Update actions: Use token based authentication

[samruddhikhandale]

Switch az login authentication from Service Principal mechanism to token based mechanism.

Ref: https://learn.microsoft.com/en-us/azure/container-registry/container-registry-repository-scoped-permissions

[chrmarti]

LGTM!

Are we using the ACR to let MCR pull from it or something similar? Would GHCR work instead?

[samruddhikhandale]

Are we using the ACR to let MCR pull from it or something similar? Would GHCR work instead?

@chrmarti Currently, we haven't changed the tenant but only switched the auth mechanism. So it will continue similarly as before (we push to ACR which auto pushes to MCR)

Would GHCR work instead?

Won't we need to push our images to GHCR for that to work? 🤔 I don't think we'd do that as the images would break.

[chrmarti]

Would GHCR work instead?

Won't we need to push our images to GHCR for that to work? 🤔 I don't think we'd do that as the images would break.

I guess we can't use GHCR to push to MCR? That would avoid the need for the ACR credentials and the GitHub workflows can easily be given access to their repository's namespace in GHCR.

But this would be longer term. I agree with the approach taken here. 👍

[samruddhikhandale]

Would GHCR work instead?

Won't we need to push our images to GHCR for that to work? 🤔 I don't think we'd do that as the images would break.

I guess we can't use GHCR to push to MCR? That would avoid the need for the ACR credentials and the GitHub workflows can easily be given access to their repository's namespace in GHCR.

But this would be longer term. I agree with the approach taken here. 👍

Ah, got it. When I get to researching the moving of tenants task, I can see if this is even possible. Thanks for the info here.