Document AZURE_TOKEN_CREDENTIALS breaking change in Aspire 13.0

[Copilot]

Aspire 13.0 now automatically sets AZURE_TOKEN_CREDENTIALS=managedidentity when deploying to Azure Container Apps or App Service, changing DefaultAzureCredential to use only ManagedIdentityCredential instead of the full credential chain.

Changes

• Breaking changes section (whats-new/aspire-13.mdx): Added "DefaultAzureCredential behavior in Azure deployments" documenting the environment variable, affected APIs (AddAzureContainerAppEnvironment, AddAzureAppServiceEnvironment), and migration paths for users needing the previous behavior

• Azure Container Apps docs (configure-container-apps.mdx): Added note callout explaining the automatic environment variable and linking to breaking change details

• Azure App Service docs (azure-app-service.mdx): Added note callout explaining the automatic environment variable and linking to breaking change details

Migration Example

Users requiring the previous credential chain behavior can remove the environment variable:

builder.AddProject<Projects.Frontend>("frontend")
    .PublishAsAzureContainerApp((infra, app) =>
    {
        var container = app.Template.Containers[0].Value!;
        var envVar = container.Env
            .Single(v => v.Value!.Name.Value == "AZURE_TOKEN_CREDENTIALS");
        container.Env.Remove(envVar);
    });

---

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.