fix(ci): Add workaround to circumvent azure-cli's lack of support for ID token refresh (#3328)

* fix: Eagerly request token scopes

* chore: Regenerate workflows to pick up token caching change

Author: kdestin

.github/workflows/cli-assets-component-pipeline.yml

@@ -45,6 +45,15 @@ jobs:
           bash setup.sh
       working-directory: cli
       continue-on-error: true
+    - name: Eagerly cache access tokens for required scopes
+      run: |
+          # Workaround for azure-cli's lack of support for ID token refresh
+          # Taken from: https://github.com/Azure/login/issues/372#issuecomment-2056289617
+
+          # Management
+          az account get-access-token --scope https://management.azure.com/.default --output none
+          # ML
+          az account get-access-token --scope https://ml.azure.com/.default --output none
     - name: validate readme
       run: |
           python check-readme.py "${{ github.workspace }}/cli/assets/component"

.github/workflows/cli-assets-component-train.yml

@@ -45,6 +45,15 @@ jobs:
           bash setup.sh
       working-directory: cli
       continue-on-error: true
+    - name: Eagerly cache access tokens for required scopes
+      run: |
+          # Workaround for azure-cli's lack of support for ID token refresh
+          # Taken from: https://github.com/Azure/login/issues/372#issuecomment-2056289617
+
+          # Management
+          az account get-access-token --scope https://management.azure.com/.default --output none
+          # ML
+          az account get-access-token --scope https://ml.azure.com/.default --output none
     - name: validate readme
       run: |
           python check-readme.py "${{ github.workspace }}/cli/assets/component"

.github/workflows/cli-assets-data-cloud-file-https.yml

@@ -45,6 +45,15 @@ jobs:
           bash setup.sh
       working-directory: cli
       continue-on-error: true
+    - name: Eagerly cache access tokens for required scopes
+      run: |
+          # Workaround for azure-cli's lack of support for ID token refresh
+          # Taken from: https://github.com/Azure/login/issues/372#issuecomment-2056289617
+
+          # Management
+          az account get-access-token --scope https://management.azure.com/.default --output none
+          # ML
+          az account get-access-token --scope https://ml.azure.com/.default --output none
     - name: validate readme
       run: |
           python check-readme.py "${{ github.workspace }}/cli/assets/data"

.github/workflows/cli-assets-data-cloud-file-wasbs.yml

@@ -45,6 +45,15 @@ jobs:
           bash setup.sh
       working-directory: cli
       continue-on-error: true
+    - name: Eagerly cache access tokens for required scopes
+      run: |
+          # Workaround for azure-cli's lack of support for ID token refresh
+          # Taken from: https://github.com/Azure/login/issues/372#issuecomment-2056289617
+
+          # Management
+          az account get-access-token --scope https://management.azure.com/.default --output none
+          # ML
+          az account get-access-token --scope https://ml.azure.com/.default --output none
     - name: validate readme
       run: |
           python check-readme.py "${{ github.workspace }}/cli/assets/data"

.github/workflows/cli-assets-data-cloud-file.yml

@@ -45,6 +45,15 @@ jobs:
           bash setup.sh
       working-directory: cli
       continue-on-error: true
+    - name: Eagerly cache access tokens for required scopes
+      run: |
+          # Workaround for azure-cli's lack of support for ID token refresh
+          # Taken from: https://github.com/Azure/login/issues/372#issuecomment-2056289617
+
+          # Management
+          az account get-access-token --scope https://management.azure.com/.default --output none
+          # ML
+          az account get-access-token --scope https://ml.azure.com/.default --output none
     - name: validate readme
       run: |
           python check-readme.py "${{ github.workspace }}/cli/assets/data"

.github/workflows/cli-assets-data-cloud-folder-https.yml

@@ -45,6 +45,15 @@ jobs:
           bash setup.sh
       working-directory: cli
       continue-on-error: true
+    - name: Eagerly cache access tokens for required scopes
+      run: |
+          # Workaround for azure-cli's lack of support for ID token refresh
+          # Taken from: https://github.com/Azure/login/issues/372#issuecomment-2056289617
+
+          # Management
+          az account get-access-token --scope https://management.azure.com/.default --output none
+          # ML
+          az account get-access-token --scope https://ml.azure.com/.default --output none
     - name: validate readme
       run: |
           python check-readme.py "${{ github.workspace }}/cli/assets/data"

.github/workflows/cli-assets-data-cloud-folder.yml

@@ -45,6 +45,15 @@ jobs:
           bash setup.sh
       working-directory: cli
       continue-on-error: true
+    - name: Eagerly cache access tokens for required scopes
+      run: |
+          # Workaround for azure-cli's lack of support for ID token refresh
+          # Taken from: https://github.com/Azure/login/issues/372#issuecomment-2056289617
+
+          # Management
+          az account get-access-token --scope https://management.azure.com/.default --output none
+          # ML
+          az account get-access-token --scope https://ml.azure.com/.default --output none
     - name: validate readme
       run: |
           python check-readme.py "${{ github.workspace }}/cli/assets/data"

.github/workflows/cli-assets-data-cloud-mltable.yml

@@ -45,6 +45,15 @@ jobs:
           bash setup.sh
       working-directory: cli
       continue-on-error: true
+    - name: Eagerly cache access tokens for required scopes
+      run: |
+          # Workaround for azure-cli's lack of support for ID token refresh
+          # Taken from: https://github.com/Azure/login/issues/372#issuecomment-2056289617
+
+          # Management
+          az account get-access-token --scope https://management.azure.com/.default --output none
+          # ML
+          az account get-access-token --scope https://ml.azure.com/.default --output none
     - name: validate readme
       run: |
           python check-readme.py "${{ github.workspace }}/cli/assets/data"

.github/workflows/cli-assets-data-iris-csv-example.yml

@@ -45,6 +45,15 @@ jobs:
           bash setup.sh
       working-directory: cli
       continue-on-error: true
+    - name: Eagerly cache access tokens for required scopes
+      run: |
+          # Workaround for azure-cli's lack of support for ID token refresh
+          # Taken from: https://github.com/Azure/login/issues/372#issuecomment-2056289617
+
+          # Management
+          az account get-access-token --scope https://management.azure.com/.default --output none
+          # ML
+          az account get-access-token --scope https://ml.azure.com/.default --output none
     - name: validate readme
       run: |
           python check-readme.py "${{ github.workspace }}/cli/assets/data"

.github/workflows/cli-assets-data-local-file.yml

@@ -45,6 +45,15 @@ jobs:
           bash setup.sh
       working-directory: cli
       continue-on-error: true
+    - name: Eagerly cache access tokens for required scopes
+      run: |
+          # Workaround for azure-cli's lack of support for ID token refresh
+          # Taken from: https://github.com/Azure/login/issues/372#issuecomment-2056289617
+
+          # Management
+          az account get-access-token --scope https://management.azure.com/.default --output none
+          # ML
+          az account get-access-token --scope https://ml.azure.com/.default --output none
     - name: validate readme
       run: |
           python check-readme.py "${{ github.workspace }}/cli/assets/data"