Referenced landing zone updates.

library/src/main/java/bio/terra/landingzone/library/configuration/LandingZoneAzureConfiguration.java

@@ -37,7 +37,6 @@ public void setManagedAppTenantId(String managedAppTenantId) {
     this.managedAppTenantId = managedAppTenantId;
   }
 
-
   // AzureCloud or AzureUSGovernmentCloud
   public AzureEnvironment getAzureEnvironment() {
     switch (azureEnvironment) {

library/src/main/java/bio/terra/landingzone/library/landingzones/definition/factories/ReferencedLandingZoneStepsDefinitionProvider.java

@@ -55,6 +55,12 @@ public List<Pair<Step, RetryRule>> get(
         Pair.of(new ReferencedBatchStep(armManagers), RetryRules.cloud()),
         Pair.of(new ReferencedStorageStep(armManagers), RetryRules.cloud()),
         Pair.of(new ReferencedRelayNamespaceStep(armManagers), RetryRules.cloud()),
-        Pair.of(new ReferencedAppInsightsStep(armManagers), RetryRules.cloud()));
+        Pair.of(new ReferencedManagedIdentityStep(armManagers), RetryRules.cloud()),
+        Pair.of(new ReferencedPostgresqlServerStep(armManagers), RetryRules.cloud()),
+        Pair.of(new ReferencedAppInsightsStep(armManagers), RetryRules.cloud()),
+        Pair.of(
+            new CreateLandingZoneFederatedIdentityStep(
+                armManagers, new KubernetesClientProviderImpl()),
+            RetryRules.cloud()));
   }
 }

library/src/main/java/bio/terra/landingzone/stairway/flight/create/reference/resource/step/ArmResourceType.java

@@ -7,6 +7,8 @@ public enum ArmResourceType {
   POSTGRES_FLEXIBLE("Microsoft.DBforPostgreSQL/flexibleServers"),
   BATCH("Microsoft.Batch/batchAccounts"),
   APP_INSIGHTS("Microsoft.Insights/components"),
+  MANAGED_IDENTITY("Microsoft.ManagedIdentity/userAssignedIdentities"),
+  PRIVATE_DNS_ZONE("Microsoft.Network/privateDnsZones"),
   RELAY_NAMESPACE("Microsoft.Relay/namespaces");
 
   private final String value;

library/src/main/java/bio/terra/landingzone/stairway/flight/create/reference/resource/step/BaseReferencedResourceStep.java

@@ -96,10 +96,15 @@ private void tagReferencedResourceAndSetContext(FlightContext context) {
                             getArmResourceType(), getMRGName(context))));
 
     setLandingZoneResourceTags(context, resource);
+    updateWorkingMap(context, armManagers, resource.id());
 
     context.getWorkingMap().put(REFERENCED_RESOURCE_ID, resource.id());
   }
 
+  // Optional hook for subclasses
+  protected void updateWorkingMap(
+      FlightContext context, ArmManagers armManagers, String resourceId) {}
+
   private void setLandingZoneResourceTags(FlightContext context, GenericResource genericResource) {
 
     UUID lzId = getLandingZoneId(context);

library/src/main/java/bio/terra/landingzone/stairway/flight/create/reference/resource/step/ReferencedAksStep.java

@@ -1,6 +1,11 @@
 package bio.terra.landingzone.stairway.flight.create.reference.resource.step;
 
+import static bio.terra.landingzone.stairway.flight.create.resource.step.CreateAksStep.AKS_OIDC_ISSUER_URL;
+import static bio.terra.landingzone.stairway.flight.create.resource.step.CreateAksStep.AKS_RESOURCE_KEY;
+
 import bio.terra.landingzone.library.landingzones.definition.ArmManagers;
+import bio.terra.landingzone.service.landingzone.azure.model.LandingZoneResource;
+import bio.terra.stairway.FlightContext;
 
 public class ReferencedAksStep extends SharedReferencedResourceStep {
 
@@ -12,4 +17,26 @@ public ReferencedAksStep(ArmManagers armManagers) {
   protected ArmResourceType getArmResourceType() {
     return ArmResourceType.AKS;
   }
+
+  @Override
+  protected void updateWorkingMap(
+      FlightContext context, ArmManagers armManagers, String resourceId) {
+    var aks = armManagers.azureResourceManager().kubernetesClusters().getById(resourceId);
+
+    context
+        .getWorkingMap()
+        .put(AKS_OIDC_ISSUER_URL, aks.innerModel().oidcIssuerProfile().issuerUrl());
+
+    context
+        .getWorkingMap()
+        .put(
+            AKS_RESOURCE_KEY,
+            LandingZoneResource.builder()
+                .resourceId(aks.id())
+                .resourceType(aks.type())
+                .tags(aks.tags())
+                .region(aks.regionName())
+                .resourceName(aks.name())
+                .build());
+  }
 }

library/src/main/java/bio/terra/landingzone/stairway/flight/create/reference/resource/step/ReferencedManagedIdentityStep.java

@@ -0,0 +1,39 @@
+package bio.terra.landingzone.stairway.flight.create.reference.resource.step;
+
+import static bio.terra.landingzone.stairway.flight.create.resource.step.CreateLandingZoneIdentityStep.LANDING_ZONE_IDENTITY_CLIENT_ID;
+import static bio.terra.landingzone.stairway.flight.create.resource.step.CreateLandingZoneIdentityStep.LANDING_ZONE_IDENTITY_RESOURCE_KEY;
+
+import bio.terra.landingzone.library.landingzones.definition.ArmManagers;
+import bio.terra.landingzone.service.landingzone.azure.model.LandingZoneResource;
+import bio.terra.stairway.FlightContext;
+
+public class ReferencedManagedIdentityStep extends SharedReferencedResourceStep {
+  public ReferencedManagedIdentityStep(ArmManagers armManagers) {
+    super(armManagers);
+  }
+
+  @Override
+  protected ArmResourceType getArmResourceType() {
+    return ArmResourceType.MANAGED_IDENTITY;
+  }
+
+  @Override
+  protected void updateWorkingMap(
+      FlightContext context, ArmManagers armManagers, String resourceId) {
+    var uami = armManagers.azureResourceManager().identities().getById(resourceId);
+
+    context.getWorkingMap().put(LANDING_ZONE_IDENTITY_CLIENT_ID, uami.clientId());
+
+    context
+        .getWorkingMap()
+        .put(
+            LANDING_ZONE_IDENTITY_RESOURCE_KEY,
+            LandingZoneResource.builder()
+                .resourceId(uami.id())
+                .resourceType(uami.type())
+                .tags(uami.tags())
+                .region(uami.regionName())
+                .resourceName(uami.name())
+                .build());
+  }
+}

library/src/main/java/bio/terra/landingzone/stairway/flight/create/reference/resource/step/ReferencedPostgresqlServerStep.java

@@ -0,0 +1,14 @@
+package bio.terra.landingzone.stairway.flight.create.reference.resource.step;
+
+import bio.terra.landingzone.library.landingzones.definition.ArmManagers;
+
+public class ReferencedPostgresqlServerStep extends SharedReferencedResourceStep {
+  public ReferencedPostgresqlServerStep(ArmManagers armManagers) {
+    super(armManagers);
+  }
+
+  @Override
+  protected ArmResourceType getArmResourceType() {
+    return ArmResourceType.POSTGRES_FLEXIBLE;
+  }
+}

library/src/main/java/bio/terra/landingzone/stairway/flight/create/reference/resource/step/ReferencedPrivateDNSStep.java

@@ -0,0 +1,14 @@
+package bio.terra.landingzone.stairway.flight.create.reference.resource.step;
+
+import bio.terra.landingzone.library.landingzones.definition.ArmManagers;
+
+public class ReferencedPrivateDNSStep extends SharedReferencedResourceStep {
+  public ReferencedPrivateDNSStep(ArmManagers armManagers) {
+    super(armManagers);
+  }
+
+  @Override
+  protected ArmResourceType getArmResourceType() {
+    return ArmResourceType.PRIVATE_DNS_ZONE;
+  }
+}