PoC: Federated SPN credentials (#540)

microsoft · May 13, 2024 · a3bdfea · a3bdfea
1 parent 9bcbfe9
commit a3bdfea
Show file tree

Hide file tree

Showing 33 changed files with 27,792 additions and 21,646 deletions.
diff --git a/.github/workflows/rolling-instance-actions.yml b/.github/workflows/rolling-instance-actions.yml
@@ -12,6 +12,9 @@ on:
   push:
     branches: [ main ]
 
+permissions:
+  id-token: write # OIDC token for Workload Identity Federation
+
 jobs:
   instance-actions:
     runs-on: ${{ matrix.os }}
@@ -72,6 +75,13 @@ jobs:
         client-secret: ${{ secrets.CLIENT_SECRET_PPDEVTOOLS }}
         tenant-id: ${{ env.WF_TENANT_ID }}
 
+    - name: Test who-am-i action with appId + Workload Identity Federation
+      uses: ./who-am-i
+      with:
+        environment-url: ${{ steps.create-source-environment.outputs.environment-url }}
+        app-id: ${{ env.WF_APPID }}
+        tenant-id: ${{ env.WF_TENANT_ID }}
+
     - name: Test who-am-i action with username/password
       uses: ./who-am-i
       with:

diff --git a/dist/actions/add-solution-component/index.js b/dist/actions/add-solution-component/index.js
diff --git a/dist/actions/assign-group/index.js b/dist/actions/assign-group/index.js
diff --git a/dist/actions/assign-user/index.js b/dist/actions/assign-user/index.js
diff --git a/dist/actions/backup-environment/index.js b/dist/actions/backup-environment/index.js