-
Notifications
You must be signed in to change notification settings - Fork 861
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Use common OIDC token env vars in post scripts #23549
Conversation
#23548 will green azidentity CI |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM, Please get @chlowell to review before checking in
ec65353
to
6aab9c6
Compare
6aab9c6
to
ab74410
Compare
/azp run go - azidentity |
Azure Pipelines successfully started running 1 pipeline(s). |
Any plans to do this cross-language? I am definitely interested in this for JS - keyvault and identity would both benefit 👍 |
/azp run go - azidentity |
Yep! Azure/azure-sdk-for-js#31335 I didn't see any oidc usage for keyvault though, is that incoming? |
Azure Pipelines successfully started running 1 pipeline(s). |
/azp run go - azidentity - weekly |
Azure Pipelines successfully started running 1 pipeline(s). |
/azp run go - azcontainerregistry - weekly |
Azure Pipelines successfully started running 1 pipeline(s). |
@chlowell I'm not sure why yet, but the container registry tests do not seem to be picking up the right audience when running in sovereign cloud contexts (https://dev.azure.com/azure-sdk/internal/_build/results?buildId=4210366&view=logs&j=6617e070-ecf6-5e84-d74f-69d70ef2cee7&t=df873bcd-9288-585c-3c23-e81f89f38ac8&l=1004). It predates these changes but may have coincided with our federated auth move. |
There's a bug. It might predate federated auth or I might have added it 😇 Try chlowell@cf51e8b |
/azp run go - azcontainerregistry - weekly |
Azure Pipelines successfully started running 1 pipeline(s). |
/azp run go - azcontainerregistry - weekly |
Azure Pipelines successfully started running 1 pipeline(s). |
cda73de
to
b66be01
Compare
/azp run go - azcontainerregistry - weekly |
Azure Pipelines successfully started running 1 pipeline(s). |
/azp run go - azcontainerregistry - weekly |
Azure Pipelines successfully started running 1 pipeline(s). |
/azp run go - azidentity - weekly |
Azure Pipelines successfully started running 1 pipeline(s). |
/check-enforcer evaluate |
This should fix the weekly pipelines for azidentity and azcontainerregistry (this one still fails, but it's not engsys' fault anymore).
Relies on Azure/azure-sdk-tools#9099 going in first.