Skip to main content

Support Fully Automated Azure Integration Setup Without Interactive Consent

Hi Spacelift team,

we are onboarding and managing Azure integrations through Terraform.

According to the documentation, administrator consent is required for the Azure integration:

https://docs.spacelift.io/getting-started/integrate-cloud/Azure#step-3-provide-admin-consent

We have automated the entire Azure application and service principal provisioning process with Terraform, including granting the required admin consent. For consent, we use the azuread_service_principal_delegated_permission_grant resource:

https://registry.terraform.io/providers/hashicorp/azuread/latest/docs/resources/service_principal_delegated_permission_grant

While the consent is successfully granted in Azure, the integration remains in a non-ready state until the consent URL is opened and the redirect flow is completed. Once the consent link is visited and accepted through the Microsoft UI, the integration immediately becomes ready.

For organizations managing Azure integrations at scale, this manual step becomes a bottleneck. We provision spaces, stacks, Azure applications, service principals, role assignments, and permissions entirely through Infrastructure as Code. Having to perform a manual browser-based action for each integration prevents a fully automated onboarding process.

It would be great if Spacelift could:

  • Automatically detect that the required Azure consent has already been granted and mark the integration as ready.

  • Alternatively, provide an API endpoint or Terraform capability to transition the integration into the ready state programmatically.

  • Support a completely non-interactive onboarding workflow for Azure integrations.

This would significantly improve the scalability and reproducibility of Azure integration provisioning and better align with Infrastructure as Code practices.

Workaround
Problem

Log in to comment and vote

No comments yet

Be the first to share your thoughts.