Add support for Disk Encryption Sets (DES)

[xinWeiWei24]

This PR adds support for Disk Encryption Sets (DES), enabling customers to create AKS clusters with a specified DES.

[Copilot]

Pull request overview

Adds Disk Encryption Set (DES) support to the Azure Terraform modules so AKS clusters can be created with customer-managed key (CMK) disk encryption, and updates the nap-complex perf scenario to exercise the new configuration.

Changes:

• Introduces a new disk-encryption-set Terraform submodule and new input variables to define DES resources.
• Wires DES into AKS provisioning paths (Terraform AKS resource + az aks create CLI path), including DES-related RBAC.
• Updates the nap-complex scenario inputs to provision a DES and reference it from AKS.

Reviewed changes

Copilot reviewed 14 out of 14 changed files in this pull request and generated 8 comments.

Show a summary per file

File	Description
scenarios/perf-eval/nap-complex/terraform-inputs/azure.tfvars	Adds DES + key config to the scenario and sets disk_encryption_set_name for AKS CLI usage (also removes firewall/UDR config).
modules/terraform/azure/variables.tf	Adds disk_encryption_set_name to AKS configs and introduces disk_encryption_set_config_list.
modules/terraform/azure/main.tf	Creates DES modules and passes DES map into aks-cli (and computes DES locals).
modules/terraform/azure/key-vault/main.tf	Adjusts Key Vault settings to support CMK/DES requirements (purge protection/soft delete retention).
modules/terraform/azure/disk-encryption-set/variables.tf	Defines inputs for DES creation and validation rules.
modules/terraform/azure/disk-encryption-set/main.tf	Implements DES creation and Key Vault RBAC assignments for DES identity.
modules/terraform/azure/disk-encryption-set/outputs.tf	Exposes DES ID for downstream AKS usage.
modules/terraform/azure/disk-encryption-set/README.md	Documents how to use the DES module and its inputs/outputs.
modules/terraform/azure/aks/variables.tf	Adds DES inputs (disk_encryption_sets, disk_encryption_set_name) to the AKS module interface.
modules/terraform/azure/aks/main.tf	Sets disk_encryption_set_id on the azurerm_kubernetes_cluster resource when configured.
modules/terraform/azure/aks-cli/variables.tf	Adds DES inputs (disk_encryption_sets, disk_encryption_set_name) for CLI-driven AKS creation.
modules/terraform/azure/aks-cli/main.tf	Adds DES CLI flag generation and DES RBAC assignments (plus cluster lookup for kubelet identity).
jobs/competitive-test.yml	Comments out the cleanup step in the pipeline job.