Sdaf Gh Oidc And Auth
Azure/sap-automation-gh-bootstrap/skills/sdaf-gh-oidc-and-auth
devopsResmi
Resmi Sağlayıcı Skill'iView repo
Action-loop skill for authenticating the SDAF GitHub Actions workflows to Azure. Two independent layers must both be right: (1) `azure/login` uses an OIDC federated credential and reads `AZURE_ENVIRONMENT` + `AZURE_AUDIENCE`; (2) Terraform and Ansible authenticate separately via either a managed identity (`USE_MSI=true`, `MSI_ID`) or a service principal with `ARM_CLIENT_SECRET`, and always read `ARM_ENVIRONMENT`. This skill resolves `AADSTS7002381` (enterprise-claim tenant policy), `AADSTS700021
Dosyalar2 dosya
SKILL.md131 satır
Loading editor…
Kurulum
ÖnerilenTek komut — ajanınız otomatik olarak devreye alır.
Kurulum komutunu görmek için yukarıdan bir AI aracı seçin.
veya
Manuel Kurulum
Daha fazla adımArşivi indirin ve dosyaları projenize manuel olarak ekleyin.
Skill detayları
Versiyonv1.0.0
YazarAzure
Kategoridevops
Skill IDAzure/sap-automation-gh-bootstrap/skills/sdaf-gh-oidc-and-auth
Dosyalar2 dosya
İlgili skill'ler
Sdaf Gh BootstrapAction-loop skill for bootstrapping the SDAF GitHub Actions surface: create
the configuration repo from `Azure/sap-automation-gh-bootstrap`, set the
pre-workflow-`00` repository variables (`ARM_ENVIRONMENT`,
`AZURE_ENVIRONMENT`, `AZURE_AUDIENCE`), run the SDAF setup utility from
`Azure/sap-automation` (which creates the GitHub App, repo vars/secrets,
Azure identity, and the first control-plane Environment), then dispatch
workflow `00-create-environment.yml` to generate and commit
`WORKSPACES/DEPSdaf Gh Workflow SequenceContext-primer for the SDAF GitHub Actions workflow catalogue: the ordered
sequence `00`-`12`, each workflow's `workflow_dispatch` inputs, which
workflows commit generated tfvars to `main` (`00`, `02`, `04`) and which
create GitHub Environments (`00` control-plane, `02` workload-zone —
`04` deliberately does not), which workflows run on `self-hosted` runners
(`01` deploy-control-plane and later, plus `06`, `06.5`, `10`, `12`),
which support genuine plan-only via `test` (per current docs), and thAsim Parser La DeployerGets the ASIM parser of interest and deploys it to the customer's LA workspace.Az Cli Command RunnerRuns Azure CLI commands in a terminal. Use this skill when you need to execute az CLI commands such as checking authentication, querying Log Analytics, managing deployments, or inspecting Azure resources.Dpg MigrationMigration logic for Azure SDK for .NET data-plane libraries migrating from AutoRest/Swagger to TypeSpec-based generation. Uses MCP tools from the generator-agent server for automated deterministic fixes.Openspec Archive ChangeArchive a completed change in the experimental workflow. Use when the user wants to finalize and archive a change after implementation is complete.