Azure Pipelines中跨阶段、作业和步骤复用凭证代码的方法

1. 变量组+脚本文件复用 #

直接把用户名user1和密码myPass放到Azure Pipelines的变量组里，所有阶段、作业都能统一引用。接着在代码仓库中存放一个可复用的PowerShell脚本（比如命名为Get-CredentialHelper.ps1）：

param(
    [string]$Username,
    [string]$Password
)

$securePassword = ConvertTo-SecureString -String $Password -AsPlainText -Force
return New-Object -TypeName PSCredential -ArgumentList $Username, $securePassword

之后在Pipeline的任意步骤里调用这个脚本即可：

$credential = .\Get-CredentialHelper.ps1 -Username '$(user1)' -Password '$(myPass)'

Invoke-Command -ComputerName $computers -Credential $credential {
    ...
}

2. 用Pipeline变量传递序列化凭证 #

在某个前置步骤生成凭证后，将其序列化并存储为作业/全局变量，后续步骤直接反序列化使用：

# 前置步骤：生成凭证并序列化为全局输出变量
$securePassword = ConvertTo-SecureString -String '$(myPass)' -AsPlainText -Force
$credential = New-Object -TypeName PSCredential -ArgumentList '$(user1)', $securePassword
# 转成JSON字符串便于传递
$serializedCred = $credential | ConvertTo-Json -Compress

# 设置为全局输出变量，后续步骤可直接引用
Write-Host "##vso[task.setvariable variable=serializedCredential;isOutput=true;]$serializedCred"

后续步骤中反序列化复用凭证：

$serializedCred = '$(serializedCredential)'
$credObj = $serializedCred | ConvertFrom-Json
$securePassword = ConvertTo-SecureString -String $credObj.Password -AsPlainText -Force
$credential = New-Object -TypeName PSCredential -ArgumentList $credObj.UserName, $securePassword

Invoke-Command -ComputerName $computers -Credential $credential {
    ...
}

3. 封装成PowerShell模块 #

把凭证生成逻辑做成自定义PowerShell模块（比如MyCredentialModule.psm1），存到代码仓库或者Azure Artifacts的PowerShell源中：

function Get-MyCredential {
    param(
        [string]$Username,
        [string]$Password
    )
    $securePassword = ConvertTo-SecureString -String $Password -AsPlainText -Force
    return New-Object -TypeName PSCredential -ArgumentList $Username, $securePassword
}
Export-ModuleMember -Function Get-MyCredential

在Pipeline步骤里导入模块直接调用：

Import-Module .\MyCredentialModule.psm1
$credential = Get-MyCredential -Username '$(user1)' -Password '$(myPass)'

Invoke-Command -ComputerName $computers -Credential $credential {
    ...
}

内容的提问来源于stack exchange，提问作者Rod