Unable to get Azure Vault key secrets in VSTS Release - Failed to obtain JWT

0
votes

I have created Azure key vault - with couple of secrets . please find below ![enter image description here

Able to authenticate from my VSTS release pipeline and couldnt get the values

enter image description here

When i click on "ADD" to choose secrets - I ended up with error below enter image description here

Could you please help on how to debug this ?

1
azureazure-devopsazure-active-directoryazure-pipelines-release-pipelineazure-keyvault
Have you added the SP access in the Key Vault's Access Policies? – juunas
Yes, using this - lnx.azurewebsites.net/… – user2153844
Can you still reproduce this issue? – Eddie Chen - MSFT

1 Answers

0
votes

Failed to obtain the Josn Web Token(JWT) for service principal id.

According to the error message you have shown, it may has two possibilities.

First, you SPN key has expired.You could go to AAD > App Registrations > your app > Keys channel and choose Never expires when you generate the key.

Second, the SPN itself is like a user in Azure AD, by default it has no rights. You could provide it "contribute" permissions, if you wish to use the SPN to create or update resources in Azure.

For more details, you could refer to this issue.