[FIXED] VisualStudioCodeCredential.get_token failed

Issue

I'm using a Jupyter Notebook within VS Code and the Azure Python SDK to develop locally.

Relevant VS Code Extensions installed:

• Python
• Azure Account
• Azure Storage (maybe relevant?)

Goal:

• To retrieve a secret from Azure Keyvault using DefaultCredential to authenticate
• Since there are no environment variables nor ManagedIdentity credentials, DefaultCredential should default to pulling my creds from VS Code

Issue:

import logging
from azure.keyvault.secrets import SecretClient
from azure.identity import DefaultAzureCredential

keyvault_name = "kv-test"
keyvualt_url = "https://" + keyvault_name + ".vault.azure.net"
keyvault_credential = DefaultAzureCredential()
kv_secret1_name = "secret-test"

keyvault_client = SecretClient(vault_url=keyvualt_url, credential=keyvault_credential)

retrieved_key = keyvault_client.get_secret(kv_secret1_name)
        
logging.info("Account key retrieved from Keyvault")

Error:

EnvironmentCredential.get_token failed: EnvironmentCredential authentication unavailable. Environment variables are not fully configured.

ManagedIdentityCredential.get_token failed: ManagedIdentityCredential authentication unavailable, no managed identity endpoint found.

SharedTokenCacheCredential.get_token failed: SharedTokenCacheCredential authentication unavailable. No accounts were found in the cache.

VisualStudioCodeCredential.get_token failed: **Failed to get Azure user details from Visual Studio Code**.

Tried so far:

• F1, Azure: Sign in
  • Authenticate via browser
  • No change

It looks like the DefaultCredential() cred chain is running, but its unable to ...get Azure user details from Visual Studio Code..

Is this because I'm developing inside a Jupyter Notebook in VS Code or is there another issue going on? It looks like something similar happened to the Python .NET SDK.

Solution

Not sure why it does not work, it looks correct. If you just want to login with visual studio code, you can also use AzureCliCredential. It works on my side.

You could use az login to sign in your account. Then you will get secret using the code.

from azure.keyvault.secrets import SecretClient
from azure.identity import DefaultAzureCredential,AzureCliCredential

keyvault_credential= AzureCliCredential()

secret_client = SecretClient("https://{vault-name}.vault.azure.net", keyvault_credential)
secret = secret_client.get_secret("secret-name")

print(secret.name)
print(secret.value)

For more details, see the Azure Identity client library for Python.

Answered By - unknown