The Azure DevOps Provider should be able to authenticate with a managed identity.

[LichtBlick-PENG-Daniel]

Hello!

Currently the Azure DevOps Provider only authenticates with a PAT provided by a setting or an environment variable.
See: https://github.com/pulumi/pulumi-azuredevops

• Vote on this issue by adding a 👍 reaction
• If you want to implement this feature, comment to let us know (we'll work with you on design, scheduling, etc.)

Issue details

Azure extended the API authentication to allow Entra ID identities. Currently the PAT has to be rotated regularly. With the new authentication the deployment credentials can be reused.

Affected area/feature

The new authentication can be implemented according to the links at the introduction page: https://devblogs.microsoft.com/devops/introducing-service-principal-and-managed-identity-support-on-azure-devops/

[iwahbe]

Hi @LichtBlick-PENG-Daniel. Thanks for opening an issue. This provider is "bridged" from a TF provider that Microsoft manages: https://github.com/microsoft/terraform-provider-azuredevops. We will add support for this as soon as they do. I believe the tracking issue they have is microsoft/terraform-provider-azuredevops#784, and it looks like there is already a PR in progress.

[algompluecker]

Hi,

I think that has been released with version 1.0.0 of the Terraform forvider for Azure DevOps:
microsoft/terraform-provider-azuredevops#747

Thus implementing #324 should close this.