Skip to content

Use Microsoft hosted asset sources - #7214

Draft
Daniel Jurek (danieljurek) wants to merge 5 commits into
mainfrom
djurek/onboard-terrapin
Draft

Use Microsoft hosted asset sources#7214
Daniel Jurek (danieljurek) wants to merge 5 commits into
mainfrom
djurek/onboard-terrapin

Conversation

@danieljurek

Copy link
Copy Markdown
Member

No description provided.

@antkmsft

Anton Kolesnyk (antkmsft) commented Aug 4, 2026

Copy link
Copy Markdown
Member

/azp run cpp - appconfiguration, cpp - attestation, cpp - core, cpp - eventhubs, cpp - identity, cpp - keyvault, cpp - storage, cpp - tables, cpp - template

@azure-pipelines

Copy link
Copy Markdown
Azure Pipelines:
Successfully started running 9 pipeline(s).

cmake build All failed in public PR validation with:

  token rejected for `azure-sdk-for-rust`
  failed to get successful HTTP response from
  .../_packaging/azure-sdk-for-rust/Cargo/index/config.json, got 401
  TF400813: The user 'aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa' is not authorized

Two problems, both already solved in azure-sdk-for-rust
(eng/templates/config.toml.template and
eng/pipelines/templates/steps/use-rust.yml):

1. The feed was the org-scoped azure-sdk-for-rust index with no ~force-auth
   suffix, so Azure DevOps answered anonymously. Point at the project-scoped
   public feed with ~force-auth, which reports auth-required and is the same
   crates.io upstream azure-sdk-for-rust consumes.

2. CargoAuthenticate@0 authenticates with SYSTEM_ACCESSTOKEN, which Azure
   DevOps does not deliver to fork builds. The task still reports success but
   writes the anonymous identity, so the failure only surfaces later when cargo
   fetches the index. NuGetAuthenticate@1 uses the SYSTEMVSSCONNECTION endpoint
   token, which fork builds do get, and publishes it as VSS_NUGET_ACCESSTOKEN;
   feed that to CargoAuthenticate@0 as SYSTEM_ACCESSTOKEN.

NuGetAuthenticate@1 is declared in cmake-build.yml rather than taken from
nuget-config.yml because archetype-sdk-client.yml includes cmake-build.yml
without it.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: f3a428db-e276-4363-afd9-a944e8533203
cspell flagged SYSTEMVSSCONNECTION as an unknown word, failing the
GenerateReleaseArtifacts job at 'Check spelling' and cascading into the
package artifact and APIView steps. Describe the service connection in prose
instead of adding a one-off entry to the repo dictionary.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: f3a428db-e276-4363-afd9-a944e8533203
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants