Migrate stress cluster to use workload identity #8278
Conversation
eng/common/scripts/stress-testing/stress-test-deployment-lib.ps1
Outdated
Show resolved
Hide resolved
benbp
added
the
Central-EngSys
|
The following pipelines have been queued for testing: |
tools/stress-cluster/chaos/examples/network-stress-example/Chart.lock
Outdated
Show resolved
Hide resolved
|
The following pipelines have been queued for testing: |
|
The following pipelines have been queued for testing: |
|
The following pipelines have been queued for testing: |
| command: ["sh", "-c"] | ||
| args: | ||
| - > | ||
| az login --federated-token "$(cat $AZURE_FEDERATED_TOKEN_FILE)" --service-principal -u $AZURE_CLIENT_ID -t $AZURE_TENANT_ID; |
There was a problem hiding this comment.
Is using a file the only real way to share this token?
There was a problem hiding this comment.
@weshaggard The file is the implementation method used by AKS for federated auth, so unfortunately yes.
Sync eng/common directory with azure-sdk-tools for PR Azure/azure-sdk-tools#8278 See [eng/common workflow](https://github.com/Azure/azure-sdk-tools/blob/main/eng/common/README.md#workflow) --------- Co-authored-by: Ben Broderick Phillips <[email protected]>
Notes TBD, a couple more edits need to be made (docs, test updates, and some more config deletion). Then I will publish out of draft.