Merge pull request #3561 from Azure/ankusing/ARO-5514-cosmosdb-disabl…

…e-local-auth Disable cosmosdb local auth
Azure · Nov 6, 2024 · fcbebae · fcbebae
2 parents fcd3e1d + dc2a28b
commit fcbebae
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 0 deletions.
diff --git a/pkg/deploy/assets/rp-development.json b/pkg/deploy/assets/rp-development.json
@@ -70,6 +70,7 @@
                     "defaultConsistencyLevel": "Strong"
                 },
                 "databaseAccountOfferType": "Standard",
+                "disableLocalAuth": true,
                 "locations": [
                     {
                         "locationName": "[resourceGroup().location]"

diff --git a/pkg/deploy/assets/rp-production.json b/pkg/deploy/assets/rp-production.json
@@ -673,6 +673,7 @@
                 },
                 "databaseAccountOfferType": "Standard",
                 "disableKeyBasedMetadataWriteAccess": true,
+                "disableLocalAuth": true,
                 "ipRules": "[if(parameters('disableCosmosDBFirewall'), createArray(), concat(parameters('ipRules'),createArray(createObject('ipAddressOrRange', '104.42.195.92'),createObject('ipAddressOrRange','40.76.54.131'),createObject('ipAddressOrRange','52.176.6.30'),createObject('ipAddressOrRange','52.169.50.45'),createObject('ipAddressOrRange','52.187.184.26'))))]",
                 "isVirtualNetworkFilterEnabled": "[not(parameters('disableCosmosDBFirewall'))]",
                 "locations": [

diff --git a/pkg/deploy/generator/resources_rp.go b/pkg/deploy/generator/resources_rp.go
@@ -884,6 +884,7 @@ func (g *generator) rpCosmosDB() []*arm.Resource {
 				},
 			},
 			MinimalTLSVersion: &minTLSVersion,
+			DisableLocalAuth:  to.BoolPtr(true), // Disable local authentication
 		},
 		Name:     to.StringPtr("[parameters('databaseAccountName')]"),
 		Type:     to.StringPtr("Microsoft.DocumentDB/databaseAccounts"),