From 43f2f086505bb79af0b20c304b0795f1fba06a28 Mon Sep 17 00:00:00 2001 From: Ye Wang Date: Mon, 17 Jun 2024 10:33:13 -0700 Subject: [PATCH] add SecurityPatch to NodeOsUpgradeChannel --- .../aks/stable/2024-05-01/managedClusters.json | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/specification/containerservice/resource-manager/Microsoft.ContainerService/aks/stable/2024-05-01/managedClusters.json b/specification/containerservice/resource-manager/Microsoft.ContainerService/aks/stable/2024-05-01/managedClusters.json index c8d4b9573b32..0bb87e56beca 100644 --- a/specification/containerservice/resource-manager/Microsoft.ContainerService/aks/stable/2024-05-01/managedClusters.json +++ b/specification/containerservice/resource-manager/Microsoft.ContainerService/aks/stable/2024-05-01/managedClusters.json @@ -5085,7 +5085,8 @@ "enum": [ "Unmanaged", "None", - "NodeImage" + "NodeImage", + "SecurityPatch" ], "x-ms-enum": { "name": "nodeOSUpgradeChannel", @@ -5102,6 +5103,10 @@ { "value": "NodeImage", "description": "AKS will update the nodes with a newly patched VHD containing security fixes and bugfixes on a weekly cadence. With the VHD update machines will be rolling reimaged to that VHD following maintenance windows and surge settings. No extra VHD cost is incurred when choosing this option as AKS hosts the images." + }, + { + "value": "SecurityPatch", + "description": "AKS downloads and updates the nodes with tested security updates. These updates honor the maintenance window settings and produce a new VHD that is used on new nodes. On some occasions it's not possible to apply the updates in place, in such cases the existing nodes will also be re-imaged to the newly produced VHD in order to apply the changes. This option incurs an extra cost of hosting the new Security Patch VHDs in your resource group for just in time consumption." } ] },