Skip to content

Commit

Permalink
Upgrade to a version ESRP Release that supports federated auth (#29612)
Browse files Browse the repository at this point in the history
EsrpRelease@6 required a custom service connection that held an aad app
secret in its configuration. The latest version, EsrpRelease@7, uses a
standard ARM service connection, moving most of the configuration
settings (KeyVaultName, AuthCertName ...) from the custom connection
into the task itself.
  • Loading branch information
hallipr authored and maorleger committed Jun 11, 2024
1 parent 9a2afdf commit 183d301
Showing 1 changed file with 7 additions and 3 deletions.
10 changes: 7 additions & 3 deletions eng/pipelines/templates/steps/npm-release-task.yml
Original file line number Diff line number Diff line change
Expand Up @@ -8,11 +8,15 @@ parameters:

steps:
- template: /eng/common/pipelines/templates/steps/set-default-branch.yml
- ${{if eq(parameters.Registry, 'https://registry.npmjs.org/')}}:
- task: EsrpRelease@6
- ${{ if eq(parameters.Registry, 'https://registry.npmjs.org/') }}:
- task: EsrpRelease@7
inputs:
displayName: 'Publish ${{parameters.Artifact.name}} to ESRP'
ConnectedServiceName: 'ESRP Release Service'
ConnectedServiceName: 'Azure SDK Engineering System'
ClientId: '5f81938c-2544-4f1f-9251-dd9de5b8a81b'
KeyVaultName: 'AzureSDKEngKeyVault'
AuthCertName: 'azure-sdk-esrp-release-auth-certificate'
SignCertName: 'azure-sdk-esrp-release-sign-certificate'
Intent: 'PackageDistribution'
ContentType: 'npm'
FolderLocation: ${{parameters.PathToArtifacts}}
Expand Down

0 comments on commit 183d301

Please sign in to comment.