updated scripts to azureclicreds

Author: Rafi-Microsoft

infra/scripts/index_scripts/create_search_index.py

@@ -5,7 +5,8 @@
 import time
 
 import pandas as pd
-from azure.identity import DefaultAzureCredential, get_bearer_token_provider
+from azure.identity import get_bearer_token_provider
+from azure.identity import AzureCliCredential
 from azure.keyvault.secrets import SecretClient
 from azure.search.documents import SearchClient
 from azure.search.documents.indexes import SearchIndexClient
@@ -44,7 +45,7 @@
     "clienttranscripts/meeting_transcripts_metadata/transcripts_metadata.csv"
 )
 
-credential = DefaultAzureCredential(managed_identity_client_id=managed_identity_client_id) # CodeQL [SM05139] Okay use of DefaultAzureCredential as it is only used in local environment.
+credential = AzureCliCredential()
 token_provider = get_bearer_token_provider(
     credential,
     "https://cognitiveservices.azure.com/.default"

infra/scripts/index_scripts/create_sql_tables.py

@@ -7,13 +7,13 @@
 
 import pandas as pd
 import pyodbc
-from azure.identity import DefaultAzureCredential
+from azure.identity import AzureCliCredential
 from azure.keyvault.secrets import SecretClient
 
 
 def get_secrets_from_kv(kv_name, secret_name):
     key_vault_name = kv_name  # Set the name of the Azure Key Vault
-    credential = DefaultAzureCredential(managed_identity_client_id=managed_identity_client_id) # CodeQL [SM05139] Okay use of DefaultAzureCredential as it is only used in local environment.
+    credential = AzureCliCredential()  # Use Azure CLI Credential
     secret_client = SecretClient(
         vault_url=f"https://{key_vault_name}.vault.azure.net/", credential=credential
     )  # Create a secret client object using the credential and Key Vault name
@@ -25,7 +25,7 @@ def get_secrets_from_kv(kv_name, secret_name):
 driver = "{ODBC Driver 18 for SQL Server}"
 
 
-credential = DefaultAzureCredential(managed_identity_client_id=managed_identity_client_id) # CodeQL [SM05139] Okay use of DefaultAzureCredential as it is only used in local environment.
+credential = AzureCliCredential()  # Use Azure CLI Credential
 
 token_bytes = credential.get_token(
     "https://database.windows.net/.default"
@@ -45,7 +45,7 @@ def get_secrets_from_kv(kv_name, secret_name):
 from azure.storage.filedatalake import DataLakeServiceClient
 
 account_name = get_secrets_from_kv(key_vault_name, "ADLS-ACCOUNT-NAME")
-credential = DefaultAzureCredential(managed_identity_client_id=managed_identity_client_id) # CodeQL [SM05139] Okay use of DefaultAzureCredential as it is only used in local environment.
+credential = AzureCliCredential()  # Use Azure CLI Credential
 
 account_url = f"https://{account_name}.dfs.core.windows.net"
 

infra/scripts/index_scripts/create_update_sql_dates.py

@@ -6,13 +6,13 @@
 
 import pandas as pd
 import pymssql
-from azure.identity import DefaultAzureCredential
+from azure.identity import AzureCliCredential
 from azure.keyvault.secrets import SecretClient
 
 
 def get_secrets_from_kv(kv_name, secret_name):
     key_vault_name = kv_name  # Set the name of the Azure Key Vault
-    credential = DefaultAzureCredential(managed_identity_client_id=managed_identity_client_id) # CodeQL [SM05139] Okay use of DefaultAzureCredential as it is only used in local environment.
+    credential = AzureCliCredential()  # Use Azure CLI Credential
     secret_client = SecretClient(
         vault_url=f"https://{key_vault_name}.vault.azure.net/", credential=credential
     )  # Create a secret client object using the credential and Key Vault name
@@ -30,7 +30,7 @@ def get_secrets_from_kv(kv_name, secret_name):
 from azure.storage.filedatalake import DataLakeServiceClient
 
 account_name = get_secrets_from_kv(key_vault_name, "ADLS-ACCOUNT-NAME")
-credential = DefaultAzureCredential(managed_identity_client_id=managed_identity_client_id) # CodeQL [SM05139] Okay use of DefaultAzureCredential as it is only used in local environment.
+credential = AzureCliCredential()  # Use Azure CLI Credential
 
 account_url = f"https://{account_name}.dfs.core.windows.net"
 

src/App/tests/backend/services/test_sqldb_service.py

@@ -17,9 +17,9 @@
 @patch("backend.services.sqldb_service.pyodbc.connect")  # Mock pyodbc.connect
 @patch(
     "backend.services.sqldb_service.get_azure_credential"
-)  # Mock DefaultAzureCredential
+)  # Mock AzureCliCredential
 def test_get_connection(mock_credential_class, mock_connect):
-    # Mock the DefaultAzureCredential and get_token method
+    # Mock the AzureCliCredential and get_token method
     mock_credential = MagicMock()
     mock_credential_class.return_value = mock_credential
     mock_token = MagicMock()
@@ -32,7 +32,7 @@ def test_get_connection(mock_credential_class, mock_connect):
     # Call the function
     conn = sql_db.get_connection()
 
-    # Assert that DefaultAzureCredential and get_token were called correctly
+    # Assert that AzureCliCredential and get_token were called correctly
     mock_credential_class.assert_called_once_with(
         client_id=sql_db.mid_id
     )
@@ -60,9 +60,9 @@ def test_get_connection(mock_credential_class, mock_connect):
 @patch("backend.services.sqldb_service.pyodbc.connect")  # Mock pyodbc.connect
 @patch(
     "backend.services.sqldb_service.get_azure_credential"
-)  # Mock DefaultAzureCredential
+)  # Mock AzureCliCredential
 def test_get_connection_token_failure(mock_credential_class, mock_connect):
-    # Mock the DefaultAzureCredential and get_token method
+    # Mock the AzureCliCredential and get_token method
     mock_credential = MagicMock()
     mock_credential_class.return_value = mock_credential
     mock_token = MagicMock()