object({
allowed = list(object({
day = string
hours = set(number)
})),
not_allowed = list(object({
end = string
start = string
})),
}) | `null` | no |
| [microsoft\_defender\_enabled](#input\_microsoft\_defender\_enabled) | (Optional) Is Microsoft Defender on the cluster enabled? Requires `var.log_analytics_workspace_enabled` to be `true` to set this variable to `true`. | `bool` | `false` | no |
| [net\_profile\_dns\_service\_ip](#input\_net\_profile\_dns\_service\_ip) | (Optional) IP address within the Kubernetes service address range that will be used by cluster service discovery (kube-dns). Changing this forces a new resource to be created. | `string` | `null` | no |
-| [net\_profile\_docker\_bridge\_cidr](#input\_net\_profile\_docker\_bridge\_cidr) | (Optional) IP address (in CIDR notation) used as the Docker bridge IP address on nodes. Changing this forces a new resource to be created. | `string` | `null` | no |
| [net\_profile\_outbound\_type](#input\_net\_profile\_outbound\_type) | (Optional) The outbound (egress) routing method which should be used for this Kubernetes Cluster. Possible values are loadBalancer and userDefinedRouting. Defaults to loadBalancer. | `string` | `"loadBalancer"` | no |
| [net\_profile\_pod\_cidr](#input\_net\_profile\_pod\_cidr) | (Optional) The CIDR to use for pod IP addresses. This field can only be set when network\_plugin is set to kubenet. Changing this forces a new resource to be created. | `string` | `null` | no |
| [net\_profile\_service\_cidr](#input\_net\_profile\_service\_cidr) | (Optional) The Network Range used by the Kubernetes service. Changing this forces a new resource to be created. | `string` | `null` | no |
diff --git a/examples/startup/main.tf b/examples/startup/main.tf
index e46809fa..62ad23bc 100644
--- a/examples/startup/main.tf
+++ b/examples/startup/main.tf
@@ -82,7 +82,6 @@ module "aks" {
]
}
net_profile_dns_service_ip = "10.0.0.10"
- net_profile_docker_bridge_cidr = "170.10.0.1/16"
net_profile_service_cidr = "10.0.0.0/16"
network_plugin = "azure"
network_policy = "azure"
diff --git a/main.tf b/main.tf
index 8508d41d..37d8c7e7 100644
--- a/main.tf
+++ b/main.tf
@@ -298,14 +298,13 @@ resource "azurerm_kubernetes_cluster" "main" {
}
}
network_profile {
- network_plugin = var.network_plugin
- dns_service_ip = var.net_profile_dns_service_ip
- docker_bridge_cidr = var.net_profile_docker_bridge_cidr
- load_balancer_sku = var.load_balancer_sku
- network_policy = var.network_policy
- outbound_type = var.net_profile_outbound_type
- pod_cidr = var.net_profile_pod_cidr
- service_cidr = var.net_profile_service_cidr
+ network_plugin = var.network_plugin
+ dns_service_ip = var.net_profile_dns_service_ip
+ load_balancer_sku = var.load_balancer_sku
+ network_policy = var.network_policy
+ outbound_type = var.net_profile_outbound_type
+ pod_cidr = var.net_profile_pod_cidr
+ service_cidr = var.net_profile_service_cidr
dynamic "load_balancer_profile" {
for_each = var.load_balancer_profile_enabled && var.load_balancer_sku == "standard" ? ["load_balancer_profile"] : []
diff --git a/variables.tf b/variables.tf
index 6e663317..3e7ec74f 100644
--- a/variables.tf
+++ b/variables.tf
@@ -622,12 +622,6 @@ variable "net_profile_dns_service_ip" {
default = null
}
-variable "net_profile_docker_bridge_cidr" {
- type = string
- description = "(Optional) IP address (in CIDR notation) used as the Docker bridge IP address on nodes. Changing this forces a new resource to be created."
- default = null
-}
-
variable "net_profile_outbound_type" {
type = string
description = "(Optional) The outbound (egress) routing method which should be used for this Kubernetes Cluster. Possible values are loadBalancer and userDefinedRouting. Defaults to loadBalancer."
diff --git a/versions.tf b/versions.tf
index d773b0c4..55256d5e 100644
--- a/versions.tf
+++ b/versions.tf
@@ -4,7 +4,7 @@ terraform {
required_providers {
azurerm = {
source = "hashicorp/azurerm"
- version = ">= 3.40, < 4.0"
+ version = ">= 3.49, < 4.0"
}
tls = {
source = "hashicorp/tls"