Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Use PME identity for DAC signing #113997

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Apr 14, 2025
Merged

Conversation

hoyosjs
Copy link
Member

@hoyosjs hoyosjs commented Mar 28, 2025

No description provided.

@hoyosjs hoyosjs requested review from jkoritzinsky, a team and Copilot March 28, 2025 05:52
@dotnet-issue-labeler dotnet-issue-labeler bot added the needs-area-label An area label is needed to ensure this gets routed to the appropriate area owners label Mar 28, 2025
Copy link
Contributor

@Copilot Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR updates the DAC signing configuration to use the PME identity by modifying certificate names, vault names, and azure subscriptions in the runtime-official pipeline.

  • Updated certificate identifier to 'dac-dnceng-ssl-cert'.
  • Modified vault names and azure subscriptions to reference PME identity credentials in two sections of the configuration.
Files not reviewed (1)
  • eng/native/signing/auth.json: Language not supported

Copy link
Member

@jkoritzinsky jkoritzinsky left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM! Let me know when you make the corresponding change to the VMR and I'll approve it there as well.

@hoyosjs hoyosjs added area-Infrastructure-coreclr and removed needs-area-label An area label is needed to ensure this gets routed to the appropriate area owners labels Mar 29, 2025
@hoyosjs
Copy link
Member Author

hoyosjs commented Mar 29, 2025

This is pending an ESRP client update

Copy link
Contributor

Tagging subscribers to this area: @hoyosjs
See info in area-owners.md if you want to be subscribed.

@hoyosjs hoyosjs added the NO-MERGE The PR is not ready for merge yet (see discussion for detailed reasons) label Mar 29, 2025
@hoyosjs
Copy link
Member Author

hoyosjs commented Apr 14, 2025

/ba-g The only error is #114426, but it doesn't make sense to rebase since this path isn't tested in CI.

@hoyosjs hoyosjs merged commit 2f5c61c into dotnet:main Apr 14, 2025
146 of 151 checks passed
@hoyosjs hoyosjs deleted the juhoyosa/dac-to-pme branch April 14, 2025 01:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
Status: Done
Development

Successfully merging this pull request may close these issues.

2 participants