Support for clientCertificateMode in container apps

[michaeljgea]

Is there an existing issue for this?

• I have searched the existing issues

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment and review the contribution guide to help.

Description

Azure Container apps now support client certificate authentication.

This feature can be turned on in the portal or via the REST API. However, when redeploying the app via terraform, it is reset to "ignore", i.e., disabled.

The Go SDK already supports this feature in version 2.0.0 (see: https://github.com/Azure/azure-sdk-for-go/blob/main/sdk/resourcemanager/appcontainers/armappcontainers/CHANGELOG.md#200-2023-08-25 "New enum type IngressClientCertificateMode").

New or Affected Resource(s)/Data Source(s)

azurerm_container_app

Potential Terraform Configuration

resource "azurerm_container_app" "service" {
  name                         = "test"

  //...

  ingress {
    target_port      = 80
    external_enabled = true
    traffic_weight {
      latest_revision = true
      percentage      = 100
    }
	
    client_certificate_mode = "accept"
	
  }
  
}

References

https://learn.microsoft.com/en-us/azure/container-apps/client-certificate-authorization