No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Pulumi Community

image.png

Hello, I've been trying to get OIDC working between my GitLab instance and Azure without success. It looks like Pulumi is stuck thinking I'm trying to call a GitHub endpoint?

I've put in all the variables required by Pulumi (see screenshot). The only value I'm uncertain of is what I've set for `ARM_OIDC_REQUEST_URL`: <https://login.microsoftonline.com/edb7fc97-4792-0000-a129-0000000/oauth2/v2.0/token>.

Log errors begin:
```* building client: unable to obtain access token: githubAssertion: cannot unmarshal response: invalid character '&lt;' looking for beginning of value
error: rpc error: code = Unknown desc = invocation of azure-native:authorization:getClientConfig returned an error: error reading from server: read tcp 127.0.0.1:52560-&gt;127.0.0.1:34229: use of closed network connection```
and so on.

The <https://www.pulumi.com/registry/packages/azure-native/installation-configuration/#oidc-pulumi-provider-configuration|Azure Native OIDC docs page> doesn't appear to be right here. `ARM_OIDC_REQUEST_TOKEN` is a GitHub Actions specific variable. For other CI systems, users need to use `ARM_OIDC_TOKEN`.

See also <https://github.com/hashicorp/terraform-provider-azurerm/issues/16901|this GitHub issue> and and Pulumi's <https://www.pulumi.com/registry/packages/azapi/installation-configuration/|own docs page for AzAPI>.

If I remove the GitHub Actions specific variables, `ARM_OIDC_REQUEST_TOKEN` and `ARM_OIDC_REQUEST_URL`, then set `ARM_OIDC_TOKEN` I still run into errors:

``` error: rpc error: code = Unknown desc = invocation of azure-native:authorization:getClientConfig returned an error: OIDC authentication was requested via useOidc/ARM_USE_OIDC but no token and/or
                        request URL were configured.```

Please let me know if I should submit this as a bug or if I'm overlooking something :smile_cat:

I created a GitHub Issue <https://github.com/pulumi/pulumi-azure-native/issues/2609|here>.