validation for identity_ids

[Lucretius]

Resolves #3059

identity_ids is still optional, but now if it is specified it must

1. Not be an empty array
2. Each entry must not be a UUID.

Not sure if there is another option for this field aside from UUIDs - but if not, we can create a stronger validation checking that all entries are UUIDs.

[tombuildsstuff]

LGTM - thanks for this @Lucretius

[adamday2]

Is this validating that it is a UUID? I was under the impression that this field took in a resource ID of the format:

"/subscriptions/{subscription_id}/resourcegroups/{resource_group}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/"

When attempting to use a UUID, I get this error:

azurerm_virtual_machine.vm-linux-with-msi: compute.VirtualMachinesClient#CreateOrUpdate: Failure sending request: StatusCode=400 -- Original Error: Code="LinkedInvalidPropertyId" Message="Property id '{UUID HERE}' at path '' is invalid. Expect fully qualified resource Id that start with '/subscriptions/{subscriptionId}' or '/providers/{resourceProviderNamespace}/'."

[Lucretius]

Hmm the tests seemed to be checking for a UUID, if this is incorrect I can swap this to a less strict “not empty” check. Definitely don’t want to break this!

Yeah looks like I had been checking the generated principal ID and not the id of the user assigned identity - ill see if I can edit the acceptance test to verify

[ghost]

This has been released in version 1.25.0 of the provider. Please see the Terraform documentation on provider versioning or reach out if you need any assistance upgrading. As an example:

provider "azurerm" {
	version = "~> 1.25.0"
}
# ... other configuration ...

[ghost]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.

If you feel this issue should be reopened, we encourage creating a new issue linking back to this one for added context. If you feel I made an error 🤖 🙉 , please reach out to my human friends 👉 [email protected]. Thanks!