Fix operator precedence bug in get_container_network_logs() validation

The validation logic had two issues:
1. Operator precedence bug - the condition evaluated as
   (enable_cnl AND acns_not_enabled) OR monitoring_not_enabled
   which would error if monitoring wasn't configured, regardless of enable_cnl
2. Timing issue during cluster create - the validation only checked
   mc.addon_profiles, but during create this is empty even when
   --enable-addons monitoring is specified

Fix: Check both mc.addon_profiles (for update) AND --enable-addons
parameter (for create), with correct operator precedence.

Author: Jenny Liu

src/aks-preview/azext_aks_preview/managed_cluster_decorator.py

@@ -941,17 +941,32 @@ def get_container_network_logs(self, mc: ManagedCluster) -> Union[bool, None]:
                 "Cannot specify --enable-container-network-logs and "
                 "--disable-container-network-logs at the same time."
             )
-        if (
-            enable_cnl and
-            (not self.raw_param.get("enable_acns", False) and
-                not (mc.network_profile and mc.network_profile.advanced_networking and
-                     mc.network_profile.advanced_networking.enabled)) or
-            not (mc.addon_profiles and mc.addon_profiles.get("omsagent") and mc.addon_profiles["omsagent"].enabled)
-        ):
-            raise InvalidArgumentValueError(
-                "Container network logs requires '--enable-acns', advanced networking "
-                "to be enabled, and the monitoring addon to be enabled."
+
+        if enable_cnl:
+            # Check if ACNS is enabled (either via param or already on the cluster)
+            acns_enabled = (
+                self.raw_param.get("enable_acns", False) or
+                (mc.network_profile and mc.network_profile.advanced_networking and
+                 mc.network_profile.advanced_networking.enabled)
+            )
+
+            # Check if monitoring addon is enabled:
+            # - Already configured in mc.addon_profiles, OR
+            # - Being enabled via --enable-addons parameter (for cluster create scenario)
+            monitoring_already_enabled = (
+                mc.addon_profiles and
+                mc.addon_profiles.get("omsagent") and
+                mc.addon_profiles["omsagent"].enabled
             )
+            monitoring_being_enabled = "monitoring" in (self.raw_param.get("enable_addons") or "")
+            monitoring_enabled = monitoring_already_enabled or monitoring_being_enabled
+
+            if not acns_enabled or not monitoring_enabled:
+                raise InvalidArgumentValueError(
+                    "Container network logs requires '--enable-acns', advanced networking "
+                    "to be enabled, and the monitoring addon to be enabled."
+                )
+
         enable_cnl = bool(enable_cnl) if enable_cnl is not None else False
         disable_cnl = bool(disable_cnl) if disable_cnl is not None else False
         return enable_cnl or not disable_cnl