Use PME for ESRP release (#352)

- Update release task to v9 - Use PME managed identity for ESRP requests
Azure · Mar 4, 2025 · 7c93a40 · 7c93a40
1 parent 8850294
commit 7c93a40
Showing 1 changed file with 7 additions and 7 deletions.
diff --git a/azure-pipelines.yml b/azure-pipelines.yml
@@ -74,20 +74,20 @@ extends:
                       Get-ChildItem "$(Build.ArtifactStagingDirectory)" -Recurse -Force | % { Write-Host $_.FullName }
                     displayName: Move artifact to $(Build.ArtifactStagingDirectory)
 
-                  - task: EsrpRelease@7
+                  - task: EsrpRelease@9
+                    displayName: 'Publish oav to ESRP'
                     inputs:
-                      displayName: 'Publish oav to ESRP'
-                      ConnectedServiceName: 'Azure SDK Engineering System'
+                      ConnectedServiceName: 'Azure SDK PME Managed Identity'
                       ClientId: '5f81938c-2544-4f1f-9251-dd9de5b8a81b'
-                      KeyVaultName: 'AzureSDKEngKeyVault'
-                      AuthCertName: 'azure-sdk-esrp-release-auth-certificate'
-                      SignCertName: 'azure-sdk-esrp-release-sign-certificate'
+                      DomainTenantId: '975f013f-7f24-47e8-a7d3-abc4752bf346'
+                      UseManagedIdentity: true
+                      KeyVaultName: 'kv-azuresdk-codesign'
+                      SignCertName: 'azure-sdk-esrp-release-certificate'
                       Intent: 'PackageDistribution'
                       ContentType: 'npm'
                       FolderLocation: $(Build.ArtifactStagingDirectory)
                       Owners: ${{ coalesce(variables['Build.RequestedForEmail'], '[email protected]') }}
                       Approvers: '[email protected]'
                       ServiceEndpointUrl: 'https://api.esrp.microsoft.com'
                       MainPublisher: 'ESRPRELPACMANTEST'
-                      DomainTenantId: '72f988bf-86f1-41af-91ab-2d7cd011db47'
                       productstate: $(Tag)