11-22-2021 08:24 AM
Hello community!
I would like to update a repo from within my Azure DevOps release pipeline.
In the pipeline I generate a token using a AAD Service Principal as recommended, and I setup the databricks api using that token.
When I pass the databricks repos update command, I receive an authenitcation error, which is expected and the service principal has not git configured on the workspace side.
My question is:
Can I configure the repos for the SPN programmatically?
Or, is there a way to provide an Azure Devops token when I make the databricks api call? I have tried passing a token by setting the git AZURE_DEVOPS_EXT_PAT but it doesn't seem to work.
Thank you in advance!
11-29-2021 11:43 PM
@Pantelis Maroudis I would like to comment on the Azure SP supportability feature - Updating a databricks repo using Repos API to authenticate using Azure Service Principal AAD is not supported yet. Active work is in progress, We can expect it by Jan 2022.
11-22-2021 08:59 AM
Hi @ pantelis_mare! My name is Kaniz, and I'm the technical moderator here. Great to meet you, and thanks for your question! Let's see if your peers in the community have an answer to your question first. Or else I will get back to you soon. Thanks.
11-29-2021 11:12 AM
Hi @Pantelis Maroudis ,
Let me reach out to the SME group to get help on your question.
11-29-2021 11:43 PM
@Pantelis Maroudis I would like to comment on the Azure SP supportability feature - Updating a databricks repo using Repos API to authenticate using Azure Service Principal AAD is not supported yet. Active work is in progress, We can expect it by Jan 2022.
12-09-2021 12:13 AM
Thank you @Srihasa Reddy Akepati . Looking forward to it 🙂
03-14-2022 09:13 AM
Hello, curious if any update on this? I too would like to use AAD token auth (as service principal) to call repos POST and PATCH from an Azure DevOps pipeline. Thanks!
03-14-2022 09:28 AM
Hello @Jake Panchyshyn
From my side I used a separate token generated from account for all steps in my pipeline that needed to use the repos api
03-14-2022 09:44 AM
Thanks, though, could you elaborate as to what kind of token you generate as what account or identity? Are you authenticating as a user (rather than service principal) or ??
04-08-2022 01:31 AM
Sorry for the late reply @Jake Panchyshyn .
Yes, I use a token generated from my account to interact with the repos API in my pipeline. For the rest of the operations (eg job creation) I use the token generated by the service principal
03-24-2022 01:52 AM
Is this supported now given that it is past the Jan 2022 date stated above? Because I have found that a SPN still can't authenticate via AAD.
03-25-2022 07:12 PM
Looking forward for this update
04-07-2022 10:06 PM
@Srihasa Reddy Akepati Any update on this?
04-08-2022 01:01 AM
@Ben Templeton Iam checking internally on the status of this feature. I will update the thread once i receive response.
04-08-2022 01:04 AM
I got this response from Databricks on this topic: "The AAD support depends on Microsoft implementing token exchange for ADO. This is underway but we don't have a timeline for it."
05-09-2022 01:53 PM
Has there been any updates here? Or any viable workaround?
Join a Regional User Group to connect with local Databricks users. Events will be happening in your city, and you won’t want to miss the chance to attend and share knowledge.
If there isn’t a group near you, start one and help create a community that brings people together.
Request a New Group