I have a task group which contains besides other tasks the Azure Key Vault task and the Azure Resource Group Deployment task. In the latter I want to override some parameters in the ARM template with values which come from the key vault.
The Secrets filter field in the Azure Key Vault task looks like secret1,secret2,secret3
. These secrets are available as variables in other tasks with the same name like the secret names. So the Override template parameters field within the Azure Resource Group Deployment task has the value -p1 $(secret1) -p2 $(secret2) -p3 $(secret3)
.
The problem is that VSTS automatically picks the three variables as parameters for the task group. I don't want this to happen. These variables will be set and read out within the task group itself. They are like private fields within a class.
One way would be to remove the Azure Key Vault task and use Build and Release > Library > Variable groups instead. But there is no way to link variable groups to task groups.