Packer: Feature Request - AzureRM Ability to use MSI for Auth

[tomasquith]

Hi,

I've been looking into Azure Managed Service Identity recently, Terraform supports this - allowing us to authenticate from our build machines running in Azure. https://www.terraform.io/docs/providers/azurerm/authenticating_via_msi.html

It would be nice if Packer supported the same means of authentication rather than having to export env vars or pass creds in.

[guitarrapc]

It is really useful feature, that Azure Authentications are dynamically moving to MSI. I also hope Packer supports this feature, too!

[bgoykhman]

I surely hope Packer will add this feature. We are building image in Azure and are moving away from using service principals in favor of MSI.

[karunrg]

Yes, Security is highly concerned now building anything in the Cloud, this feature really helps us to use Packer to build Images in Azure

[azr]

Howdy @boumenot will you have bandwidth for this one ?
Otherwise someone from the Packer team will probably start on it soonish 🙂 ( probably me )

[boumenot]

Thank you for the ping! Please do. I am currently knee deep in other things at the moment.

[azr]

Okay then I'm looking into it now 🙂

[azr]

Okay I think I have it working in #6982 can someone please check that it works for them ?

Not entirely sure I cover everything correctly here 🙂

[boumenot]

Nice job! It isn't easy to start something like this from scratch, and figure out where to insert yourself.

[BenMitchell1979]

Does this 'fix' allow us to pass in an existing Managed Id that already has been added to resources for authentication?

[hashibot[bot]]

I'm going to lock this issue because it has been closed for _30 days_ ⏳. This helps our maintainers find and focus on the active issues.

If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.