Disable SPN based tests in kafka connector (Azure#46638)

* Remove role assignment with a non-existent principal and temporarily skip SPN-based auth tests.

* Update azure-cosmos-kafka-connect v2.5.1 release notes.

* Update azure-cosmos-kafka-connect v2.5.1 release notes.

* Specify tracked issue to re-enable SPN-based tests.

* Specify tracked issue to re-enable SPN-based tests.

Author: jeet1995

sdk/cosmos/azure-cosmos-kafka-connect/CHANGELOG.md

@@ -6,6 +6,12 @@
 
 #### Breaking Changes
 
+#### Bugs Fixed
+
+#### Other Changes
+
+### 2.5.1 (2025-08-22)
+
 #### Bugs Fixed
 * Fixed an issue where `CosmosSourceConnector` got stuck when restart - See [PR 46378](https://github.com/Azure/azure-sdk-for-java/pull/46378)
 * Fixed `BadRequestException` in `CosmosSourceConnector` when using `azure.cosmos.source.containers.includeAll=true` - See [PR 46389](https://github.com/Azure/azure-sdk-for-java/pull/46389)

sdk/cosmos/azure-cosmos-kafka-connect/src/test/java/com/azure/cosmos/kafka/connect/CosmosSinkConnectorITest.java

@@ -24,6 +24,7 @@
 import org.slf4j.Logger;
 import org.slf4j.LoggerFactory;
 import org.sourcelab.kafka.connect.apiclient.request.dto.ConnectorStatus;
+import org.testng.SkipException;
 import org.testng.annotations.AfterClass;
 import org.testng.annotations.BeforeClass;
 import org.testng.annotations.DataProvider;
@@ -92,6 +93,7 @@ public void sinkToSingleContainer(boolean useMasterKey) throws InterruptedExcept
             sinkConnectorConfig.put("azure.cosmos.account.tenantId", KafkaCosmosTestConfigurations.ACCOUNT_TENANT_ID);
             sinkConnectorConfig.put("azure.cosmos.auth.aad.clientId", KafkaCosmosTestConfigurations.ACCOUNT_AAD_CLIENT_ID);
             sinkConnectorConfig.put("azure.cosmos.auth.aad.clientSecret", KafkaCosmosTestConfigurations.ACCOUNT_AAD_CLIENT_SECRET);
+            throw new SkipException("ServicePrincipal-based auth has been disabled in the live tests for the time-being. See issue - https://github.com/Azure/azure-sdk-for-java/issues/46639");
         }
 
         // Create topic ahead of time
@@ -172,6 +174,7 @@ public void createConnectorWithWrongContainerName(boolean useMasterKey) {
             sinkConnectorConfig.put("azure.cosmos.account.tenantId", KafkaCosmosTestConfigurations.ACCOUNT_TENANT_ID);
             sinkConnectorConfig.put("azure.cosmos.auth.aad.clientId", KafkaCosmosTestConfigurations.ACCOUNT_AAD_CLIENT_ID);
             sinkConnectorConfig.put("azure.cosmos.auth.aad.clientSecret", KafkaCosmosTestConfigurations.ACCOUNT_AAD_CLIENT_SECRET);
+            throw new SkipException("ServicePrincipal-based auth has been disabled in the live tests for the time-being. See issue - https://github.com/Azure/azure-sdk-for-java/issues/46639");
         }
 
         // Create topic ahead of time
@@ -227,6 +230,7 @@ public void createConnectorWithWrongDatabaseName(boolean useMasterKey) {
             sinkConnectorConfig.put("azure.cosmos.account.tenantId", KafkaCosmosTestConfigurations.ACCOUNT_TENANT_ID);
             sinkConnectorConfig.put("azure.cosmos.auth.aad.clientId", KafkaCosmosTestConfigurations.ACCOUNT_AAD_CLIENT_ID);
             sinkConnectorConfig.put("azure.cosmos.auth.aad.clientSecret", KafkaCosmosTestConfigurations.ACCOUNT_AAD_CLIENT_SECRET);
+            throw new SkipException("ServicePrincipal-based auth has been disabled in the live tests for the time-being. See issue - https://github.com/Azure/azure-sdk-for-java/issues/46639");
         }
 
         // Create topic ahead of time

sdk/cosmos/azure-cosmos-kafka-connect/src/test/java/com/azure/cosmos/kafka/connect/CosmosSourceConnectorITest.java

@@ -26,6 +26,7 @@
 import org.slf4j.Logger;
 import org.slf4j.LoggerFactory;
 import org.sourcelab.kafka.connect.apiclient.request.dto.ConnectorStatus;
+import org.testng.SkipException;
 import org.testng.annotations.AfterClass;
 import org.testng.annotations.BeforeClass;
 import org.testng.annotations.DataProvider;
@@ -148,6 +149,7 @@ public void readFromSingleContainer(boolean useMasterKey, CosmosMetadataStorageT
             sourceConnectorConfig.put("azure.cosmos.account.tenantId", KafkaCosmosTestConfigurations.ACCOUNT_TENANT_ID);
             sourceConnectorConfig.put("azure.cosmos.auth.aad.clientId", KafkaCosmosTestConfigurations.ACCOUNT_AAD_CLIENT_ID);
             sourceConnectorConfig.put("azure.cosmos.auth.aad.clientSecret", KafkaCosmosTestConfigurations.ACCOUNT_AAD_CLIENT_SECRET);
+            throw new SkipException("ServicePrincipal-based auth has been disabled in the live tests for the time-being. See - https://github.com/Azure/azure-sdk-for-java/issues/46639");
         }
 
         if (metadataStorageType == CosmosMetadataStorageType.COSMOS) {
@@ -350,6 +352,7 @@ public void createConnectorWithWrongDatabaseName(boolean useMasterKey, CosmosMet
             sourceConnectorConfig.put("azure.cosmos.account.tenantId", KafkaCosmosTestConfigurations.ACCOUNT_TENANT_ID);
             sourceConnectorConfig.put("azure.cosmos.auth.aad.clientId", KafkaCosmosTestConfigurations.ACCOUNT_AAD_CLIENT_ID);
             sourceConnectorConfig.put("azure.cosmos.auth.aad.clientSecret", KafkaCosmosTestConfigurations.ACCOUNT_AAD_CLIENT_SECRET);
+            throw new SkipException("ServicePrincipal-based auth has been disabled in the live tests for the time-being. See - https://github.com/Azure/azure-sdk-for-java/issues/46639");
         }
 
         if (metadataStorageType == CosmosMetadataStorageType.COSMOS) {
@@ -419,6 +422,7 @@ public void connectorStart_metadata_cosmosStorageType(
             sourceConnectorConfig.put("azure.cosmos.account.tenantId", KafkaCosmosTestConfigurations.ACCOUNT_TENANT_ID);
             sourceConnectorConfig.put("azure.cosmos.auth.aad.clientId", KafkaCosmosTestConfigurations.ACCOUNT_AAD_CLIENT_ID);
             sourceConnectorConfig.put("azure.cosmos.auth.aad.clientSecret", KafkaCosmosTestConfigurations.ACCOUNT_AAD_CLIENT_SECRET);
+            throw new SkipException("ServicePrincipal-based auth has been disabled in the live tests for the time-being. See - https://github.com/Azure/azure-sdk-for-java/issues/46639");
         }
 
         // Create topic ahead of time
@@ -502,6 +506,7 @@ public void readFromAllContainer(boolean useMasterKey, CosmosMetadataStorageType
             sourceConnectorConfig.put("azure.cosmos.account.tenantId", KafkaCosmosTestConfigurations.ACCOUNT_TENANT_ID);
             sourceConnectorConfig.put("azure.cosmos.auth.aad.clientId", KafkaCosmosTestConfigurations.ACCOUNT_AAD_CLIENT_ID);
             sourceConnectorConfig.put("azure.cosmos.auth.aad.clientSecret", KafkaCosmosTestConfigurations.ACCOUNT_AAD_CLIENT_SECRET);
+            throw new SkipException("ServicePrincipal-based auth has been disabled in the live tests for the time-being. See - https://github.com/Azure/azure-sdk-for-java/issues/46639");
         }
 
         if (metadataStorageType == CosmosMetadataStorageType.COSMOS) {
@@ -534,7 +539,7 @@ public void readFromAllContainer(boolean useMasterKey, CosmosMetadataStorageType
             // Create items in all containers
             logger.info("Creating items in multiple containers");
             Map<String, List<String>> createdItemsByContainer = new HashMap<>();
-            
+
             // Create items in single partition container
             List<String> singleContainerItems = new ArrayList<>();
             for (int i = 0; i < 5; i++) {
@@ -581,7 +586,7 @@ public void readFromAllContainer(boolean useMasterKey, CosmosMetadataStorageType
 
             Map<String, List<ConsumerRecord<String, JsonNode>>> recordsByTopic = new HashMap<>();
             List<ConsumerRecord<String, JsonNode>> metadataRecords = new ArrayList<>();
-            
+
             // Calculate expected metadata records based on storage type and number of containers
             int expectedMetadataRecordsCount = metadataStorageType == CosmosMetadataStorageType.COSMOS ? 0 : 4; // 1 containers metadata + 3 feed ranges metadata
             int totalExpectedRecords = createdItemsByContainer.values().stream().mapToInt(List::size).sum();
@@ -597,11 +602,11 @@ public void readFromAllContainer(boolean useMasterKey, CosmosMetadataStorageType
                             recordsByTopic.computeIfAbsent(topic, k -> new ArrayList<>()).add(consumerRecord);
                         }
                     });
-                
+
                 int currentTotalRecords = recordsByTopic.values().stream()
                     .mapToInt(List::size)
                     .sum();
-                
+
                 return metadataRecords.size() >= expectedMetadataRecordsCount &&
                        currentTotalRecords >= totalExpectedRecords;
             });
@@ -618,7 +623,7 @@ public void readFromAllContainer(boolean useMasterKey, CosmosMetadataStorageType
                 assertThat(rootJsonNode.get(UnifiedMetadataSchemaConstants.ENTITY_TYPE_NAME)).isNotNull();
                 assertThat(rootJsonNode.get(UnifiedMetadataSchemaConstants.ENTITY_TYPE_NAME).textValue())
                     .isEqualTo(MetadataEntityTypes.CONTAINERS_METADATA_V1);
-                
+
                 JsonNode jsonValueNode = rootJsonNode.get(UnifiedMetadataSchemaConstants.JSON_VALUE_NAME);
                 assertThat(jsonValueNode).isNotNull();
                 String jsonValue = jsonValueNode.textValue();

sdk/cosmos/test-resources/kafka-testcontainer/test-resources.json

@@ -120,19 +120,6 @@
         "capabilities": [],
         "ipRules": []
       }
-    },
-    {
-      "type": "Microsoft.DocumentDB/databaseAccounts/sqlRoleAssignments",
-      "apiVersion": "[variables('apiVersion')]",
-      "name": "[concat(variables('accountName'), '/',guid(parameters('baseName')))]",
-      "dependsOn": [
-        "[resourceId('Microsoft.DocumentDB/databaseAccounts', variables('accountName'))]"
-      ],
-      "properties": {
-        "principalId": "[parameters('kafkaTestApplicationOid')]",
-        "roleDefinitionId": "[variables('azureCosmosRoleId')]",
-        "scope": "[resourceId('Microsoft.DocumentDB/databaseAccounts', variables('accountName'))]"
-      }
     }
   ],
   "outputs": {