azurerm_container_group - Support sku and (init_)container.*.security

[magodo]

Support the sku and (init_)container.*.security for the azurerm_container_group.

For sku, by default (on absent) it is set to Standard for the existing resources. This meets the most use cases, whilst in order to support the securityContext, it needs to be set to Confidential.

For security block, there are several properties defined in the API. Whilst, currently only the privilege_enabled is supported for all users, the others are behind a feature flag and are only experimental at the current API version (the latest one). Keeping the properties in the security block is a sane choice for the future support once those experimental properties are exposed to public.

Test

💤  TF_ACC=1 go test -v -timeout=20h -run='TestAccContainerGroup_securityContext' ./internal/services/containers
=== RUN   TestAccContainerGroup_securityContext
=== PAUSE TestAccContainerGroup_securityContext
=== CONT  TestAccContainerGroup_securityContext
--- PASS: TestAccContainerGroup_securityContext (279.61s)
PASS
ok      github.com/hashicorp/terraform-provider-azurerm/internal/services/containers    279.625s

[mbfrahry]

LGTM with a minor doc comment

[github-actions]

I'm going to lock this pull request because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active contributions.
If you have found a problem that seems related to this change, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.