Deploy from GitHub Actions without Passwords | Watch Me Work
Watch me fix a broken GitHub Actions pipeline where I misconfigured federated identity so that I can deploy to Azure without any passwords. Learn conceptually how that works using OpenID Connect (OIDC) and OAuth standards. At the end of the video the login works as expected. The next error is related to me being a security nut and using principle of least privilege (PILP) and Role Based Access Control (RBAC) for shared Kubernetes clusters.
If you're interested in the RBAC and Kubernetes video, let me know and subscribe to the channel.
====== Contents ======
00:00 Intro
01:28 GitHub Actions Error Message
01:51 Whiteboard - Federated Identity Concept
03:52 YAML & Fix the Bug
04:58 Configure Credential in Azure AD
08:15 Re-run failed jobs
09:52 Explanation Subject Assertion
10:34 Explanation RBAC Error
====== Documentation ======
AZURE DOCS
Configure an app to trust a GitHub repo (preview)
https://docs.microsoft.com/en-us/azur...
GITHUB DOCS
Configuring OpenID Connect in Azure
https://docs.github.com/en/actions/de...
About security hardening with OpenID Connect
https://docs.github.com/en/actions/de...
