I want to add a SSH Public key to the Azure DevOps account running my yaml pipeline. According to this post: Azure DevOps API Add public key it has been possible at some point to upload the public key when authenticating with a PAT token.
I can access Azure DevOps Rest API from my pipeline and list repos etc via the Rest API, but I cannot figure out, how to build the body for the query for uploading the public SSH key. So far I have this:
$uri = 'https://dev.azure.com/{MyOrg}/_usersSettings/keys'
$Headers = @{Authorization='Basic <encoded PAT>';'content-type'='application/json'}
$Body = @{
displayName = 'MyKey'
publicData = 'My Public Key starting with ssh-rsa '
scope = 'app_token'
isPublic = $true
} | ConvertTo-Json
Invoke-RestMethod -Uri $uri -Headers $Headers -Method POST -Body $body
The above command produces no error as such, just a long html.
Hints on how to upload the certificate to Azure DevOps by PowerShell or any other commandline option are very welcome.
UPDATE:
I tried extracting the Authentication Id off a post in the portal as described by Hugh Lin - MSFT:
Then I extracted the Authorization Id and added that to the payload of a new post. Before posting I also changed the displayName and the Public data, making the body look like this:
{
"contributionIds": ["ms.vss-token-web.personal-access-token-issue-session-token-provider"],
"dataProviderContext": {"properties": {
"displayName": "AutoKey",
"authorizationId": "48bef66f-798e-499b-94cc-720e48296bf7",
"publicData": "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZA//Y+7vLd+P2F4WmIHpBPEMn/lPHPXrxHEJhhtnrNNZzgwIkWpgGQcuGQt2rmxEWYsSEV+CxTZcO7jig0yr8rsntUZJnCc86SVP22AfvE1rmRM/k+m6QRCBrSoHCAR+2ho/XoJ8iuZdvIV7qvV0Vk/N9rnf+KsJlK97RQWSc61rPl+7cUeXkBB8qsWOMeVxe9NhWH8DeWV+JG0nroTaZDrTq9BI5UDc7kqrRgwPCvqwT749C3k3cijxqEvK5bwWZ5NFaGj4CW8qRGXR5Sf6GJlQLgOrH+V2R7Ns5kLunD/Yy6RvSUiwokCyb3tDqBgB3W9lEtuxqcaYUwig0/GIF [email protected]",
"scope": "app_token",
"targetAccounts": ["67ebc765-c850-4d22-b95f-1d3553xxxxxx"],
"isPublic": true,
"sourcePage": {
"url": "https://dev.azure.com/cloudeonwest/_usersSettings/keys",
"routeId": "ms.vss-admin-web.user-admin-hub-route",
"routeValues": {
"adminPivot": "keys",
"controller": "ContributedPage",
"action": "Execute",
"serviceHost": "67ebc765-c850-4d22-b95f-1d3553bxxxxxx (Org)"
}
}
}}
}
Running the request resulted in the displayName being updated, but the publicData remained the same:
$answer.dataProviders.'ms.vss-token-web.personal-access-token-issue-session-token-provider'
clientId : 00000000-0000-0000-0000-000000000000
accessId : 52447de9-8c41-4d5b-bfdb-48b4eaxxxxxx
authorizationId : 48bef66f-798e-499b-94cc-720e48296bf7
hostAuthorizationId : 00000000-0000-0000-0000-000000000000
userId : 357d38ad-6712-69e1-adc3-be8caxxxxxx
validFrom : 7/25/2020 3:26:51 PM
validTo : 7/25/2025 3:26:51 PM
displayName : AutoKey
scope : app_token
targetAccounts : {67ebc765-c850-4d22-b95f-1d3553xxxxxx}
token :
alternateToken :
isValid : True
isPublic : True
publicData : BBBAB3NzaC1yc2EAAAADAQABAAABAQDZA//Y+7vLd+P2F4WmIHpBPEMn/lPHPXrxHEJhhtnrNNZzgwIkWpgGQcuGQt2rmxEWYsSEV+CxTZcO7jig0yr8rsntUZJnCc86SVP22AfvE1rmRM/k+m6QRCBrSoHCAR+2ho/XoJ8iuZdvIV7qvV0Vk/N9rnf+KsJlK97RQWSc61rPl+7cUeXkBB8qsWOMeVxe9NhWH8DeWV+JG0nroTaZDrTq9BI5UDc7kqrRgwPCvqwT749C3k3cijxqEvK5bwWZ5NFaGj4CW8qRGXR5Sf6GJlQLgOrH+V2R7Ns5kLunD/Yy6RvSUiwokCyb3tDqBgB3W9lEtuxqcaYUwig0/GIF
source :
claims :