Merge pull request Azure#3561 from Azure/ankusing/ARO-5514-cosmosdb-disable-local-auth

Disable cosmosdb local auth

Author: bennerv

pkg/deploy/assets/rp-development.json

@@ -70,6 +70,7 @@
                     "defaultConsistencyLevel": "Strong"
                 },
                 "databaseAccountOfferType": "Standard",
+                "disableLocalAuth": true,
                 "locations": [
                     {
                         "locationName": "[resourceGroup().location]"

pkg/deploy/assets/rp-production.json

@@ -673,6 +673,7 @@
                 },
                 "databaseAccountOfferType": "Standard",
                 "disableKeyBasedMetadataWriteAccess": true,
+                "disableLocalAuth": true,
                 "ipRules": "[if(parameters('disableCosmosDBFirewall'), createArray(), concat(parameters('ipRules'),createArray(createObject('ipAddressOrRange', '104.42.195.92'),createObject('ipAddressOrRange','40.76.54.131'),createObject('ipAddressOrRange','52.176.6.30'),createObject('ipAddressOrRange','52.169.50.45'),createObject('ipAddressOrRange','52.187.184.26'))))]",
                 "isVirtualNetworkFilterEnabled": "[not(parameters('disableCosmosDBFirewall'))]",
                 "locations": [

pkg/deploy/generator/resources_rp.go

@@ -884,6 +884,7 @@ func (g *generator) rpCosmosDB() []*arm.Resource {
 				},
 			},
 			MinimalTLSVersion: &minTLSVersion,
+			DisableLocalAuth:  to.BoolPtr(true), // Disable local authentication
 		},
 		Name:     to.StringPtr("[parameters('databaseAccountName')]"),
 		Type:     to.StringPtr("Microsoft.DocumentDB/databaseAccounts"),