When running a Pulumi program in Azure Devops against an AKS cluster, we see

To sign in, use a web browser to open the page <https://microsoft.com/devicelogin> and enter the code CG*****QW to authenticate.

How can I ensure the pipeline can run without interactive logins? Background: • The AKS cluster has "local k8s account" feature disabled, only AAD accounts can authenticate • The Azure Devops pipeline Service Principal is member of the AAD Group that has admin rights/roles assigned to it for the AKS cluster

If using the Pulumi task extension, you can use a Service Connection. See: https://www.pulumi.com/docs/guides/continuous-delivery/azure-devops/#environment-variables Or set up requisite service principal and env variables. See: https://www.pulumi.com/docs/intro/cloud-providers/azure/setup/#service-principal-authentication