Maintenance window support

main.tf

@@ -84,6 +84,24 @@ resource "azurerm_kubernetes_cluster" "main" {
     }
   }
 
+  maintenance_window {
+    dynamic "allowed" {
+      for_each = var.enable_maintenance_window == true ? var.maintenance_allowed : []
+      content {
+        day = allowed.value.day
+        hours = allowed.value.hours
+      }
+    }
+
+    dynamic "not_allowed" {
+      for_each = var.enable_maintenance_window == true ? var.maintenance_not_allowed : []
+      content {
+        start = not_allowed.value.start
+        end = not_allowed.value.end
+      }
+    }
+  }
+
   addon_profile {
     http_application_routing {
       enabled = var.enable_http_application_routing

test/fixture/main.tf

@@ -45,6 +45,7 @@ module "aks" {
   sku_tier                        = "Paid"
   private_cluster_enabled         = true
   enable_auto_scaling             = true
+  enable_maintenance_window       = false
   agents_min_count                = 1
   agents_max_count                = 2
   agents_count                    = null

variables.tf

@@ -289,3 +289,27 @@ variable "enable_host_encryption" {
   type        = bool
   default     = false
 }
+
+variable "enable_maintenance_window" {
+  description = "Enable maintenance for AKS cluster"
+  type        = bool
+  default     = false
+}
+
+variable "maintenance_allowed" {
+  description = "Days and hours when maintenance is allowed"
+  type = list(object({
+    day = string
+    hours = list(string)
+  }))
+  default = []
+}
+
+variable "maintenance_not_allowed" {
+  description = "Days and hours when maintenance is not allowed"
+  type = list(object({
+    end = string
+    start = string
+  }))
+  default = []
+}