Remove or fix azure* environment variables in live tests

common/smoketest/test-resources.json

@@ -261,4 +261,4 @@
             "value": "[concat('DefaultEndpointsProtocol=https;AccountName=', variables('storageAccountName'), ';AccountKey=', listKeys(resourceId('Microsoft.Storage/storageAccounts', variables('storageAccountName')), '2019-06-01').keys[0].value, ';EndpointSuffix=', parameters('storageEndpointSuffix'))]"
         }
     }
-}
+}

eng/pipelines/templates/steps/build-test.yml

@@ -149,9 +149,11 @@ steps:
       condition: and(succeeded(), eq(variables['TestSamples'], 'true'))
       env:
         SYSTEM_ACCESSTOKEN: $(System.AccessToken)
+        # Enable samples tests that use DefaultAzureCredential to load the federated pipeline credential
+        AZURE_POD_IDENTITY_AUTHORITY_HOST: 'https://FakeAuthorityHost'
         ${{ insert }}: ${{ parameters.EnvVars }}
       inputs:
-        azureSubscription: ${{ parameters.ServiceConnection }}
+        azureSubscription: azure-sdk-tests-public
         azurePowerShellVersion: LatestVersion
         pwsh: true
         ScriptType: InlineScript

sdk/cognitivelanguage/tests.yml

@@ -18,10 +18,7 @@ extends:
         AZURE_CONVERSATIONS_DEPLOYMENT_NAME: $(clu-project-deployment)
         AZURE_CONVERSATIONS_WORKFLOW_PROJECT_NAME: $(clu-workflow-project)
         AZURE_CONVERSATIONS_WORKFLOW_DEPLOYMENT_NAME: $(clu-workflow-project-deployment)
-        AZURE_CLIENT_ID: $(aad-azure-sdk-test-client-id)
-        AZURE_CLIENT_SECRET: $(aad-azure-sdk-test-client-secret)
-        AZURE_SUBSCRIPTION_ID: $(azure-subscription-id)
-        AZURE_TENANT_ID: $(aad-azure-sdk-test-tenant-id)
+        AZURE_SUBSCRIPTION_ID: $(COGNITIVELANGUAGE_SUBSCRIPTION_ID)
         TEST_MODE: "RunLiveNoRecord" # use when allowing preparers to create the rgs for you
         AZURE_TEST_RUN_LIVE: 'true'
         AZURE_SKIP_LIVE_RECORDING: 'true'

sdk/communication/azure-communication-email/test-resources.json

@@ -30,12 +30,6 @@
         "metadata": {
           "description": "The application client id used to run tests."
         }
-      },
-      "testApplicationSecret": {
-        "type": "string",
-        "metadata": {
-          "description": "The application client secret used to run tests."
-        }
       }
     },
     "variables": {
@@ -102,10 +96,6 @@
         "type": "string",
         "value": "[parameters('testApplicationId')]"
       },
-      "AZURE_CLIENT_SECRET": {
-        "type": "string",
-        "value": "[parameters('testApplicationSecret')]"
-      },
       "COMMUNICATION_LIVETEST_DYNAMIC_CONNECTION_STRING": {
         "type": "string",
         "value": "[listKeys(resourceId('Microsoft.Communication/CommunicationServices',variables('uniqueSubDomainName')), '2021-10-01-preview').primaryConnectionString]"
@@ -132,4 +122,4 @@
       }
     }
   }
-  
+

sdk/communication/test-resources/test-resources-post.ps1

@@ -10,8 +10,7 @@
 param (
   [hashtable] $DeploymentOutputs,
   [string] $TenantId,
-  [string] $TestApplicationId,
-  [string] $TestApplicationSecret
+  [string] $TestApplicationId
 )
 
 # By default stop for any error.

sdk/confidentialledger/tests.yml

@@ -9,10 +9,6 @@ extends:
         - TestSamples=.*/true
       MaxParallel: 1
       EnvVars:
-        AZURE_SUBSCRIPTION_ID: $(provisioner-subscription)
-        AZURE_TENANT_ID: $(aad-azure-sdk-test-tenant-id)
-        AZURE_CLIENT_SECRET: $(aad-azure-sdk-test-client-secret)
-        AZURE_CLIENT_ID: $(aad-azure-sdk-test-client-id)
         TEST_MODE: "RunLiveNoRecord" # use when allowing preparers to create the rgs for you
         AZURE_TEST_RUN_LIVE: "true" # use when utilizing the New-TestResources Script
-        AZURE_SKIP_LIVE_RECORDING: 'True'
+        AZURE_SKIP_LIVE_RECORDING: 'True'

sdk/documentintelligence/tests.yml

@@ -13,7 +13,6 @@ extends:
         Public:
           Location: eastus
       EnvVars:
-        AZURE_SUBSCRIPTION_ID: $(provisioner-subscription)
         TEST_MODE: 'RunLiveNoRecord'
         AZURE_SKIP_LIVE_RECORDING: 'True'
         AZURE_TEST_RUN_LIVE: 'true'

sdk/evaluation/tests.yml

@@ -7,9 +7,5 @@ extends:
       MatrixReplace:
         - TestSamples=.*/true
       EnvVars:
-        AZURE_CLIENT_ID: $(EVALUATION_CLIENT_ID)
-        AZURE_CLIENT_SECRET: $(EVALUATION_CLIENT_SECRET)
-        AZURE_TENANT_ID: $(EVALUATION_TENANT_ID)
-        AZURE_SUBSCRIPTION_ID: $(EVALUATION_SUBSCRIPTION_ID)
         TEST_MODE: 'RunLiveNoRecord' # use when allowing preparers to create the rgs for you
         AZURE_TEST_RUN_LIVE: 'true' # use when utilizing the New-TestResources Script

sdk/eventhub/azure-mgmt-eventhub/tests.yml

@@ -1,15 +1,11 @@
 trigger: none
 
 extemds:
-    template: ../../../eng/pipelines/templates/stages/archetype-sdk-tests.yml
+    template: /eng/pipelines/templates/stages/archetype-sdk-tests.yml
     parameters:
       ServiceDirectory: eventhub
       BuildTargetingString: azure-mgmt-eventhub
       EnvVars:
-        AZURE_CLIENT_ID: $(python-eh-livetest-event-hub-aad-client-id)
-        AZURE_TENANT_ID: $(python-eh-livetest-event-hub-aad-tenant-id)
-        AZURE_CLIENT_SECRET: $(python-eh-livetest-event-hub-aad-secret)
-        AZURE_SUBSCRIPTION_ID: $(python-eh-livetest-event-hub-subscription-id)
         TEST_MODE: 'RunLiveNoRecord'
         AZURE_TEST_RUN_LIVE: 'true'
         AZURE_SKIP_LIVE_RECORDING: 'True'

sdk/formrecognizer/tests.yml

@@ -17,7 +17,6 @@ extends:
           ServiceConnection: azure-sdk-tests
           Location: 'centraluseuap'
       EnvVars:
-        AZURE_SUBSCRIPTION_ID: $(provisioner-subscription)
         TEST_MODE: 'RunLiveNoRecord'
         AZURE_SKIP_LIVE_RECORDING: 'True'
         AZURE_TEST_RUN_LIVE: 'true'

sdk/healthdataaiservices/azure-health-deidentification/test-resources-post.ps1

@@ -10,8 +10,7 @@
 param (
     [hashtable] $DeploymentOutputs,
     [string] $TenantId,
-    [string] $TestApplicationId,
-    [string] $TestApplicationSecret
+    [string] $TestApplicationId
 )
 
 # Retrieve the connection string from environment variables
@@ -59,4 +58,4 @@ Get-ChildItem -Path $localFolderPath -Recurse | ForEach-Object {
     Set-AzStorageBlobContent -File $_.FullName -Container $containerName -Blob $destinationBlob -Context $storageContext -Force
 }
 
-Write-Host "Folder '$localFolderPath' uploaded to container '$containerName' successfully."
+Write-Host "Folder '$localFolderPath' uploaded to container '$containerName' successfully."

sdk/keyvault/tests.yml

@@ -22,9 +22,6 @@ extends:
         China:
           MatrixFilters:
             - ArmTemplateParameters=^(?!.*enableHsm.*true)
-          Location: chinanorth3
       EnvVars:
         AZURE_TEST_RUN_LIVE: true
         AZURE_SKIP_LIVE_RECORDING: 'True'
-        AZURE_SUBSCRIPTION_ID: $(azure-subscription-id)
-        AZURE_CLIENT_OID: $(aad-azure-sdk-test-client-oid)

sdk/maps/test-resources.json

@@ -26,12 +26,6 @@
         "metadata": {
             "description": "The application client id used to run tests."
         }
-    },
-    "testApplicationSecret": {
-      "type": "string",
-        "metadata": {
-            "description": "The application client secret used to run tests."
-        }
     }
   },
   "variables": {
@@ -84,10 +78,6 @@
           "type": "string",
           "value": "[parameters('testApplicationId')]"
     },
-    "AZURE_CLIENT_SECRET": {
-          "type": "string",
-          "value": "[parameters('testApplicationSecret')]"
-    },
     "AZURE_MAPS_CLIENT_ID": {
         "type": "string",
         "value": "[reference(resourceId('Microsoft.Maps/accounts',variables('mapsAccountName'))).uniqueId]"

sdk/metricsadvisor/tests.yml

@@ -1,15 +1,11 @@
 trigger: none
 
 extends:
-    template: ../../eng/pipelines/templates/stages/archetype-sdk-tests.yml
+    template: /eng/pipelines/templates/stages/archetype-sdk-tests.yml
     parameters:
       BuildTargetingString: azure-ai-metricsadvisor
       ServiceDirectory: metricsadvisor
       EnvVars:
-        AZURE_SUBSCRIPTION_ID: $(provisioner-subscription)
-        AZURE_TENANT_ID: $(aad-azure-sdk-test-tenant-id)
-        AZURE_CLIENT_SECRET: $(aad-azure-sdk-test-client-secret)
-        AZURE_CLIENT_ID: $(aad-azure-sdk-test-client-id)
         METRICS_ADVISOR_ENDPOINT: $(metricsadvisor-test-service-endpoint)
         METRICS_ADVISOR_SUBSCRIPTION_KEY: $(metricsadvisor-test-subscription-key)
         METRICS_ADVISOR_API_KEY: $(python-metricsadvisor-test-api-key)

sdk/personalizer/tests.yml

@@ -1,22 +1,18 @@
 trigger: none
 
 extends:
-    template: ../../eng/pipelines/templates/stages/archetype-sdk-tests.yml
+    template: /eng/pipelines/templates/stages/archetype-sdk-tests.yml
     parameters:
       BuildTargetingString: azure-ai-personalizer
       ServiceDirectory: personalizer
       Clouds: Canary
       MatrixReplace:
         - TestSamples=.*/true
       EnvVars:
-        AZURE_CLIENT_ID: $(PERSONALIZER_CLIENT_ID)
-        AZURE_TENANT_ID: $(PERSONALIZER_TENANT_ID)
-        AZURE_SUBSCRIPTION_ID: $(PERSONALIZER_SUBSCRIPTION_ID)
-        AZURE_CLIENT_SECRET: $(PERSONALIZER_CLIENT_SECRET)
         TEST_MODE: 'RunLiveNoRecord'
         AZURE_SKIP_LIVE_RECORDING: 'True'
         AZURE_TEST_RUN_LIVE: 'true'
         PERSONALIZER_PRESET_ENDPOINT_SINGLE_SLOT: $(java-personalizer-test-singleslot-endpoint)
         PERSONALIZER_PRESET_API_KEY_SINGLE_SLOT: $(java-personalizer-test-singleslot-api-key)
         PERSONALIZER_PRESET_ENDPOINT_MULTI_SLOT: $(java-personalizer-test-multislot-endpoint)
-        PERSONALIZER_PRESET_API_KEY_MULTI_SLOT: $(java-personalizer-test-multislot-api-key)
+        PERSONALIZER_PRESET_API_KEY_MULTI_SLOT: $(java-personalizer-test-multislot-api-key)

sdk/remoterendering/test-resources-post.ps1

@@ -9,8 +9,7 @@
 param (
     [hashtable] $DeploymentOutputs,
     [string] $TenantId,
-    [string] $TestApplicationId,
-    [string] $TestApplicationSecret
+    [string] $TestApplicationId
 )
 
 # outputs from the ARM deployment passed in from New-TestResources

sdk/remoterendering/tests.yml

@@ -1,14 +1,11 @@
 trigger: none
 
 extends:
-    template: ../../eng/pipelines/templates/stages/archetype-sdk-tests.yml
+    template: /eng/pipelines/templates/stages/archetype-sdk-tests.yml
     parameters:
       ServiceDirectory: remoterendering
       Location: westus2
       EnvVars:
-        AZURE_CLIENT_ID: $(aad-azure-sdk-test-client-id)
-        AZURE_CLIENT_SECRET: $(aad-azure-sdk-test-client-secret)
-        AZURE_TENANT_ID: $(aad-azure-sdk-test-tenant-id)
         TEST_MODE: 'RunLiveNoRecord'
         AZURE_SKIP_LIVE_RECORDING: 'true'
         AZURE_TEST_RUN_LIVE: 'true'

sdk/schemaregistry/tests.yml

@@ -1,13 +1,12 @@
 trigger: none
 
 extends:
-    template: ../../eng/pipelines/templates/stages/archetype-sdk-tests.yml
+    template: /eng/pipelines/templates/stages/archetype-sdk-tests.yml
     parameters:
       ServiceDirectory: schemaregistry
       TestTimeoutInMinutes: 300
       BuildTargetingString: azure-schemaregistry*
       EnvVars:
-        AZURE_SUBSCRIPTION_ID: $(azure-subscription-id)
         AZURE_SKIP_LIVE_RECORDING: 'True'
         AZURE_TEST_RUN_LIVE: 'true'
       MatrixFilters:

sdk/storage/tests.yml

@@ -12,7 +12,7 @@ parameters:
 extends:
     template: /eng/pipelines/templates/stages/archetype-sdk-tests.yml
     parameters:
-      Location: 'canadacentral'
+      Location: 'westus2'
       # All 5 service stages run in parallel, and with no parallel limits the tests may get throttled.
       MaxParallel: 2
       ServiceDirectory: storage

sdk/template/tests.yml

@@ -7,9 +7,5 @@ extends:
       MatrixReplace:
         - TestSamples=.*/true
       EnvVars:
-        AZURE_CLIENT_ID: $(TEMPLATE_CLIENT_ID)
-        AZURE_CLIENT_SECRET: $(TEMPLATE_CLIENT_SECRET)
-        AZURE_TENANT_ID: $(TEMPLATE_TENANT_ID)
-        AZURE_SUBSCRIPTION_ID: $(TEMPLATE_SUBSCRIPTION_ID)
         TEST_MODE: 'RunLiveNoRecord' # use when allowing preparers to create the rgs for you
         AZURE_TEST_RUN_LIVE: 'true' # use when utilizing the New-TestResources Script

sdk/textanalytics/test-resources.json

@@ -36,12 +36,6 @@
                 "description": "The application client id used to run tests."
             }
         },
-        "testApplicationSecret": {
-            "type": "String",
-            "metadata": {
-                "description": "The application client secret used to run tests."
-            }
-        },
         "cognitiveServicesEndpointSuffix": {
             "defaultValue": ".cognitiveservices.azure.com",
             "type": "String"
@@ -90,10 +84,6 @@
             "type": "String",
             "value": "[parameters('testApplicationId')]"
         },
-        "AZURE_CLIENT_SECRET": {
-            "type": "String",
-            "value": "[parameters('testApplicationSecret')]"
-        },
         "TEXTANALYTICS_TEST_API_KEY": {
             "type": "string",
             "value": "[listKeys(resourceId('Microsoft.CognitiveServices/accounts', variables('textAnalyticsBaseName')), variables('cognitiveApiVersion')).key1]"

sdk/textanalytics/tests.yml

@@ -1,7 +1,7 @@
 trigger: none
 
 extends:
-    template: ../../eng/pipelines/templates/stages/archetype-sdk-tests.yml
+    template: /eng/pipelines/templates/stages/archetype-sdk-tests.yml
     parameters:
       BuildTargetingString: azure-ai-textanalytics
       ServiceDirectory: textanalytics
@@ -17,10 +17,6 @@ extends:
           Location: chinanorth3
       SupportedClouds: 'Public,UsGov,China'
       EnvVars:
-        AZURE_SUBSCRIPTION_ID: $(TEXTANALYTICS_SUBSCRIPTION_ID)
-        AZURE_TENANT_ID: $(TEXTANALYTICS_TENANT_ID)
-        AZURE_CLIENT_SECRET: $(TEXTANALYTICS_CLIENT_SECRET)
-        AZURE_CLIENT_ID: $(TEXTANALYTICS_CLIENT_ID)
         TEST_MODE: 'RunLiveNoRecord'
         AZURE_SKIP_LIVE_RECORDING: 'True'
         AZURE_TEST_RUN_LIVE: 'true'

sdk/webpubsub/tests.yml

@@ -1,21 +1,13 @@
 trigger: none
 
 extends:
-    template: ../../eng/pipelines/templates/stages/archetype-sdk-tests.yml
+    template: /eng/pipelines/templates/stages/archetype-sdk-tests.yml
     parameters:
       BuildTargetingString: azure*
       ServiceDirectory: webpubsub
       MatrixReplace:
         - TestSamples=.*/true
       EnvVars:
-        WEBPUBSUB_TENANT_ID: $(webpubsub-tenant-id)
-        WEBPUBSUB_CLIENT_ID: $(webpubsub-client-id)
-        WEBPUBSUB_CLIENT_SECRET: $(webpubsub-client-secret)
-        WEBPUBSUB_SUBSCRIPTION_ID: $(webpubsub-subscription-id)
-        AZURE_TENANT_ID: $(webpubsub-tenant-id)
-        AZURE_CLIENT_ID: $(webpubsub-client-id)
-        AZURE_CLIENT_SECRET: $(webpubsub-client-secret)
-        AZURE_SUBSCRIPTION_ID: $(webpubsub-subscription-id)
         WEBPUBSUB_REVERSE_PROXY_ENDPOINT: $(webpubsub-reverse-proxy-endpoint)
         WEBPUBSUB_ENDPOINT: $(webpubsub-endpoint)
         WEBPUBSUB_CONNECTION_STRING: $(webpubsub-connection-string)