feat(aks): add microsoft defender support

main.tf

@@ -166,6 +166,14 @@ resource "azurerm_kubernetes_cluster" "main" {
     }
   }
 
+  dynamic "microsoft_defender" {
+    for_each = var.microsoft_defender_enabled ? ["microsoft_defender"] : []
+
+    content {
+      log_analytics_workspace_id = var.log_analytics_workspace_id == null ? azurerm_log_analytics_workspace.main[0].id : var.log_analytics_workspace.id
+    }
+  }
+
   lifecycle {
     precondition {
       condition     = (var.client_id != "" && var.client_secret != "") || (var.identity_type != "")
@@ -204,4 +212,4 @@ resource "azurerm_log_analytics_solution" "main" {
     product   = "OMSGallery/ContainerInsights"
     publisher = "Microsoft"
   }
-}
+}

variables.tf

@@ -449,4 +449,11 @@ variable "vnet_subnet_id" {
   type        = string
   description = "(Optional) The ID of a Subnet where the Kubernetes Node Pool should exist. Changing this forces a new resource to be created."
   default     = null
-}
+}
+
+variable "microsoft_defender_enabled" {
+  type        = bool
+  description = "(Optional) Is Microsoft Defender on the cluster enabled?"
+  default     = false
+  nullable    = false
+}