Fix Cosmos DB local debugging

[marrobi]

Introduce functionality to assign the Cosmos DB Built-in Data Contributor role when configuring local debugging to so that cosmos data can be read.

Always use Entra ID credentials unless a key is manually specified.

[github-actions]

Unit Test Results

608 tests   608 ✅  6s ⏱️
  1 suites    0 💤
  1 files      0 ❌

Results for commit 5bb2154.

♻️ This comment has been updated with latest results.

[Copilot]

Copilot reviewed 2 out of 3 changed files in this pull request and generated no comments.

Files not reviewed (1)

• devops/scripts/setup_local_debugging.sh: Language not supported

Comments suppressed due to low confidence (3)

api_app/api/dependencies/database.py:29

• The removal of the dynamic key fetching logic using CosmosDBManagementClient means that the key must always be available in the configuration. This could cause issues if the key is not provided.

if STATE_STORE_KEY:

api_app/api/dependencies/database.py:47

• The removal of the MANAGED_IDENTITY_CLIENT_ID check might affect the behavior if the managed identity is required but not explicitly checked.

credential = await get_credential_async()

api_app/api/dependencies/database.py:29

• Ensure that the new connection logic, especially the use of STATE_STORE_KEY and managed identity, is covered by tests.

if STATE_STORE_KEY:

[RonShakutai]

LGTM

[marrobi]

/test

[github-actions]

🤖 pr-bot 🤖

🏃 Running tests: https://github.com/microsoft/AzureTRE/actions/runs/13367437668 (with refid 19491064)

(in response to this comment from @marrobi)

[marrobi]

/test-force-approve

https://github.com/microsoft/AzureTRE/actions/runs/13367437668

[github-actions]

🤖 pr-bot 🤖

✅ Marking tests as complete (for commit 5bb2154)

(in response to this comment from @marrobi)