Add support for ImageCleaner on AKS (#19916)

* Add support for ImageCleaner on AKS * add more context in ImageCleaner description
Azure · Aug 1, 2022 · f6bed55 · f6bed55
1 parent e5daa43
commit f6bed55
Showing 1 changed file with 19 additions and 0 deletions.
diff --git a/...source-manager/Microsoft.ContainerService/preview/2022-07-02-preview/managedClusters.json b/...source-manager/Microsoft.ContainerService/preview/2022-07-02-preview/managedClusters.json
@@ -6149,6 +6149,10 @@
           "$ref": "#/definitions/ManagedClusterSecurityProfileWorkloadIdentity",
           "description": "[Workload Identity](https://azure.github.io/azure-workload-identity/docs/) settings for the security profile."
         },
+        "imageCleaner": {
+          "$ref": "#/definitions/ManagedClusterSecurityProfileImageCleaner",
+          "description": "ImageCleaner settings for the security profile."
+        },
         "nodeRestriction": {
           "$ref": "#/definitions/ManagedClusterSecurityProfileNodeRestriction",
           "description": "[Node Restriction](https://kubernetes.io/docs/reference/access-authn-authz/admission-controllers/#noderestriction) settings for the security profile."
@@ -6268,6 +6272,21 @@
       },
       "description": "Workload Identity settings for the security profile."
     },
+    "ManagedClusterSecurityProfileImageCleaner": {
+      "type": "object",
+      "properties": {
+        "enabled": {
+          "type": "boolean",
+          "description": "Whether to enable ImageCleaner on AKS cluster."
+        },
+        "intervalHours": {
+          "type": "integer",
+          "format": "int32",
+          "description": "ImageCleaner scanning interval."
+        }
+      },
+      "description": "ImageCleaner removes unused images from nodes, freeing up disk space and helping to reduce attack surface area. Here are settings for the security profile."
+    },
     "ManagedClusterSecurityProfileNodeRestriction": {
       "type": "object",
       "properties": {