How Do I Pass Secrets into the Azure DevOps YAML Pipeline with Deploying via azd?

[essenbee2]

I have a .NET Aspire application system and I am getting the following error when I run azd deploy in my Azure Devops YAML Pipeline:

Analyzing Aspire Application (this might take a moment...)
Downloading Bicep
  (✓) Done: Downloading Bicep

Deploying services (azd deploy)

Deploying service account-service
Retrieving subscriptions...
Deploying service account-service (Logging in to registry)
Deploying service account-service (Pushing container image)
Deploying service account-service (Updating container app)
  (x) Failed: Deploying service account-service

ERROR: failed deploying service 'account-service': failed executing template file: template: manifest template:27:19: executing "manifest template" at <securedParameter "CacheConnection">: error calling securedParameter: parameter CacheConnection not found

##[error]Script failed with exit code: 1
/usr/bin/az account clear

CacheConnectioin is a connection string pointing to my REDIS Cache. If I run azd deploy at the command line, all works fine, its only in the AZDO pipeline that I get this issue. I have tried setting up an AZDO variable called $(CacheConnection) and setting that like this:

    # Deploy using azd         
  - task: AzureCLI@2
    displayName: Deploy Service Layer Core
    inputs:
      azureSubscription: azconnection
      scriptType: bash
      scriptLocation: inlineScript
      keepAzSessionActive: true
      inlineScript: |
        cd $(Build.SourcesDirectory)/ServiceLayer.AppHost;
        ls -la;
        azd deploy --no-prompt;
    env:
      AZURE_SUBSCRIPTION_ID: $(AZURE_SUBSCRIPTION_ID)
      AZURE_ENV_NAME: $(AZURE_ENV_NAME)
      AZURE_LOCATION: $(AZURE_LOCATION)
      ConnectionStrings__CacheConnection: $(CacheConnection)

with no luck. I've tried several varations on this theme to no avail. Any help or guidance on this would be gratefully received.

The container images gets into my Container Registry by the way, but its not deployed to the Container App.

Thanks in advance,

Stu

[essenbee2]

Update:

This morning I tried following the suggestions made here: Azure/azure-dev#3597, which are essentially:

• create a pipeline variable called AZD_INITIAL_ENVIRONMENT_CONFIG
• copy the contents of the .azure/<env_name>/config.json file into it
• reference the variable in the YAML, like this:

  - task: AzureCLI@2
    displayName: Deploy Service Layer Core
    inputs:
      azureSubscription: azconnection
      scriptType: bash
      scriptLocation: inlineScript
      keepAzSessionActive: true
      inlineScript: |
        cd $(Build.SourcesDirectory)/ServiceLayer.AppHost;
        ls -la;
        azd deploy --no-prompt --environment $(AZURE_ENV_NAME);
    env:
      AZURE_SUBSCRIPTION_ID: $(AZURE_SUBSCRIPTION_ID)
      AZURE_ENV_NAME: $(AZURE_ENV_NAME)
      AZURE_LOCATION: $(AZURE_LOCATION)
      AZD_INITIAL_ENVIRONMENT_CONFIG: $(AZD_INITIAL_ENVIRONMENT_CONFIG)

However, I still get the same error when the pipeline runs azd deploy:

ERROR: failed deploying service 'account-service': failed executing template file: template: manifest template:27:19: executing "manifest template" at <securedParameter "CacheConnection">: error calling securedParameter: parameter CacheConnection not found I even echoed out the contents of the new environment variable, and it looks okay to me:

I also tried creating the AZDO pipeline using azd pipeline config --provider azdo. It created the AZD_INITIAL_ENVIRONMENT_CONFIG variable for me, but I still get the same error on the azd deploy ...