Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Fetch OIDC token in the background process to avoid expiration issue #2669

Merged
merged 14 commits into from
Apr 12, 2024
Merged

Fetch OIDC token in the background process to avoid expiration issue #2669

Changes from all commits
Commits
Show all changes
14 commits
Select commit Hold shift + click to select a range
bbfcfaa
acquire access token before expiry
iamrk04 Apr 10, 2024
7ec78cd
temp change to trigger test
iamrk04 Apr 10, 2024
63c0631
add requested url
iamrk04 Apr 10, 2024
dbe68e9
print the current time as well
iamrk04 Apr 10, 2024
ce64c45
update when to get token
iamrk04 Apr 10, 2024
d61e403
Revert "temp change to trigger test"
iamrk04 Apr 10, 2024
1367d1f
prevent logging token
iamrk04 Apr 10, 2024
3336fe4
temp bump version to trigger test
iamrk04 Apr 10, 2024
a561676
Revert "prevent logging token"
iamrk04 Apr 10, 2024
24fcf3b
try switching to resource
iamrk04 Apr 10, 2024
2bf0310
try fetching OID token every 4 mins
iamrk04 Apr 11, 2024
fe49369
Revert "temp bump version to trigger test"
iamrk04 Apr 11, 2024
ac03f56
update the step name
iamrk04 Apr 12, 2024
ef01ebd
parse jwt to get expiry
iamrk04 Apr 12, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
21 changes: 20 additions & 1 deletion .github/workflows/assets-test.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -138,7 +138,26 @@ jobs:
tenant-id: ${{ secrets.AZURE_TENANT_ID }}
subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}
scripts-setup-dir: ${{ env.scripts_setup_dir }}


- name: Refresh login (background process)
run: |
while true; do
token_request=$ACTIONS_ID_TOKEN_REQUEST_TOKEN
token_uri=$ACTIONS_ID_TOKEN_REQUEST_URL
token=$(curl -H "Authorization: bearer $token_request" "${token_uri}&audience=api://AzureADTokenExchange" | jq .value -r)
elesel marked this conversation as resolved.
Show resolved Hide resolved

expiration_time=$(jq -R 'split(".") | .[1] | @base64d | fromjson | .exp' <<< $token)
expiration_time_formatted=$(date -u -d @$expiration_time +"%Y-%m-%dT%H:%M:%SZ")
current_time=$(date -u +"%Y-%m-%dT%H:%M:%SZ")
echo "Token expires at: $expiration_time_formatted, Current time: $current_time"

az login --service-principal -u ${{ secrets.AZURE_CLIENT_ID }} -t ${{ secrets.AZURE_TENANT_ID }} --federated-token $token --output none

sleep_timer=$((expiration_time - $(date +%s) - 30))
echo "Sleeping for $sleep_timer seconds"
sleep $sleep_timer
done &

- name: Test asset
run: python -u $scripts_test_dir/test_assets.py -i "${{ matrix.asset_config_path }}" -a $asset_config_filename -p $scripts_test_dir/requirements.txt -r $GITHUB_WORKSPACE/$pytest_reports

Expand Down