Secure vault
This tool is for synchronization of secrets from Azure DevOps Library.
!CAUTION This package is obsolete and only used by Mobi Mobile app. Same functionality was moved to Eli
Azure DevOps Library Structure
Project Library
https://dev.azure.com/`ORGNAIZATION`/`PROJECT`/_library?itemType=VariableGroups
replace with your organization and project.
Configuration
Configuration is based on file in .env/.az.yml
from the root of the project.
azure:
# replace with your project url
organization: https://dev.azure.com/Mobi-MobileApp/
# replace with your project name
project: MobileApp
stages:
# Mapping your development group to development stage
development: secrets-development
# Mapping your staging group to staging stage
staging: secrets-staging
# Mapping your production group to production stage
production: secrets-production
# You can add a custom stages
custom:
# Mapping your staging group to assembly stage
assembly: secrets-assembly
Instalation
dart pub global activate cli_azure_library --hosted-url=https://gitea.whitelabel.mobile.embedit.dev/api/packages/platform/pub/
You need access token for fetching from private pub repository.
eli
add token automatically
Add to project
if you don't have synchronization configures yet.
azl init --organization [ORGANIZATION] --project [PROJECT]
Developer command
allows user authenticate to account and create local variables.
azl developer
Conitinous integration
prerequisite: step in pipeline
...
- script: |
echo "$(System.AccessToken)" | az devops login --organization $(System.CollectionUri)
- script: azl ci --stage $(stage)
allows to get secrets for running in CI
azl ci --stage development
FAQ
Unable to login to Azure
- After installation of Az CLI check env variables, open new terminal or logout/login
- Double check if you have turned-off VPN connection
# try to hit az login without subscription
az login --allow-no-subscriptions
Unable to fetch data
double check if you have installed azure devops extension otherwise install az devops extension
# login to organization
az devops login --organization
run manually
# fetch data manually
az pipelines variable-group list --org [ORGANIZATION] --project [PROJECT]