Unable to get ACTIONS_ID_TOKEN_REQUEST_URL env variable

[yifan]

Hi, All,

I am getting an error:

[Build and deploy an app to AKS/buildImage]   💬  ::debug::az cli version used:
azure-cli                         2.27.2 *

core                              2.27.2 *
telemetry                          1.0.6

Extensions:
azure-devops                      0.20.0

Python location '/opt/az/bin/python3'
Extensions directory '/opt/az/azcliextensions'

Python (Linux) 3.6.10 (default, Aug 23 2021, 03:36:00)
[GCC 9.3.0]

Legal docs and information: aka.ms/AzureCliLegal



[Build and deploy an app to AKS/buildImage]   | Using OIDC authentication...
[Build and deploy an app to AKS/buildImage]   ❗  ::error:: Unable to get ACTIONS_ID_TOKEN_REQUEST_URL env variable. Please make sure to give write permissions to id-token in the workflow.
[Build and deploy an app to AKS/buildImage]   | [command]/usr/bin/az cloud set -n azurecloud
[Build and deploy an app to AKS/buildImage]   | Done setting cloud: "azurecloud"
[Build and deploy an app to AKS/buildImage]   ❓  ::error::: unrecognized arguments: --federated-token null

[Build and deploy an app to AKS/buildImage]   ❗  ::error::
TRY THIS:
https://aka.ms/cli_ref
Read more about the command in reference docs

[Build and deploy an app to AKS/buildImage]   ❗  ::error::Az CLI Login failed. Please check the credentials and make sure az is installed on the runner. For more information refer https://aka.ms/create-secrets-for-GitHub-workflows

However, in my workflow, I have:

on:
  release:
  workflow_dispatch:

permissions:
  contents: read
  id-token: write

I am not sure why I am still getting this error especially the permission has been set correctly. Please help.

[yifan]

I was able to run actions on GitHub, the error only occurs locally

[KnisterPeter]

There is no support for OIDC yet.

[yifan]

I see, thank you.

[KnisterPeter]

@yifan If possible, please mark this as answered. It might help others to identify the issue.

[williazz]

Is there a timeline for when OIDC support might be added? It would be an awesome feature