Alan-Jowett / CoPilot-For-Consensus / 20735671210

81%

push

github

fix: Azure AI Search authentication with user-assigned managed identity (#757)

* fix: Use user-assigned managed identity client ID for Azure AI Search authentication

DefaultAzureCredential in Container Apps requires explicit managed_identity_client_id
parameter when AZURE_CLIENT_ID env var is set. Without this, the credential provider
fails to authenticate with Azure AI Search, resulting in 403 Forbidden errors.

This fix ensures the vectorstore adapter correctly uses the user-assigned managed
identity by passing the client ID from the environment to DefaultAzureCredential.

Signed-off-by: GitHub Copilot <copilot@github.com>

* test: Add managed identity authentication test coverage

- Move os import to module level per Python best practices
- Add test_managed_identity_with_client_id to verify AZURE_CLIENT_ID is used
- Add test_managed_identity_without_client_id for system-assigned identity fallback

Addresses PR #757 review comments from copilot-pull-request-reviewer

Signed-off-by: GitHub Copilot <copilot@github.com>

---------

Signed-off-by: GitHub Copilot <copilot@github.com>
Co-authored-by: GitHub Copilot <copilot@github.com>

5 of 5 new or added lines in 1 file covered. (100.0%)

6250 of 8113 relevant lines covered (77.04%)

0.86 hits per line