You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository was archived by the owner on Jan 21, 2026. It is now read-only.
Copy file name to clipboardExpand all lines: Instructions/Labs/AZ400_M07_Integrating_Azure_Key_Vault_with_Azure_DevOps.md
+16-14Lines changed: 16 additions & 14 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -86,8 +86,8 @@ In this task you will import the eShopOnWeb Git repository that will be used by
86
86
### Exercise 1: Setup CI pipeline to build eShopOnWeb container
87
87
88
88
Setup CI YAML pipeline for:
89
-
-Create an Azure Container Registry to keep the container images
90
-
- Use Docker Compose to build and push **eshoppublicapi** and **eshopwebmvc** container images.
89
+
- Create an Azure Container Registry to keep the container images
90
+
- Use Docker Compose to build and push **eshoppublicapi** and **eshopwebmvc** container images. Only **eshopwebmvc** container will be deployed.
91
91
92
92
#### Task 1: (skip if done) Create a service principal
93
93
@@ -147,11 +147,11 @@ A service principal is automatically created by Azure Pipeline when you connect
147
147
148
148
In this task, you will import an existing CI YAML pipeline definition, modify and run it. It will create a new Azure Container Registry (ACR) and build/publish the eShopOnWeb container images.
149
149
150
-
1. From the lab computer, start a web browser, navigate to the Azure DevOps **eShopOnWeb** project. Go to **Pipelines>Pipelines** and click on **Create Pipeline**.
150
+
1. From the lab computer, start a web browser, navigate to the Azure DevOps **eShopOnWeb** project. Go to **Pipelines>Pipelines** and click on **Create Pipeline** (or **New pipeline**).
151
151
152
152
1. On the **Where is your code?** window, select **Azure Repos Git (YAML)** and select the **eShopOnWeb** repository.
153
153
154
-
1. On the **Configure** section, choose **Existing Azure Pipelines YAML file**. Provide the following path **/.ado/main-ci-containers-compose.yml** and click on **Continue**.
154
+
1. On the **Configure** section, choose **Existing Azure Pipelines YAML file**. Provide the following path **/.ado/eshoponweb-ci-dockercompose.yml** and click on **Continue**.
@@ -162,16 +162,16 @@ In this task, you will import an existing CI YAML pipeline definition, modify an
162
162
> **Note**: The build may take a few minutes to complete. The build definition consists of the following tasks:
163
163
- **AzureResourceManagerTemplateDeployment** uses **bicep** to deploy an Azure Container Registry.
164
164
- **PowerShell** task take the bicep output (acr login server) and creates pipeline variable.
165
-
- **DockerCompose** task builds and pushes the container images for eShopOnWeb.
165
+
- **DockerCompose** task builds and pushes the container images for eShopOnWeb to the Azure Container Registry .
166
166
167
-
1. Your pipeline will take a name based on the project name. Lets rename it for identifying the pipeline better. Go to **Pipelines>Pipelines** and click on the recently created pipeline. Click on the ellipsis and **Rename/Remove** option. Name it **main-ci-docker-compose** and click on **Save**.
167
+
1. Your pipeline will take a name based on the project name. Lets **rename** it for identifying the pipeline better. Go to **Pipelines>Pipelines** and click on the recently created pipeline. Click on the elipsis and **Rename/Remove** option. Name it **eshoponweb-ci-dockercompose** and click on **Save**.
168
168
169
169
170
-
1. Once the execution is finished, on the Azure Portal and defined Resource Group, you should find an Azure Container Registry (ACR) with the created container images **eshoppublicapi** and **eshopwebmvc**. You will only use **eshopwebmvc** on the deploy phase.
170
+
1. Once the execution is finished, on the Azure Portal, open previously defined Resource Group, and you should find an Azure Container Registry (ACR) with the created container images **eshoppublicapi** and **eshopwebmvc**. You will only use **eshopwebmvc** on the deploy phase.
171
171
172
172

173
173
174
-
1. Click on **Access Keys** and copy the **password** value, it will be used in the following task, as we will keep it in Azure Key Vault.
174
+
1. Click on **Access Keys** and copy the **password** value, it will be used in the following task, as we will keep it as a secret in Azure Key Vault.
175
175
176
176

177
177
@@ -201,7 +201,7 @@ For this lab scenario, we will have a Azure Container Instance (ACI) that pull a
201
201
> **Note**: You need to secure access to your key vaults by allowing only authorized applications and users. To access the data from the vault, you will need to provide read (Get/List) permissions to the previously created service principal that you will be using for authentication in the pipeline.
202
202
203
203
1. On the **Permission** blade, check **Get** and **List** permissions below **Secret Permission**. Click on **Next**.
204
-
1. on the **Principal** blade, search for the previosly created Service Principal, either using the Id or Name given. Click on **Next** and **Next** again.
204
+
1. on the **Principal** blade, search for the **previosly created Service Principal**, either using the Id or Name given. Click on **Next** and **Next** again.
205
205
1. On the **Review + create** blade, click on **Create**
206
206
207
207
1. Back on the **Create a Key Vault** blade, click on **Review + Create > Create**
@@ -217,7 +217,7 @@ For this lab scenario, we will have a Azure Container Instance (ACI) that pull a
217
217
| --- | --- |
218
218
| Upload options | **Manual** |
219
219
| Name | **acr-secret** |
220
-
| Value | ACR access password from previous task |
220
+
| Value | ACR access password copied in previous task |
221
221
222
222
223
223
#### Task 3: Create a Variable Group connected to Azure Key Vault
@@ -250,7 +250,7 @@ In this task, you will import a CD pipeline, customize it and run it for deployi
250
250
251
251
1. On the **Where is your code?** window, select **Azure Repos Git (YAML)** and select the **eShopOnWeb** repository.
252
252
253
-
1. On the **Configure** section, choose **Existing Azure Pipelines YAML file**. Provide the following path **/.ado/main-cd-web-aci.yml** and click on **Continue**.
253
+
1. On the **Configure** section, choose **Existing Azure Pipelines YAML file**. Provide the following path **/.ado/eshoponweb-cd-aci.yml** and click on **Continue**.
254
254
255
255
1. In the YAML pipeline definition, customize:
256
256
@@ -266,6 +266,8 @@ In this task, you will import a CD pipeline, customize it and run it for deployi
266
266
- **Variables (for Deploy stage)** connecs to the variable gorup to consume the Azure Key Vault secret **acr-secret**
267
267
- **AzureResourceManagerTemplateDeployment** deploys the Azure Container Instance (ACI) using bicep template and provides the ACR login parameters to allow ACI to download the previously created container image from Azure Container Registry (ACR).
268
268
269
+
1. Your pipeline will take a name based on the project name. Lets **rename** it for identifying the pipeline better. Go to **Pipelines>Pipelines** and click on the recently created pipeline. Click on the elipsis and **Rename/Remove** option. Name it **eshoponweb-cd-aci** and click on **Save**.
270
+
269
271
### Exercise 2: Remove the Azure lab resources
270
272
271
273
In this exercise, you will remove the Azure resources provisione in this lab to eliminate unexpected charges.
@@ -283,6 +285,6 @@ In this task, you will use Azure Cloud Shell to remove the Azure resources provi
283
285
In this lab, you integrated Azure Key Vault with an Azure DevOps pipeline by using the following steps:
284
286
285
287
286
-
- created an Azure service principal to provide access to secrets in the Azure Key vault and authenticate deployment to Azure from Azure DevOps.
287
-
- run 2 YAML pipelines imported from a Git repository.
288
-
- configured pipeline to retrieve the password from the Azure Key vault using ADO Variable Group and use it on subsequent tasks.
288
+
- Created an Azure service principal to provide access to secrets in the Azure Key vault and authenticate deployment to Azure from Azure DevOps.
289
+
- Run 2 YAML pipelines imported from a Git repository.
290
+
- Configured pipeline to retrieve the password from the Azure Key vault using ADO Variable Group and use it on subsequent tasks.
0 commit comments