Handcrafted, AI-free blog posts about DevOps, DevSecOps, application security, web development, Azure and similar topics
This blog post demonstrates how to create a YAML pipeline in Azure DevOps for generating release notes for each production release, listing solved work items. The process involves preconditions, the Generate Release Notes (Crossplatform) extension, and the implementation of the release notes YAML pipeline. The post also covers importing the pipeline in Azure DevOps and local testing.
Since fall 2023, Workload Identity Federation for Azure service connections has been available, allowing short-lived credential-free authentication to Azure. This post explains its benefits, its limitations, and provides an example of creating service connections using terraform.
Azure DevOps allows proposing changes directly in pull requests, simplifying the process of suggesting small alterations like translations or formatting. Users can mark the part needing a change, click the Comment icon, select the Insert a suggestion icon, and edit the content. The pull request author can then accept and apply the suggested change directly in Azure DevOps.
The blog post explains the preferred setup for infrastructure deployments using Infrastructure as Code (IaC) with Terraform and Azure DevOps YAML pipelines. The author discusses the organization of service connections and security settings, and provides an in-depth look at the pipeline structure and tasks within each stage. The text also mentions an important update regarding Azure Pipelines Terraform tasks and offers a practical approach on pipeline re-runs after local fixes.
This post is about the integration of SonarCloud analysis in Azure DevOps YAML pipelines starting from a basic scenario that analyzes a repository containing a .NET Core 7 solution and ending up with a more complex scenario that analyzes a repository that additionally contains a React application and Terraform files.
A few months ago, a colleague at work approached me and asked me about the easiest way to create release notes for a past release in Azure DevOps. Note that the CI/CD process in this case is implemented using Azure DevOps YAML pipelines. There are of course different approaches to solve this challenge. Some of... Continue Reading →
Today I was confronted with an unexpected behavior of Azure DevOps Services. An external user got invited to a private Azure DevOps project by following the steps below. Open a private Azure DevOps project Click the Invite button in the upper right corner Enter email address of external user Select the team the user should... Continue Reading →
Usually an Azure DevOps Services organization contains multiple projects. Often for some of these projects YAML pipelines are set up, which are triggered on every pull request and commit to the develop and main branches. Let's assume that in one or more of these Azure DevOps projects a whole bunch of YAML pipelines is set... Continue Reading →
When creating a Azure DevOps service connection of type Azure Resource Manager that uses authentication method service principal (automatic), a service principal and a app registration get created in the corresponding Azure tenant. Furthermore a client secret gets added to the app registration for the service connection. Unfortunately the client secret expires after two years... Continue Reading →
