ado-sk-toolkit-extension/overview.md

SK Azure DevOps Toolkit

Azure DevOps extension with two pipeline tasks:

• AzureFederatedAuth@1 - requests OIDC token for an AzureRM service connection (workload identity federation) and sets:
  • ARM_OIDC_TOKEN (secret)
  • ARM_TENANT_ID
  • ARM_CLIENT_ID
  • GIT_ACCESS_TOKEN (secret, optional)
• CopyBlob@1 - copies a blob between Azure Storage accounts/containers using the selected AzureRM service connection.

Prerequisites

• AzureRM service connection configured for workload identity federation
• Pipeline access to System.AccessToken

Example

- task: AzureFederatedAuth@1
  inputs:
    serviceConnectionARM: 'my-arm-service-connection'
    setGitAccessToken: true

- task: CopyBlob@1
  inputs:
    serviceConnectionARM: 'my-arm-service-connection'
    srcStorageAccountName: 'srcaccount'
    dstStorageAccountName: 'dstaccount'
    srcContainerName: 'tfstate'
    dstContainerName: 'tfstate-backup'
    blobName: 'lz.tfstate'

Repository

https://gitea.koszewscy.waw.pl/koszewscy/ado-sk-toolkit-extension.git

Author

Slawomir Koszewski

License

MIT. See LICENSE.