Azure / AKS

Azure Kubernetes Service
1.92k stars 284 forks source link

[Feature] (GitOps) Support for authenticating as service principal when pulling configuration from an Azure Devops Repo #4230

Open Carsondraper opened 3 weeks ago

Carsondraper commented 3 weeks ago

Is your feature request related to a problem? Please describe. Yes, currently GitOps does not support using service principals when pulling from Azure repos. For orgs that enforce a short PAT lifetime (like 7 days), it is very cumbersome to re authenticate each gitops configuration with a new PAT token every week.

Describe the solution you'd like There should be an option to use a service principal when authenticating to Azure Repos. Both Client Certificate and secret should be accepted.

Describe alternatives you've considered I've considered using an Azure Pipeline to push changes to an Azure Blob. Then configuring the source in Gitops to be an Azure Blob.

Carsondraper commented 3 weeks ago

Related to Integrate FluxCD extension in AKS with Azure DevOps without using PATs