Authenticate Python script task using service connection from Azure pipeline

Question

I need to execute a Python script as part of my CICD process that will do some executions on existing files in a data lake gen 2/blob storage.

I don't know how to authenticate the script so that it can perform the actions needed.

Python script task

 task: PythonScript@0
  inputs:
    scriptSource: 'filePath'
    scriptPath: ./script.py
    #arguments: # Optional
    #pythonInterpreter: # Optional
    #workingDirectory: # Optional
    #failOnStderr: false # Optional

An Azure Powershell task has an input option to put in a azureSubscription. Maybe I can pass in an argument?

Kevin Lu · Accepted Answer · 2022-08-09 02:03:25Z

2

Based on your requirement, you need to use the Authentication information in the Service Connection.

To meet your requirement, you can choose to use Azure CLI task and enable the option: addSpnToEnvironment: true.

Refer to this doc: Azure CLI task

Adds service principal ID and key of the Azure endpoint you chose to the script's execution environment.

Here is an example:

steps:
- task: AzureCLI@2
  displayName: 'Azure CLI '
  inputs:
    azureSubscription: xx
    scriptType: bash
    scriptLocation: inlineScript
    inlineScript: |
     echo "##vso[task.setvariable variable=ARM_CLIENT_ID]$servicePrincipalId" 
     
     echo "##vso[task.setvariable variable=ARM_CLIENT_SECRET]$servicePrincipalKey"
    
     echo "##vso[task.setvariable variable=ARM_TENANT_ID]$tenantId"
    addSpnToEnvironment: true

In this case, you can set the Authentication information as pipeline variable. Then you can use the pipeline variable in next tasks.

$(ARM_CLIENT_ID)

$(ARM_CLIENT_SECRET)

$(ARM_TENANT_ID)

answered Aug 9, 2022 at 2:03

Kevin Lu

36.9k4 gold badges36 silver badges50 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

sl3dg3 Over a year ago

Please note that this works only if your service connection is connected to a service principal, providing a key. If connected to a managed identity, no key will be provided.

goulashsoup Feb 10 at 10:58

With this answer I still have no idea how can actually get service account dependent scripts to run, e.g. having a kubernetes service account, I have no idea what todo with these variables to get kubectl to work....

Collectives™ on Stack Overflow

Authenticate Python script task using service connection from Azure pipeline

1 Answer 1

2 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

2 Comments

Your Answer

Sign up or log in

Post as a guest

Related