litellm - 💡(How to fix) Fix Discontinuing Azure CI Access [6 comments, 2 participants]

Fix Plan

To address the issue of discounting support/access to the company's Azure account for CI/CD testing, we will implement Azure Active Directory (AAD) service principals for CI/CD pipelines.

Steps

• Create a new AAD service principal:
  • Go to Azure Portal > Azure Active Directory > App registrations > New registration
  • Fill in the required information and create the app registration
• Create a new client secret:
  • Go to Azure Portal > Azure Active Directory > App registrations > Your app registration > Certificates & secrets > New client secret
  • Add a description and create the client secret
• Update CI/CD pipeline to use the service principal:
  • Install the Azure Login task in your CI/CD pipeline
  • Use the service principal credentials to login to Azure

Example Code

# Azure DevOps pipeline example
steps:
- task: AzureLogin@1
  displayName: 'Azure Login'
  inputs:
    azureSubscription: 'Your Azure Subscription'
    azureResourceGroupName: 'Your Azure Resource Group'
    servicePrincipalId: 'Your Service Principal Id'
    servicePrincipalKey: 'Your Service Principal Key'
    tenantId: 'Your Tenant Id'

Verification

• Verify that the CI/CD pipeline can successfully authenticate to Azure using the service principal credentials.
• Check the pipeline logs for any authentication errors.

Extra Tips

• Make sure to store the service principal credentials securely using a secrets manager like Azure Key Vault.
• Use the principle of least privilege when assigning permissions to the service principal.