OIDC auth

xingyang-li · Mar 26, 2024 · d8849ca · d8849ca
1 parent 036cf76
commit d8849ca
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 98 deletions.
diff --git a/.github/workflows/deploy_resources.yml b/.github/workflows/deploy_resources.yml
@@ -18,6 +18,10 @@ on:
     branches: [ "main" ]
   workflow_dispatch:
 
+permissions:
+      id-token: write
+      contents: read
+
 jobs:
 
   get-locations:
@@ -127,8 +131,9 @@ jobs:
     - name: Azure Login
       uses: azure/login@v1
       with:
-        creds: ${{ secrets.AZURE_CREDENTIALS }}
-        enable-AzPSSession: true
+        client-id: ${{ secrets.AZURE_CLIENT_ID}}
+        tenant-id: ${{ secrets.AZURE_TENANT_ID}}
+        subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID}}
 
     - name: Checkout
       uses: actions/checkout@v1

diff --git a/templates/stf-prod.json b/templates/stf-prod.json
@@ -1165,30 +1165,6 @@
         }
       ]
     },
-    {
-      "type": "Microsoft.Web/sites/basicPublishingCredentialsPolicies",
-      "apiVersion": "2023-01-01",
-      "name": "[concat(variables('windowsAppName'), '/scm')]",
-      "location": "[parameters('location')]",
-      "dependsOn": [
-        "[resourceId('Microsoft.Web/sites', variables('windowsAppName'))]"
-      ],
-      "properties": {
-        "allow": true
-      }
-    },
-    {
-      "type": "Microsoft.Web/sites/basicPublishingCredentialsPolicies",
-      "apiVersion": "2023-01-01",
-      "name": "[concat(variables('windowsAppName'), '/ftp')]",
-      "location": "[parameters('location')]",
-      "dependsOn": [
-        "[resourceId('Microsoft.Web/sites', variables('windowsAppName'))]"
-      ],
-      "properties": {
-        "allow": true
-      }
-    },
     {
       "type": "Microsoft.Web/sites",
       "apiVersion": "2021-03-01",
@@ -1291,30 +1267,6 @@
         }
       ]
     },
-    {
-      "type": "Microsoft.Web/sites/basicPublishingCredentialsPolicies",
-      "apiVersion": "2023-01-01",
-      "name": "[concat(variables('linuxAppName'), '/scm')]",
-      "location": "[parameters('location')]",
-      "dependsOn": [
-        "[resourceId('Microsoft.Web/sites', variables('linuxAppName'))]"
-      ],
-      "properties": {
-        "allow": true
-      }
-    },
-    {
-      "type": "Microsoft.Web/sites/basicPublishingCredentialsPolicies",
-      "apiVersion": "2023-01-01",
-      "name": "[concat(variables('linuxAppName'), '/ftp')]",
-      "location": "[parameters('location')]",
-      "dependsOn": [
-        "[resourceId('Microsoft.Web/sites', variables('linuxAppName'))]"
-      ],
-      "properties": {
-        "allow": true
-      }
-    },
     {
       "type": "Microsoft.Web/sites",
       "apiVersion": "2021-03-01",

diff --git a/templates/stf-test.json b/templates/stf-test.json
@@ -1165,30 +1165,6 @@
         }
       ]
     },
-    {
-      "type": "Microsoft.Web/sites/basicPublishingCredentialsPolicies",
-      "apiVersion": "2023-01-01",
-      "name": "[concat(variables('windowsAppName'), '/scm')]",
-      "location": "[parameters('location')]",
-      "dependsOn": [
-        "[resourceId('Microsoft.Web/sites', variables('windowsAppName'))]"
-      ],
-      "properties": {
-        "allow": true
-      }
-    },
-    {
-      "type": "Microsoft.Web/sites/basicPublishingCredentialsPolicies",
-      "apiVersion": "2023-01-01",
-      "name": "[concat(variables('windowsAppName'), '/ftp')]",
-      "location": "[parameters('location')]",
-      "dependsOn": [
-        "[resourceId('Microsoft.Web/sites', variables('windowsAppName'))]"
-      ],
-      "properties": {
-        "allow": true
-      }
-    },
     {
       "type": "Microsoft.Web/sites",
       "apiVersion": "2021-03-01",
@@ -1291,30 +1267,6 @@
         }
       ]
     },
-    {
-      "type": "Microsoft.Web/sites/basicPublishingCredentialsPolicies",
-      "apiVersion": "2023-01-01",
-      "name": "[concat(variables('linuxAppName'), '/scm')]",
-      "location": "[parameters('location')]",
-      "dependsOn": [
-        "[resourceId('Microsoft.Web/sites', variables('linuxAppName'))]"
-      ],
-      "properties": {
-        "allow": true
-      }
-    },
-    {
-      "type": "Microsoft.Web/sites/basicPublishingCredentialsPolicies",
-      "apiVersion": "2023-01-01",
-      "name": "[concat(variables('linuxAppName'), '/ftp')]",
-      "location": "[parameters('location')]",
-      "dependsOn": [
-        "[resourceId('Microsoft.Web/sites', variables('linuxAppName'))]"
-      ],
-      "properties": {
-        "allow": true
-      }
-    },
     {
       "type": "Microsoft.Web/sites",
       "apiVersion": "2021-03-01",