Update M1 build to use OAuth (#2698)

* Update M1 build to use OAuth * Update build_m1.yml * Update build_m1.yml * Update build_m1.yml * Update build_m1.yml --------- Co-authored-by: Gauri Lamunion <[email protected]>
Azure · Jun 12, 2024 · d186328 · d186328
1 parent e526c26
commit d186328
Showing 1 changed file with 14 additions and 3 deletions.
diff --git a/.github/workflows/build_m1.yml b/.github/workflows/build_m1.yml
@@ -7,14 +7,18 @@ on:
   workflow_dispatch:
     inputs:
       m1_url:
-        description: 'URL with SAS to upload M1 build'
+        description: 'Target object in storage without SAS'
         required: true
         type: string
 
-jobs:
+permissions:
+  id-token: write
+  contents: read
 
+jobs:
   build:
     runs-on: macos-14
+    environment: Release
     steps:
       - uses: actions/checkout@v3
 
@@ -26,5 +30,12 @@ jobs:
       - name: Build
         run: CGO_ENABLED=1 go build -o azcopy_darwin_arm64
 
+      - name: Azure Login
+        uses: Azure/[email protected]
+        with:
+          client-id: ${{ secrets.AZURE_CLIENT_ID }}
+          tenant-id: ${{ secrets.AZURE_TENANT_ID }}
+          subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}
+
       - name: Upload to AzCopy to M1 container
-        run: ./azcopy_darwin_arm64 copy "azcopy_darwin_arm64" "${{ inputs.m1_url }}"
+        run: AZCOPY_AUTO_LOGIN_TYPE=AzCLI ./azcopy_darwin_arm64 copy "azcopy_darwin_arm64" "${{ inputs.m1_url }}"