Skip to content

[DTOSS-13060]: add CLOUD_API_RESOURCE env var for cloud API token scoping #123

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
josielsouzanordcloud merged 1 commit into from
Jun 3, 2026
Merged

[DTOSS-13060]: add CLOUD_API_RESOURCE env var for cloud API token scoping #123

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 3 additions & 0 deletions .env.development
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,9 @@ AZURE_RELAY_SHARED_ACCESS_KEY=YOUR_SHARED_ACCESS_KEY_HERE

CLOUD_API_ENDPOINT=https://localhost:8000/api/v1/dicom
CLOUD_API_TOKEN=testtoken
# Azure AD resource (scope) for cloud API token requests — set to the client ID of spn-manbrs-web-api-<env>.
# Leave empty locally; managed identity is used in deployed environments.
CLOUD_API_RESOURCE=
# MWL Server Configuration
MWL_AET=SCREENING_MWL
MWL_PORT=4243
Expand Down
9 changes: 9 additions & 0 deletions scripts/bash/deploy_arc_ring.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -25,6 +25,14 @@ echo "--- Ring: ${RING} | Environment: ${ENVIRONMENT} | Release: ${RELEASE_TAG}
source "infrastructure/environments/${ENVIRONMENT}/variables.sh"
CLOUD_API_ENDPOINT="https://${CLOUD_API_HOSTNAME}/api/v1/dicom"

CLOUD_API_RESOURCE=$(az ad sp list \
--display-name "spn-manbrs-web-api-${ENVIRONMENT}" \
--query "[0].appId" -o tsv 2>/dev/null || echo "")
if [[ -z "$CLOUD_API_RESOURCE" ]]; then
echo "##vso[task.logissue type=error]Could not resolve client ID for spn-manbrs-web-api-${ENVIRONMENT}"
exit 1
fi

APPLICATIONINSIGHTS_CONNECTION_STRING=$(az monitor app-insights component show \
--app "ai-${APP_SHORT_NAME}-${ENVIRONMENT}-arc-uks" \
--resource-group "$ARC_RG" \
Expand Down Expand Up @@ -65,6 +73,7 @@ while IFS= read -r MACHINE_JSON; do
ENV_CONTENT="AZURE_RELAY_NAMESPACE=${RELAY_NAMESPACE_HOSTNAME}
AZURE_RELAY_HYBRID_CONNECTION=hc-${MACHINE}
CLOUD_API_ENDPOINT=${CLOUD_API_ENDPOINT}
CLOUD_API_RESOURCE=${CLOUD_API_RESOURCE}
APPLICATIONINSIGHTS_CONNECTION_STRING=${APPLICATIONINSIGHTS_CONNECTION_STRING}
MWL_AET=SCREENING_MWL
MWL_PORT=4243
Expand Down
Loading