CompositionalIT / farmer

Repeatable Azure deployments with ARM templates - made easy!
https://compositionalit.github.io/farmer
MIT License
525 stars 156 forks source link

Managed Identity: Support for federated identity credentials. #1099

Closed ninjarobot closed 6 months ago

ninjarobot commented 6 months ago

The changes in this PR are as follows:

I have read the contributing guidelines and have completed the following:

If I haven't completed any of the tasks above, I include the reasons why here:

Below is a minimal example configuration that includes the new features, which can be used to deploy to Azure:

arm {
    add_resources [
        userAssignedIdentity {
            name "cicd-msi"
            add_federated_identity_credentials [
                federatedIdentityCredential {
                    name "gh-actions-cred"
                    audience EntraIdAudience
                    issuer "https://token.actions.githubusercontent.com"
                    subject "repo:compositionalit/farmer:pull_request"
                }
            ]
        }
    ]
}