You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/features/08-azure-login.md
+18-4Lines changed: 18 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -5,12 +5,26 @@ developer and technical accounts should always be supported to run the IaC appli
5
5
perspective, to prevent technical account identifiers and secrets to be passed around by developers.
6
6
7
7
In the default setup, calling Login() will log the user in (if not already logged in) via normal prompts via azure CLI.
8
-
If viper variables for service principal info are set (check the code docs on `azure_login.New` or `NewWithParams` methods),
9
-
then the service principal login will be used (useful for CI systems).
8
+
If specific viper variables are set (check the code docs on `azure_login.New` or `NewWithParams` methods), the following login methods are also supported (useful for CI systems).
10
9
11
-
# usage
10
+
## Managed identity
11
+
You can provide a flag whether to use azure managed identities for the login.
12
+
### User assigned managed identity
13
+
Login via a user assigned managed identity can be done by additionally providing the client id.
14
+
### System assigned managed identity
15
+
The system assigned managed identity is used when the client id is ommitted
16
+
17
+
## Service Principal
18
+
By providing the client-id, client-secret, tenant-id you can login via a service principal as well. You also have to ommit the flag to use a managed identity.
19
+
20
+
## Usage
12
21
13
22
```go
14
23
login:= azure_login.New(hq.GetExecutor())
15
24
login.Login()
16
-
```
25
+
```
26
+
The login mechanisms which will be attempted in the following order:
0 commit comments