No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Pulumi Community

I believe a workaround is to find one addon that *is* supported in Azure Gov, but that you don’t need - and configure the addons to provide just that one with `enabled: false`. That will override the defaults and avoid trying to configure addons that aren’t supported in the environment you are targeting.

The defaults here ultimately should be fixed in the upstream provider though as you say. 

yes, i tried to disable azure policy since i don't really need it. But somehow i got the error below

```aks = KubernetesCluster(
    "aksCluster",
    resource_group_name=resource_group.name,
    kubernetes_version="1.18.1",
    dns_prefix="dns",
    linux_profile={"adminUsername": "aksuser", "ssh_key": {"keyData": SSHKEY}},
    service_principal={"client_id": app.application_id, "client_secret": sppwd.value},
    default_node_pool={
        "name": "type1",
        "node_count": 2,
        "vm_size": "Standard_B2ms",
    },
    addon_profiles={
        "azurePolicy" : {
            "enabled" : False
        }
    },```

```      File "./__main__.py", line 50, in &lt;module&gt;
        "enabled" : False
    TypeError: __init__() got an unexpected keyword argument 'addon_profiles'
    error: an unhandled error occurred: Program exited with non-zero exit code: 1```

The property is `addon_profile`. See <https://www.pulumi.com/docs/reference/pkg/azure/containerservice/kubernetescluster/#addon_profile_python|https://www.pulumi.com/docs/reference/pkg/azure/containerservice/kubernetescluster/#addon_profile_python>. 

:sweat_smile:thank you so much, Luke. Remove `s` and it worked like charm

Oops! It doesn't disable azurePolicy as expected and the aks provisioning still failed. Do you have any idea  about how to correctly disable it?

<@U014M6F69JQ> can you try with `"azurepolicy"` as the addon name?