From c24a66d7a5ecf7e098d412a56f669355e1f7dbd2 Mon Sep 17 00:00:00 2001
From: aristosvo <8375124+aristosvo@users.noreply.github.com>
Date: Tue, 21 Feb 2023 06:59:26 +0100
Subject: [PATCH] `azurerm_kubernetes_cluster` - fix SecurityProfile nilpointer

---
 .../containers/kubernetes_cluster_data_source.go       | 10 +++++-----
 .../services/containers/kubernetes_cluster_resource.go |  2 +-
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/internal/services/containers/kubernetes_cluster_data_source.go b/internal/services/containers/kubernetes_cluster_data_source.go
index fca1c846ba5a..d356cc192e8d 100644
--- a/internal/services/containers/kubernetes_cluster_data_source.go
+++ b/internal/services/containers/kubernetes_cluster_data_source.go
@@ -735,7 +735,7 @@ func dataSourceKubernetesClusterRead(d *pluginsdk.ResourceData, meta interface{}
 				return fmt.Errorf("setting `agent_pool_profile`: %+v", err)
 			}
 
-			azureKeyVaultKms := flattenKubernetesClusterDataSourceKeyVaultKms(props.SecurityProfile.AzureKeyVaultKms)
+			azureKeyVaultKms := flattenKubernetesClusterDataSourceKeyVaultKms(props.SecurityProfile)
 			if err := d.Set("key_management_service", azureKeyVaultKms); err != nil {
 				return fmt.Errorf("setting `key_management_service`: %+v", err)
 			}
@@ -849,17 +849,17 @@ func dataSourceKubernetesClusterRead(d *pluginsdk.ResourceData, meta interface{}
 	return nil
 }
 
-func flattenKubernetesClusterDataSourceKeyVaultKms(input *managedclusters.AzureKeyVaultKms) []interface{} {
+func flattenKubernetesClusterDataSourceKeyVaultKms(input *managedclusters.ManagedClusterSecurityProfile) []interface{} {
 	azureKeyVaultKms := make([]interface{}, 0)
 
-	if input != nil && input.Enabled != nil && *input.Enabled {
+	if input != nil && input.AzureKeyVaultKms != nil && input.AzureKeyVaultKms.Enabled != nil && *input.AzureKeyVaultKms.Enabled {
 		keyId := ""
-		if v := input.KeyId; v != nil {
+		if v := input.AzureKeyVaultKms.KeyId; v != nil {
 			keyId = *v
 		}
 
 		networkAccess := ""
-		if v := input.KeyVaultNetworkAccess; v != nil {
+		if v := input.AzureKeyVaultKms.KeyVaultNetworkAccess; v != nil {
 			networkAccess = string(*v)
 		}
 
diff --git a/internal/services/containers/kubernetes_cluster_resource.go b/internal/services/containers/kubernetes_cluster_resource.go
index b892859233cd..aeda48da758b 100644
--- a/internal/services/containers/kubernetes_cluster_resource.go
+++ b/internal/services/containers/kubernetes_cluster_resource.go
@@ -2265,7 +2265,7 @@ func resourceKubernetesClusterRead(d *pluginsdk.ResourceData, meta interface{})
 		}
 		d.Set("workload_identity_enabled", workloadIdentity)
 
-		azureKeyVaultKms := flattenKubernetesClusterDataSourceKeyVaultKms(props.SecurityProfile.AzureKeyVaultKms)
+		azureKeyVaultKms := flattenKubernetesClusterDataSourceKeyVaultKms(props.SecurityProfile)
 		if err := d.Set("key_management_service", azureKeyVaultKms); err != nil {
 			return fmt.Errorf("setting `key_management_service`: %+v", err)
 		}