh upgrade.
    long-summary: This command rolls back Azure Service Mesh upgrade to the previous stable revision.
    examples:
      - name: Rollback Azure Service Mesh upgrade.
        text: az aks mesh upgrade rollback --resource-group MyResourceGroup --name MyManagedCluster
"""

helps['aks mesh enable-istio-cni'] = """
    type: command
    short-summary: Enable Istio CNI chaining for Azure Service Mesh proxy redirection mechanism.
    long-summary: >
      This command enables Istio CNI chaining as the proxy redirection mechanism
      for Azure Service Mesh. CNI chaining provides better security and performance
      compared to init containers by using CNI plugins to set up traffic redirection.
    examples:
      - name: Enable Istio CNI chaining for Azure Service Mesh.
        text: az aks mesh enable-istio-cni --resource-group MyResourceGroup --name MyManagedCluster
"""

helps['aks mesh disable-istio-cni'] = """
    type: command
    short-summary: Disable Istio CNI chaining for Azure Service Mesh proxy redirection mechanism.
    long-summary: >
      This command disables Istio CNI chaining and reverts to using init
      containers as the proxy redirection mechanism for Azure Service Mesh. This
      is the traditional method using privileged init containers to set up
      iptables rules.
    examples:
      - name: Disable Istio CNI chaining for Azure Service Mesh.
        text: az aks mesh disable-istio-cni --resource-group MyResourceGroup --name MyManagedCluster
"""

helps['aks applicationloadbalancer'] = """
    type: group
    short-summary: Commands to manage Application Load Balancer (Application Gateway for Containers) addon.
    long-summary: A group of commands to manage Application Load Balancer (Application Gateway for Containers) in given cluster.
"""

helps['aks applicationloadbalancer enable'] = """
    type: command
    short-summary: Enable Application Load Balancer (Application Gateway for Containers) addon.
    long-summary: This command enables Application Load Balancer in given cluster.
"""

helps['aks applicationloadbalancer update'] = """
    type: command
    short-summary: Update Application Load Balancer (Application Gateway for Containers) addon.
    long-summary: This command is used to make a put operation on the Application Load Balancer in a given cluster.
"""

helps['aks applicationloadbalancer disable'] = """
    type: command
    short-summary: Disable Application Load Balancer (Application Gateway for Containers) addon.
    long-summary: This command disables Application Load Balancer (Application Gateway for Containers) in given cluster.
"""

helps['aks approuting'] = """
    type: group
    short-summary: Commands to manage App Routing addon.
    long-summary: A group of commands to manage App Routing in given cluster.
"""

helps['aks approuting enable'] = """
    type: command
    short-summary: Enable App Routing.
    long-summary: This command enables App Routing in given cluster.
    parameters:
      - name: --enable-kv
        type: bool
        short-summary: Enable the keyvault secrets provider.
        long-summary: This optional flag enables the keyvault-secrets-provider addon in given cluster. This is required for most App Routing use-cases.
      - name: --attach-kv
        type: string
        short-summary: Attach a keyvault id to access secrets and certificates.
        long-summary: This optional flag attaches a keyvault id to access secrets and certificates.
      - name: --nginx
        type: string
        short-summary: Configure default NginxIngressController resource
        long-summary: Configure default nginx ingress controller type. Valid values are annotationControlled (default behavior), external, internal, or none.
      - name: --enable-default-domain
        type: bool
        short-summary: Enable default domain for Application Routing addon.
"""

helps['aks approuting disable'] = """
    type: command
    short-summary: Disable App Routing addon.
    long-summary: This command disables App Routing in given cluster.
"""

helps['aks approuting update'] = """
    type: command
    short-summary: Update App Routing addon.
    long-summary: This command is used to update keyvault id in App Routing addon.
    parameters:
      - name: --attach-kv
        type: string
        short-summary: Attach a keyvault id to access secrets and certificates.
        long-summary: This optional flag attaches a keyvault id to access secrets and certificates.
      - name: --enable-kv
        type: bool
        short-summary: Enable the keyvault secrets provider addon.
        long-summary: This optional flag enables the keyvault-secrets-provider addon in given cluster. This is required for most App Routing use-cases.
      - name: --nginx
        type: string
        short-summary: Configure default NginxIngressController resource
        long-summary: Configure default nginx ingress controller type. Valid values are annotationControlled (default behavior), external, internal, or none.
      - name: --enable-default-domain
        type: bool
        short-summary: Enable default domain for Application Routing addon.
      - name: --disable-default-domain
        type: bool
        short-summary: Disable default domain for Application Routing addon.
"""

helps['aks approuting zone'] = """
    type: group
    short-summary: Commands to manage App Routing DNS Zones.
    long-summary: A group of commands to manage App Routing DNS zones in given cluster.
"""

helps['aks approuting zone add'] = """
    type: command
    short-summary: Add DNS Zone(s) to App Routing.
    long-summary: This command adds multiple DNS zone resource IDs to App Routing.
    examples:
      - name: Add DNS zones to App Routing.
        text: az aks approuting zone add --resource-group MyResourceGroup --name MyManagedCluster --ids zoneResourceId
    parameters:
      - name: --ids
        type: string
        short-summary: Comma-separated list of DNS zone resource IDs to add to App Routing.
      - name: --attach-zones
        type: bool
        short-summary: Grant DNS zone Contributor permissions on all zone IDs specified in --ids.
"""

helps['aks approuting zone delete'] = """
    type: command
    short-summary: Delete DNS Zone(s) from App Routing.
    long-summary: This command deletes DNS zone resource IDs from App Routing in given cluster.
    parameters:
      - name: --ids
        type: string
        short-summary: Comma-separated list of DNS zone resource IDs to delete from App Routing.
"""

helps['aks approuting zone update'] = """
    type: command
    short-summary: Replace DNS Zone(s) in App Routing.
    long-summary: This command replaces the DNS zone resource IDs used in App Routing.
    parameters:
      - name: --ids
        type: string
        short-summary: Comma-separated list of DNS zone resource IDs to replace in App Routing.
      - name: --attach-zones
        type: bool
        short-summary: Grant DNS zone Contributor permissions on all zone IDs specified in --ids.
"""

helps['aks approuting zone list'] = """
    type: command
    short-summary: List DNS Zone IDs in App Routing.
    long-summary: This command lists the DNS zone resources used in App Routing.
"""

helps['aks approuting defaultdomain'] = """
    type: group
    short-summary: Commands to manage App Routing Default Domain.
    long-summary: A group of commands to manage App Routing Default Domain in given cluster.
"""

helps['aks approuting defaultdomain show'] = """
    type: command
    short-summary: Show the Default Domain configuration for App Routing.
    long-summary: This command shows the Default Domain configuration including the domain name assigned to the cluster.
    examples:
      - name: Show the default domain for a cluster.
        text: az aks approuting defaultdomain show --resource-group MyResourceGroup --name MyManagedCluster
"""

helps['aks approuting gateway'] = """
    type: group
    short-summary: Commands to manage App Routing Gateway API implementations.
    long-summary: A group of commands to manage Gateway API implementations for App Routing in a given cluster.
"""

helps['aks approuting gateway istio'] = """
    type: group
    short-summary: Commands to manage the Istio Gateway API implementation for App Routing.
    long-summary: A group of commands to manage the Istio-based Gateway API implementation for App Routing in a given cluster.
"""

helps['aks approuting gateway istio enable'] = """
    type: command
    short-summary: Enable Gateway API based ingress on App Routing via Istio without service mesh functionality.
    long-summary: |
        This command enables an ingress-only version of Istio as a Gateway API implementation for App Routing
        in the given cluster. This Istio instance only reconciles Gateway API resources and does not provide
        service mesh functionality (e.g. mTLS, traffic management between services). Cannot be used
        simultaneously with Azure Service Mesh (az aks mesh enable).
    parameters:
      - name: --aks-custom-headers
        type: string
        short-summary: Send custom headers. When specified, format should be Key1=Value1,Key2=Value2. Use AKSHTTPCustomFeatures=Microsoft.ContainerService/AppRoutingIstioGatewayAPIPreview to enable the preview feature flag after registering your subscription to use it.
    examples:
      - name: Enable Istio Gateway API implementation for App Routing.
        text: az aks approuting gateway istio enable --resource-group MyResourceGroup --name MyManagedCluster
"""

helps['aks approuting gateway istio disable'] = """
    type: command
    short-summary: Disable Gateway API based ingress on App Routing via Istio.
    long-summary: |
        This command disables the ingress-only Istio Gateway API implementation for App Routing in the given cluster.
    parameters:
      - name: --aks-custom-headers
        type: string
        short-summary: Send custom headers. When specified, format should be Key1=Value1,Key2=Value2. Use AKSHTTPCustomFeatures=Microsoft.ContainerService/AppRoutingIstioGatewayAPIPreview to enable the preview feature flag after registering your subscription to use it.
    examples:
      - name: Disable Istio Gateway API implementation for App Routing.
        text: az aks approuting gateway istio disable --resource-group MyResourceGroup --name MyManagedCluster
"""

helps['aks check-network'] = """
    type: group
    short-summary: Commands to troubleshoot network connectivity in managed Kubernetes cluster.
"""

helps['aks check-network outbound'] = """
    type: command
    short-summary: Perform outbound network connectivity check for a node in a managed Kubernetes cluster.
    long-summary: This command checks outbound network connectivity from a node to certain required AKS endpoints.
    parameters:
      - name: --name -n
        type: string
        short-summary: Name of the managed cluster.
      - name: --resource-group -g
        type: string
        short-summary: Name of the resource group.
      - name: --node-name
        type: string
        short-summary: Name of the node to perform the connectivity check. If not specified, a random node will be chosen.
      - name: --custom-endpoints
        type: string
        short-summary: Additional endpoint(s) to perform the connectivity check, separated by comma.
"""

helps['aks extension'] = """
  type: group
  short-summary: Commands to manage extensions in the Kubernetes cluster
"""

helps['aks extension create'] = """
  type: command
  short-summary: Creates the Cluster extension instance on the managed cluster. Please refer to the example at the end to see how to create a cluster extension
  long-summary: Create a Cluster Extension. \
The output includes secrets that you must protect. Be sure that you do not include these secrets in your \
  source control. Also verify that no secrets are present in the logs of your command or script. \
  For additional information, see http://aka.ms/clisecrets.
  parameters:
    - name: --resource-group -g
      type: string
      short-summary: Name of the resource group.
    - name: --extension-type -t
      type: string
      short-summary: Name of the extension type
    - name: --cluster-name -c
      type: string
      short-summary: Name of the AKS cluster
    - name: --name -n
      type: string
      short-summary: Name of the extension instance
    - name: --scope
      type: string
      short-summary: Specify scope of the extension type, takes in namespace or cluster as the scope
      long-summary: Specify scope of the extension type, takes in namespace or cluster as the scope \
If not specified, default scope set in the extension type registration will be used
    - name: --config --configuration-settings
      type: string
      short-summary: Configuration Settings as key=value pair
      long-summary: Configuration Settings as key=value pair. Repeat parameter for each setting. \
Do not use this for secrets, as this value is returned in response. If not specified, default value is None
    - name: --config-protected --config-protected-settings
      type: string
      short-summary: Configuration Protected Settings as key=value pair
      long-summary: Configuration Settings as key=value pair. Repeat parameter for each setting. \
Only the key is returned in response, the value is not. If not specified, default value is None
    - name: --config-file --config-settings-file
      type: string
      short-summary: JSON file path for configuration-settings
      long-summary: JSON file path for configuration-settings. If not specified, default value is None
    - name: --config-protected-file --config-protected-settings-file
      type: string
      short-summary: JSON file path for configuration-protected-settings
      long-summary: JSON file path for configuration-protected-settings. If not specified, default value is None
  examples:
    - name: Install Cluster extension on AKS cluster with required parameters
      text: az aks extension create --resource-group my-resource-group \
--cluster-name mycluster --name myextension --extension-type microsoft.flux
    - name: Install Cluster extension with optional parameter configuration settings
      text: az aks extension create --resource-group abc --cluster-name test --name flux \
--extension-type microsoft.flux --config useKubeletIdentity=true
"""

helps['aks extension delete'] = """
  type: command
  short-summary: Delete a Cluster Extension.
  parameters:
    - name: --resource-group -g
      type: string
      short-summary: Name of the resource group.
    - name: --cluster-name -c
      type: string
      short-summary: Name of the AKS cluster
    - name: --name -n
      type: string
      short-summary: Name of the extension instance
    - name: --yes -y
      type: bool
      short-summary: Ignores confirmation prompt.
      long-summary: Ignores confirmation prompt. If not specified, default value is false
    - name: --force
      type: bool
      short-summary: Specify whether to force delete the extension from the cluster
      long-summary: Specify whether to force delete the extension from the cluster \
If not specified, default value is false
  examples:
    - name: Delete an existing Cluster extension on AKS cluster
      text: az aks extension delete --resource-group resource-group --cluster-name cluster --name ext
    - name: Delete an existing Cluster extension on AKS cluster with optional parameters
      text: az aks extension delete --resource-group resource-group --cluster-name cluster --name ext \
--yes --force
"""

helps['aks extension update'] = """
  type: command
  short-summary: Update mutable properties of a Cluster Extension.
  long-summary: For update to ConfigSettings and ConfigProtectedSettings, please \
refer to documentation of the Cluster extension service to check update to these \
properties is supported before updating these properties. \
The output includes secrets that you must protect. Be sure that you do not include these secrets in your \
 source control. Also verify that no secrets are present in the logs of your command or script. \
 For additional information, see http://aka.ms/clisecrets.
  parameters:
    - name: --resource-group -g
      type: string
      short-summary: Name of the resource group.
    - name: --cluster-name -c
      type: string
      short-summary: Name of the AKS cluster
    - name: --name -n
      type: string
      short-summary: Name of the extension instance
    - name: --config --configuration-settings
      type: string
      short-summary: Configuration Settings as key=value pair
      long-summary: Configuration Settings as key=value pair. Repeat parameter for each setting. \
Do not use this for secrets, as this value is returned in response. If not specified, default value is None
    - name: --config-protected --config-protected-settings
      type: string
      short-summary: Configuration Protected Settings as key=value pair
      long-summary: Configuration Settings as key=value pair. Repeat parameter for each setting. \
Only the key is returned in response, the value is not. If not specified, default value is Non
    - name: --config-file --config-settings-file
      type: string
      short-summary: JSON file path for configuration-settings
      long-summary: JSON file path for configuration-settings. If not specified, default value is None
    - name: --config-protected-file --config-protected-settings-file
      type: string
      short-summary: JSON file path for configuration-protected-settings
      long-summary: JSON file path for configuration-protected-settings. If not specified, default value is None
    - name: --yes -y
      type: bool
      short-summary: Ignores confirmation prompt.
      long-summary: Ignores confirmation prompt. If not specified, default value is false
  examples:
    - name: Update Cluster extension on AKS cluster
      text: az aks extension update --resource-group my-resource-group \
--cluster-name mycluster --name myextension
    - name: Update Cluster extension on AKS cluster with optional parameters included
      text: az aks extension update --resource-group my-resource-group \
--cluster-name mycluster --name myextension \
--configuration-settings settings-key=settings-value \
--config-protected-settings protected-settings-key=protected-value \
--config-settings-file=config-settings-file \
--config-protected-file=protected-settings-file
"""

helps['aks extension list'] = """
  type: command
  short-summary: List Cluster Extensions
  long-summary: List all Cluster Extensions in a cluster, including their properties. \
The output includes secrets that you must protect. Be sure that you do not include these secrets in your \
  source control. Also verify that no secrets are present in the logs of your command or script. \
  For additional information, see http://aka.ms/clisecrets.
  parameters:
    - name: --resource-group -g
      type: string
      short-summary: Name of the resource group.
    - name: --cluster-name -c
      type: string
      short-summary: Name of the AKS cluster
  examples:
    - name: List all Cluster Extensions on a cluster
      text: az aks extension list --resource-group <group> --cluster-name <name>
"""

helps['aks extension show'] = """
  type: command
  short-summary: Show a Cluster Extension
  long-summary: Show a Cluster Extension including its properties. \
The output includes secrets that you must protect. Be sure that you do not include these secrets in your \
  source control. Also verify that no secrets are present in the logs of your command or script. \
  For additional information, see http://aka.ms/clisecrets.
  parameters:
    - name: --resource-group -g
      type: string
      short-summary: Name of the resource group.
    - name: --cluster-name -c
      type: string
      short-summary: Name of the AKS cluster
    - name: --name -n
      type: string
      short-summary: Name of the extension instance
  examples:
      - name: Show details of a Cluster Extension
        text: az aks extension show --resource-group my-resource-group \
--cluster-name mycluster --name myextension
"""

helps['aks extension type'] = """
  type: group
  short-summary: Manage extension types in Azure Kubernetes Service.
  long-summary: This command group allows you to list, update, and manage extension types for AKS clusters.
"""

helps['aks extension type show'] = """
  type: command
  short-summary: Show properties for a Cluster Extension Type. The properties used for filtering include kubernetes version, location of the cluster.
  parameters:
    - name: --extension-type -t
      type: string
      short-summary: Name of the extension type
    - name: --resource-group -g
      type: string
      short-summary: Name of the resource group.
      long-summary: Name of the resource group. If not specified, default value is None
    - name: --cluster-name -c
      type: string
      short-summary: Name of the AKS cluster
      long-summary: Name of the AKS cluster. If not specified, default value is None
    - name: --location -l
      type: string
      short-summary: Location of where we want to retrieve the extension type
      long-summary: Location of where we want to retrieve the extension type. If not specified, default value is None

  examples:
    - name: Show properties for a Cluster Extension Type for an existing cluster by cluster
      text: az aks extension type show --resource-group my-resource-group\
 --cluster-name mycluster --extension-type <type>
    - name: Show properties for a Cluster Extension Type in a location
      text: az aks extension type show --location eastus --extension-type type
"""

helps['aks extension type list'] = """
  type: command
  short-summary: List available Cluster Extension Types. The properties used for filtering include kubernetes version, location of the cluster.
  parameters:
    - name: --resource-group -g
      type: string
      short-summary: Name of the resource group.
      long-summary: Name of the resource group. If not specified, default value is None
    - name: --cluster-name -c
      type: string
      short-summary: Name of the AKS cluster
      long-summary: Name of the AKS cluster. If not specified, default value is None
    - name: --location -l
      type: string
      short-summary: Location of where we want to retrieve the extension type
      long-summary: Location of where we want to retrieve the extension type. If not specified, default value is None
    - name: --release-train
      type: string
      short-summary: Specify the release train for the K8s extension type
  examples:
    - name: List available Cluster Extension Types for an existing cluster
      text: az aks extension type list --resource-group my-resource-group \
--cluster-name mycluster
    - name: List available Cluster Extension Types in a region
      text: az aks extension type list --location eastus
"""

helps['aks extension type version'] = """
  type: group
  short-summary: Manage extension types version in Azure Kubernetes Service.
  long-summary: This command group allows you to list and query extension type versions for AKS clusters.
"""

helps['aks extension type version show'] = """
  type: command
  short-summary: Show properties associated with a Cluster Extension Type version. The properties used for filtering include kubernetes version, location of the cluster.
  parameters:
    - name: --resource-group -g
      type: string
      short-summary: Name of the resource group.
      long-summary: Name of the resource group. If not specified, default value is None
    - name: --extension-type -t
      type: string
      short-summary: Name of the extension type
    - name: --cluster-name -c
      type: string
      short-summary: Name of the AKS cluster
      long-summary: Name of the AKS cluster. If not specified, default value is None
    - name: --version
      type: string
      short-summary: Specify the extension version to show to the user
    - name: --location -l
      type: string
      short-summary: Location of where we want to retrieve the extension type
      long-summary: Location of where we want to retrieve the extension type. If not specified, default value is None
  examples:
    - name: Show properties for a Cluster Extension Type version for an existing cluster
      text: az aks extension type version show --resource-group my-resource-group \
--cluster-name mycluster --extension-type type --version 1.0.0
    - name: Show properties for a Cluster Extension Type version for a location
      text: az aks extension type version show --location eastus --extension-type <type> --version 1.0.0
"""

helps['aks extension type version list'] = """
  type: command
  short-summary: List available Cluster Extension Type versions. The properties used for filtering include kubernetes version, location of the cluster.
  parameters:
    - name: --resource-group -g
      type: string
      short-summary: Name of the resource group.
      long-summary: Name of the resource group. If not specified, default value is None
    - name: --cluster-name -c
      type: string
      short-summary: Name of the AKS cluster
      long-summary: Name of the AKS cluster. If not specified, default value is None
    - name: --extension-type -t
      type: string
      short-summary: Name of the extension type
    - name: --location -l
      type: string
      short-summary: Location of where we want to retrieve the extension type
      long-summary: Location of where we want to retrieve the extension type. If not specified, default value is None
  examples:
    - name: List available Cluster Extension Types for an existing cluster
      text: az aks extension type version list --resource-group my-resource-group \
--cluster-name mycluster --extension-type <type>
    - name: List available Cluster Extension Types in a region
      text: az aks extension type version list --location eastus --extension-type <type>
"""

helps['aks loadbalancer'] = """
    type: group
    short-summary: Commands to manage load balancer configurations in a managed Kubernetes cluster.
    long-summary: These commands enable the feature of multiple standard load balancers for Azure Kubernetes Service clusters.
"""

helps['aks loadbalancer add'] = """
    type: command
    short-summary: Add a load balancer configuration to a managed Kubernetes cluster.
    parameters:
        - name: --name -n
          type: string
          short-summary: Name of the load balancer configuration.
          long-summary: Load balancer name used for identification. There must be a configuration named "kubernetes" in the cluster.
        - name: --primary-agent-pool-name -p
          type: string
          short-summary: Name of the primary agent pool for this load balancer.
          long-summary: Required field. A string value that must specify the ID of an existing agent pool. All nodes in the given pool will always be added to this load balancer.
        - name: --allow-service-placement -a
          type: bool
          short-summary: Whether to automatically place services on the load balancer.
          long-summary: If not supplied, the default value is true. If set to false manually, both the external and internal load balancer will not be selected for services unless they explicitly target it.
        - name: --service-label-selector -l
          type: string
          short-summary: Label selector for services that can be placed on this load balancer.
          long-summary: Only services that match this selector can be placed on this load balancer. Format as comma-separated key=value pairs or expressions like "key In value1,value2".
        - name: --service-namespace-selector -s
          type: string
          short-summary: Namespace label selector for services that can be placed on this load balancer.
          long-summary: Services created in namespaces that match the selector can be placed on this load balancer. Format as comma-separated key=value pairs.
        - name: --node-selector -d
          type: string
          short-summary: Node label selector for nodes that can be members of this load balancer.
          long-summary: Nodes that match this selector will be possible members of this load balancer. Format as comma-separated key=value pairs.
        - name: --aks-custom-headers
          type: string
          short-summary: Send custom headers to the AKS API.
          long-summary: When specified, format should be Key1=Value1,Key2=Value2.
    examples:
        - name: Add a load balancer configuration with a specific primary agent pool
          text: az aks loadbalancer add -g MyResourceGroup -n secondary --cluster-name MyManagedCluster --primary-agent-pool-name nodepool1
        - name: Add a load balancer configuration with service label selector
          text: az aks loadbalancer add -g MyResourceGroup -n app-lb --cluster-name MyManagedCluster --primary-agent-pool-name nodepool2 --service-label-selector app=frontend
        - name: Add a load balancer configuration that doesn't automatically place services
          text: az aks loadbalancer add -g MyResourceGroup -n restricted-lb --cluster-name MyManagedCluster --primary-agent-pool-name nodepool3 --allow-service-placement false
        - name: Add a load balancer configuration with custom AKS API headers
          text: az aks loadbalancer add -g MyResourceGroup -n api-lb --cluster-name MyManagedCluster --primary-agent-pool-name nodepool1 --aks-custom-headers CustomHeader=Value
"""

helps['aks loadbalancer update'] = """
    type: command
    short-summary: Update a load balancer configuration in a managed Kubernetes cluster.
    parameters:
        - name: --name -n
          type: string
          short-summary: Name of the load balancer configuration to update.
        - name: --primary-agent-pool-name -p
          type: string
          short-summary: Name of the primary agent pool for this load balancer.
          long-summary: A string value that must specify the ID of an existing agent pool. All nodes in the given pool will always be added to this load balancer.
        - name: --allow-service-placement -a
          type: bool
          short-summary: Whether to automatically place services on the load balancer.
          long-summary: If set to false, both the external and internal load balancer will not be selected for services unless they explicitly target it.
        - name: --service-label-selector -l
          type: string
          short-summary: Label selector for services that can be placed on this load balancer.
          long-summary: Only services that match this selector can be placed on this load balancer. Format as comma-separated key=value pairs or expressions like "key In value1,value2".
        - name: --service-namespace-selector -s
          type: string
          short-summary: Namespace label selector for services that can be placed on this load balancer.
          long-summary: Services created in namespaces that match the selector can be placed on this load balancer. Format as comma-separated key=value pairs.
        - name: --node-selector -d
          type: string
          short-summary: Node label selector for nodes that can be members of this load balancer.
          long-summary: Nodes that match this selector will be possible members of this load balancer. Format as comma-separated key=value pairs.
        - name: --aks-custom-headers
          type: string
          short-summary: Send custom headers to the AKS API.
          long-summary: When specified, format should be Key1=Value1,Key2=Value2.
    examples:
        - name: Update a load balancer configuration's primary agent pool
          text: az aks loadbalancer update -g MyResourceGroup -n secondary --cluster-name MyManagedCluster --primary-agent-pool-name nodepool2
        - name: Update a load balancer configuration to disable automatic service placement
          text: az aks loadbalancer update -g MyResourceGroup -n app-lb --cluster-name MyManagedCluster --allow-service-placement false
        - name: Update a load balancer configuration with new service selector
          text: az aks loadbalancer update -g MyResourceGroup -n app-lb --cluster-name MyManagedCluster --service-label-selector tier=frontend,environment=production
        - name: Update a load balancer configuration with custom AKS API headers
          text: az aks loadbalancer update -g MyResourceGroup -n api-lb --cluster-name MyManagedCluster --aks-custom-headers CustomHeader=Value
"""

helps['aks loadbalancer delete'] = """
    type: command
    short-summary: Delete a load balancer configuration from a managed Kubernetes cluster.
    parameters:
        - name: --name -n
          type: string
          short-summary: Name of the load balancer configuration to delete.
          long-summary: The "kubernetes" load balancer cannot be deleted as it's required for cluster operation.
    examples:
        - name: Delete a load balancer configuration
          text: az aks loadbalancer delete -g MyResourceGroup -n secondary --cluster-name MyManagedCluster
"""

helps['aks loadbalancer list'] = """
    type: command
    short-summary: List all load balancer configurations in a managed Kubernetes cluster.
    examples:
        - name: List all load balancer configurations
          text: az aks loadbalancer list -g MyResourceGroup --cluster-name MyManagedCluster
        - name: List all load balancer configurations in table format
          text: az aks loadbalancer list -g MyResourceGroup --cluster-name MyManagedCluster -o table
"""

helps['aks loadbalancer show'] = """
    type: command
    short-summary: Show details of a specific load balancer configuration in a managed Kubernetes cluster.
    parameters:
        - name: --name -n
          type: string
          short-summary: Name of the load balancer configuration to show.
    examples:
        - name: Show details of a specific load balancer configuration
          text: az aks loadbalancer show -g MyResourceGroup -n secondary --cluster-name MyManagedCluster
        - name: Show details of a load balancer configuration in table format
          text: az aks loadbalancer show -g MyResourceGroup -n kubernetes --cluster-name MyManagedCluster -o table
"""

helps['aks bastion'] = """
    type: command
    short-summary: Connect to a managed Kubernetes cluster using Azure Bastion.
    long-summary: The command will launch a subshell with the kubeconfig set to connect to the cluster via Bastion. Use exit or Ctrl-D (i.e. EOF) to exit the subshell.
    parameters:
        - name: --bastion
          type: string
          short-summary: The name or resource ID of a pre-deployed Bastion resource configured to connect to the current AKS cluster.
          long-summary: If not specified, the command will try to identify an existing Bastion resource within the cluster's node resource group.
        - name: --port
          type: int
          short-summary: The local port number used for the bastion connection.
          long-summary: If not provided, a random port will be used.
        - name: --admin
          type: bool
          short-summary: Use the cluster admin credentials to connect to the bastion.
        - name: --kubeconfig-path
          type: string
          short-summary: Path to an existing kubeconfig file to use.
          long-summary: If specified, uses this kubeconfig file at its original location instead of fetching credentials from Azure.
    examples:
        - name: Connect to a managed Kubernetes cluster using Azure Bastion with custom port and admin credentials.
          text: az aks bastion -g MyResourceGroup --name MyManagedCluster --bastion MyBastionResource --port 50001 --admin
        - name: Connect using an existing kubeconfig file.
          text: az aks bastion -g MyResourceGroup --name MyManagedCluster --kubeconfig-path ~/.kube/config
"""

helps['aks identity-binding'] = """
    type: group
    short-summary: Commands to manage identity bindings in Azure Kubernetes Service.
"""
helps['aks identity-binding show'] = """
    type: command
    short-summary: Show details of a specific identity binding in a managed Kubernetes cluster.
    parameters:
        - name: --cluster-name
          type: string
          short-summary: Name of the managed Kubernetes cluster.
        - name: --name -n
          type: string
          short-summary: Name of the identity binding to show.
"""
helps['aks identity-binding list'] = """
    type: command
    short-summary: List all identity bindings under a managed Kubernetes cluster.
    parameters:
        - name: --cluster-name
          type: string
          short-summary: Name of the managed Kubernetes cluster.
"""
helps['aks identity-binding create'] = """
    type: command
    short-summary: Create a new identity binding in a managed Kubernetes cluster.
    parameters:
        - name: --cluster-name
          type: string
          short-summary: Name of the managed Kubernetes cluster.
        - name: --name -n
          type: string
          short-summary: Name of the identity binding to show.
        - name: --managed-identity-resource-id
          type: string
          short-summary: The resource ID of the managed identity to use.
"""
helps['aks identity-binding delete'] = """
    type: command
    short-summary: Delete a specific identity binding in a managed Kubernetes cluster.
    parameters:
        - name: --cluster-name
          type: string
          short-summary: Name of the managed Kubernetes cluster.
        - name: --name -n
          type: string
          short-summary: Name of the identity binding to show.
"""

helps['aks jwtauthenticator'] = """
    type: group
    short-summary: Commands to manage JWT authenticators in Azure Kubernetes Service.
    long-summary: JWT authenticators enable external JWT token validation for Kubernetes authentication.
                  For more information, see https://aka.ms/aks-external-issuers-docs.
"""

helps['aks jwtauthenticator add'] = """
    type: command
    short-summary: Add a JWT authenticator to a managed cluster.
    long-summary: Adds a new JWT authenticator configuration to the managed cluster for external JWT validation.
                  The configuration will be applied to the kube-apiserver to enable JWT token authentication.
    parameters:
        - name: --cluster-name
          type: string
          short-summary: Name of the managed cluster.
        - name: --name -n
          type: string
          short-summary: Name of the JWT authenticator (must be unique within the cluster).
        - name: --config-file
          type: string
          short-summary: Path to JSON file containing the JWT authenticator configuration.
          long-summary: The JSON file should contain the properties schema for one JWT authenticator.
                        For details on how to configure the properties of a JWT authenticator, please refer to the Kubernetes documentation
                        at https://kubernetes.io/docs/reference/access-authn-authz/authentication/#using-authentication-configuration.
                        Please note that not all fields available in the Kubernetes documentation are supported by AKS.
                        For troubleshooting, please see https://aka.ms/aks-external-issuers-docs.
        - name: --aks-custom-headers
          type: string
          short-summary: Send custom headers. When specified, format should be Key1=Value1,Key2=Value2
    examples:
        - name: Add a JWT authenticator from a configuration file
          text: az aks jwtauthenticator add -g MyResourceGroup --cluster-name MyCluster --name myjwt --config-file config.json
"""

helps['aks jwtauthenticator update'] = """
    type: command
    short-summary: Update a JWT authenticator in a managed cluster.
    long-summary: Updates an existing JWT authenticator configuration. The entire configuration will be replaced
                  with the configuration from the provided file.
    parameters:
        - name: --cluster-name
          type: string
          short-summary: Name of the managed cluster.
        - name: --name -n
          type: string
          short-summary: Name of the JWT authenticator to update.
        - name: --config-file
          type: string
          short-summary: Path to JSON file containing the updated JWT authenticator configuration.
          long-summary: The JSON file should contain the properties schema for one JWT authenticator.
                        For details on how to configure the properties of a JWT authenticator, please refer to the Kubernetes documentation
                        at https://kubernetes.io/docs/reference/access-authn-authz/authentication/#using-authentication-configuration.
                        Please note that not all fields available in the Kubernetes documentation are supported by AKS.
                        For troubleshooting, please see https://aka.ms/aks-external-issuers-docs.
        - name: --aks-custom-headers
          type: string
          short-summary: Send custom headers. When specified, format should be Key1=Value1
    examples:
        - name: Update a JWT authenticator configuration
          text: az aks jwtauthenticator update -g MyResourceGroup --cluster-name MyCluster --name myjwt --config-file updated-config.json
"""

helps['aks jwtauthenticator delete'] = """
    type: command
    short-summary: Delete a JWT authenticator from a managed cluster.
    long-summary: Removes the JWT authenticator configuration from the managed cluster and updates the kube-apiserver.
    parameters:
        - name: --cluster-name
          type: string
          short-summary: Name of the managed cluster.
        - name: --name -n
          type: string
          short-summary: Name of the JWT authenticator to delete.
    examples:
        - name: Delete a JWT authenticator
          text: az aks jwtauthenticator delete -g MyResourceGroup --cluster-name MyCluster --name myjwt
"""

helps['aks jwtauthenticator list'] = """
    type: command
    short-summary: List all JWT authenticators in a managed cluster.
    parameters:
        - name: --cluster-name
          type: string
          short-summary: Name of the managed cluster.
    examples:
        - name: List all JWT authenticators in a cluster
          text: az aks jwtauthenticator list -g MyResourceGroup --cluster-name MyCluster
"""

helps['aks jwtauthenticator show'] = """
    type: command
    short-summary: Show details of a JWT authenticator in a managed cluster.
    parameters:
        - name: --cluster-name
          type: string
          short-summary: Name of the managed cluster.
        - name: --name -n
          type: string
          short-summary: Name of the JWT authenticator to show.
    examples:
        - name: Show a specific JWT authenticator configuration
          text: az aks jwtauthenticator show -g MyResourceGroup --cluster-name MyCluster --name myjwt
"""