Support for User Managed Identities into azurerm_app_configuration resource

[Cedric-Bravo]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

For High availability purpose we need User Managed Identities support (Same way as Application Gateway).

To deploy a higly available App Configuration Service, you have to deploy a secondary instance into a paired region.
https://docs.microsoft.com/en-us/azure/azure-app-configuration/concept-disaster-recovery?tabs=core2x

Failover between the configuration store is managed by connexion string into the code.
https://docs.microsoft.com/en-us/azure/azure-app-configuration/concept-disaster-recovery?tabs=core2x#failover-between-configuration-stores

Using the same Managed Identities for the replicated App configuration instance will ease management and keep it simple to handle complete automation.

New or Affected Resource(s)

resource "azurerm_app_configuration"

identity block must accept "UserAssigned" type and user managed identity id "identity_ids"

Potential Terraform Configuration

resource "azurerm_user_assigned_identity" "UMI1" {
    name                = "UMI-NAME"
    resource_group_name = var.resource_group
    location            = "westeurope"

}

resource "azurerm_app_configuration" "appconf" {
  name                = "AppConfigurationName"
  resource_group_name = var.resource_group
  location            = "westeurope"
  
   identity{
     type           = "UserAssigned"
     identity_ids   = [azurerm_user_assigned_identity.UMI1.id]
   } 
}

# Copy-paste your Terraform configurations here - for large Terraform configs,
# please use a service like Dropbox and share a link to the ZIP file. For
# security, you can also encrypt the files using our GPG public key.

References

• #0000

[tombuildsstuff]

hi @Cedric-Bravo

Thanks for opening this issue :)

Taking a look through this appears to be a duplicate of #8177 - rather than having multiple issues open tracking the same thing I'm going to close this issue in favour of that one; would you mind subscribing to #8177 for updates?

Thanks!

[Cedric-Bravo]

Absolutely.
Thanks !

[ghost]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.

If you feel this issue should be reopened, we encourage creating a new issue linking back to this one for added context. If you feel I made an error 🤖 🙉 , please reach out to my human friends 👉 [email protected]. Thanks!