Skip to content

azurerm_kubernetes_cluster / azurerm_kubernetes_cluster_node_pool - add support for Windows2025 os_sku#32084

Closed
kangjk1017 wants to merge 2 commits intohashicorp:mainfrom
kangjk1017:kangjk1017/aks-nodepool-windows2025
Closed

azurerm_kubernetes_cluster / azurerm_kubernetes_cluster_node_pool - add support for Windows2025 os_sku#32084
kangjk1017 wants to merge 2 commits intohashicorp:mainfrom
kangjk1017:kangjk1017/aks-nodepool-windows2025

Conversation

@kangjk1017
Copy link
Copy Markdown

@kangjk1017 kangjk1017 commented Apr 1, 2026

Summary

  • Add Windows2025 as a valid os_sku value for azurerm_kubernetes_cluster (default node pool) and azurerm_kubernetes_cluster_node_pool
  • Azure AKS has GA'd Windows Server 2025 support starting from Kubernetes 1.33
  • Note: Windows 2025 requires fips_enabled = true as FIPS cannot be disabled on Windows Server 2025 and later

Changes

  • Added OSSKUWindowsTwoZeroTwoFive constant to vendored SDK (agentpools, managedclusters, snapshots)
  • Added Windows2025 to os_sku validation in both node pool resources
  • Added acceptance test for Windows2025 node pool with fips_enabled = true
  • Updated documentation with Windows2025 in possible values and FIPS requirement note

Test plan

  • go build ./internal/services/containers/... passes
  • TestAccKubernetesClusterNodePool_windows2025 - manually verified on AKS 1.33 cluster with os_sku = "Windows2025" and fips_enabled = true, node pool created successfully

🤖 Generated with Claude Code

… - add support for `Windows2025` `os_sku` value

Azure AKS has GA'd Windows Server 2025 support starting from Kubernetes 1.33.
This adds `Windows2025` as a valid `os_sku` value for both the cluster default
node pool and standalone node pool resources.

Note: Windows2025 requires `fips_enabled = true` as FIPS cannot be disabled
on Windows Server 2025 and later.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@kangjk1017
Copy link
Copy Markdown
Author

Manually tested by a human 🧑‍💻 (not the AI) on a live AKS 1.33 cluster (Korea Central region):

  • Created a Windows node pool with os_sku = "Windows2025" and fips_enabled = true — node pool provisioned successfully
  • Confirmed that fips_enabled = true is required; without it the API returns WindowsVersionCannotDisableFIPS

Copy link
Copy Markdown
Collaborator

@sreallymatt sreallymatt left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hi @kangjk1017 - vendored files must not be modified, this value is not yet documented in the API spec and as such, cannot yet be supported in this resource. Closing PR.

OSSKUUbuntuTwoTwoZeroFour OSSKU = "Ubuntu2204"
OSSKUWindowsTwoZeroOneNine OSSKU = "Windows2019"
OSSKUWindowsTwoZeroTwoTwo OSSKU = "Windows2022"
OSSKUWindowsTwoZeroTwoFive OSSKU = "Windows2025"
Copy link
Copy Markdown
Collaborator

@sreallymatt sreallymatt Apr 1, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Vendored files must not be modified manually, this code is pulled in from go-azure-sdk, which is generated from the API specs.

Windows2025 is not listed in the API spec as a valid value for the OSSKU enum, this will need to be added by Microsoft before we can expose it in the provider

@sreallymatt sreallymatt closed this Apr 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants