Guidance for Variable Groups in Azure DevOps

[bealesd]

Guidance for Variable Groups in Azure DevOps

The is no UKHO documentation regaring Azure DevOps Varaible Groups. This issue seeks to address this.

---

Contents

• Why should I care?
• Scope

---

Why should I care?

• How do you pass secrets to your pipeline?
  • Azure Key Vault Task
  • Variable Group linked to Azure Key Vault
  • Variable Group with secrets
  • Pipeline Variables
• How do you manage non secret variables in you pipeline?
  • Variable Groups
  • Pipeline Variables
  • Config files in your repo
  • Hardcoded variables in your pipeline

---

Scope

1. How to manage variables
   • Different methods for managing variables
   • When to use those methods
     • type restrictions of using Variable Groups and Pipeline Variables
     • pipelines accessing variables
   • Naming conventions for variables
2. How to manage secrets
   • Different methods for managing secrets
   • When to use those methods
     • What pipelines will be accessing the secrets
     • Access control
   • Naming conventions for secrets
3. Naming conventions for Variable Groups