add msi auth (#1021)

.github/dependabot.yml

@@ -1,150 +1,150 @@
-# This file is auto-generated by .github/scripts/update-dependabot.ps1
+### This file is auto-generated by .github/scripts/update-dependabot.ps1
 version: 2
-updates:
+updates:
 - package-ecosystem: "nuget"
   directory: "/src/app/AlwaysOn.BackgroundProcessor"
   schedule:
     interval: "monthly" 
-  target-branch: "component-updates" 
-
+  target-branch: "component-updates" 
+
 - package-ecosystem: "docker"
   directory: "/src/app/AlwaysOn.BackgroundProcessor"
   schedule:
     interval: "monthly" 
-  target-branch: "component-updates" 
-
+  target-branch: "component-updates" 
+
 - package-ecosystem: "docker"
   directory: "/src/app/AlwaysOn.UI"
   schedule:
     interval: "monthly" 
-  target-branch: "component-updates" 
-
+  target-branch: "component-updates" 
+
 - package-ecosystem: "npm"
   directory: "/src/app/AlwaysOn.UI"
   schedule:
     interval: "monthly" 
-  target-branch: "component-updates" 
+  target-branch: "component-updates" 
   allow:
   - dependency-type: direct
-  - dependency-type: production # check only dependencies, which are going to the compiled app, not supporting tools like @vue-cli
-
+  - dependency-type: production # check only dependencies, which are going to the compiled app, not supporting tools like @vue-cli
+
 - package-ecosystem: "nuget"
   directory: "/src/app/AlwaysOn.CatalogService"
   schedule:
     interval: "monthly" 
-  target-branch: "component-updates" 
-
+  target-branch: "component-updates" 
+
 - package-ecosystem: "docker"
   directory: "/src/app/AlwaysOn.CatalogService"
   schedule:
     interval: "monthly" 
-  target-branch: "component-updates" 
-
+  target-branch: "component-updates" 
+
 - package-ecosystem: "nuget"
   directory: "/src/app/AlwaysOn.Shared"
   schedule:
     interval: "monthly" 
-  target-branch: "component-updates" 
-
+  target-branch: "component-updates" 
+
 - package-ecosystem: "nuget"
   directory: "/src/app/AlwaysOn.Tests"
   schedule:
     interval: "monthly" 
-  target-branch: "component-updates" 
-
+  target-branch: "component-updates" 
+
 - package-ecosystem: "nuget"
   directory: "/src/app/AlwaysOn.HealthService"
   schedule:
     interval: "monthly" 
-  target-branch: "component-updates" 
-
+  target-branch: "component-updates" 
+
 - package-ecosystem: "docker"
   directory: "/src/app/AlwaysOn.HealthService"
   schedule:
     interval: "monthly" 
-  target-branch: "component-updates" 
-
+  target-branch: "component-updates" 
+
 - package-ecosystem: "docker"
   directory: "/src/infra/monitoring/grafana"
   schedule:
     interval: "monthly" 
-  target-branch: "component-updates" 
-
+  target-branch: "component-updates" 
+
 - package-ecosystem: "npm"
   directory: "/src/infra/monitoring/grafana/healthmodelpanel"
   schedule:
     interval: "monthly" 
-  target-branch: "component-updates" 
+  target-branch: "component-updates" 
   allow:
   - dependency-type: direct
-  - dependency-type: production # check only dependencies, which are going to the compiled app, not supporting tools like @vue-cli
-
+  - dependency-type: production # check only dependencies, which are going to the compiled app, not supporting tools like @vue-cli
+
 - package-ecosystem: "terraform"
   directory: "/src/infra/monitoring/grafana/terraform/globalresources"
   schedule:
     interval: "monthly" 
-  target-branch: "component-updates" 
-
+  target-branch: "component-updates" 
+
 - package-ecosystem: "terraform"
   directory: "/src/infra/monitoring/grafana/terraform/stamps"
   schedule:
     interval: "monthly" 
-  target-branch: "component-updates" 
-
+  target-branch: "component-updates" 
+
 - package-ecosystem: "terraform"
   directory: "/src/infra/workload/globalresources"
   schedule:
     interval: "monthly" 
-  target-branch: "component-updates" 
-
+  target-branch: "component-updates" 
+
 - package-ecosystem: "terraform"
   directory: "/src/infra/workload/releaseunit"
   schedule:
     interval: "monthly" 
-  target-branch: "component-updates" 
-
+  target-branch: "component-updates" 
+
 - package-ecosystem: "terraform"
   directory: "/src/infra/workload/releaseunit/modules/stamp"
   schedule:
     interval: "monthly" 
-  target-branch: "component-updates" 
-
+  target-branch: "component-updates" 
+
 - package-ecosystem: "terraform"
   directory: "/src/testing/loadtest-azure/infra"
   schedule:
     interval: "monthly" 
-  target-branch: "component-updates" 
-
+  target-branch: "component-updates" 
+
 - package-ecosystem: "nuget"
   directory: "/src/testing/userload-generator/AzureFunctions/GlobalOrchestrator"
   schedule:
     interval: "monthly" 
-  target-branch: "component-updates" 
-
+  target-branch: "component-updates" 
+
 - package-ecosystem: "npm"
   directory: "/src/testing/userload-generator/AzureFunctions/RegionalLoadGenerator"
   schedule:
     interval: "monthly" 
-  target-branch: "component-updates" 
+  target-branch: "component-updates" 
   allow:
   - dependency-type: direct
-  - dependency-type: production # check only dependencies, which are going to the compiled app, not supporting tools like @vue-cli
-
+  - dependency-type: production # check only dependencies, which are going to the compiled app, not supporting tools like @vue-cli
+
 - package-ecosystem: "terraform"
   directory: "/src/testing/userload-generator/infra"
   schedule:
     interval: "monthly" 
-  target-branch: "component-updates" 
-
+  target-branch: "component-updates" 
+
 - package-ecosystem: "terraform"
   directory: "/src/testing/loadtest-locust/infra"
   schedule:
     interval: "monthly" 
-  target-branch: "component-updates" 
-
+  target-branch: "component-updates" 
+
 - package-ecosystem: "github-actions"
   directory: "/"
   schedule:
     interval: "monthly" 
-  target-branch: "component-updates" 
+  target-branch: "component-updates" 
 

src/infra/workload/releaseunit/modules/stamp/kubernetes.tf

@@ -59,7 +59,8 @@ resource "azurerm_kubernetes_cluster" "stamp" {
 
   # Enable and configure the Azure Monitor (container insights) addon for AKS
   oms_agent {
-    log_analytics_workspace_id = data.azurerm_log_analytics_workspace.stamp.id
+    log_analytics_workspace_id      = data.azurerm_log_analytics_workspace.stamp.id
+    msi_auth_for_monitoring_enabled = true
   }
 
   # Enable and configure the Azure KeyVault Secrets Provider addon for AKS