Azure DevOps Pipeline自动创建PAT并部署失败求助

问题描述 #

尝试通过Azure DevOps将NextJS应用部署至Azure Web Service，已编写自动化部署Pipeline。触发Pipeline后，系统自动在账户设置中创建当日过期的PAT，且部署失败，报错信息为409冲突。

Pipeline代码 #

trigger:
  - main

pool:
  vmImage: ubuntu-latest
  
name: $(Build.DefinitionName)_$(Build.SourceBranchName)_$(Build.BuildId)

steps:
  - task: NodeTool@0
    inputs:
      versionSpec: '18.x'
    displayName: 'Install Node.js'

  - script: yarn install
    displayName: 'yarn install'

  - script: yarn lint
    displayName: 'yarn lint'

  - script: yarn build
    displayName: 'yarn build'

  - task: ArchiveFiles@2
    inputs:
      rootFolderOrFile: '$(System.DefaultWorkingDirectory)'
      includeRootFolder: false
      archiveType: 'zip'
      archiveFile: '$(Build.ArtifactStagingDirectory)/$(Build.BuildId).zip'
      replaceExistingArchive: true

  - task: PublishBuildArtifacts@1
    inputs:
      PathtoPublish: '$(Build.ArtifactStagingDirectory)'
      ArtifactName: 'drop'
      publishLocation: 'Container'

  - task: AzureWebApp@1
    inputs:
      azureSubscription: *******
      appType: 'webAppLinux'
      appName: *******
      package: '$(Build.ArtifactStagingDirectory)/$(Build.BuildId).zip'
      runtimeStack: 'NODE|18-lts'
      startUpCommand: 'yarn start'

错误日志 #

Got service connection details for Azure App Service: *******
Package deployment using ZIP Deploy initiated.
##[error]Failed to deploy web package to App Service.
##[warning]Can't find loc string for key: KuduStackTraceURL
##[error]KuduStackTraceURL https://******/api/vfs/LogFiles/kudu/trace
##[error]Error: Error: Failed to deploy web package to App Service. Conflict (CODE: 409)
Successfully updated deployment History at ********
App Service Application URL: *******
Finishing: AzureWebApp

排查及修复建议 #

针对409冲突错误 #

1. 检查正在进行的部署任务
   登录Azure Portal，进入目标Web App的「部署中心」，查看是否有未完成的部署任务或资源锁定。若存在，手动清理任务或等待完成后重新触发Pipeline。

2. 调整打包范围，避免冗余文件
   当前ArchiveFiles任务打包了整个项目目录，包含node_modules、.git等不必要文件，可能引发部署冲突或体积过大问题。修改任务仅打包NextJS构建产物及必要配置文件：

   - task: ArchiveFiles@2
     inputs:
       rootFolderOrFile: '$(System.DefaultWorkingDirectory)/.next'
       includeRootFolder: false
       archiveType: 'zip'
       archiveFile: '$(Build.ArtifactStagingDirectory)/$(Build.BuildId).zip'
       replaceExistingArchive: true
       additionalFilesToZip: |
         package.json
         yarn.lock
   

3. 验证启动命令与运行时配置
   确认package.json中的start脚本为next start，且Azure Web App的运行时栈（NODE|18-lts）与Pipeline配置一致，避免因环境不匹配导致的部署冲突。

针对自动创建当日过期PAT问题 #

1. 检查服务连接认证方式
   进入Azure DevOps项目设置 -> 服务连接，编辑对应的Azure订阅连接。建议使用「服务主体」认证而非PAT，避免手动维护PAT有效期；若必须使用PAT，修改其有效期为更长时间（如90天或永久）。

内容的提问来源于stack exchange，提问作者Vitaliy Martiniuk