we have the ff in our azure pipeline. we are trying to authenticate using service principal. but preview throws an error saying

error: obtain subscription(***) from Azure CLI: parsing json result from the Azure CLI: waiting for the Azure CLI: exit status 1: ERROR: Please run 'az login' to setup account.

any thoughts what's missing?

- bash: |
      echo "Pulumi: $(pulumi version)"
      pulumi login <azblob://platform>
      pulumi stack select ${{ parameters.stack }}-${{ parameters.environment }}
    displayName: Login to Pulumi

  - bash: |
      # Configure azure-native provider.
      pulumi config set azure-native:tenantId $(tenant-id)
      pulumi config set azure-native:subscriptionId $(subscription-id)
      pulumi config set azure-native:clientId $(app-id)
      pulumi config set azure-native:clientSecret $(app-secret) --secret

      # Configure azuread provider.
      pulumi config set azuread:tenantId $(tenant-id)
      pulumi config set azuread:clientId $(app-id)
      pulumi config set azuread:clientSecret $(app-secret) --secret
    displayName: Configure Pulumi providers