github.com/Azure/aad-pod-identity@v1.8.17/.pipelines/templates/cleanup-role-assignments.yml (about)

     1  parameters:
     2    - name: keyvault_name
     3      type: string
     4      default: $(KEYVAULT_NAME)
     5  
     6  steps:
     7    - bash: |
     8        az role assignment delete --ids ${ROLE_ASSIGNMENT_IDS} > /dev/null
     9        az keyvault delete-policy --name ${{ parameters.keyvault_name }} --object-id "${ASSIGNEE_OBJECT_ID}" > /dev/null
    10      condition: always()
    11      displayName: Cleanup role assignments