{
"$schema": "https://json-schema.org/draft/2020-12/schema",
"$id": "https://artifacts.apis.io/microsoft-azure-batch/json-schema/microsoft-azure-batch-batch-job-update-options-schema.json",
"title": "BatchJobUpdateOptions",
"description": "Parameters for updating an Azure Batch Job.",
"x-generated": "2026-11-05",
"x-method": "derived",
"x-generator": "derive-json-schema.py",
"x-source": "openapi/_superseded/microsoft-azure-batch-jobs-api-openapi.yml#/components/schemas/BatchJobUpdateOptions",
"type": "object",
"properties": {
"priority": {
"type": "integer",
"format": "int32",
"description": "The priority of the Job. Priority values can range from -1000 to 1000, with -1000 being the lowest priority and 1000 being the highest priority. If omitted, the priority of the Job is left unchanged."
},
"allowTaskPreemption": {
"type": "boolean",
"description": "Whether Tasks in this job can be preempted by other high priority jobs. (This property is not available by default. Please contact support for more information) If the value is set to True, other high priority jobs submitted to the system will take precedence and will be able requeue tasks from this job. You can update a job's allowTaskPreemption after it has been created using the update job API."
},
"maxParallelTasks": {
"type": "integer",
"format": "int32",
"description": "The maximum number of tasks that can be executed in parallel for the job. (This property is not available by default. Please contact support for more information) The value of maxParallelTasks must be -1 or greater than 0 if specified. If not specified, the default value is -1, which means there's no limit to the number of tasks that can be run at once. You can update a job's maxParallelTasks after it has been created using the update job API."
},
"constraints": {
"$ref": "#/$defs/BatchJobConstraints",
"description": "The execution constraints for the Job. If omitted, the existing execution constraints are left unchanged."
},
"poolInfo": {
"$ref": "#/$defs/BatchPoolInfoUpdate",
"description": "The Pool on which the Batch service runs the Job's Tasks. You may change the Pool for a Job only when the Job is disabled. The Patch Job call will fail if you include the poolInfo element and the Job is not disabled. If you specify an autoPoolSpecification in the poolInfo, only the keepAlive property of the autoPoolSpecification can be updated, and then only if the autoPoolSpecification has a poolLifetimeOption of Job (other job properties can be updated as normal). If omitted, the Job continues to run on its current Pool."
},
"onAllTasksComplete": {
"$ref": "#/$defs/BatchAllTasksCompleteMode",
"description": "The action the Batch service should take when all Tasks in the Job are in the completed state. If omitted, the completion behavior is left unchanged. You may not change the value from terminatejob to noaction - that is, once you have engaged automatic Job termination, you cannot turn it off again. If you try to do this, the request fails with an 'invalid property value' error response; if you are calling the REST API directly, the HTTP status code is 400 (Bad Request).",
"x-ms-client-name": "allTasksCompleteMode"
},
"metadata": {
"type": "array",
"description": "A list of name-value pairs associated with the Job as metadata. If omitted, the existing Job metadata is left unchanged.",
"items": {
"$ref": "#/$defs/BatchMetadataItem"
}
},
"networkConfiguration": {
"$ref": "#/$defs/BatchJobNetworkConfigurationUpdate",
"description": "(This property is not available by default. Please contact support for more information) The network configuration for the Job."
}
},
"$defs": {
"AutoUserScope": {
"type": "string",
"description": "AutoUserScope enums",
"enum": [
"task",
"pool"
],
"x-ms-enum": {
"name": "AutoUserScope",
"modelAsString": true,
"values": [
{
"name": "Task",
"value": "task",
"description": "Specifies that the service should create a new user for the Task."
},
{
"name": "Pool",
"value": "pool",
"description": "Specifies that the Task runs as the common auto user Account which is created on every Compute Node in a Pool."
}
]
}
},
"AutoUserSpecification": {
"type": "object",
"description": "Specifies the options for the auto user that runs an Azure Batch Task.",
"properties": {
"scope": {
"$ref": "#/$defs/AutoUserScope",
"description": "The scope for the auto user. The default value is pool. If the pool is running Windows a value of Task should be specified if stricter isolation between tasks is required. For example, if the task mutates the registry in a way which could impact other tasks."
},
"elevationLevel": {
"$ref": "#/$defs/ElevationLevel",
"description": "The elevation level of the auto user. The default value is nonAdmin."
}
}
},
"AutomaticOsUpgradePolicy": {
"type": "object",
"description": "The configuration parameters used for performing automatic OS upgrade.",
"properties": {
"disableAutomaticRollback": {
"type": "boolean",
"description": "Whether OS image rollback feature should be disabled."
},
"enableAutomaticOSUpgrade": {
"type": "boolean",
"description": "Indicates whether OS upgrades should automatically be applied to scale set instances in a rolling fashion when a newer version of the OS image becomes available.
If this is set to true for Windows based pools, [WindowsConfiguration.enableAutomaticUpdates](https://learn.microsoft.com/rest/api/batchservice/pools/create-pool#windowsconfiguration) cannot be set to true.",
"x-ms-client-name": "enableAutomaticOsUpgrade"
},
"useRollingUpgradePolicy": {
"type": "boolean",
"description": "Indicates whether rolling upgrade policy should be used during Auto OS Upgrade. Auto OS Upgrade will fallback to the default policy if no policy is defined on the VMSS."
},
"osRollingUpgradeDeferral": {
"type": "boolean",
"description": "Defer OS upgrades on the TVMs if they are running tasks."
}
}
},
"AzureBlobFileSystemConfiguration": {
"type": "object",
"description": "Information used to connect to an Azure Storage Container using Blobfuse.",
"properties": {
"accountName": {
"type": "string",
"description": "The Azure Storage Account name."
},
"containerName": {
"type": "string",
"description": "The Azure Blob Storage Container name."
},
"accountKey": {
"type": "string",
"format": "password",
"description": "The Azure Storage Account key. This property is mutually exclusive with both sasKey and identity; exactly one must be specified.",
"x-ms-secret": true
},
"sasKey": {
"type": "string",
"format": "password",
"description": "The Azure Storage SAS token. This property is mutually exclusive with both accountKey and identity; exactly one must be specified.",
"x-ms-secret": true
},
"blobfuseOptions": {
"type": "string",
"description": "Additional command line options to pass to the mount command. These are 'net use' options in Windows and 'mount' options in Linux."
},
"relativeMountPath": {
"type": "string",
"description": "The relative path on the compute node where the file system will be mounted. All file systems are mounted relative to the Batch mounts directory, accessible via the AZ_BATCH_NODE_MOUNTS_DIR environment variable."
},
"identityReference": {
"$ref": "#/$defs/BatchNodeIdentityReference",
"description": "The reference to the user assigned identity to use to access containerName. This property is mutually exclusive with both accountKey and sasKey; exactly one must be specified."
}
},
"required": [
"accountName",
"containerName",
"relativeMountPath"
]
},
"AzureFileShareConfiguration": {
"type": "object",
"description": "Information used to connect to an Azure Fileshare.",
"properties": {
"accountName": {
"type": "string",
"description": "The Azure Storage account name."
},
"accountKey": {
"type": "string",
"format": "password",
"description": "The Azure Storage account key.",
"x-ms-secret": true
},
"azureFileUrl": {
"type": "string",
"format": "uri",
"description": "The Azure Files URL. This is of the form 'https://{account}.file.core.windows.net/'."
},
"relativeMountPath": {
"type": "string",
"description": "The relative path on the compute node where the file system will be mounted. All file systems are mounted relative to the Batch mounts directory, accessible via the AZ_BATCH_NODE_MOUNTS_DIR environment variable."
},
"mountOptions": {
"type": "string",
"description": "Additional command line options to pass to the mount command. These are 'net use' options in Windows and 'mount' options in Linux."
}
},
"required": [
"accountName",
"accountKey",
"azureFileUrl",
"relativeMountPath"
]
},
"BatchAllTasksCompleteMode": {
"type": "string",
"description": "The action the Batch service should take when all Tasks in the Job are in the completed state.",
"enum": [
"noaction",
"terminatejob"
],
"x-ms-enum": {
"name": "BatchAllTasksCompleteMode",
"modelAsString": true,
"values": [
{
"name": "NoAction",
"value": "noaction",
"description": "Do nothing. The Job remains active unless terminated or disabled by some other means."
},
{
"name": "TerminateJob",
"value": "terminatejob",
"description": "Terminate the Job. The Job's terminationReason is set to 'AllTasksComplete'."
}
]
}
},
"BatchApplicationPackageReference": {
"type": "object",
"description": "A reference to an Package to be deployed to Compute Nodes.",
"properties": {
"applicationId": {
"type": "string",
"description": "The ID of the application to deploy. When creating a pool, the package's application ID must be fully qualified (/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Batch/batchAccounts/{accountName}/applications/{applicationName})."
},
"version": {
"type": "string",
"description": "The version of the application to deploy. If omitted, the default version is deployed. If this is omitted on a Pool, and no default version is specified for this application, the request fails with the error code InvalidApplicationPackageReferences and HTTP status code 409. If this is omitted on a Task, and no default version is specified for this application, the Task fails with a pre-processing error."
}
},
"required": [
"applicationId"
]
},
"BatchAutoPoolSpecificationUpdate": {
"type": "object",
"description": "Specifies characteristics for a temporary 'auto pool'. The Batch service will\ncreate this auto Pool when the Job is submitted.",
"properties": {
"autoPoolIdPrefix": {
"type": "string",
"description": "A prefix to be added to the unique identifier when a Pool is automatically created. The Batch service assigns each auto Pool a unique identifier on creation. To distinguish between Pools created for different purposes, you can specify this element to add a prefix to the ID that is assigned. The prefix can be up to 20 characters long."
},
"poolLifetimeOption": {
"$ref": "#/$defs/BatchPoolLifetimeOption",
"description": "The minimum lifetime of created auto Pools, and how multiple Jobs on a schedule are assigned to Pools."
},
"keepAlive": {
"type": "boolean",
"description": "Whether to keep an auto Pool alive after its lifetime expires. If false, the Batch service deletes the Pool once its lifetime (as determined by the poolLifetimeOption setting) expires; that is, when the Job or Job Schedule completes. If true, the Batch service does not delete the Pool automatically. It is up to the user to delete auto Pools created with this option."
},
"pool": {
"$ref": "#/$defs/BatchPoolSpecificationUpdate",
"description": "The Pool specification for the auto Pool."
}
}
},
"BatchContainerConfigurationUpdate": {
"type": "object",
"description": "The configuration for container-enabled Pools.",
"properties": {
"type": {
"$ref": "#/$defs/ContainerType",
"description": "The container technology to be used."
},
"containerImageNames": {
"type": "array",
"description": "The collection of container Image names. This is the full Image reference, as would be specified to \"docker pull\". An Image will be sourced from the default Docker registry unless the Image is fully qualified with an alternative registry.",
"items": {
"type": "string"
}
},
"containerRegistries": {
"type": "array",
"description": "Additional private registries from which containers can be pulled. If any Images must be downloaded from a private registry which requires credentials, then those credentials must be provided here.",
"items": {
"$ref": "#/$defs/ContainerRegistryReference"
}
}
}
},
"BatchDiffDiskSettings": {
"type": "object",
"description": "Specifies the ephemeral Disk Settings for the operating system disk used by the\ncompute node (VM).",
"properties": {
"placement": {
"$ref": "#/$defs/DiffDiskPlacement",
"description": "Specifies the ephemeral disk placement for operating system disk for all VMs in the pool. This property can be used by user in the request to choose the location e.g., cache disk space for Ephemeral OS disk provisioning. For more information on Ephemeral OS disk size requirements, please refer to Ephemeral OS disk size requirements for Windows VMs at https://learn.microsoft.com/azure/virtual-machines/windows/ephemeral-os-disks#size-requirements and Linux VMs at https://learn.microsoft.com/azure/virtual-machines/linux/ephemeral-os-disks#size-requirements."
}
}
},
"BatchInboundNatPool": {
"type": "object",
"description": "A inbound NAT Pool that can be used to address specific ports on Compute Nodes\nin a Batch Pool externally.",
"properties": {
"name": {
"type": "string",
"description": "The name of the endpoint. The name must be unique within a Batch Pool, can contain letters, numbers, underscores, periods, and hyphens. Names must start with a letter or number, must end with a letter, number, or underscore, and cannot exceed 77 characters. If any invalid values are provided the request fails with HTTP status code 400."
},
"protocol": {
"$ref": "#/$defs/InboundEndpointProtocol",
"description": "The protocol of the endpoint."
},
"backendPort": {
"type": "integer",
"format": "int32",
"description": "The port number on the Compute Node. This must be unique within a Batch Pool. Acceptable values are between 1 and 65535 except for 29876 and 29877 as these are reserved. If any reserved values are provided the request fails with HTTP status code 400."
},
"frontendPortRangeStart": {
"type": "integer",
"format": "int32",
"description": "The first port number in the range of external ports that will be used to provide inbound access to the backendPort on individual Compute Nodes. Acceptable values range between 1 and 65534 except ports from 50000 to 55000 which are reserved. All ranges within a Pool must be distinct and cannot overlap. Each range must contain at least 40 ports. If any reserved or overlapping values are provided the request fails with HTTP status code 400."
},
"frontendPortRangeEnd": {
"type": "integer",
"format": "int32",
"description": "The last port number in the range of external ports that will be used to provide inbound access to the backendPort on individual Compute Nodes. Acceptable values range between 1 and 65534 except ports from 50000 to 55000 which are reserved by the Batch service. All ranges within a Pool must be distinct and cannot overlap. Each range must contain at least 40 ports. If any reserved or overlapping values are provided the request fails with HTTP status code 400."
},
"networkSecurityGroupRules": {
"type": "array",
"description": "A list of network security group rules that will be applied to the endpoint. The maximum number of rules that can be specified across all the endpoints on a Batch Pool is 25. If no network security group rules are specified, a default rule will be created to allow inbound access to the specified backendPort. If the maximum number of network security group rules is exceeded the request fails with HTTP status code 400.",
"items": {
"$ref": "#/$defs/NetworkSecurityGroupRule"
}
}
},
"required": [
"name",
"protocol",
"backendPort",
"frontendPortRangeStart",
"frontendPortRangeEnd"
]
},
"BatchJobConstraints": {
"type": "object",
"description": "The execution constraints for a Job.",
"properties": {
"maxWallClockTime": {
"type": "string",
"format": "duration",
"description": "The maximum elapsed time that the Job may run, measured from the time the Job is created. If the Job does not complete within the time limit, the Batch service terminates it and any Tasks that are still running. In this case, the termination reason will be MaxWallClockTimeExpiry. If this property is not specified, there is no time limit on how long the Job may run. The time duration is specified in ISO 8601 format."
},
"maxTaskRetryCount": {
"type": "integer",
"format": "int32",
"description": "The maximum number of times each Task may be retried. The Batch service retries a Task if its exit code is nonzero. Note that this value specifically controls the number of retries. The Batch service will try each Task once, and may then retry up to this limit. For example, if the maximum retry count is 3, Batch tries a Task up to 4 times (one initial try and 3 retries). If the maximum retry count is 0, the Batch service does not retry Tasks. If the maximum retry count is -1, the Batch service retries Tasks without limit. The default value is 0 (no retries)."
}
}
},
"BatchJobNetworkConfigurationUpdate": {
"type": "object",
"description": "(This property is not available by default. Please contact support for more information) The network configuration for the Job.",
"properties": {
"subnetId": {
"type": "string",
"description": "The ARM resource identifier of the virtual network subnet which Compute Nodes running Tasks from the Job will join for the duration of the Task. The virtual network must be in the same region and subscription as the Azure Batch Account. The specified subnet should have enough free IP addresses to accommodate the number of Compute Nodes which will run Tasks from the Job. This can be up to the number of Compute Nodes in the Pool. The 'MicrosoftAzureBatch' service principal must have the 'Classic Virtual Machine Contributor' Role-Based Access Control (RBAC) role for the specified VNet so that Azure Batch service can schedule Tasks on the Nodes. This can be verified by checking if the specified VNet has any associated Network Security Groups (NSG). If communication to the Nodes in the specified subnet is denied by an NSG, then the Batch service will set the state of the Compute Nodes to unusable. This is of the form /subscriptions/{subscription}/resourceGroups/{group}/providers/{provider}/virtualNetworks/{network}/subnets/{subnet}. If the specified VNet has any associated Network Security Groups (NSG), then a few reserved system ports must be enabled for inbound communication from the Azure Batch service. For Pools created with a Virtual Machine configuration, enable ports 29876 and 29877, as well as port 22 for Linux and port 3389 for Windows. Port 443 is also required to be open for outbound connections for communications to Azure Storage. For more details see: https://learn.microsoft.com/azure/batch/batch-api-basics#virtual-network-vnet-and-firewall-configuration."
},
"skipWithdrawFromVNet": {
"type": "boolean",
"description": "Whether to withdraw Compute Nodes from the virtual network to DNC when the job is terminated or deleted. If true, nodes will remain joined to the virtual network to DNC. If false, nodes will automatically withdraw when the job ends. Defaults to false.",
"x-ms-client-name": "skipWithdrawFromVnet"
}
}
},
"BatchMetadataItem": {
"type": "object",
"description": "The Batch service does not assign any meaning to this metadata; it is solely\nfor the use of user code.",
"properties": {
"name": {
"type": "string",
"description": "The name of the metadata item."
},
"value": {
"type": "string",
"description": "The value of the metadata item."
}
},
"required": [
"name",
"value"
]
},
"BatchNodeFillType": {
"type": "string",
"description": "BatchNodeFillType enums",
"enum": [
"spread",
"pack"
],
"x-ms-enum": {
"name": "BatchNodeFillType",
"modelAsString": true,
"values": [
{
"name": "Spread",
"value": "spread",
"description": "Tasks should be assigned evenly across all Compute Nodes in the Pool."
},
{
"name": "Pack",
"value": "pack",
"description": "As many Tasks as possible (taskSlotsPerNode) should be assigned to each Compute Node in the Pool before any Tasks are assigned to the next Compute Node in the Pool."
}
]
}
},
"BatchNodeIdentityReference": {
"type": "object",
"description": "The reference to a user assigned identity associated with the Batch pool which\na compute node will use.",
"properties": {
"resourceId": {
"type": "string",
"format": "arm-id",
"description": "The ARM resource id of the user assigned identity."
}
}
},
"BatchNodePlacementConfiguration": {
"type": "object",
"description": "For regional placement, nodes in the pool will be allocated in the same region.\nFor zonal placement, nodes in the pool will be spread across different zones\nwith best effort balancing.",
"properties": {
"policy": {
"$ref": "#/$defs/BatchNodePlacementPolicyType",
"description": "Node placement Policy type on Batch Pools. Allocation policy used by Batch Service to provision the nodes. If not specified, Batch will use the regional policy."
}
}
},
"BatchNodePlacementPolicyType": {
"type": "string",
"description": "BatchNodePlacementPolicyType enums",
"enum": [
"regional",
"zonal"
],
"x-ms-enum": {
"name": "BatchNodePlacementPolicyType",
"modelAsString": true,
"values": [
{
"name": "Regional",
"value": "regional",
"description": "All nodes in the pool will be allocated in the same region."
},
{
"name": "Zonal",
"value": "zonal",
"description": "Nodes in the pool will be spread across different availability zones with best effort balancing."
}
]
}
},
"BatchOsDisk": {
"type": "object",
"description": "Settings for the operating system disk of the compute node (VM).",
"properties": {
"ephemeralOSDiskSettings": {
"$ref": "#/$defs/BatchDiffDiskSettings",
"description": "Specifies the ephemeral Disk Settings for the operating system disk used by the compute node (VM)."
},
"caching": {
"$ref": "#/$defs/CachingType",
"description": "Specifies the caching requirements. Possible values are: None, ReadOnly, ReadWrite. The default values are: None for Standard storage. ReadOnly for Premium storage."
},
"diskSizeGB": {
"type": "integer",
"format": "int32",
"description": "The initial disk size in GB when creating new OS disk."
},
"managedDisk": {
"$ref": "#/$defs/ManagedDisk",
"description": "The managed disk parameters."
},
"writeAcceleratorEnabled": {
"type": "boolean",
"description": "Specifies whether writeAccelerator should be enabled or disabled on the disk."
}
}
},
"BatchPoolEndpointConfigurationUpdate": {
"type": "object",
"description": "The endpoint configuration for a Pool.",
"properties": {
"inboundNATPools": {
"type": "array",
"description": "A list of inbound NAT Pools that can be used to address specific ports on an individual Compute Node externally. The maximum number of inbound NAT Pools per Batch Pool is 5. If the maximum number of inbound NAT Pools is exceeded the request fails with HTTP status code 400. This cannot be specified if the IPAddressProvisioningType is NoPublicIPAddresses.",
"items": {
"$ref": "#/$defs/BatchInboundNatPool"
},
"x-ms-client-name": "inboundNatPools"
}
}
},
"BatchPoolIdentityReference": {
"type": "object",
"description": "The reference of one of the pool identities to encrypt Disk. This identity will be used to access the key vault.",
"properties": {
"resourceId": {
"type": "string",
"format": "arm-id",
"description": "The ARM resource id of the user assigned identity. This reference must be included in the pool identities."
}
}
},
"BatchPoolInfoUpdate": {
"type": "object",
"description": "Specifies how a Job should be assigned to a Pool.",
"properties": {
"poolId": {
"type": "string",
"description": "The ID of an existing Pool. All the Tasks of the Job will run on the specified Pool. You must ensure that the Pool referenced by this property exists. If the Pool does not exist at the time the Batch service tries to schedule a Job, no Tasks for the Job will run until you create a Pool with that id. Note that the Batch service will not reject the Job request; it will simply not run Tasks until the Pool exists. You must specify either the Pool ID or the auto Pool specification, but not both."
},
"autoPoolSpecification": {
"$ref": "#/$defs/BatchAutoPoolSpecificationUpdate",
"description": "Characteristics for a temporary 'auto pool'. The Batch service will create this auto Pool when the Job is submitted. If auto Pool creation fails, the Batch service moves the Job to a completed state, and the Pool creation error is set in the Job's scheduling error property. The Batch service manages the lifetime (both creation and, unless keepAlive is specified, deletion) of the auto Pool. Any user actions that affect the lifetime of the auto Pool while the Job is active will result in unexpected behavior. You must specify either the Pool ID or the auto Pool specification, but not both."
}
}
},
"BatchPoolLifetimeOption": {
"type": "string",
"description": "BatchPoolLifetimeOption enums",
"enum": [
"jobschedule",
"job"
],
"x-ms-enum": {
"name": "BatchPoolLifetimeOption",
"modelAsString": true,
"values": [
{
"name": "JobSchedule",
"value": "jobschedule",
"description": "The Pool exists for the lifetime of the Job Schedule. The Batch Service creates the Pool when it creates the first Job on the schedule. You may apply this option only to Job Schedules, not to Jobs."
},
{
"name": "Job",
"value": "job",
"description": "The Pool exists for the lifetime of the Job to which it is dedicated. The Batch service creates the Pool when it creates the Job. If the 'job' option is applied to a Job Schedule, the Batch service creates a new auto Pool for every Job created on the schedule."
}
]
}
},
"BatchPoolSpecificationUpdate": {
"type": "object",
"description": "Specification for creating a new Pool.",
"properties": {
"displayName": {
"type": "string",
"description": "The display name for the Pool. The display name need not be unique and can contain any Unicode characters up to a maximum length of 1024."
},
"vmSize": {
"type": "string",
"description": "The size of the virtual machines in the Pool. All virtual machines in a Pool are the same size. For information about available sizes of virtual machines in Pools, see Choose a VM size for Compute Nodes in an Azure Batch Pool (https://learn.microsoft.com/azure/batch/batch-pool-vm-sizes)."
},
"virtualMachineConfiguration": {
"$ref": "#/$defs/VirtualMachineConfigurationUpdate",
"description": "The virtual machine configuration for the Pool. This property must be specified."
},
"taskSlotsPerNode": {
"type": "integer",
"format": "int32",
"description": "The number of task slots that can be used to run concurrent tasks on a single compute node in the pool. The default value is 1. The maximum value is the smaller of 4 times the number of cores of the vmSize of the pool or 256."
},
"taskSchedulingPolicy": {
"$ref": "#/$defs/BatchTaskSchedulingPolicyUpdate",
"description": "How Tasks are distributed across Compute Nodes in a Pool. If not specified, the default is spread."
},
"resizeTimeout": {
"type": "string",
"format": "duration",
"description": "The timeout for allocation of Compute Nodes to the Pool. This timeout applies only to manual scaling; it has no effect when enableAutoScale is set to true. The default value is 15 minutes. The minimum value is 5 minutes. If you specify a value less than 5 minutes, the Batch service rejects the request with an error; if you are calling the REST API directly, the HTTP status code is 400 (Bad Request). The time duration is specified in ISO 8601 format."
},
"targetDedicatedNodes": {
"type": "integer",
"format": "int32",
"description": "The desired number of dedicated Compute Nodes in the Pool. This property must not be specified if enableAutoScale is set to true. If enableAutoScale is set to false, then you must set either targetDedicatedNodes, targetLowPriorityNodes, or both."
},
"targetLowPriorityNodes": {
"type": "integer",
"format": "int32",
"description": "The desired number of Spot/Low-priority Compute Nodes in the Pool. This property must not be specified if enableAutoScale is set to true. If enableAutoScale is set to false, then you must set either targetDedicatedNodes, targetLowPriorityNodes, or both."
},
"enableAutoScale": {
"type": "boolean",
"description": "Whether the Pool size should automatically adjust over time. If false, at least one of targetDedicatedNodes and targetLowPriorityNodes must be specified. If true, the autoScaleFormula element is required. The Pool automatically resizes according to the formula. The default value is false."
},
"autoScaleFormula": {
"type": "string",
"description": "The formula for the desired number of Compute Nodes in the Pool. This property must not be specified if enableAutoScale is set to false. It is required if enableAutoScale is set to true. The formula is checked for validity before the Pool is created. If the formula is not valid, the Batch service rejects the request with detailed error information."
},
"autoScaleEvaluationInterval": {
"type": "string",
"format": "duration",
"description": "The time interval at which to automatically adjust the Pool size according to the autoscale formula. The default value is 15 minutes. The minimum and maximum value are 5 minutes and 168 hours respectively. If you specify a value less than 5 minutes or greater than 168 hours, the Batch service rejects the request with an invalid property value error; if you are calling the REST API directly, the HTTP status code is 400 (Bad Request). The time duration is specified in ISO 8601 format."
},
"enableInterNodeCommunication": {
"type": "boolean",
"description": "Whether the Pool permits direct communication between Compute Nodes. Enabling inter-node communication limits the maximum size of the Pool due to deployment restrictions on the Compute Nodes of the Pool. This may result in the Pool not reaching its desired size. The default value is false."
},
"networkConfiguration": {
"$ref": "#/$defs/NetworkConfigurationUpdate",
"description": "The network configuration for the Pool."
},
"startTask": {
"$ref": "#/$defs/BatchStartTaskUpdate",
"description": "A Task to run on each Compute Node as it joins the Pool. The Task runs when the Compute Node is added to the Pool or when the Compute Node is restarted."
},
"applicationPackageReferences": {
"type": "array",
"description": "The list of Packages to be installed on each Compute Node in the Pool. When creating a pool, the package's application ID must be fully qualified (/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Batch/batchAccounts/{accountName}/applications/{applicationName}). Changes to Package references affect all new Nodes joining the Pool, but do not affect Compute Nodes that are already in the Pool until they are rebooted or reimaged. There is a maximum of 10 Package references on any given Pool.",
"items": {
"$ref": "#/$defs/BatchApplicationPackageReference"
}
},
"userAccounts": {
"type": "array",
"description": "The list of user Accounts to be created on each Compute Node in the Pool.",
"items": {
"$ref": "#/$defs/UserAccount"
}
},
"metadata": {
"type": "array",
"description": "A list of name-value pairs associated with the Pool as metadata. The Batch service does not assign any meaning to metadata; it is solely for the use of user code.",
"items": {
"$ref": "#/$defs/BatchMetadataItem"
}
},
"mountConfiguration": {
"type": "array",
"description": "A list of file systems to mount on each node in the pool. This supports Azure Files, NFS, CIFS/SMB, and Blobfuse.",
"items": {
"$ref": "#/$defs/MountConfiguration"
}
},
"upgradePolicy": {
"$ref": "#/$defs/UpgradePolicyUpdate",
"description": "The upgrade policy for the Pool. Describes an upgrade policy - automatic, manual, or rolling."
}
}
},
"BatchPublicIpAddressConfiguration": {
"type": "object",
"description": "The public IP Address configuration of the networking configuration of a Pool.",
"properties": {
"provision": {
"$ref": "#/$defs/IpAddressProvisioningType",
"description": "The provisioning type for Public IP Addresses for the Pool. The default value is BatchManaged.",
"x-ms-client-name": "IpAddressProvisioningType"
},
"ipFamilies": {
"type": "array",
"description": "The IP families used to specify IP versions available to the pool. IP families are used to determine single-stack or dual-stack pools. For single-stack, the expected value is IPv4. For dual-stack, the expected values are IPv4 and IPv6.",
"items": {
"$ref": "#/$defs/IPFamily"
}
},
"ipAddressIds": {
"type": "array",
"description": "The list of public IPs which the Batch service will use when provisioning Compute Nodes. The number of IPs specified here limits the maximum size of the Pool - 100 dedicated nodes or 100 Spot/Low-priority nodes can be allocated for each public IP. For example, a pool needing 250 dedicated VMs would need at least 3 public IPs specified. Each element of this collection is of the form: /subscriptions/{subscription}/resourceGroups/{group}/providers/Microsoft.Network/publicIPAddresses/{ip}.",
"items": {
"type": "string",
"format": "arm-id",
"description": "A type definition that refers the id to an Azure Resource Manager resource."
}
},
"ipTags": {
"type": "array",
"description": "A list of IP tags associated with the public IP addresses of the Pool. IP tags are used to categorize and filter public IP addresses for billing and management purposes.",
"items": {
"$ref": "#/$defs/IPTag"
}
}
}
},
"BatchStartTaskUpdate": {
"type": "object",
"description": "Batch will retry Tasks when a recovery operation is triggered on a Node.\nExamples of recovery operations include (but are not limited to) when an\nunhealthy Node is rebooted or a Compute Node disappeared due to host failure.\nRetries due to recovery operations are independent of and are not counted\nagainst the maxTaskRetryCount. Even if the maxTaskRetryCount is 0, an internal\nretry due to a recovery operation may occur. Because of this, all Tasks should\nbe idempotent. This means Tasks need to tolerate being interrupted and\nrestarted without causing any corruption or duplicate data. The best practice\nfor long running Tasks is to use some form of checkpointing. In some cases the\nStartTask may be re-run even though the Compute Node was not rebooted. Special\ncare should be taken to avoid StartTasks which create breakaway process or\ninstall/launch services from the StartTask working directory, as this will\nblock Batch from being able to re-run the StartTask.",
"properties": {
"commandLine": {
"type": "string",
"description": "The command line of the StartTask. The command line does not run under a shell, and therefore cannot take advantage of shell features such as environment variable expansion. If you want to take advantage of such features, you should invoke the shell in the command line, for example using \"cmd /c MyCommand\" in Windows or \"/bin/sh -c MyCommand\" in Linux. If the command line refers to file paths, it should use a relative path (relative to the Task working directory), or use the Batch provided environment variable (https://learn.microsoft.com/azure/batch/batch-compute-node-environment-variables)."
},
"containerSettings": {
"$ref": "#/$defs/BatchTaskContainerSettingsUpdate",
"description": "The settings for the container under which the StartTask runs. When this is specified, all directories recursively below the AZ_BATCH_NODE_ROOT_DIR (the root of Azure Batch directories on the node) are mapped into the container, all Task environment variables are mapped into the container, and the Task command line is executed in the container. Files produced in the container outside of AZ_BATCH_NODE_ROOT_DIR might not be reflected to the host disk, meaning that Batch file APIs will not be able to access those files."
},
"resourceFiles": {
"type": "array",
"description": "A list of files that the Batch service will download to the Compute Node before running the command line. There is a maximum size for the list of resource files. When the max size is exceeded, the request will fail and the response error code will be RequestEntityTooLarge. If this occurs, the collection of ResourceFiles must be reduced in size. This can be achieved using .zip files, Application Packages, or Docker Containers. Files listed under this element are located in the Task's working directory.",
"items": {
"$ref": "#/$defs/ResourceFile"
}
},
"environmentSettings": {
"type": "array",
"description": "A list of environment variable settings for the StartTask.",
"items": {
"$ref": "#/$defs/EnvironmentSetting"
}
},
"userIdentity": {
"$ref": "#/$defs/UserIdentity",
"description": "The user identity under which the StartTask runs. If omitted, the Task runs as a non-administrative user unique to the Task."
},
"maxTaskRetryCount": {
"type": "integer",
"format": "int32",
"description": "The maximum number of times the Task may be retried. The Batch service retries a Task if its exit code is nonzero. Note that this value specifically controls the number of retries. The Batch service will try the Task once, and may then retry up to this limit. For example, if the maximum retry count is 3, Batch tries the Task up to 4 times (one initial try and 3 retries). If the maximum retry count is 0, the Batch service does not retry the Task. If the maximum retry count is -1, the Batch service retries the Task without limit, however this is not recommended for a start task or any task. The default value is 0 (no retries)."
},
"waitForSuccess": {
"type": "boolean",
"description": "Whether the Batch service should wait for the StartTask to complete successfully (that is, to exit with exit code 0) before scheduling any Tasks on the Compute Node. If true and the StartTask fails on a Node, the Batch service retries the StartTask up to its maximum retry count (maxTaskRetryCount). If the Task has still not completed successfully after all retries, then the Batch service marks the Node unusable, and will not schedule Tasks to it. This condition can be detected via the Compute Node state and failure info details. If false, the Batch service will not wait for the StartTask to complete. In this case, other Tasks can start executing on the Compute Node while the StartTask is still running; and even if the StartTask fails, new Tasks will continue to be scheduled on the Compute Node. The default is true."
}
}
},
"BatchTaskContainerSettingsUpdate": {
"type": "object",
"description": "The container settings for a Task.",
"properties": {
"containerRunOptions": {
"type": "string",
"description": "Additional options to the container create command. These additional options are supplied as arguments to the \"docker create\" command, in addition to those controlled by the Batch Service."
},
"imageName": {
"type": "string",
"description": "The Image to use to create the container in which the Task will run. This is the full Image reference, as would be specified to \"docker pull\". If no tag is provided as part of the Image name, the tag \":latest\" is used as a default."
},
"registry": {
"$ref": "#/$defs/ContainerRegistryReference",
"description": "The private registry which contains the container Image. This setting can be omitted if was already provided at Pool creation."
},
"workingDirectory": {
"$ref": "#/$defs/ContainerWorkingDirectory",
"description": "The location of the container Task working directory. The default is 'taskWorkingDirectory'."
},
"containerHostBatchBindMounts": {
"type": "array",
"description": "The paths you want to mounted to container task. If this array is null or be not present, container task will mount entire temporary disk drive in windows (or AZ_BATCH_NODE_ROOT_DIR in Linux). It won't' mount any data paths into container if this array is set as empty.",
"items": {
"$ref": "#/$defs/ContainerHostBatchBindMountEntry"
}
}
}
},
"BatchTaskSchedulingPolicyUpdate": {
"type": "object",
"description": "Specifies how Tasks should be distributed across Compute Nodes.",
"properties": {
"jobDefaultOrder": {
"type": "string",
"description": "The order for scheduling tasks from different jobs with the same priority. If not specified, the default is none.",
"default": "none",
"enum": [
"none",
"creationtime"
],
"x-ms-enum": {
"name": "BatchJobDefaultOrder",
"modelAsString": true,
"values": [
{
"name": "None",
"value": "none",
"description": "Tasks should be scheduled uniformly from all equal-priority jobs for the pool."
},
{
"name": "CreationTime",
"value": "creationtime",
"description": "If jobs have equal priority, tasks from jobs that were created earlier should be scheduled first."
}
]
}
},
"nodeFillType": {
"$ref": "#/$defs/BatchNodeFillType",
"description": "How Tasks are distributed across Compute Nodes in a Pool. If not specified, the default is spread."
}
}
},
"BatchUefiSettings": {
"type": "object",
"description": "Specifies the security settings like secure boot and vTPM used while creating the virtual machine.",
"properties": {
"secureBootEnabled": {
"type": "boolean",
"description": "Specifies whether secure boot should be enabled on the virtual machine."
},
"vTpmEnabled": {
"type": "boolean",
"description": "Specifies whether vTPM should be enabled on the virtual machine."
}
}
},
"BatchVmDiskSecurityProfile": {
"type": "object",
"description": "Specifies the security profile settings for the managed disk. **Note**: It can only be set for Confidential VMs and required when using Confidential VMs.",
"properties": {
"securityEncryptionType": {
"$ref": "#/$defs/SecurityEncryptionTypes",
"description": "Specifies the EncryptionType of the managed disk. It is set to VMGuestStateOnly for encryption of just the VMGuestState blob, and NonPersistedTPM for not persisting firmware state in the VMGuestState blob. **Note**: It can be set for only Confidential VMs and is required when using Confidential VMs."
}
}
},
"BatchVmImageReference": {
"type": "object",
"description": "A reference to an Azure Virtual Machines Marketplace Image or a Azure Compute Gallery Image.\nTo get the list of all Azure Marketplace Image references verified by Azure Batch, see the\n' List Supported Images ' operation.",
"properties": {
"publisher": {
"type": "string",
"description": "The publisher of the Azure Virtual Machines Marketplace Image. For example, Canonical or MicrosoftWindowsServer."
},
"offer": {
"type": "string",
"description": "The offer type of the Azure Virtual Machines Marketplace Image. For example, UbuntuServer or WindowsServer."
},
"sku": {
"type": "string",
"description": "The SKU of the Azure Virtual Machines Marketplace Image. For example, 18.04-LTS or 2019-Datacenter."
},
"version": {
"type": "string",
"description": "The version of the Azure Virtual Machines Marketplace Image. A value of 'latest' can be specified to select the latest version of an Image. If omitted, the default is 'latest'."
},
"virtualMachineImageId": {
"type": "string",
"format": "arm-id",
"description": "The ARM resource identifier of the Azure Compute Gallery Image. Compute Nodes in the Pool will be created using this Image Id. This is of the form /subscriptions/{subscriptionId}/resourceGroups/{resourceGroup}/providers/Microsoft.Compute/galleries/{galleryName}/images/{imageDefinitionName}/versions/{VersionId} or /subscriptions/{subscriptionId}/resourceGroups/{resourceGroup}/providers/Microsoft.Compute/galleries/{galleryName}/images/{imageDefinitionName} for always defaulting to the latest image version. This property is mutually exclusive with other ImageReference properties. The Azure Compute Gallery Image must have replicas in the same region and must be in the same subscription as the Azure Batch account. If the image version is not specified in the imageId, the latest version will be used. For information about the firewall settings for the Batch Compute Node agent to communicate with the Batch service see https://learn.microsoft.com/azure/batch/nodes-and-pools#virtual-network-vnet-and-firewall-configuration."
},
"exactVersion": {
"type": "string",
"description": "The specific version of the platform image or marketplace image used to create the node. This read-only field differs from 'version' only if the value specified for 'version' when the pool was created was 'latest'.",
"readOnly": true
},
"sharedGalleryImageId": {
"type": "string",
"description": "The shared gallery image unique identifier. This property is mutually exclusive with other properties and can be fetched from shared gallery image GET call."
},
"communityGalleryImageId": {
"type": "string",
"description": "The community gallery image unique identifier. This property is mutually exclusive with other properties and can be fetched from community gallery image GET call."
}
}
},
"CachingType": {
"type": "string",
"description": "CachingType enums",
"enum": [
"none",
"readonly",
"readwrite"
],
"x-ms-enum": {
"name": "CachingType",
"modelAsString": true,
"values": [
{
"name": "None",
"value": "none",
"description": "The caching mode for the disk is not enabled."
},
{
"name": "ReadOnly",
"value": "readonly",
"description": "The caching mode for the disk is read only."
},
{
"name": "ReadWrite",
"value": "readwrite",
"description": "The caching mode for the disk is read and write."
}
]
}
},
"CifsMountConfiguration": {
"type": "object",
"description": "Information used to connect to a CIFS file system.",
"properties": {
"username": {
"type": "string",
"description": "The user to use for authentication against the CIFS file system."
},
"source": {
"type": "string",
"description": "The URI of the file system to mount."
},
"relativeMountPath": {
"type": "string",
"description": "The relative path on the compute node where the file system will be mounted. All file systems are mounted relative to the Batch mounts directory, accessible via the AZ_BATCH_NODE_MOUNTS_DIR environment variable."
},
"mountOptions": {
"type": "string",
"description": "Additional command line options to pass to the mount command. These are 'net use' options in Windows and 'mount' options in Linux."
},
"password": {
"type": "string",
"format": "password",
"description": "The password to use for authentication against the CIFS file system.",
"x-ms-secret": true
}
},
"required": [
"username",
"source",
"relativeMountPath",
"password"
]
},
"ContainerHostBatchBindMountEntry": {
"type": "object",
"description": "The entry of path and mount mode you want to mount into task container.",
"properties": {
"source": {
"$ref": "#/$defs/ContainerHostDataPath",
"description": "The path which be mounted to container customer can select."
},
"isReadOnly": {
"type": "boolean",
"description": "Mount this source path as read-only mode or not. Default value is false (read/write mode). For Linux, if you mount this path as a read/write mode, this does not mean that all users in container have the read/write access for the path, it depends on the access in host VM. If this path is mounted read-only, all users within the container will not be able to modify the path."
}
}
},
"ContainerHostDataPath": {
"type": "string",
"description": "The paths which will be mounted to container task's container.",
"enum": [
"Shared",
"Startup",
"VfsMounts",
"Task",
"JobPrep",
"Applications"
],
"x-ms-enum": {
"name": "ContainerHostDataPath",
"modelAsString": true,
"values": [
{
"name": "Shared",
"value": "Shared",
"description": "The path for multi-instances task to shared their files."
},
{
"name": "Startup",
"value": "Startup",
"description": "The path for start task."
},
{
"name": "VfsMounts",
"value": "VfsMounts",
"description": "The path contains all virtual file systems are mounted on this node."
},
{
"name": "Task",
"value": "Task",
"description": "The task path."
},
{
"name": "JobPrep",
"value": "JobPrep",
"description": "The job-prep task path."
},
{
"name": "Applications",
"value": "Applications",
"description": "The applications path."
}
]
}
},
"ContainerRegistryReference": {
"type": "object",
"description": "A private container registry.",
"properties": {
"username": {
"type": "string",
"description": "The user name to log into the registry server."
},
"password": {
"type": "string",
"format": "password",
"description": "The password to log into the registry server.",
"x-ms-secret": true
},
"registryServer": {
"type": "string",
"format": "uri",
"description": "The registry URL. If omitted, the default is \"docker.io\"."
},
"identityReference": {
"$ref": "#/$defs/BatchNodeIdentityReference",
"description": "The reference to the user assigned identity to use to access an Azure Container Registry instead of username and password."
}
}
},
"ContainerType": {
"type": "string",
"description": "ContainerType enums",
"enum": [
"dockerCompatible",
"criCompatible"
],
"x-ms-enum": {
"name": "ContainerType",
"modelAsString": true,
"values": [
{
"name": "DockerCompatible",
"value": "dockerCompatible",
"description": "A Docker compatible container technology will be used to launch the containers."
},
{
"name": "CriCompatible",
"value": "criCompatible",
"description": "A CRI based technology will be used to launch the containers."
}
]
}
},
"ContainerWorkingDirectory": {
"type": "string",
"description": "ContainerWorkingDirectory enums",
"enum": [
"taskWorkingDirectory",
"containerImageDefault"
],
"x-ms-enum": {
"name": "ContainerWorkingDirectory",
"modelAsString": true,
"values": [
{
"name": "TaskWorkingDirectory",
"value": "taskWorkingDirectory",
"description": "Use the standard Batch service Task working directory, which will contain the Task Resource Files populated by Batch."
},
{
"name": "ContainerImageDefault",
"value": "containerImageDefault",
"description": "Use the working directory defined in the container Image. Beware that this directory will not contain the Resource Files downloaded by Batch."
}
]
}
},
"DataDisk": {
"type": "object",
"description": "Settings which will be used by the data disks associated to Compute Nodes in\nthe Pool. When using attached data disks, you need to mount and format the\ndisks from within a VM to use them.",
"properties": {
"lun": {
"type": "integer",
"format": "int32",
"description": "The logical unit number. The logicalUnitNumber is used to uniquely identify each data disk. If attaching multiple disks, each should have a distinct logicalUnitNumber. The value must be between 0 and 63, inclusive.",
"x-ms-client-name": "logicalUnitNumber"
},
"caching": {
"$ref": "#/$defs/CachingType",
"description": "The type of caching to be enabled for the data disks. The default value for caching is readwrite. For information about the caching options see: https://blogs.msdn.microsoft.com/windowsazurestorage/2012/06/27/exploring-windows-azure-drives-disks-and-images/."
},
"diskSizeGB": {
"type": "integer",
"format": "int32",
"description": "The initial disk size in gigabytes.",
"x-ms-client-name": "diskSizeGb"
},
"managedDisk": {
"$ref": "#/$defs/ManagedDisk",
"description": "The managed disk parameters."
}
},
"required": [
"lun",
"diskSizeGB"
]
},
"DiffDiskPlacement": {
"type": "string",
"description": "Specifies the ephemeral disk placement for operating system disk for all compute nodes (VMs) in the pool. This property can be used by user in the request to choose which location the operating system should be in. e.g., cache disk space for Ephemeral OS disk provisioning. For more information on Ephemeral OS disk size requirements, please refer to Ephemeral OS disk size requirements for Windows VMs at https://learn.microsoft.com/azure/virtual-machines/windows/ephemeral-os-disks#size-requirements and Linux VMs at https://learn.microsoft.com/azure/virtual-machines/linux/ephemeral-os-disks#size-requirements",
"enum": [
"cachedisk"
],
"x-ms-enum": {
"name": "DiffDiskPlacement",
"modelAsString": true,
"values": [
{
"name": "CacheDisk",
"value": "cachedisk",
"description": "The Ephemeral OS Disk is stored on the VM cache."
}
]
}
},
"DiskCustomerManagedKey": {
"type": "object",
"description": "The Customer Managed Key reference to encrypt the Disk.",
"properties": {
"identityReference": {
"$ref": "#/$defs/BatchPoolIdentityReference",
"description": "The reference of one of the pool identities to encrypt Disk. This identity will be used to access the KeyVault."
},
"keyUrl": {
"type": "string",
"description": "Fully versioned Key Url pointing to a key in KeyVault. Version segment of the Url is required regardless of rotationToLatestKeyVersionEnabled value."
},
"rotationToLatestKeyVersionEnabled": {
"type": "boolean",
"description": "Set this flag to true to enable auto-updating of the Disk Encryption to the latest key version. Default is false."
}
}
},
"DiskEncryptionConfiguration": {
"type": "object",
"description": "The disk encryption configuration applied on compute nodes in the pool.\nDisk encryption configuration is not supported on Linux pool created with\nAzure Compute Gallery Image.",
"properties": {
"customerManagedKey": {
"$ref": "#/$defs/DiskCustomerManagedKey",
"description": "The Customer Managed Key reference to encrypt the OS Disk. Customer Managed Key will encrypt OS Disk by EncryptionAtRest, and by default we will encrypt the data disk as well. It can be used only when the pool is configured with an identity and OsDisk is set as one of the targets of DiskEncryption."
},
"targets": {
"type": "array",
"description": "The list of disk targets Batch Service will encrypt on the compute node. The list of disk targets Batch Service will encrypt on the compute node.",
"items": {
"$ref": "#/$defs/DiskEncryptionTarget"
}
}
}
},
"DiskEncryptionSetParameters": {
"type": "object",
"description": "The ARM resource id of the disk encryption set.",
"properties": {
"id": {
"type": "string",
"format": "arm-id",
"description": "The ARM resource id of the disk encryption set. The resource must be in the same subscription as the Batch account."
}
}
},
"DiskEncryptionTarget": {
"type": "string",
"description": "DiskEncryptionTarget enums",
"enum": [
"osdisk",
"temporarydisk"
],
"x-ms-enum": {
"name": "DiskEncryptionTarget",
"modelAsString": true,
"values": [
{
"name": "OsDisk",
"value": "osdisk",
"description": "The OS Disk on the compute node is encrypted."
},
{
"name": "TemporaryDisk",
"value": "temporarydisk",
"description": "The temporary disk on the compute node is encrypted. On Linux this encryption applies to other partitions (such as those on mounted data disks) when encryption occurs at boot time."
}
]
}
},
"DynamicVNetAssignmentScope": {
"type": "string",
"description": "DynamicVNetAssignmentScope enums",
"enum": [
"none",
"job"
],
"x-ms-enum": {
"name": "DynamicVNetAssignmentScope",
"modelAsString": true,
"values": [
{
"name": "None",
"value": "none",
"description": "No dynamic VNet assignment is enabled."
},
{
"name": "Job",
"value": "job",
"description": "Dynamic VNet assignment is done per-job."
}
]
}
},
"ElevationLevel": {
"type": "string",
"description": "ElevationLevel enums",
"enum": [
"nonadmin",
"admin"
],
"x-ms-enum": {
"name": "ElevationLevel",
"modelAsString": true,
"values": [
{
"name": "NonAdmin",
"value": "nonadmin",
"description": "The user is a standard user without elevated access."
},
{
"name": "Admin",
"value": "admin",
"description": "The user is a user with elevated access and operates with full Administrator permissions."
}
]
}
},
"EnvironmentSetting": {
"type": "object",
"description": "An environment variable to be set on a Task process.",
"properties": {
"name": {
"type": "string",
"description": "The name of the environment variable."
},
"value": {
"type": "string",
"description": "The value of the environment variable."
}
},
"required": [
"name"
]
},
"HostEndpointSettings": {
"type": "object",
"description": "Specifies particular host endpoint settings.",
"properties": {
"inVMAccessControlProfileReferenceId": {
"type": "string",
"description": "Specifies the reference to the InVMAccessControlProfileVersion resource id in the form of /subscriptions/{SubscriptionId}/resourceGroups/{ResourceGroupName}/providers/Microsoft.Compute/galleries/{galleryName}/inVMAccessControlProfiles/{profile}/versions/{version}.",
"x-ms-client-name": "inVmAccessControlProfileReferenceId"
},
"mode": {
"$ref": "#/$defs/HostEndpointSettingsModeTypes",
"description": "Specifies the access control policy execution mode."
}
}
},
"HostEndpointSettingsModeTypes": {
"type": "string",
"description": "HostEndpointSettingsModeTypes enums",
"enum": [
"Audit",
"Enforce"
],
"x-ms-enum": {
"name": "HostEndpointSettingsModeTypes",
"modelAsString": true,
"values": [
{
"name": "Audit",
"value": "Audit",
"description": "In Audit mode, the system acts as if it is enforcing the access control policy, including emitting access denial entries in the logs but it does not actually deny any requests to host endpoints."
},
{
"name": "Enforce",
"value": "Enforce",
"description": "Enforce mode is the recommended mode of operation and system will enforce the access control policy. This property cannot be used together with 'inVMAccessControlProfileReferenceId'."
}
]
}
},
"IPFamily": {
"type": "string",
"description": "The IP families used to specify IP versions available to the pool.",
"enum": [
"IPv4",
"IPv6"
],
"x-ms-enum": {
"name": "IPFamily",
"modelAsString": true,
"values": [
{
"name": "IPv4",
"value": "IPv4",
"description": "IPv4 is available to the pool."
},
{
"name": "IPv6",
"value": "IPv6",
"description": "IPv6 is available to the pool."
}
]
}
},
"IPTag": {
"type": "object",
"description": "Contains the IP tag associated with the public IP address.",
"properties": {
"ipTagType": {
"type": "string",
"description": "The IP Tag type. Example: FirstPartyUsage."
},
"tag": {
"type": "string",
"description": "The value of the IP tag associated with the public IP. Example: SQL."
}
}
},
"InboundEndpointProtocol": {
"type": "string",
"description": "InboundEndpointProtocol enums",
"enum": [
"tcp",
"udp"
],
"x-ms-enum": {
"name": "InboundEndpointProtocol",
"modelAsString": true,
"values": [
{
"name": "Tcp",
"value": "tcp",
"description": "Use TCP for the endpoint."
},
{
"name": "Udp",
"value": "udp",
"description": "Use UDP for the endpoint."
}
]
}
},
"IpAddressProvisioningType": {
"type": "string",
"description": "IPAddressProvisioningType enums",
"enum": [
"batchmanaged",
"usermanaged",
"nopublicipaddresses"
],
"x-ms-enum": {
"name": "IpAddressProvisioningType",
"modelAsString": true,
"values": [
{
"name": "BatchManaged",
"value": "batchmanaged",
"description": "A public IP will be created and managed by Batch. There may be multiple public IPs depending on the size of the Pool."
},
{
"name": "UserManaged",
"value": "usermanaged",
"description": "Public IPs are provided by the user and will be used to provision the Compute Nodes."
},
{
"name": "NoPublicIpAddresses",
"value": "nopublicipaddresses",
"description": "No public IP Address will be created."
}
]
}
},
"LinuxUserConfiguration": {
"type": "object",
"description": "Properties used to create a user Account on a Linux Compute Node.",
"properties": {
"uid": {
"type": "integer",
"format": "int32",
"description": "The user ID of the user Account. The uid and gid properties must be specified together or not at all. If not specified the underlying operating system picks the uid."
},
"gid": {
"type": "integer",
"format": "int32",
"description": "The group ID for the user Account. The uid and gid properties must be specified together or not at all. If not specified the underlying operating system picks the gid."
},
"sshPrivateKey": {
"type": "string",
"format": "password",
"description": "The SSH private key for the user Account. The private key must not be password protected. The private key is used to automatically configure asymmetric-key based authentication for SSH between Compute Nodes in a Linux Pool when the Pool's enableInterNodeCommunication property is true (it is ignored if enableInterNodeCommunication is false). It does this by placing the key pair into the user's .ssh directory. If not specified, password-less SSH is not configured between Compute Nodes (no modification of the user's .ssh directory is done).",
"x-ms-secret": true
}
}
},
"LoginMode": {
"type": "string",
"description": "LoginMode enums",
"enum": [
"batch",
"interactive"
],
"x-ms-enum": {
"name": "LoginMode",
"modelAsString": true,
"values": [
{
"name": "Batch",
"value": "batch",
"description": "The LOGON32_LOGON_BATCH Win32 login mode. The batch login mode is recommended for long running parallel processes."
},
{
"name": "Interactive",
"value": "interactive",
"description": "The LOGON32_LOGON_INTERACTIVE Win32 login mode. UAC is enabled on Windows VirtualMachineConfiguration Pools. If this option is used with an elevated user identity in a Windows VirtualMachineConfiguration Pool, the user session will not be elevated unless the application executed by the Task command line is configured to always require administrative privilege or to always require maximum privilege."
}
]
}
},
"ManagedDisk": {
"type": "object",
"description": "The managed disk parameters.",
"properties": {
"diskEncryptionSet": {
"$ref": "#/$defs/DiskEncryptionSetParameters",
"description": "Specifies the customer managed disk encryption set resource id for the managed disk. It can be set only in UserSubscription mode."
},
"storageAccountType": {
"$ref": "#/$defs/StorageAccountType",
"description": "The storage account type for managed disk."
},
"securityProfile": {
"$ref": "#/$defs/BatchVmDiskSecurityProfile",
"description": "Specifies the security profile settings for the managed disk."
}
}
},
"MountConfiguration": {
"type": "object",
"description": "The file system to mount on each node.",
"properties": {
"azureBlobFileSystemConfiguration": {
"$ref": "#/$defs/AzureBlobFileSystemConfiguration",
"description": "The Azure Storage Container to mount using blob FUSE on each node. This property is mutually exclusive with all other properties."
},
"nfsMountConfiguration": {
"$ref": "#/$defs/NfsMountConfiguration",
"description": "The NFS file system to mount on each node. This property is mutually exclusive with all other properties."
},
"cifsMountConfiguration": {
"$ref": "#/$defs/CifsMountConfiguration",
"description": "The CIFS/SMB file system to mount on each node. This property is mutually exclusive with all other properties."
},
"azureFileShareConfiguration": {
"$ref": "#/$defs/AzureFileShareConfiguration",
"description": "The Azure File Share to mount on each node. This property is mutually exclusive with all other properties."
}
}
},
"NetworkConfigurationUpdate": {
"type": "object",
"description": "The network configuration for a Pool.",
"properties": {
"subnetId": {
"type": "string",
"description": "The ARM resource identifier of the virtual network subnet which the Compute Nodes of the Pool will join. This is of the form /subscriptions/{subscription}/resourceGroups/{group}/providers/{provider}/virtualNetworks/{network}/subnets/{subnet}. The virtual network must be in the same region and subscription as the Azure Batch Account. The specified subnet should have enough free IP addresses to accommodate the number of Compute Nodes in the Pool. If the subnet doesn't have enough free IP addresses, the Pool will partially allocate Nodes and a resize error will occur. The 'MicrosoftAzureBatch' service principal must have the 'Classic Virtual Machine Contributor' Role-Based Access Control (RBAC) role for the specified VNet. The specified subnet must allow communication from the Azure Batch service to be able to schedule Tasks on the Nodes. This can be verified by checking if the specified VNet has any associated Network Security Groups (NSG). If communication to the Nodes in the specified subnet is denied by an NSG, then the Batch service will set the state of the Compute Nodes to unusable. Only ARM virtual networks ('Microsoft.Network/virtualNetworks') are supported. If the specified VNet has any associated Network Security Groups (NSG), then a few reserved system ports must be enabled for inbound communication, including ports 29876 and 29877. Also enable outbound connections to Azure Storage on port 443. For more details see: https://learn.microsoft.com/azure/batch/nodes-and-pools#virtual-network-vnet-and-firewall-configuration"
},
"dynamicVNetAssignmentScope": {
"$ref": "#/$defs/DynamicVNetAssignmentScope",
"description": "The scope of dynamic vnet assignment.",
"x-ms-client-name": "dynamicVnetAssignmentScope"
},
"endpointConfiguration": {
"$ref": "#/$defs/BatchPoolEndpointConfigurationUpdate",
"description": "The configuration for endpoints on Compute Nodes in the Batch Pool."
},
"publicIPAddressConfiguration": {
"$ref": "#/$defs/BatchPublicIpAddressConfiguration",
"description": "The Public IPAddress configuration for Compute Nodes in the Batch Pool.",
"x-ms-client-name": "publicIpAddressConfiguration"
},
"enableAcceleratedNetworking": {
"type": "boolean",
"description": "Whether this pool should enable accelerated networking. Accelerated networking enables single root I/O virtualization (SR-IOV) to a VM, which may lead to improved networking performance. For more details, see: https://learn.microsoft.com/azure/virtual-network/accelerated-networking-overview."
}
}
},
"NetworkSecurityGroupRule": {
"type": "object",
"description": "A network security group rule to apply to an inbound endpoint.",
"properties": {
"priority": {
"type": "integer",
"format": "int32",
"description": "The priority for this rule. Priorities within a Pool must be unique and are evaluated in order of priority. The lower the number the higher the priority. For example, rules could be specified with order numbers of 150, 250, and 350. The rule with the order number of 150 takes precedence over the rule that has an order of 250. Allowed priorities are 150 to 4096. If any reserved or duplicate values are provided the request fails with HTTP status code 400."
},
"access": {
"$ref": "#/$defs/NetworkSecurityGroupRuleAccess",
"description": "The action that should be taken for a specified IP address, subnet range or tag."
},
"sourceAddressPrefix": {
"type": "string",
"description": "The source address prefix or tag to match for the rule. Valid values are a single IP address (i.e. 10.10.10.10), IP subnet (i.e. 192.168.1.0/24), default tag, or * (for all addresses). If any other values are provided the request fails with HTTP status code 400."
},
"sourcePortRanges": {
"type": "array",
"description": "The source port ranges to match for the rule. Valid values are '*' (for all ports 0 - 65535), a specific port (i.e. 22), or a port range (i.e. 100-200). The ports must be in the range of 0 to 65535. Each entry in this collection must not overlap any other entry (either a range or an individual port). If any other values are provided the request fails with HTTP status code 400. The default value is '*'.",
"items": {
"type": "string"
}
}
},
"required": [
"priority",
"access",
"sourceAddressPrefix"
]
},
"NetworkSecurityGroupRuleAccess": {
"type": "string",
"description": "NetworkSecurityGroupRuleAccess enums",
"enum": [
"allow",
"deny"
],
"x-ms-enum": {
"name": "NetworkSecurityGroupRuleAccess",
"modelAsString": true,
"values": [
{
"name": "Allow",
"value": "allow",
"description": "Allow access."
},
{
"name": "Deny",
"value": "deny",
"description": "Deny access."
}
]
}
},
"NfsMountConfiguration": {
"type": "object",
"description": "Information used to connect to an NFS file system.",
"properties": {
"source": {
"type": "string",
"description": "The URI of the file system to mount."
},
"relativeMountPath": {
"type": "string",
"description": "The relative path on the compute node where the file system will be mounted. All file systems are mounted relative to the Batch mounts directory, accessible via the AZ_BATCH_NODE_MOUNTS_DIR environment variable."
},
"mountOptions": {
"type": "string",
"description": "Additional command line options to pass to the mount command. These are 'net use' options in Windows and 'mount' options in Linux."
}
},
"required": [
"source",
"relativeMountPath"
]
},
"ProxyAgentSettings": {
"type": "object",
"description": "Specifies ProxyAgent settings while creating the virtual machine.",
"properties": {
"enabled": {
"type": "boolean",
"description": "Specifies whether Metadata Security Protocol feature should be enabled on the virtual machine or virtual machine scale set. Default is False."
},
"imds": {
"$ref": "#/$defs/HostEndpointSettings",
"description": "Settings for the IMDS endpoint."
},
"wireServer": {
"$ref": "#/$defs/HostEndpointSettings",
"description": "Settings for the WireServer endpoint."
}
}
},
"ResourceFile": {
"type": "object",
"description": "A single file or multiple files to be downloaded to a Compute Node.",
"properties": {
"autoStorageContainerName": {
"type": "string",
"description": "The storage container name in the auto storage Account. The autoStorageContainerName, storageContainerUrl and httpUrl properties are mutually exclusive and one of them must be specified."
},
"storageContainerUrl": {
"type": "string",
"format": "uri",
"description": "The URL of the blob container within Azure Blob Storage. The autoStorageContainerName, storageContainerUrl and httpUrl properties are mutually exclusive and one of them must be specified. This URL must be readable and listable from compute nodes. There are three ways to get such a URL for a container in Azure storage: include a Shared Access Signature (SAS) granting read and list permissions on the container, use a managed identity with read and list permissions, or set the ACL for the container to allow public access."
},
"httpUrl": {
"type": "string",
"format": "uri",
"description": "The URL of the file to download. The autoStorageContainerName, storageContainerUrl and httpUrl properties are mutually exclusive and one of them must be specified. If the URL points to Azure Blob Storage, it must be readable from compute nodes. There are three ways to get such a URL for a blob in Azure storage: include a Shared Access Signature (SAS) granting read permissions on the blob, use a managed identity with read permission, or set the ACL for the blob or its container to allow public access."
},
"blobPrefix": {
"type": "string",
"description": "The blob prefix to use when downloading blobs from an Azure Storage container. Only the blobs whose names begin with the specified prefix will be downloaded. The property is valid only when autoStorageContainerName or storageContainerUrl is used. This prefix can be a partial filename or a subdirectory. If a prefix is not specified, all the files in the container will be downloaded."
},
"filePath": {
"type": "string",
"description": "The location on the Compute Node to which to download the file(s), relative to the Task's working directory. If the httpUrl property is specified, the filePath is required and describes the path which the file will be downloaded to, including the filename. Otherwise, if the autoStorageContainerName or storageContainerUrl property is specified, filePath is optional and is the directory to download the files to. In the case where filePath is used as a directory, any directory structure already associated with the input data will be retained in full and appended to the specified filePath directory. The specified relative path cannot break out of the Task's working directory (for example by using '..')."
},
"fileMode": {
"type": "string",
"description": "The file permission mode attribute in octal format. This property applies only to files being downloaded to Linux Compute Nodes. It will be ignored if it is specified for a resourceFile which will be downloaded to a Windows Compute Node. If this property is not specified for a Linux Compute Node, then a default value of 0770 is applied to the file."
},
"identityReference": {
"$ref": "#/$defs/BatchNodeIdentityReference",
"description": "The reference to the user assigned identity to use to access Azure Blob Storage specified by storageContainerUrl or httpUrl."
}
}
},
"RollingUpgradePolicy": {
"type": "object",
"description": "The configuration parameters used while performing a rolling upgrade.",
"properties": {
"enableCrossZoneUpgrade": {
"type": "boolean",
"description": "Allow VMSS to ignore AZ boundaries when constructing upgrade batches. Take into consideration the Update Domain and maxBatchInstancePercent to determine the batch size. This field is able to be set to true or false only when using NodePlacementConfiguration as Zonal."
},
"maxBatchInstancePercent": {
"type": "integer",
"format": "int32",
"description": "The maximum percent of total virtual machine instances that will be upgraded simultaneously by the rolling upgrade in one batch. As this is a maximum, unhealthy instances in previous or future batches can cause the percentage of instances in a batch to decrease to ensure higher reliability. The value of this field should be between 5 and 100, inclusive. If both maxBatchInstancePercent and maxUnhealthyInstancePercent are assigned with value, the value of maxBatchInstancePercent should not be more than maxUnhealthyInstancePercent."
},
"maxUnhealthyInstancePercent": {
"type": "integer",
"format": "int32",
"description": "The maximum percentage of the total virtual machine instances in the scale set that can be simultaneously unhealthy, either as a result of being upgraded, or by being found in an unhealthy state by the virtual machine health checks before the rolling upgrade aborts. This constraint will be checked prior to starting any batch. The value of this field should be between 5 and 100, inclusive. If both maxBatchInstancePercent and maxUnhealthyInstancePercent are assigned with value, the value of maxBatchInstancePercent should not be more than maxUnhealthyInstancePercent."
},
"maxUnhealthyUpgradedInstancePercent": {
"type": "integer",
"format": "int32",
"description": "The maximum percentage of upgraded virtual machine instances that can be found to be in an unhealthy state. This check will happen after each batch is upgraded. If this percentage is ever exceeded, the rolling update aborts. The value of this field should be between 0 and 100, inclusive."
},
"pauseTimeBetweenBatches": {
"type": "string",
"format": "duration",
"description": "The wait time between completing the update for all virtual machines in one batch and starting the next batch. The time duration is specified in ISO 8601 format."
},
"prioritizeUnhealthyInstances": {
"type": "boolean",
"description": "Upgrade all unhealthy instances in a scale set before any healthy instances."
},
"rollbackFailedInstancesOnPolicyBreach": {
"type": "boolean",
"description": "Rollback failed instances to previous model if the Rolling Upgrade policy is violated."
}
}
},
"SecurityEncryptionTypes": {
"type": "string",
"description": "SecurityEncryptionTypes enums",
"enum": [
"DiskWithVMGuestState",
"NonPersistedTPM",
"VMGuestStateOnly"
],
"x-ms-enum": {
"name": "SecurityEncryptionTypes",
"modelAsString": true,
"values": [
{
"name": "DiskWithVMGuestState",
"value": "DiskWithVMGuestState",
"description": "EncryptionType of the managed disk is set to DiskWithVMGuestState for encryption of the managed disk along with VMGuestState blob. It is not supported in data disks."
},
{
"name": "NonPersistedTPM",
"value": "NonPersistedTPM",
"description": "EncryptionType of the managed disk is set to NonPersistedTPM for not persisting firmware state in the VMGuestState blob."
},
{
"name": "VMGuestStateOnly",
"value": "VMGuestStateOnly",
"description": "EncryptionType of the managed disk is set to VMGuestStateOnly for encryption of just the VMGuestState blob."
}
]
}
},
"SecurityProfile": {
"type": "object",
"description": "Specifies the security profile settings for the virtual machine or virtual machine scale set.",
"properties": {
"encryptionAtHost": {
"type": "boolean",
"description": "This property can be used by user in the request to enable or disable the Host Encryption for the virtual machine or virtual machine scale set. This will enable the encryption for all the disks including Resource/Temp disk at host itself. For more information on encryption at host requirements, please refer to https://learn.microsoft.com/azure/virtual-machines/disk-encryption#supported-vm-sizes."
},
"proxyAgentSettings": {
"$ref": "#/$defs/ProxyAgentSettings",
"description": "Specifies ProxyAgent settings while creating the virtual machine."
},
"securityType": {
"$ref": "#/$defs/SecurityTypes",
"description": "Specifies the SecurityType of the virtual machine. It has to be set to any specified value to enable UefiSettings."
},
"uefiSettings": {
"$ref": "#/$defs/BatchUefiSettings",
"description": "Specifies the security settings like secure boot and vTPM used while creating the virtual machine. Specifies the security settings like secure boot and vTPM used while creating the virtual machine."
}
}
},
"SecurityTypes": {
"type": "string",
"description": "Specifies the SecurityType of the virtual machine. It has to be set to any specified value to enable UefiSettings.",
"enum": [
"trustedLaunch",
"confidentialvm"
],
"x-ms-enum": {
"name": "SecurityTypes",
"modelAsString": true,
"values": [
{
"name": "trustedLaunch",
"value": "trustedLaunch",
"description": "Trusted launch protects against advanced and persistent attack techniques."
},
{
"name": "confidentialVM",
"value": "confidentialvm",
"description": "Azure confidential computing offers confidential VMs are for tenants with high security and confidentiality requirements. These VMs provide a strong, hardware-enforced boundary to help meet your security needs. You can use confidential VMs for migrations without making changes to your code, with the platform protecting your VM's state from being read or modified."
}
]
}
},
"ServiceArtifactReferenceUpdate": {
"type": "object",
"description": "Specifies the service artifact reference id used to set same image version\nfor all virtual machines in the scale set when using 'latest' image version.",
"properties": {
"id": {
"type": "string",
"description": "The service artifact reference id of ServiceArtifactReference. The service artifact reference id in the form of /subscriptions/{subscriptionId}/resourceGroups/{resourceGroup}/providers/Microsoft.Compute/galleries/{galleryName}/serviceArtifacts/{serviceArtifactName}/vmArtifactsProfiles/{vmArtifactsProfilesName}"
}
}
},
"StorageAccountType": {
"type": "string",
"description": "StorageAccountType enums",
"enum": [
"standard_lrs",
"premium_lrs",
"standardssd_lrs"
],
"x-ms-enum": {
"name": "StorageAccountType",
"modelAsString": true,
"values": [
{
"name": "StandardLRS",
"value": "standard_lrs",
"description": "The data disk should use standard locally redundant storage."
},
{
"name": "PremiumLRS",
"value": "premium_lrs",
"description": "The data disk should use premium locally redundant storage."
},
{
"name": "StandardSSDLRS",
"value": "standardssd_lrs",
"description": "The data disk / OS disk should use standard SSD locally redundant storage."
}
]
}
},
"UpgradeMode": {
"type": "string",
"description": "UpgradeMode enums",
"enum": [
"automatic",
"manual",
"rolling"
],
"x-ms-enum": {
"name": "UpgradeMode",
"modelAsString": true,
"values": [
{
"name": "Automatic",
"value": "automatic",
"description": "All virtual machines in the scale set are automatically updated at the same time."
},
{
"name": "Manual",
"value": "manual",
"description": "You control the application of updates to virtual machines in the scale set. You do this by using the manualUpgrade action."
},
{
"name": "Rolling",
"value": "rolling",
"description": "The existing instances in a scale set are brought down in batches to be upgraded. Once the upgraded batch is complete, the instances will begin taking traffic again and the next batch will begin. This continues until all instances brought up-to-date."
}
]
}
},
"UpgradePolicyUpdate": {
"type": "object",
"description": "Describes an upgrade policy - automatic, manual, or rolling.",
"properties": {
"mode": {
"$ref": "#/$defs/UpgradeMode",
"description": "Specifies the mode of an upgrade to virtual machines in the scale set.
Possible values are:
**Manual** - You control the application of updates to virtual machines in the scale set. You do this by using the manualUpgrade action.
**Automatic** - All virtual machines in the scale set are automatically updated at the same time.
**Rolling** - Scale set performs updates in batches with an optional pause time in between."
},
"automaticOSUpgradePolicy": {
"$ref": "#/$defs/AutomaticOsUpgradePolicy",
"description": "Configuration parameters used for performing automatic OS Upgrade. The configuration parameters used for performing automatic OS upgrade.",
"x-ms-client-name": "automaticOsUpgradePolicy"
},
"rollingUpgradePolicy": {
"$ref": "#/$defs/RollingUpgradePolicy",
"description": "The configuration parameters used while performing a rolling upgrade."
}
}
},
"UserAccount": {
"type": "object",
"description": "Properties used to create a user used to execute Tasks on an Azure Batch\nCompute Node.",
"properties": {
"name": {
"type": "string",
"description": "The name of the user Account. Names can contain any Unicode characters up to a maximum length of 20."
},
"password": {
"type": "string",
"format": "password",
"description": "The password for the user Account.",
"x-ms-secret": true
},
"elevationLevel": {
"$ref": "#/$defs/ElevationLevel",
"description": "The elevation level of the user Account. The default value is nonAdmin."
},
"linuxUserConfiguration": {
"$ref": "#/$defs/LinuxUserConfiguration",
"description": "The Linux-specific user configuration for the user Account. This property is ignored if specified on a Windows Pool. If not specified, the user is created with the default options."
},
"windowsUserConfiguration": {
"$ref": "#/$defs/WindowsUserConfiguration",
"description": "The Windows-specific user configuration for the user Account. This property can only be specified if the user is on a Windows Pool. If not specified and on a Windows Pool, the user is created with the default options."
}
},
"required": [
"name",
"password"
]
},
"UserIdentity": {
"type": "object",
"description": "The definition of the user identity under which the Task is run. Specify either the userName or autoUser property, but not both.",
"properties": {
"username": {
"type": "string",
"description": "The name of the user identity under which the Task is run. The userName and autoUser properties are mutually exclusive; you must specify one but not both."
},
"autoUser": {
"$ref": "#/$defs/AutoUserSpecification",
"description": "The auto user under which the Task is run. The userName and autoUser properties are mutually exclusive; you must specify one but not both."
}
}
},
"VMExtension": {
"type": "object",
"description": "The configuration for virtual machine extensions.",
"properties": {
"name": {
"type": "string",
"description": "The name of the virtual machine extension."
},
"publisher": {
"type": "string",
"description": "The name of the extension handler publisher."
},
"type": {
"type": "string",
"description": "The type of the extension."
},
"typeHandlerVersion": {
"type": "string",
"description": "The version of script handler."
},
"autoUpgradeMinorVersion": {
"type": "boolean",
"description": "Indicates whether the extension should use a newer minor version if one is available at deployment time. Once deployed, however, the extension will not upgrade minor versions unless redeployed, even with this property set to true."
},
"enableAutomaticUpgrade": {
"type": "boolean",
"description": "Indicates whether the extension should be automatically upgraded by the platform if there is a newer version of the extension available."
},
"settings": {
"type": "object",
"description": "JSON formatted public settings for the extension.",
"additionalProperties": {
"type": "string"
}
},
"protectedSettings": {
"type": "object",
"description": "The extension can contain either protectedSettings or protectedSettingsFromKeyVault or no protected settings at all.",
"additionalProperties": {
"type": "string"
}
},
"provisionAfterExtensions": {
"type": "array",
"description": "The collection of extension names. Collection of extension names after which this extension needs to be provisioned.",
"items": {
"type": "string"
}
}
},
"required": [
"name",
"publisher",
"type"
]
},
"VirtualMachineConfigurationUpdate": {
"type": "object",
"description": "The configuration for Compute Nodes in a Pool based on the Azure Virtual\nMachines infrastructure.",
"properties": {
"imageReference": {
"$ref": "#/$defs/BatchVmImageReference",
"description": "A reference to the Azure Virtual Machines Marketplace Image or the custom Virtual Machine Image to use."
},
"nodeAgentSKUId": {
"type": "string",
"description": "The SKU of the Batch Compute Node agent to be provisioned on Compute Nodes in the Pool. The Batch Compute Node agent is a program that runs on each Compute Node in the Pool, and provides the command-and-control interface between the Compute Node and the Batch service. There are different implementations of the Compute Node agent, known as SKUs, for different operating systems. You must specify a Compute Node agent SKU which matches the selected Image reference. To get the list of supported Compute Node agent SKUs along with their list of verified Image references, see the 'List supported Compute Node agent SKUs' operation.",
"x-ms-client-name": "nodeAgentSkuId"
},
"windowsConfiguration": {
"$ref": "#/$defs/WindowsConfiguration",
"description": "Windows operating system settings on the virtual machine. This property must not be specified if the imageReference property specifies a Linux OS Image."
},
"dataDisks": {
"type": "array",
"description": "The configuration for data disks attached to the Compute Nodes in the Pool. This property must be specified if the Compute Nodes in the Pool need to have empty data disks attached to them. This cannot be updated. Each Compute Node gets its own disk (the disk is not a file share). Existing disks cannot be attached, each attached disk is empty. When the Compute Node is removed from the Pool, the disk and all data associated with it is also deleted. The disk is not formatted after being attached, it must be formatted before use - for more information see https://learn.microsoft.com/azure/virtual-machines/linux/classic/attach-disk#initialize-a-new-data-disk-in-linux and https://learn.microsoft.com/azure/virtual-machines/windows/attach-disk-ps#add-an-empty-data-disk-to-a-virtual-machine.",
"items": {
"$ref": "#/$defs/DataDisk"
}
},
"licenseType": {
"type": "string",
"description": "This only applies to Images that contain the Windows operating system, and\nshould only be used when you hold valid on-premises licenses for the Compute\nNodes which will be deployed. If omitted, no on-premises licensing discount is\napplied. Values are:\n\n Windows_Server - The on-premises license is for Windows\nServer.\n Windows_Client - The on-premises license is for Windows Client.\n"
},
"containerConfiguration": {
"$ref": "#/$defs/BatchContainerConfigurationUpdate",
"description": "The container configuration for the Pool. If specified, setup is performed on each Compute Node in the Pool to allow Tasks to run in containers. All regular Tasks and Job manager Tasks run on this Pool must specify the containerSettings property, and all other Tasks may specify it."
},
"diskEncryptionConfiguration": {
"$ref": "#/$defs/DiskEncryptionConfiguration",
"description": "The disk encryption configuration for the pool. If specified, encryption is performed on each node in the pool during node provisioning."
},
"nodePlacementConfiguration": {
"$ref": "#/$defs/BatchNodePlacementConfiguration",
"description": "The node placement configuration for the pool. This configuration will specify rules on how nodes in the pool will be physically allocated."
},
"extensions": {
"type": "array",
"description": "The virtual machine extension for the pool. If specified, the extensions mentioned in this configuration will be installed on each node.",
"items": {
"$ref": "#/$defs/VMExtension"
}
},
"osDisk": {
"$ref": "#/$defs/BatchOsDisk",
"description": "Settings for the operating system disk of the Virtual Machine.",
"x-ms-client-name": "OsDisk"
},
"securityProfile": {
"$ref": "#/$defs/SecurityProfile",
"description": "Specifies the security profile settings for the virtual machine or virtual machine scale set."
},
"serviceArtifactReference": {
"$ref": "#/$defs/ServiceArtifactReferenceUpdate",
"description": "Specifies the service artifact reference id used to set same image version for all virtual machines in the scale set when using 'latest' image version. The service artifact reference id in the form of /subscriptions/{subscriptionId}/resourceGroups/{resourceGroup}/providers/Microsoft.Compute/galleries/{galleryName}/serviceArtifacts/{serviceArtifactName}/vmArtifactsProfiles/{vmArtifactsProfilesName}"
}
}
},
"WindowsConfiguration": {
"type": "object",
"description": "Windows operating system settings to apply to the virtual machine.",
"properties": {
"enableAutomaticUpdates": {
"type": "boolean",
"description": "Whether automatic updates are enabled on the virtual machine. If omitted, the default value is true."
}
}
},
"WindowsUserConfiguration": {
"type": "object",
"description": "Properties used to create a user Account on a Windows Compute Node.",
"properties": {
"loginMode": {
"$ref": "#/$defs/LoginMode",
"description": "The login mode for the user. The default is 'batch'."
}
}
}
}
}