Support pulling container images from ACR using managed identity

Dockerfile

@@ -1,5 +1,5 @@
 # Pull the base image with given version.
-ARG BUILD_TERRAFORM_VERSION="0.14.4"
+ARG BUILD_TERRAFORM_VERSION="1.3"
 FROM mcr.microsoft.com/terraform-test:${BUILD_TERRAFORM_VERSION}
 
 ARG MODULE_NAME="terraform-azure-devops-agent-aci"

main.tf

@@ -66,9 +66,10 @@ resource "azurerm_container_group" "linux-container-group" {
   dynamic "image_registry_credential" {
     for_each = var.image_registry_credential.server == "" ? [] : [1]
     content {
-      username = var.image_registry_credential.username
-      password = var.image_registry_credential.password
-      server   = var.image_registry_credential.server
+      user_assigned_identity_id = var.image_registry_credential.user_assigned_identity_id
+      username                  = var.image_registry_credential.username
+      password                  = var.image_registry_credential.password
+      server                    = var.image_registry_credential.server
     }
   }
 
@@ -144,9 +145,10 @@ resource "azurerm_container_group" "windows-container-group" {
   dynamic "image_registry_credential" {
     for_each = var.image_registry_credential.server == "" ? [] : [1]
     content {
-      username = var.image_registry_credential.username
-      password = var.image_registry_credential.password
-      server   = var.image_registry_credential.server
+      user_assigned_identity_id = var.image_registry_credential.user_assigned_identity_id
+      username                  = var.image_registry_credential.username
+      password                  = var.image_registry_credential.password
+      server                    = var.image_registry_credential.server
     }
   }
 }

test/fixture/linux-agents-import-rg/provider.tf

@@ -2,11 +2,11 @@ terraform {
   required_providers {
     azurerm = {
       source  = "hashicorp/azurerm"
-      version = ">= 3.16.0"
+      version = ">= 3.29.0"
     }
   }
 }
 
 provider "azurerm" {
   features {}
-}
+}

test/fixture/linux-agents-managed-identities/provider.tf

@@ -2,11 +2,11 @@ terraform {
   required_providers {
     azurerm = {
       source  = "hashicorp/azurerm"
-      version = ">= 3.16.0"
+      version = ">= 3.29.0"
     }
   }
 }
 
 provider "azurerm" {
   features {}
-}
+}

test/fixture/linux-agents-private-registry/provider.tf

@@ -2,11 +2,11 @@ terraform {
   required_providers {
     azurerm = {
       source  = "hashicorp/azurerm"
-      version = ">= 3.16.0"
+      version = ">= 3.29.0"
     }
   }
 }
 
 provider "azurerm" {
   features {}
-}
+}

test/fixture/linux-agents-vnet/provider.tf

@@ -2,11 +2,11 @@ terraform {
   required_providers {
     azurerm = {
       source  = "hashicorp/azurerm"
-      version = ">= 3.16.0"
+      version = ">= 3.29.0"
     }
   }
 }
 
 provider "azurerm" {
   features {}
-}
+}

test/fixture/linux-agents/provider.tf

@@ -2,11 +2,11 @@ terraform {
   required_providers {
     azurerm = {
       source  = "hashicorp/azurerm"
-      version = ">= 3.16.0"
+      version = ">= 3.29.0"
     }
   }
 }
 
 provider "azurerm" {
   features {}
-}
+}

test/fixture/linux-and-windows-agents/provider.tf

@@ -2,11 +2,11 @@ terraform {
   required_providers {
     azurerm = {
       source  = "hashicorp/azurerm"
-      version = ">= 3.16.0"
+      version = ">= 3.29.0"
     }
   }
 }
 
 provider "azurerm" {
   features {}
-}
+}

variables.tf

@@ -98,15 +98,14 @@ variable "windows_agents_configuration" {
 
 variable "image_registry_credential" {
   type = object({
-    username = string,
-    password = string,
-    server   = string
+    user_assigned_identity_id = optional(string),
+    username                  = optional(string),
+    password                  = optional(string),
+    server                    = string
   })
   description = "(Optional) The credentials to use to connect to the Docker private registry where agent images are stored."
   default = {
-    username = "",
-    password = "",
-    server   = ""
+    server                    = ""
   }
 }