| subscription-id | Azure subscription ID | yes | — |
| resource-group | Azure resource group name | yes | — |
| environment-name | Azure Container App Environment name | yes | — |
| job-name | Name for the container app job (will be auto-generated if not provided) | no | — |
| image | Container image to use (e.g., ghcr.io/owner/image:tag) | no | — |
| command | Space-delimited command to run in the container | no | — |
| user-managed-identity | Resource ID of user-managed identity to assign to the job | no | — |
| environment-variables | JSON object of environment variables (e.g., {"VAR1": "value1", "VAR2": "value2"}) | no | — |
| secrets | JSON object of secrets (e.g., {"SECRET1": "value1", "SECRET2": "value2"}) | no | — |
| cron-schedule | CRON schedule for recurring jobs (e.g., "0 */6 * * *" for every 6 hours) | no | — |
| action | Action to perform: create, run, or delete the job | no | run |
| keep-job | Whether to keep the job after execution (true/false) | no | false |
| cpu | CPU cores to allocate (e.g., "0.5", "1.0") | no | 0.5 |
| memory | Memory to allocate (e.g., "1Gi", "2Gi") | no | 1Gi |
| timeout | Job execution timeout in seconds | no | 1800 |
| registry-server | Container registry server (e.g., ghcr.io, myregistry.azurecr.io) | no | — |
| registry-username | Container registry username (for username/password authentication) | no | — |
| registry-password | Container registry password (for username/password authentication) | no | — |
| registry-identity | Managed identity resource ID (or "system") to use for ACR authentication instead of username/password | no | — |
| dry-run | Preview payload and skip Azure calls | no | false |
| log-analytics-workspace-id | Log Analytics Workspace ID for retrieving container logs | no | — |