add windows_profile support

Author: nunomcb

README.md

@@ -432,6 +432,7 @@ No modules.
 | <a name="input_upgrade_override"></a> [upgrade\_override](#input\_upgrade\_override) | `force_upgrade_enabled` - (Required) Whether to force upgrade the cluster. Possible values are `true` or `false`.<br/>`effective_until` - (Optional) Specifies the duration, in RFC 3339 format (e.g., `2025-10-01T13:00:00Z`), the upgrade\_override values are effective. This field must be set for the `upgrade_override` values to take effect. The date-time must be within the next 30 days. | <pre>object({<br/>    force_upgrade_enabled = bool<br/>    effective_until       = optional(string)<br/>  })</pre> | `null` | no |
 | <a name="input_vnet_subnet"></a> [vnet\_subnet](#input\_vnet\_subnet) | object({<br/>  id = The ID of a Subnet where the Kubernetes Node Pool should exist. Changing this forces a new resource to be created.<br/>}) | <pre>object({<br/>    id = string<br/>  })</pre> | `null` | no |
 | <a name="input_web_app_routing"></a> [web\_app\_routing](#input\_web\_app\_routing) | object({<br/>  dns\_zone\_ids = "(Required) Specifies the list of the DNS Zone IDs in which DNS entries are created for applications deployed to the cluster when Web App Routing is enabled. If not using Bring-Your-Own DNS zones this property should be set to an empty list."<br/>}) | <pre>object({<br/>    dns_zone_ids = list(string)<br/>  })</pre> | `null` | no |
+| <a name="input_windows_profile"></a> [windows\_profile](#input\_windows\_profile) | (Optional) The Windows profile for the AKS cluster. Required when `os_type` is set to `Windows` in any node pool.<br/>object({<br/>  admin\_username = "(Required) The Admin Username for Windows VMs. Changing this forces a new resource to be created."<br/>  admin\_password = "(Required) The Admin Password for Windows VMs. Length must be between 14 and 123 characters."<br/>}) | <pre>object({<br/>    admin_password = string<br/>    admin_username = string<br/>  })</pre> | `null` | no |
 | <a name="input_workload_autoscaler_profile"></a> [workload\_autoscaler\_profile](#input\_workload\_autoscaler\_profile) | `keda_enabled` - (Optional) Specifies whether KEDA Autoscaler can be used for workloads.<br/>`vertical_pod_autoscaler_enabled` - (Optional) Specifies whether Vertical Pod Autoscaler should be enabled. | <pre>object({<br/>    keda_enabled                    = optional(bool, false)<br/>    vertical_pod_autoscaler_enabled = optional(bool, false)<br/>  })</pre> | `null` | no |
 | <a name="input_workload_identity_enabled"></a> [workload\_identity\_enabled](#input\_workload\_identity\_enabled) | Enable or Disable Workload Identity. Defaults to false. | `bool` | `false` | no |
 

main.tf

@@ -552,6 +552,16 @@ resource "azurerm_kubernetes_cluster" "main" {
       dns_zone_ids = var.web_app_routing.dns_zone_ids
     }
   }
+
+  dynamic "windows_profile" {
+    for_each = var.windows_profile != null ? ["windows_profile"] : []
+
+    content {
+      admin_username = var.windows_profile.admin_username
+      admin_password = var.windows_profile.admin_password
+    }
+  }
+
   dynamic "workload_autoscaler_profile" {
     for_each = var.workload_autoscaler_profile == null ? [] : [var.workload_autoscaler_profile]
 

variables.tf

@@ -1545,6 +1545,22 @@ variable "web_app_routing" {
 EOT
 }
 
+variable "windows_profile" {
+  type = object({
+    admin_password = string
+    admin_username = string
+  })
+  default     = null
+  sensitive   = true
+  description = <<-EOT
+  (Optional) The Windows profile for the AKS cluster. Required when `os_type` is set to `Windows` in any node pool.
+  object({
+    admin_username = "(Required) The Admin Username for Windows VMs. Changing this forces a new resource to be created."
+    admin_password = "(Required) The Admin Password for Windows VMs. Length must be between 14 and 123 characters."
+  })
+EOT
+}
+
 variable "workload_autoscaler_profile" {
   type = object({
     keda_enabled                    = optional(bool, false)