chore: deploy to Azure with OIDC

LKKTGB · Nov 17, 2022 · 0e49e7b · 0e49e7b
1 parent 3165e92
commit 0e49e7b
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/.github/workflows/deploy.yaml b/.github/workflows/deploy.yaml
@@ -9,6 +9,9 @@ on:
     branches:
       - main
 
+permissions:
+  id-token: write
+
 jobs:
   build-and-deploy:
     runs-on: ubuntu-18.04
@@ -18,7 +21,9 @@ jobs:
       - name: Login
         uses: azure/login@v1
         with:
-          creds: ${{ secrets.AZURE_CREDENTIALS }}
+          client-id: ${{ secrets.AZURE_CLIENT_ID }}
+          tenant-id: ${{ secrets.AZURE_TENANT_ID }}
+          subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}
 
       - name: Deploy to prod for Tags
         if: contains(github.ref, 'refs/tags/')