diff --git a/.github/workflows/evaluate.yml b/.github/workflows/evaluate.yml index defe4a03..f2657421 100644 --- a/.github/workflows/evaluate.yml +++ b/.github/workflows/evaluate.yml @@ -6,7 +6,7 @@ on: # Run when commits are pushed to mainline branch (main or master) # Set this to the mainline branch you are using branches: - - aca-openai-agent + - testing_actions # Set up permissions for deploying with secretless Azure federated credentials # https://learn.microsoft.com/en-us/azure/developer/github/connect-from-azure?tabs=azure-portal%2Clinux#set-up-azure-login-with-openid-connect-authentication @@ -22,7 +22,6 @@ jobs: AZURE_TENANT_ID: ${{ vars.AZURE_TENANT_ID }} AZURE_SUBSCRIPTION_ID: ${{ vars.AZURE_SUBSCRIPTION_ID }} AZURE_CREDENTIALS: ${{ secrets.AZURE_CREDENTIALS }} - AZURE_PRINCIPAL_ID: ${{ vars.AZURE_PRINCIPAL_ID }} AZURE_OPENAI_ENDPOINT: ${{ vars.AZURE_OPENAI_ENDPOINT }} AZURE_OPENAI_API_VERSION: ${{ vars.AZURE_OPENAI_API_VERSION }} AZURE_OPENAI_4_EVAL_DEPLOYMENT_NAME: ${{ vars.AZURE_OPENAI_4_EVAL_DEPLOYMENT_NAME }} @@ -63,9 +62,10 @@ jobs: inlineScript: | az account set --subscription ${{env.AZURE_SUBSCRIPTION_ID}} + az role assignment create \ --role "5e0bd9bd-7b93-4f28-af87-19fc36ad61bd" \ - --assignee-object-id $(az ad signed-in-user show --query id -o tsv) \ + --assignee-object-id "$(az ad signed-in-user show --query id -o tsv)" \ --scope /subscriptions/${{env.AZURE_SUBSCRIPTION_ID}}/resourceGroups/${{env.AZURE_RESOURCE_GROUP}} \ --assignee-principal-type ServicePrincipal