Azure / Azure/notation-azure-kv
1.0.2 authentication issue in pipeline
- Dominant language
- C#
- Stars
- 17
- Forks
- 31
- PR merge metrics
- No merged PRs in 30d
Description
All, upgraded the plugin version to 1.0.2 and now get authentication issues being reported. Note 1.0.1 works fine.
I am using a token to login to acr to sign the image. Pipeline is a service principal and the step in ado pipeline is using powershell. I have tried setting the env variables for username and password as well as directly using the username and password options - both result in same result.
Code (snippet) -
```
$token_user = "00000000-0000-0000-0000-000000000000"
- pwsh: |
$key_id = $(az keyvault certificate show -n $(dev_cert) --vault-name $(cert_akv) --query 'kid' -o tsv)
$image_details = $(az acr repository show -n $(ingressacr) --image ${{ parameters.target_image_repository }}/${{ parameters.target_image_name }} | ConvertFrom-Json)
$image="$(image_repo)@"+$image_details.digest
$token = $(az acr login --name $(ingressacr) --expose-token --output tsv --query accessToken)
notation sign -u $(token_user) -p $token --signature-format cose --id $key_id --plugin azure-kv --plugin-config self_signed=true $image
```
What I now get is -
```
Error: describe-key command failed: ERROR: ManagedIdentityCredential authentication failed: Service request failed.
Status: 404 (Not Found)
Content:
no azure identity found for request clientID
Headers:
X-Content-Type-Options: REDACTED
Date: Mon, 12 Feb 2024 15:48:05 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 46
See the troubleshooting guide for more information. https://aka.ms/azsdk/net/identity/managedidentitycredential/troubleshoot
```
I assume this is related to the following update in 1.0.2 ?-
Updated Azure.identity to v1.10.4 (https://github.com/Azure/notation-azure-kv/pull/145 )
Putting it back to 1.0.1 of plugin and it works fine again.
Andy
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.