Support AZURE_CREDENTIALS

[danielrbradley]

Hello!

• Vote on this issue by adding a 👍 reaction
• If you want to implement this feature, comment to let us know (we'll work with you on design, scheduling, etc.)

Issue details

Allow setting Azure credentials via a single environment variable. This simplify CI setup so only a single secret must be configured.

When authenticating with the GitHub Azure Login action, it details how to use the CLI to create a service principal secret which contains a JSON blob in the shape below. By also supporting this variable in our provider directly and reading the individual fields it would make integrations in GitHub more simple as it's only a single secret to configure.

{
    "clientId": "xxx",
    "clientSecret": "xxx",
    "subscriptionId": "xxx",
    "tenantId": "xxx"
}

Original Question

Is there a way to have Pulumi yml interact with Azure using Azure-Login?
It works now by specifically adding each property of Azure credentials (Tenant ID, Sub ID, App ID, Cleint Secret) but to save space and time I wonder if this would work with Azure Login (with one GitHub secret for AZURE_CREDENTIALS) instead?

Original suggestion source

[viveklak]

Dropping triage flag and adding Azure squad for prioritization.