| allowed_ips | List of IP’s that can talk to key vault | list(string) | n/a | yes |
| hub_subscription_id | The ID of the hub subscription | string | n/a | yes |
| identity_name | Name of the managed identity for the cluster | string | "" | no |
| k8s_admin_group | Group | string | n/a | yes |
| keyvault_privatezone_enabled | Whether to create the private zone records | bool | false | no |
| keyvault_privatezone_resource_group_name | resource group for the azure file private zone | string | "" | no |
| location | The location to setup resources | string | n/a | yes |
| name | Name of the cluster | string | "" | no |
| prefix | Naming Prefix | string | "" | no |
| public_network_access_enabled | Allow public access to the key vault | bool | n/a | yes |
| purge_protection_enabled | Enable Purge protection | bool | n/a | yes |
| resource_group_name | The name of the resource group under which to build this cluster | string | n/a | yes |
| subnet_id | Id for the subnet | string | n/a | yes |
| subscription_id | The subscription id to deploy this to | string | n/a | yes |
| tags | List of tags to generate | map(string) | n/a | yes |