microsoft / microsoft/azure-pipelines-tasks

[enhancement]: AzureCLI task's Azure login with az cli should be optional

Open
#22,012 0 comments 0 reactions 0 assignees View on GitHub
Area: Release enhancement triage
Dominant language
TypeScript
Stars
3.7k
Forks
2.7k
Avg merge
2d 16h
Merged PRs (30d)
50

Description

### Task name

AzureCLI

### Describe your feature request here

AzureCLI@2 and AzureCLI@3 emits federation idToken to idToken environment variable when `addSpnToEnvironment` is true.

On our use case we use AzureCLI@3 with addSpnToEnvironment to get idToken and fetch our token(s) from Entra ID without using az cli at all.

To make task faster it should be possible to fully skip `az login` when using `addSpnToEnvironment`

Contributor guide

No contributing guide indexed for this repository

Research direction

Locate the AzureCLI@2 and AzureCLI@3 task implementations and trace where az login runs relative to addSpnToEnvironment and the idToken environment variable. Add an option to skip az login while still exposing the requested federation token, then verify that the existing login behavior remains unchanged when the option is not used.

Written by the indexing model from the issue text.

Assessment

Tech stack
azure, typescript
Domain
ci-cd, cloud
Issue type
Feature
Difficulty
3/5
Estimated time
1-2 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
68/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.