Tim Lovell-Smith

> "description": "Whether to create cluster using private IP instead of public IP.", This property must be set at create time. --- Refers to: specification/hdinsight/resource-manager/Microsoft.HDInsight/HDInsightOnAks/preview/2023-11-01-preview/hdinsight.json:1869 in f445bb4. [](commit_id = f445bb4ad6904266e12322601e64b64d544dc60d,...

> "type": "boolean", booleans are discouraged, in favor of enums because they're harder to extend, and sometimes, to understand. --- Refers to: specification/hdinsight/resource-manager/Microsoft.HDInsight/HDInsightOnAks/preview/2023-11-01-preview/hdinsight.json:1868 in f445bb4. [](commit_id = f445bb4ad6904266e12322601e64b64d544dc60d, deletion_comment =...

> "description": "Private ssh connectivity endpoint. This property will only be returned when enableInternalIngress is true.", SSH #Resolved --- Refers to: specification/hdinsight/resource-manager/Microsoft.HDInsight/HDInsightOnAks/preview/2023-11-01-preview/hdinsight.json:1924 in f445bb4. [](commit_id = f445bb4ad6904266e12322601e64b64d544dc60d, deletion_comment = False)

> "description": "This property is required by Trino, Spark and Flink cluster but is optional for Kafka cluster.", Just wondering, does it matter if you use plugins like Ranger? ---...

> "rangerPluginProfile": { Why is there both rangerProfile and rangerPluginProfile? Is Ranger only a plugin, or is it an either or choice compared to Kafka/Spark etc? --- Refers to: specification/hdinsight/resource-manager/Microsoft.HDInsight/HDInsightOnAks/preview/2023-11-01-preview/hdinsight.json:1982...

> "description": "Secret reference name from secretsProfile.secrets containing password for database connection.", Does it require setting metastoreDbConnectionAuthenticationMode? --- Refers to: specification/hdinsight/resource-manager/Microsoft.HDInsight/HDInsightOnAks/preview/2023-11-01-preview/hdinsight.json:2326 in f445bb4. [](commit_id = f445bb4ad6904266e12322601e64b64d544dc60d, deletion_comment = False)

> "type": "string" doc: is this string a keyvault secret URI? Or an actual secret password? --- Refers to: specification/hdinsight/resource-manager/Microsoft.HDInsight/HDInsightOnAks/preview/2023-11-01-preview/hdinsight.json:2327 in f445bb4. [](commit_id = f445bb4ad6904266e12322601e64b64d544dc60d, deletion_comment = False)

> "description": "The secret name which contains the database user password." does it support passing an explicit secret version, or only a name? --- Refers to: specification/hdinsight/resource-manager/Microsoft.HDInsight/HDInsightOnAks/preview/2023-11-01-preview/hdinsight.json:2658 in f445bb4. [](commit_id...

> } You should use this format for URI properties `"format": "uri"` --- Refers to: specification/hdinsight/resource-manager/Microsoft.HDInsight/HDInsightOnAks/preview/2023-11-01-preview/hdinsight.json:2667 in f445bb4. [](commit_id = f445bb4ad6904266e12322601e64b64d544dc60d, deletion_comment = False)

> "keyVaultId": { You should use this format for Azure resource ID properties "format": "arm-id" --- Refers to: specification/hdinsight/resource-manager/Microsoft.HDInsight/HDInsightOnAks/preview/2023-11-01-preview/hdinsight.json:2660 in f445bb4. [](commit_id = f445bb4ad6904266e12322601e64b64d544dc60d, deletion_comment = False)