az

Login as service principal Non-interactive auth for CI; modern: use --federated-token for OIDC, no secret az login --service-principal -u <id> -p "$AZ_SECRET" --tenant <id> #az#ci#secrets#cloud AKS kubeconfig credentials Merge AKS context into kubeconfig; --admin bypasses Azure AD RBAC if enabled az aks get-credentials -g <name> -n <cluster> --overwrite-existing #az#k8s#cloud Read Key Vault secret value Extract raw secret with no quotes via --query/-o tsv; safe to pipe into env az keyvault secret show --vault-name <name> --name <name> --query value -o tsv #az#secrets#cloud List VMs with power state -d enriches with runtime IP/power state; plain list omits these fields az vm list -d -o table --query "[].{name:name,ip:publicIps,state:powerState}" #az#network#monitoring#cloud