in internal/provider/provider.go [323:350]
func configureAzIdentityEnvironment(data *gen.AlzModel) {
// Maps the auth related environment variables used in the provider to what azidentity honors.
if !data.TenantId.IsNull() {
// #nosec G104
os.Setenv("AZURE_TENANT_ID", data.TenantId.ValueString())
}
if !data.ClientId.IsNull() {
// #nosec G104
os.Setenv("AZURE_CLIENT_ID", data.ClientId.ValueString())
}
if !data.ClientSecret.IsNull() {
// #nosec G104
os.Setenv("AZURE_CLIENT_SECRET", data.ClientSecret.ValueString())
}
if !data.ClientCertificatePath.IsNull() {
// #nosec G104
os.Setenv("AZURE_CLIENT_CERTIFICATE_PATH", data.ClientCertificatePath.ValueString())
}
if !data.ClientCertificatePassword.IsNull() {
// #nosec G104
os.Setenv("AZURE_CLIENT_CERTIFICATE_PASSWORD", data.ClientCertificatePassword.ValueString())
}
if len(data.AuxiliaryTenantIds.Elements()) != 0 {
auxTenants := listElementsToStrings(data.AuxiliaryTenantIds.Elements())
// #nosec G104
os.Setenv("AZURE_ADDITIONALLY_ALLOWED_TENANTS", strings.Join(auxTenants, ";"))
}
}