Update aks-secure-baseline add-ons (V1 and V2) to support aks cluster with user assigned identity

[swetha-sundar]

Description

aks-secure-baseline add-on doesn't work when using an user-assigned identity (user-msi)

To Reproduce
Steps to reproduce the behavior:

1. Create an AKS Cluster using UserAssigned identity
2. Apply the aks-secure-baseline (v1 or v2) add-on on the configuration
3. See error in the below screenshot

Expected behavior
The principal id value cannot be null when you do a role assignment. This value needs to be fetched from managed identity and used while doing the role assignment using the user msi.

Screenshots

Does this introduce a breaking change

• YES
• NO

Testing

Testing done with an aks cluster created with user assigned identity. Sample tfvars snippet below:

aks_clusters = {
  cluster_dev_temp = {
      lz_key = "lz_key_for_aks"
      key = "cluster_key"
      identity = {
          type = "UserAssigned"
          managed_identity_key = "msi_key"
          lz_key = "lz_key_for_msi"
      }
   }
}

237

[hieumoscow]

LGTM, thanks Swetha