Azure-devops-docs: How do we reference resources in YAML

[trajano]

There's no instructions on how to use or specify these resources in YAML

---

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

• ID: ee4ec9d0-e0d5-4fb4-7c3e-b84abfa290c2
• Version Independent ID: 3e2b80d9-30e5-0c48-49f0-4fcdfedf5eee
• Content: Resources - Azure Pipelines
• Content Source: docs/pipelines/process/resources.md
• Product: devops
• GitHub Login: @vtbassmatt
• Microsoft Alias: alewis

[vtbassmatt]

@andyjlewis this should go on your backlog, I believe.

[odelljl]

Does this mean YAML builds cannot be used by Pull Requests? I can't authorize the temporary branch created by a Pull Request ahead of time.

[trajano]

You can, I am just pointing out that it is not documented or at least not well. What I do as a work around is use the graphical one and convert it to YAML and copy the block that had the resource IDs.

[TomasHubelbauer]

For anyone looking to use an authorized SSH service connection in YAML:

• You do not need to use secure files to upload the SSH private key
• You do not need to use secret variables to store the user password
• You only need a sole SSH Deployment task with an authorized service connection

The connection can be established by going to Project Settings (bottom left in DevOps) > Pipelines > Service Connections > New Service Connection > SSH. There you can either use a user password or upload a private key for the connection. You do not need store these secrets anywhere else but the connection.

If you don't know how to use the service connection in YAML, go ahead and create a new empty pipeline graphically, add the task you want to use to it (in my case the SSH Deployment one) and use the UI to select the service connection. Then click on View YAML and place that to your pipeline YAML file. Example:

- task: SSH@0
  inputs:
    # Manage service connections in Project Settings > Pipelines > Service Connections
    sshEndpoint: myConnection # The name you've given to the connection
    commands: "echo 'test'"

I am working on master directly, if you are doing this in a feature branch, you will need to follow the instructions at https://aka.ms/yamlauthz. Hope this helps anyone!

[trajano]

In my case I needed the connections to a Maven repository so that's not possible without using the secrets.

[stale[bot]]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

[thomps23]

This topic was refreshed from a YAML perspective recently. Closing this out.

[calum-github]

Why is this closed? There does not appear to be any documentation on what parameters or how to use them when calling resources: in the yaml. Do we just guess? or do we have to dive into the code to try to work it out?

[thomps23]

@calum-hunter Thanks for the quick follow-up. We're conducting an audit of open issues against at the moment and I mis-interpreted the full scope of the request.

[vtbassmatt]

resources: is documented in the schema, under templates, and under container jobs. That's all they do at the moment, so I'm not sure what more we could document there.

I left this open thinking we could document non-resources things like service connections, which I'm doing now.