Add azdo admin pat through variables

caf_solution/add-ons/azure_devops_v1/azdo.tf

@@ -1,11 +1,12 @@
 # The PAT token must be provisioned in a different deployment
 provider "azuredevops" {
   org_service_url       = var.azure_devops.url
-  personal_access_token = data.external.pat.result.value
+  personal_access_token = var.azdo_admin_pat == null ? data.external.pat[0].result.value : var.azdo_admin_pat
 }
 
 # To support cross subscrpition reference
 data "external" "pat" {
+  count = var.azdo_admin_pat == null ? 1 : 0
   program = [
     "bash", "-c",
     format(

caf_solution/add-ons/azure_devops_v1/variables.tf

@@ -28,80 +28,10 @@ variable "logged_user_objectId" {
 variable "logged_aad_app_objectId" {
   default = null
 }
-variable "tags" {
-  default = null
-}
-variable "app_service_environments" {
-  default = {}
-}
-variable "app_service_plans" {
-  default = {}
-}
-variable "app_services" {
-  default = {}
-}
-variable "diagnostics_definition" {
-  default = {}
-}
-variable "resource_groups" {
-  default = {}
-}
-variable "network_security_group_definition" {
-  default = {}
-}
-variable "vnets" {
-  default = {}
-}
-variable "azurerm_redis_caches" {
-  default = {}
-}
-variable "mssql_servers" {
-  default = {}
-}
-variable "storage_accounts" {
-  default = {}
-}
-variable "storage_account_blobs" {
-  default = {}
-}
-variable "azuread_groups" {
-  default = {}
-}
-variable "keyvaults" {
-  default = {}
-}
-variable "keyvault_access_policies" {
-  default = {}
-}
-variable "keyvault_access_policies_azuread_apps" {
-  default = {}
-}
-variable "virtual_machines" {
-  default = {}
-}
-variable "diagnostic_storage_accounts" {
-  default = {}
-}
-variable "virtual_machine_extension_scripts" {
-  default = {}
-}
 variable "azure_devops" {
   default = {}
 }
-variable "role_mapping" {
-  default = {}
-}
-variable "custom_role_definitions" {
-  default = {}
-}
-variable "azuread_apps" {
-  default = {}
-}
-variable "dynamic_keyvault_secrets" {
-  default = {}
-}
 
-### new
 variable "organization_agent_pools" {
   default = {}
 }
@@ -120,4 +50,9 @@ variable "variable_groups" {
 }
 variable "pipelines" {
   default = {}
-}
+}
+variable "azdo_admin_pat" {
+  type        = string
+  default     = null
+  description = "(Optional). Azure Devops PAT Token. If not provided with this value must be retrieved from the Keyvault secret."
+}