feat: allow trusted.ci.jenkins.io to manipulate storage (#557)

This PR uses jenkins-infra/shared-tools#131 to
allow trusted.ci.jenkins.io to manipulate the File Share content of
updates.jenkins.io

Ref:
-
jenkins-infra/helpdesk#3414 (comment)

trusted.ci.jenkins.io.tf

@@ -105,6 +105,18 @@ module "trusted_ci_jenkins_io_azurevm_agents" {
   }
 }
 
+# Required to allow azcopy sync of updates.jenkins.io File Share with the permanent agent
+module "trusted_ci_jenkins_io_fileshare_serviceprincipal_writer" {
+  source = "./.shared-tools/terraform/modules/azure-jenkinsinfra-fileshare-serviceprincipal-writer"
+
+  service_fqdn               = "${module.trusted_ci_jenkins_io.service_fqdn}-fileshare_serviceprincipal_writer"
+  active_directory_owners    = [data.azuread_service_principal.terraform_production.id]
+  active_directory_url       = "https://github.com/jenkins-infra/azure"
+  service_principal_end_date = "2024-06-20T19:00:00Z"
+  file_share_id              = azurerm_storage_share.updates_jenkins_io.resource_manager_id
+  default_tags               = local.default_tags
+}
+
 ## Sponsorship subscription specific resources for controller
 resource "azurerm_resource_group" "trusted_ci_jenkins_io_controller_jenkins_sponsorship" {
   provider = azurerm.jenkins-sponsorship