Sdaf Gh Oidc And Auth
Azure/sap-automation-gh-bootstrap/skills/sdaf-gh-oidc-and-auth
devopsOfficial
Official Provider SkillView repo
Action-loop skill for authenticating the SDAF GitHub Actions workflows to Azure. Two independent layers must both be right: (1) `azure/login` uses an OIDC federated credential and reads `AZURE_ENVIRONMENT` + `AZURE_AUDIENCE`; (2) Terraform and Ansible authenticate separately via either a managed identity (`USE_MSI=true`, `MSI_ID`) or a service principal with `ARM_CLIENT_SECRET`, and always read `ARM_ENVIRONMENT`. This skill resolves `AADSTS7002381` (enterprise-claim tenant policy), `AADSTS700021
Files2 files
SKILL.md131 lines
Loading editor…
Install
RecommendedOne command — your agent picks it up automatically.
Select an AI agent above to see the install command.
or
Manual Install
More stepsDownload the archive and add the files to your project manually.
Skill details
Versionv1.0.0
AuthorAzure
Categorydevops
Skill IDAzure/sap-automation-gh-bootstrap/skills/sdaf-gh-oidc-and-auth
Files2 files
Related skills
Sdaf Gh BootstrapAction-loop skill for bootstrapping the SDAF GitHub Actions surface: create
the configuration repo from `Azure/sap-automation-gh-bootstrap`, set the
pre-workflow-`00` repository variables (`ARM_ENVIRONMENT`,
`AZURE_ENVIRONMENT`, `AZURE_AUDIENCE`), run the SDAF setup utility from
`Azure/sap-automation` (which creates the GitHub App, repo vars/secrets,
Azure identity, and the first control-plane Environment), then dispatch
workflow `00-create-environment.yml` to generate and commit
`WORKSPACES/DEPSdaf Gh Workflow SequenceContext-primer for the SDAF GitHub Actions workflow catalogue: the ordered
sequence `00`-`12`, each workflow's `workflow_dispatch` inputs, which
workflows commit generated tfvars to `main` (`00`, `02`, `04`) and which
create GitHub Environments (`00` control-plane, `02` workload-zone —
`04` deliberately does not), which workflows run on `self-hosted` runners
(`01` deploy-control-plane and later, plus `06`, `06.5`, `10`, `12`),
which support genuine plan-only via `test` (per current docs), and thAsim Parser La DeployerGets the ASIM parser of interest and deploys it to the customer's LA workspace.Az Cli Command RunnerRuns Azure CLI commands in a terminal. Use this skill when you need to execute az CLI commands such as checking authentication, querying Log Analytics, managing deployments, or inspecting Azure resources.Dpg MigrationMigration logic for Azure SDK for .NET data-plane libraries migrating from AutoRest/Swagger to TypeSpec-based generation. Uses MCP tools from the generator-agent server for automated deterministic fixes.Openspec Archive ChangeArchive a completed change in the experimental workflow. Use when the user wants to finalize and archive a change after implementation is complete.