Terraform Provider for Azure DevOps

The azuredevops_git_repository resource manages a Git repository within an Azure DevOps organization. It supports creating clean repositories, forking existing repositories, and importing repositories from external sources (like GitHub).

Important: Handling Imported Repositories

When importing an existing repository into Terraform state, running terraform plan will often detect differences in the initialization block. To prevent Terraform from attempting to re-initialize or recreate the repository, you should use a lifecycle block with ignore_changes on the initialization argument.

Initialization Behavior

• If initialization.init_type is Uninitialized: Changing source_type or source_url will not recreate the repository, but will instead initialize it.
• If initialization.init_type is not Uninitialized:
  1. Updating init_type will recreate the repository.
  2. Updating source_type or source_url will recreate the repository.

resource "azuredevops_git_repository" "example" {
  project_id     = azuredevops_project.example.id
  name           = "Example Git Repository"
  default_branch = "refs/heads/main"
  initialization {
    init_type = "Clean"
  }
  lifecycle {
    ignore_changes = [
      initialization,
    ]
  }
}

You can control the scope of Git permissions by varying the arguments provided to azuredevops_git_permissions:

1. Project Level: Applies to all Git repositories within a project (existing or new).

   • Required Argument: project_id.

2. Repository Level: Applies to a specific repository and all its branches.

   • Required Arguments: project_id, repository_id.

3. Branch Level: Applies to a specific branch within a repository.

   • Required Arguments: project_id, repository_id, branch_name.

# Project Level
resource "azuredevops_git_permissions" "project-level" {
  project_id = "project-id"
  principal  = "group-descriptor"
  permissions = { CreateRepository = "Deny" }
}

# Repository Level
resource "azuredevops_git_permissions" "repo-level" {
  project_id    = "project-id"
  repository_id = "repo-id"
  principal     = "group-descriptor"
  permissions   = { CreateTag = "Deny" }
}

# Branch Level
resource "azuredevops_git_permissions" "branch-level" {
  project_id    = "project-id"
  repository_id = "repo-id"
  branch_name   = "refs/heads/master"
  principal     = "group-descriptor"
  permissions   = { ForcePush = "Deny" }
}

You can authorize the Visual Studio Marketplace service endpoint using either a Personal Access Token (PAT) or Basic Authentication (username and password).

Important: authentication_token and authentication_basic are mutually exclusive; you must provide exactly one.

### Authorize with token
```hcl
resource "azuredevops_serviceendpoint_visualstudiomarketplace" "example" {
  project_id            = azuredevops_project.example.id
  service_endpoint_name = "Example Marketplace"
  url                   = "https://markpetplace.com"
  authentication_token {
    token = "token"
  }
  description = "Managed by Terraform"
}

Authorize with username and password

resource "azuredevops_serviceendpoint_visualstudiomarketplace" "example" {
  project_id            = azuredevops_project.example.id
  service_endpoint_name = "Example Marketplace"
  url                   = "https://markpetplace.com"
  authentication_basic {
    username = "username"
    password = "password"
  }
  description = "Managed by Terraform"
}

The azuredevops_serviceendpoint_azuredevops resource manages an Azure DevOps service endpoint within an Azure DevOps organization.

Important Deprecation Notice: This resource is a duplicate of azuredevops_serviceendpoint_runpipeline and will be removed in the future. It is recommended to use azuredevops_serviceendpoint_runpipeline instead.

Prerequisite: The Configurable Pipeline Runner extension must be installed for the organization to use this resource.

resource "azuredevops_serviceendpoint_azuredevops" "example" {
  project_id            = azuredevops_project.example.id
  service_endpoint_name = "Example Azure DevOps"
  org_url               = "https://dev.azure.com/testorganization"
  release_api_url       = "https://vsrm.dev.azure.com/testorganization"
  personal_access_token = "0000000000000000000000000000000000000000000000000000"
  description           = "Managed by Terraform"
}

The repository follows standard HashiCorp patterns for Terraform providers:

• azuredevops/: The core provider implementation.
  • config.go: Handles Azure DevOps SDK initialization.
  • provider.go: Exports the Azure DevOps Terraform provider.
  • data_*.go: Contains Terraform data source implementations.
  • resource_*.go: Contains Terraform resource implementations.
  • utils/: Shared utilities.
• azdosdkmocks/: Generated mocks for the Azure DevOps Go SDK.
• scripts/: Build and installation scripts.
• website/: Client-facing documentation.
• docs/: Developer documentation.
• go.mod: Project dependencies.

tree -L 2
.
├── azdosdkmocks --------> Generated mocks for AzDO Go SDK
├── azuredevops ---------> Provider implementation
│   ├── config.go -------> AzDO SDK initialization lives here
│   ├── provider.go -----> Exports the AzDO terraform provider
│   ├── data_*.go -------> data_*.go files contain terraform data sources implementations
│   ├── resource_*.go ---> resource_*.go files contain terraform resource implementations
│   └── utils -----------> Utilities used across the codebase
├── docs ----------------> Developer documentation
├── go.mod --------------> Describes project dependencies
├── scripts -------------> All scripts live here
└── website -------------> Client facing documentation