Deploy from GitHub Actions without Passwords | Watch Me Work

[@wazz6003]

She's back!

[@JulieNgTech]

Yep, I'm back and planning making multiple videos in the coming months :)

[@anthonydelagarde3990]

I like the style of the video and explaining the concepts. Do not change the format and approach!

[@JulieNgTech]

Thanks Anthony! That means a lot coming from a colleague 🤗

[@kevball21]

Informative video Julie. It is always nice to see those bonus errors and configuration when you go beyond a simple "Hello World repo". Hope there is a day we see Federated Identity as an option for Azure DevOps instances as well.

[@JulieNgTech]

Glad you love the "bonus" errors and config ❤️ I always worry it's too complex and would confuse people. It's good to hear some people get it and love it. Thank you! It seems may people are interested in federated identity for Azure DevOps. I don't have insight into the ADO roadmap beyond the public one here docs.microsoft.com/en-us/azure/devops/release-notes/features-timeline But it does list Managed Identities and Credential-less deployments for Q4 and "future" work. So it's definitely on the ADO product group radar. If ADO supports managed identities for ADO hosted agents, you'll get the same affect as Federated Identity for GitHub Actions. Does that make sense?

[@Manbearpiet]

@@JulieNgTech they have a managed identity setup, but it uses the managed Identity of the VM running the agents in a pool. Not yet at the level of GitHub 😢

[@JulieNgTech]

@@Manbearpiet Yes, unfortunately that is true today 😓 When the feature for using Managed Identities for Microsoft hosted Azure Pipelines agents is implemented, it should be much more closer to GitHub. If you need the feature now, have you considered migrating to GitHub Actions?

[@Manbearpiet]

Julie at it again with a banger of a video, nice!! Is this a new camera, it looks very crisp (good).

[@JulieNgTech]

Thanks for the feedback on the video. Was it understandable? I worry it was too unstructured and maybe hard to follow? Yep, the camera is relatively new - I think in the previous 2-3 videos. I upgraded from the Sony ZV-1 to the A6600. It's been waiting to be used :D

[@Manbearpiet]

@@JulieNgTech It was fine! You explained the topics, showed the issue, relevant theory and how to configure it. Some would prefer theory, configuration and then a practical issue, but your order of the video storyline works great for me. You did well 😁💪

[@michaelsimmons2497]

Nice video! Good job, I learned a lot and liked your format.

[@JulieNgTech]

Thanks Michael! I'm glad the format works for you, which means it's not too chaotic 🙈 😅

[@MaheshGaikwad21]

awesome video what i looking for in terms compliance thanks such outstanding video. ☕

[@JulieNgTech]

Thanks Mahesh! Glad it was helpful :)

[@kezhang7380]

woot woot video!

[@JulieNgTech]

I'm so touched you follow me Ke 🤗

[@graywolf2600]

Yes please! I actually need this right now.

[@JulieNgTech]

What exactly do you need right now? Do you mean the k8s RBAC stuff I mention at the end?

[@graywolf2600]

@@JulieNgTech I'll take it all :D. But the big one is Federated Identities. One of the friction points I face with my team and how our stuff is deployed.

[@JulieNgTech]

Yeah? In what way? Federated Identities was one of the features I was excited about and expected to find issues because it's in a preview - but I didn't encounter any. Worked surprisingly smoothly first go for me. What is the team grappling with? Is it a conceptual thing instead an implementation thing?

[@graywolf2600]

@@JulieNgTech They told they just can't seem to get it working I don't know why yet. If you can do a "at home" demo where you use a newly created Okta/Auth0 account and set it up that would be wonderful!

[@anthonydelagarde3990]

Thank you for posting this

[@JulieNgTech]

You're welcome :)

[@muhammadshameem5674]

It's been a month since I've done the same stuff in my environment.. any idea you guys bringing open Id connect authentication to Azure DevOps ? It's really nice to have

[@JulieNgTech]

Sorry, no idea. I don't have any insight to the Azure DevOps Roadmap beyond what's public here docs.microsoft.com/en-us/azure/devops/release-notes/features-timeline There are mentions of "credential free pipelines" and "managed identities", which leverage OAuth tokens under the hood. So maybe it's in the works for late this year. I know waiting is lame. So if you have the choice, see if you can just use GitHub. It'll always get features sooner because it's engineering team is orders of magnitude larger than ADO's…

[@gvoden]

Could you do this with Azure DevOps Git now so we can get rid of having to use PAT tokens :)

[@gvoden]

obviously for access to the repos only, I realize you still need credentials to deploy to Azure and AKS

[@JulieNgTech]

Hehe, I'm not sure how the GH to ADO roadmap looks like… but managed identity for Microsoft hosted agents is on the ADO roadmap. So if you used ADO pipelines and Azure Repos, you should be able to avoid PAT and secrets entirely :D One day… The roadmap is here docs.microsoft.com/en-us/azure/devops/release-notes/features-timeline