Appearance
cluster.provision-aks ​
Provision a AKS cluster, build Kubernetes connection material, register it, and verify API access.
Overview ​
| Property | Value |
|---|---|
| Workflow type | Dag |
| Library | App-clusters-azure |
| Version | 1.0 |
Input Schema ​
| Field | Type | Required | Default | Description |
|---|---|---|---|---|
organization_uuid | uuid | Yes | — | Organization that will own the generated Kubernetes connection. |
azure_connection_uuid | uuid | Yes | — | Azure CloudConnection UUID used for provider API calls. |
resource_group | string | Yes | — | Azure resource group. |
location | string | Yes | — | AKS region or zone. |
cluster_name | string | Yes | — | AKS cluster name. |
display_name | string | No | — | Display name for the registered Kubernetes connection. |
network_name | string | No | — | VPC network name to validate and pass to AKS. |
subnetwork_name | string | No | — | Optional subnetwork name. |
kubernetes_version | string | No | — | Desired control-plane version. |
release_channel | string | No | — | AKS release channel such as REGULAR. |
initial_node_count | integer | No | — | Default node count for the legacy default pool when agent_pools is omitted. |
machine_type | string | No | — | Default node machine type for the legacy pool or explicit node pools that omit machine_type. |
disk_size_gb | integer | No | — | Default node boot disk size for explicit node pools. |
node_service_account | string | No | — | Default service account email for nodes. |
agent_pools | json | No | — | Explicit AKS node pools to create after control-plane readiness. Each item may declare name, node_count, machine_type, disk_size_gb, disk_type, image_type, service_account, oauth_scopes, labels, tags, taints, metadata, autoscaling, management, upgrade_settings, version, max_pods_per_node, spot, or preemptible. |
remove_default_agent_pool | boolean | No | — | Remove the default AKS pool during cluster creation; defaults true when agent_pools is supplied. |
labels | json | No | — | Labels for provider resources and connection metadata. |
private_cluster | boolean | No | — | Whether to create a private AKS cluster. |
deletion_protection | boolean | No | — | AKS deletion protection setting. |
register_connection | boolean | No | — | Register a Kubernetes CloudConnection after provisioning. |
verify_connection | boolean | No | — | Verify the registered Kubernetes CloudConnection. |
actor | string | No | — | Caller initiating the workflow. |
timeout_seconds | integer | No | — | Provider operation wait timeout. |
poll_interval | integer | No | — | Provider operation poll interval. |
Output Schema ​
| Field | Type | Required | Default | Description |
|---|---|---|---|---|
validate_credentials | json | No | — | Output from azure.auth.validate_credentials. |
cluster_describe | json | No | — | Output from azure.aks.cluster.describe. |
organization_uuid | uuid | No | — | Echoed organization UUID. |
azure_connection_uuid | uuid | No | — | Azure CloudConnection UUID used. |
kubernetes_connection_uuid | uuid | No | — | Registered Kubernetes CloudConnection UUID. |
resource_group | string | No | — | Azure resource group. |
location | string | No | — | AKS region or zone. |
cluster_name | string | No | — | AKS cluster name. |
display_name | string | No | — | Display name for the registered Kubernetes connection. |
network_name | string | No | — | VPC network name to validate and pass to AKS. |
subnetwork_name | string | No | — | Optional subnetwork name. |
kubernetes_version | string | No | — | Desired control-plane version. |
release_channel | string | No | — | AKS release channel such as REGULAR. |
initial_node_count | integer | No | — | Default node count for the legacy default pool when agent_pools is omitted. |
machine_type | string | No | — | Default node machine type for the legacy pool or explicit node pools that omit machine_type. |
disk_size_gb | integer | No | — | Default node boot disk size for explicit node pools. |
node_service_account | string | No | — | Default service account email for nodes. |
agent_pools | json | No | — | Explicit AKS node pools to create after control-plane readiness. |
remove_default_agent_pool | boolean | No | — | Remove the default AKS pool during cluster creation. |
labels | json | No | — | Labels for provider resources and connection metadata. |
private_cluster | boolean | No | — | Whether to create a private AKS cluster. |
deletion_protection | boolean | No | — | AKS deletion protection setting. |
actor | string | No | — | Caller initiating the workflow. |
timeout_seconds | integer | No | — | Provider operation wait timeout. |
poll_interval | integer | No | — | Provider operation poll interval. |
workflow_run_uuid | string | No | — | Engine DAG run UUID for child step state. |
retried_from | string | No | — | Previous terminal state restored by engine retry. |
retry_count | integer | No | — | Number of retry attempts recorded by the engine. |
endpoint | string | No | — | Kubernetes API endpoint. |
provider_resource_id | string | No | — | Provider-native AKS cluster resource ID. |
provider_cluster_ref | string | No | — | Provider-neutral alias for the AKS cluster resource ID. |
status | string | No | — | Final provider cluster status. |
create_cluster | json | No | — | Output from azure.aks.cluster.create. |
wait_cluster | json | No | — | Output from azure.aks.operation.wait. |
create_agent_pools | json | No | — | Batch output from azure.aks.agent_pools.create. |
wait_agent_pools | json | No | — | Batch output from azure.aks.agent_pools.wait_ready. |
build_kubeconfig | json | No | — | Output from azure.aks.build_kubeconfig; may contain sensitive kubeconfig material. |
register_connection | json | No | — | Output from cluster.register-kubernetes-connection. |
verify_connection | json | No | — | Output from cluster.verify-kubernetes-connection. |
compensation_trigger | json | No | — | DAG compensation trigger. |
comp_current_layer | json | No | — | Current compensation layer. |
comp_queue | json | No | — | Remaining compensation queue. |
comp_retry_count | json | No | — | Current compensation retry count. |
failure_reason | string | No | — | Engine failure reason. |
failed_step | json | No | — | Failed DAG step. |
failed_layer | json | No | — | Failed DAG layer. |
failed_at_state | json | No | — | Failed state metadata. |
error | string | No | — | Error message. |
error_type | string | No | — | Error class. |
failure_type | string | No | — | — |
failed_action | string | No | — | — |
DAG Layers ​
| # | Layer | Steps | Compensation |
|---|---|---|---|
| 1 | preflight | azure.auth.validate_credentials, azure.aks.cluster.describe | — |
| 2 | create | azure.aks.cluster.create | — |
| 3 | wait | azure.aks.operation.wait | — |
| 4 | create_agent_pools | azure.aks.agent_pools.create | — |
| 5 | wait_agent_pools | azure.aks.agent_pools.wait_ready | — |
| 6 | connection_material | azure.aks.build_kubeconfig | — |
| 7 | register | cluster.register-kubernetes-connection | — |
| 8 | verify | cluster.verify-kubernetes-connection | — |
Execution Flow ​
Sub-workflows ​
| Sub-workflow | Step name |
|---|---|
azure.auth.validate_credentials | validate_credentials |
azure.aks.cluster.describe | cluster_describe |
azure.aks.cluster.create | create_cluster |
azure.aks.operation.wait | wait_cluster |
azure.aks.agent_pools.create | create_agent_pools |
azure.aks.agent_pools.wait_ready | wait_agent_pools |
azure.aks.build_kubeconfig | build_kubeconfig |
cluster.register-kubernetes-connection | register_connection |
cluster.verify-kubernetes-connection | verify_connection |
API Usage ​
bash
POST /api/workflows/start
Content-Type: application/json
{
"workflow_type": "cluster.provision-aks",
"initial_data": {
"organization_uuid": "value",
"azure_connection_uuid": "value",
"resource_group": "value",
"location": "value"
}
}