Support workload identity federation service connection (#147)

Isenr commented 6 months ago

Add support for Workload identity federation for Azure service connections.

This change is based on the implementation in the Azure CLI Task V2.

Added azure-pipelines-tasks-artifacts-common@2.230.0 so the getSystemAccessToken function could be used to get the system token to auth the request for the creation of the OIDC token.

Tested in my Azure DevOps organisation with a new Pulumi project created using the Azure C# template which successfully deployed in pipeline run 20240505.12.

Related to #147

Thank you for contributing! Before submitting your PR, can you please confirm that you have done the following?

[x] If you changed the values of the properties name, publisher, and galleryFlags in the vss-extension.json file, you have reverted them.
[x] If you changed the values of the properties id, name, author, you have reverted them.
[x] I have reverted any changes to the version number components in both vss-extension.json and task.json, OR I didn't change them.

thomas11 commented 6 months ago

/run-acceptance-tests

justinvp commented 6 months ago

/AzurePipelines run

azure-pipelines[bot] commented 6 months ago

Azure Pipelines successfully started running 1 pipeline(s).

pulumi / pulumi-az-pipelines-task

Support workload identity federation service connection (#147) #153