Link secrets from an Azure key vault as variables

[straylight]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Description

Was hoping we could add the ability to specify Azure Subscription and Key Vault Name in which the variable group can pull from.

New or Affected Resource(s)

• azuredevops_variable_group

Potential Terraform Configuration

resource "azuredevops_project" "project" {
  project_name = "Test Project"
}

resource "azuredevops_variable_group" "variablegroup" {
  project_id   = azuredevops_project.project.id
  name         = "Test Variable Group"
  description  = "Test Variable Group Description"
  allow_access = true

  key_vault = {
    subscription_id = "xxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxx"
    name = "mykeyvault"
  }

  variable {
    name  = "key"
    value = "value"
  }

  variable {
    name      = "Account Password"
    value     = "p@ssword123"
    is_secret = true
  }
}

References

• #0000

[DamonStamper]

I believe that this feature is planned. https://github.com/terraform-providers/terraform-provider-azuredevops/issues/138#issuecomment-670392497

[straylight]

I believe that this feature is planned. #138 (comment)

I read that issue and failed to see that comment for some reason, thank you for linking that.

Closing this as its already being worked on.