Add Radius.Core/terraformConfigs and bicepConfigs resources by sylvainsf · Pull Request #11780 · radius-project/radius

sylvainsf · 2026-04-29T21:54:32Z

Description

Adds two new resources in the Radius.Core namespace — terraformConfigs and bicepConfigs — that environments reference by resource ID. Platform teams can now define private registry authentication, Terraform CLI configuration (provider_installation, credentials, env vars), and Bicep registry authentication once and share it across multiple environments.

This implements a scoped subset of design-notes#107. Out of scope: Terraform binary lifecycle (rad terraform install), backend state stores, installer pipeline. See docs/architecture/terraform-bicep-config.md for the full design.

What's included

New TypeSpec/OpenAPI resources Radius.Core/terraformConfigs and Radius.Core/bicepConfigs (regenerated SDK).
New terraformConfig? and bicepConfig? properties on Radius.Core/environments, validated for existence at PUT time.
Datamodels, bidirectional API↔datamodel converters, REST controllers wired in pkg/corerp/setup/setup.go.
Loader bridge in pkg/recipes/configloader/environment.go that resolves the new config resources at recipe execution time and populates RecipeConfig consumed by the shared driver.
New ProviderInstallation field on the shared TerraformConfigProperties datamodel; the Terraform driver writes a .terraformrc to the working dir and points Terraform at it via TF_CLI_CONFIG_FILE on both Deploy and Delete. Field is optional and only populated by the Radius.Core path — the legacy Applications.Core recipeConfig flow is unchanged.
Unit tests for the .terraformrc writer, the env-var setter, and the Delete-path helper.
Functional test (Test_TerraformConfig_BicepConfig_Combined) deploying both configs in a single environment and running a Terraform recipe end-to-end.
Architecture doc: docs/architecture/terraform-bicep-config.md.

Known follow-ups (filed separately)

bicepConfig.registryAuthentication.{AzureWI,AwsIrsa} are accepted by the schema but not yet wired in the Bicep driver (only BasicAuth flows through today).
referencedBy on the config resources is exposed in the schema but not yet populated.
Delete protection (409 when a config is referenced by an environment) is not yet implemented.

Type of change

This pull request adds or changes features of Radius and has an approved issue (issue link required).

Fixes: #10615

Contributor checklist

Please verify that the PR meets the following requirements, where applicable:

An overview of proposed schema changes is included in a linked GitHub issue.
- Yes
- Not applicable
A design document PR is created in the design-notes repository, if new APIs are being introduced.
- Yes
- Not applicable
The design document has been reviewed and approved by Radius maintainers/approvers.
- Yes
- Not applicable
A PR for the samples repository is created, if existing samples are affected by the changes in this PR.
- Yes
- Not applicable
A PR for the documentation repository is created, if the changes in this PR affect the documentation or any user facing updates are made.
- Yes
- Not applicable
A PR for the recipes repository is created, if existing recipes are affected by the changes in this PR.
- Yes
- Not applicable

github-actions · 2026-04-29T21:54:49Z

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Scanned Files

None

github-actions · 2026-04-29T22:13:39Z

Unit Tests

2 files ± 0 422 suites +1 6m 21s ⏱️ -55s
5 115 tests +65 5 113 ✅ +65 2 💤 ±0 0 ❌ ±0
6 144 runs +65 6 142 ✅ +65 2 💤 ±0 0 ❌ ±0

Results for commit b304290. ± Comparison against base commit 35fafb5.

♻️ This comment has been updated with latest results.

codecov · 2026-04-29T22:13:57Z

Codecov Report

❌ Patch coverage is 73.76682% with 117 lines in your changes missing coverage. Please review.
✅ Project coverage is 51.69%. Comparing base (35fafb5) to head (b304290).

Files with missing lines	Patch %	Lines
pkg/rp/util/config.go	0.00%	22 Missing ⚠️
...orerp/datamodel/converter/bicepconfig_converter.go	0.00%	21 Missing ⚠️
...p/datamodel/converter/terraformconfig_converter.go	0.00%	21 Missing ⚠️
pkg/recipes/terraform/execute.go	61.76%	9 Missing and 4 partials ⚠️
...erp/api/v20250801preview/environment_conversion.go	0.00%	4 Missing and 4 partials ⚠️
pkg/recipes/driver/terraform/terraform.go	0.00%	6 Missing and 1 partial ⚠️
...ents/v20250801preview/createorupdateenvironment.go	73.91%	4 Missing and 2 partials ⚠️
pkg/recipes/configloader/environment.go	86.48%	3 Missing and 2 partials ⚠️
...erp/api/v20250801preview/bicepconfig_conversion.go	94.20%	2 Missing and 2 partials ⚠️
...api/v20250801preview/terraformconfig_conversion.go	95.12%	2 Missing and 2 partials ⚠️
... and 3 more

Additional details and impacted files

@@            Coverage Diff             @@
##             main   #11780      +/-   ##
==========================================
+ Coverage   51.47%   51.69%   +0.22%     
==========================================
  Files         716      725       +9     
  Lines       45155    45595     +440     
==========================================
+ Hits        23242    23572     +330     
- Misses      19705    19798      +93     
- Partials     2208     2225      +17

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Copilot

Pull request overview

Adds new Radius.Core/terraformConfigs and Radius.Core/bicepConfigs resources, wires them into Radius.Core/environments, and threads their data into recipe execution and generated API artifacts.

Changes:

Adds new TypeSpec/OpenAPI/resource-provider models, clients, converters, and manifests for terraformConfigs and bicepConfigs.
Extends Radius.Core/environments and the config loader/terraform executor to resolve and consume the new config resources.
Adds functional/unit tests and a new architecture document describing the feature.

Reviewed changes

Copilot reviewed 43 out of 46 changed files in this pull request and generated 6 comments.

Show a summary per file

File	Description
`typespec/Radius.Core/terraformConfigs.tsp`	Defines new Terraform config resource schema.
`typespec/Radius.Core/main.tsp`	Imports new Radius.Core resource specs.
`typespec/Radius.Core/environments.tsp`	Adds environment references to shared config resources.
`typespec/Radius.Core/bicepConfigs.tsp`	Defines new Bicep config resource schema.
`test/functional-portable/dynamicrp/noncloud/resources/testdata/tfbicep-combined-test.bicep`	Combined functional scenario for both config resources.
`test/functional-portable/dynamicrp/noncloud/resources/testdata/terraformconfig-redis-test.bicep`	Functional Terraform config scenario.
`test/functional-portable/dynamicrp/noncloud/resources/testdata/bicepconfig-test.bicep`	Functional Bicep config scenario.
`test/functional-portable/dynamicrp/noncloud/resources/terraformconfig_bicepconfig_test.go`	Functional tests for new resources and combined flow.
`swagger/specification/radius/resource-manager/Radius.Core/preview/2025-08-01-preview/openapi.json`	Regenerated OpenAPI for new resources and environment fields.
`pkg/rp/util/config.go`	Adds fetch helpers for new config resources.
`pkg/recipes/terraform/execute.go`	Wires Terraform CLI config generation into execution paths.
`pkg/recipes/terraform/execute_test.go`	Adds tests around Terraform CLI config/env handling.
`pkg/recipes/terraform/cliconfig.go`	Renders `.terraformrc` from provider installation settings.
`pkg/recipes/terraform/cliconfig_test.go`	Tests `.terraformrc` rendering/writing.
`pkg/recipes/configloader/environment.go`	Resolves environment config references into recipe config.
`pkg/recipes/configloader/environment_test.go`	Updates loader tests for new function signature.
`pkg/corerp/setup/setup.go`	Registers new Radius.Core resources.
`pkg/corerp/setup/setup_test.go`	Extends setup routing tests for new resources.
`pkg/corerp/setup/operations.go`	Adds RBAC operation entries for new resources.
`pkg/corerp/frontend/controller/environments/v20250801preview/createorupdateenvironment.go`	Validates referenced config IDs during environment PUT/PATCH.
`pkg/corerp/datamodel/terraformconfig.go`	Adds Terraform config datamodel.
`pkg/corerp/datamodel/recipe_types.go`	Extends shared recipe config with provider installation support.
`pkg/corerp/datamodel/environment_v20250801preview.go`	Adds new environment reference fields.
`pkg/corerp/datamodel/converter/terraformconfig_converter.go`	Adds Terraform config versioned/datamodel converter.
`pkg/corerp/datamodel/converter/bicepconfig_converter.go`	Adds Bicep config versioned/datamodel converter.
`pkg/corerp/datamodel/bicepconfig.go`	Adds Bicep config datamodel.
`pkg/corerp/api/v20250801preview/zz_generated_terraformconfigs_client.go`	Generated Terraform config client.
`pkg/corerp/api/v20250801preview/zz_generated_responses.go`	Generated response types for new clients.
`pkg/corerp/api/v20250801preview/zz_generated_options.go`	Generated option types for new clients.
`pkg/corerp/api/v20250801preview/zz_generated_models.go`	Generated API models for new resources and env fields.
`pkg/corerp/api/v20250801preview/zz_generated_models_serde.go`	Generated serde for new models.
`pkg/corerp/api/v20250801preview/zz_generated_constants.go`	Generated enum/constants for Bicep auth methods.
`pkg/corerp/api/v20250801preview/zz_generated_client_factory.go`	Exposes new generated clients from client factory.
`pkg/corerp/api/v20250801preview/zz_generated_bicepconfigs_client.go`	Generated Bicep config client.
`pkg/corerp/api/v20250801preview/terraformconfig_conversion.go`	Converts Terraform config API models to/from datamodel.
`pkg/corerp/api/v20250801preview/fake/zz_generated_terraformconfigs_server.go`	Generated fake Terraform config server.
`pkg/corerp/api/v20250801preview/fake/zz_generated_server_factory.go`	Wires new fake servers into factory.
`pkg/corerp/api/v20250801preview/fake/zz_generated_bicepconfigs_server.go`	Generated fake Bicep config server.
`pkg/corerp/api/v20250801preview/environment_conversion.go`	Converts new environment reference fields.
`pkg/corerp/api/v20250801preview/bicepconfig_conversion.go`	Converts Bicep config API models to/from datamodel.
`hack/bicep-types-radius/generated/radius/radius.core/2025-08-01-preview/types.json`	Regenerated Bicep type metadata.
`hack/bicep-types-radius/generated/index.json`	Adds new Bicep type index entries.
`docs/architecture/terraform-bicep-config.md`	New architecture doc for the feature.
`deploy/manifest/built-in-providers/self-hosted/radius_core.yaml`	Registers new resource types in self-hosted manifest.
`deploy/manifest/built-in-providers/dev/radius_core.yaml`	Registers new resource types in dev manifest.
`.devcontainer/devcontainer-lock.json`	Formatting-only lockfile change.

Resolves several review comments on PR #11780. Schema changes: - BicepConfigProperties.registryAuthentication (single value, no host) is replaced with registryAuthentications: Record<...> keyed by registry hostname. The Bicep driver looks up credentials by the host parsed from the recipe template path; the previous shape gave the user no way to declare which registry the credentials applied to and the loader was hard-coding 'default' as the key, so credentials were silently dropped. - TerraformrcConfig.credentials documentation clarifies it is for HTTP Terraform CLI registry auth (rendered as native credentials "host" {} blocks with a 'token' key), not Git module-source PAT auth. Wiring changes: - Terraform driver now renders credentials "host" { token = ... } blocks in the generated .terraformrc, resolving the token value from the fetched-secret map at execution time. Drops the broken bridge that forwarded credentials into the legacy Git PAT path (which expects the 'pat' key, not 'token'). - terraform driver FindSecretIDs reports the new credentials secret stores with the 'token' key so the engine fetches them before the driver runs. - Loader uses the new host-keyed Bicep map to populate the legacy Authentication map (BasicAuth only; AzureWI/AwsIrsa stay schema-only follow-ups). Validation: - Environment controller's referenced-config-id checks now also verify the resource type matches the expected Radius.Core/{terraformConfigs, bicepConfigs}, instead of accepting any resource ID that happens to exist (Copilot review #1, #2). - New bicepconfigs.ValidateRequest hook (UpdateFilter) enforces that authenticationMethod=BasicAuth requires basicAuthSecretId, AzureWI requires both Wi ids, and AwsIrsa requires the role ARN. TypeSpec cannot express these conditional-required-field rules without a discriminated- union restructure (Copilot review #6). Tests: - New TestWriteTerraformCLIConfig_Credentials exercises native credentials rendering: success, deterministic ordering, missing secret reference, missing secret data, missing 'token' key, and embedded-quote escaping. - TestWriteTerraformCLIConfig_BothBlocks asserts provider_installation and credentials co-render in one .terraformrc. - New bicepconfigs.TestValidateRequest covers the controller-level conditional validation matrix. - bicepconfig-test.bicep and tfbicep-combined-test.bicep updated to the new schema shape with a real SecretStore reference (was previously a no-op BasicAuth without a secret, which would now be rejected). Docs: - docs/architecture/terraform-bicep-config.md updated for the new schema, the credentials/token rendering, and the architecture README index now links the page (Copilot review #5).

brooke-hamilton

Minor issues only.

sylvainsf · 2026-05-11T23:30:07Z

Filed #11856 for the Delete env/secrets asymmetry — leaving it out of this PR to keep the scope focused.

radius-functional-tests · 2026-05-12T17:58:18Z

Radius functional test overview

🔍 Go to test action run

Click here to see the test run details

Name	Value
Repository	radius-project/radius
Commit ref	`58aa321`
Unique ID	func4f2d7a0834
Image tag	pr-func4f2d7a0834

gotestsum 1.13.0
KinD: v0.29.0
Dapr: 1.14.4
Azure KeyVault CSI driver: 1.4.2
Azure Workload identity webhook: 1.3.0
Bicep recipe location ghcr.io/radius-project/dev/test/testrecipes/test-bicep-recipes/<name>:pr-func4f2d7a0834
Terraform recipe location http://tf-module-server.radius-test-tf-module-server.svc.cluster.local/<name>.zip (in cluster)
applications-rp test image location: ghcr.io/radius-project/dev/applications-rp:pr-func4f2d7a0834
dynamic-rp test image location: ghcr.io/radius-project/dev/dynamic-rp:pr-func4f2d7a0834
controller test image location: ghcr.io/radius-project/dev/controller:pr-func4f2d7a0834
ucp test image location: ghcr.io/radius-project/dev/ucpd:pr-func4f2d7a0834
deployment-engine test image location: ghcr.io/radius-project/deployment-engine:latest

Test Status

⌛ Building Radius and pushing container images for functional tests...
✅ Container images build succeeded
⌛ Publishing Bicep Recipes for functional tests...
✅ Recipe publishing succeeded
⌛ Starting corerp-cloud functional tests...
⌛ Starting ucp-cloud functional tests...
✅ ucp-cloud functional tests succeeded
✅ corerp-cloud functional tests succeeded

Define TerraformConfigResource and BicepConfigResource in Radius.Core TypeSpec namespace. Add terraformConfig/bicepConfig reference fields to EnvironmentProperties. Regenerate OpenAPI spec and Go SDK (v20250801preview). Add design doc at docs/architecture/terraform-bicep-config.md.

Add TerraformConfig and BicepConfig datamodel structs reusing existing recipe_types.go sub-types. Add bidirectional API-to-datamodel converters for v20250801preview. Add datamodel/converter bridge files for version routing. Update environment converter to handle terraformConfig/bicepConfig reference fields.

Add resource registrations in SetupRadiusCoreNamespace using default sync CRUD controllers. Add route test entries for Put and Patch operations.

Add FetchTerraformConfig and FetchBicepConfig utilities in pkg/rp/util/. Update getConfigurationV20250801 in the recipe config loader to resolve referenced config resources and populate RecipeConfig. Add PUT-time validation in the environment controller to verify referenced config resource IDs exist.

Test_TerraformConfig_Redis: deploys a Terraform recipe (Redis on K8s) via a Radius.Core/terraformConfigs resource referenced by a Radius.Core/environments resource. Validates env var injection via the new config path. Test_BicepConfig_CRUD: validates CRUD and environment reference wiring for Radius.Core/bicepConfigs without requiring a private registry. Both tests follow existing dynamicrp test patterns alongside recipepacks_test.go.

- TerraformConfig: replace authentication/providers/envSecrets with terraformrc (providerInstallation: networkMirror/direct, credentials) + plain env map. Per spec, provider secrets and envSecrets are handled by recipe parameters, not config. - BicepConfig: replace inline authentication map with structured registryAuthentication (authenticationMethod enum: BasicAuth/AzureWI/ AwsIrsa, plus identity fields and basicAuthSecretId). - Loader bridges new shape into the legacy RecipeConfig consumed by the shared driver: terraformrc.credentials -> Authentication.Git.PAT, env -> EnvironmentVariables, registryAuthentication.basicAuthSecretId -> Bicep.Authentication["default"]. - Updates architecture doc and bicepconfig functional test fixture.

Add ProviderInstallation field to the shared TerraformConfigProperties datamodel and wire it through to the Terraform driver. The driver writes a .terraformrc file in the working directory and points Terraform at it via TF_CLI_CONFIG_FILE during both Deploy and Delete (so terraform init can resolve providers from a network mirror on destroy). The new field is optional and only populated by the Radius.Core path. Applications.Core leaves it nil, so the driver behavior is unchanged for the legacy code path consumed by existing recipeConfig users. Tests: - pkg/recipes/terraform/cliconfig_test.go: HCL rendering, file mode, edge cases, error handling. - TestSetEnvironmentVariables: new case for providerInstallation. - TestApplyTerraformCLIConfig: Delete-path helper. - Fixes pre-existing test compile failure in environment_test.go where getConfigurationV20250801 had a stale call signature.

Test_TerraformConfig_BicepConfig_Combined deploys a single Radius.Core/environments referencing both a terraformConfig (with terraformrc.providerInstallation and env vars) and a bicepConfig, then runs a Terraform recipe end-to-end. This exercises the new .terraformrc rendering path without requiring a network mirror in the test cluster by using providerInstallation.direct (default registry behavior).

- Remove the Implementation plan section (superseded by actual code). - Replace the aspirational Delete protection section with a Status and known limitations section that lists what is wired vs. follow-ups. - Expand the Runtime flow to call out the .terraformrc rendering path added in pkg/recipes/terraform/cliconfig.go. - Add a Code map pointing at the relevant files.

TerraformCredentialConfig and SecretConfig both have a single Secret string field; staticcheck (S1016) prefers a type conversion over a struct literal.

- Regenerate Bicep type definitions for radius.core 2025-08-01-preview to pick up the terraformConfigs/bicepConfigs schema refactor. - gofmt fix on terraformconfig_conversion.go indentation. Generated with mockgen v0.4.0 (matches CI version pinned in .github/workflows/lint.yaml).

…on failure (EOF on 127.0.0.1:45533) affecting 16 unrelated tests

Functional tests were failing with 'resource type not found' because the new types were defined in TypeSpec/codegen and wired into the corerp REST router, but never registered in the UCP manifest files that get baked into the ucpd image at build time. Adds the resource types to both the self-hosted (production) and dev manifests, plus the corresponding RBAC operation entries in pkg/corerp/setup/operations.go (mirroring the recipePacks pattern). Fixes Test_TerraformConfig_Redis, Test_BicepConfig_CRUD, and Test_TerraformConfig_BicepConfig_Combined.

Resolves several review comments on PR #11780. Schema changes: - BicepConfigProperties.registryAuthentication (single value, no host) is replaced with registryAuthentications: Record<...> keyed by registry hostname. The Bicep driver looks up credentials by the host parsed from the recipe template path; the previous shape gave the user no way to declare which registry the credentials applied to and the loader was hard-coding 'default' as the key, so credentials were silently dropped. - TerraformrcConfig.credentials documentation clarifies it is for HTTP Terraform CLI registry auth (rendered as native credentials "host" {} blocks with a 'token' key), not Git module-source PAT auth. Wiring changes: - Terraform driver now renders credentials "host" { token = ... } blocks in the generated .terraformrc, resolving the token value from the fetched-secret map at execution time. Drops the broken bridge that forwarded credentials into the legacy Git PAT path (which expects the 'pat' key, not 'token'). - terraform driver FindSecretIDs reports the new credentials secret stores with the 'token' key so the engine fetches them before the driver runs. - Loader uses the new host-keyed Bicep map to populate the legacy Authentication map (BasicAuth only; AzureWI/AwsIrsa stay schema-only follow-ups). Validation: - Environment controller's referenced-config-id checks now also verify the resource type matches the expected Radius.Core/{terraformConfigs, bicepConfigs}, instead of accepting any resource ID that happens to exist (Copilot review #1, #2). - New bicepconfigs.ValidateRequest hook (UpdateFilter) enforces that authenticationMethod=BasicAuth requires basicAuthSecretId, AzureWI requires both Wi ids, and AwsIrsa requires the role ARN. TypeSpec cannot express these conditional-required-field rules without a discriminated- union restructure (Copilot review #6). Tests: - New TestWriteTerraformCLIConfig_Credentials exercises native credentials rendering: success, deterministic ordering, missing secret reference, missing secret data, missing 'token' key, and embedded-quote escaping. - TestWriteTerraformCLIConfig_BothBlocks asserts provider_installation and credentials co-render in one .terraformrc. - New bicepconfigs.TestValidateRequest covers the controller-level conditional validation matrix. - bicepconfig-test.bicep and tfbicep-combined-test.bicep updated to the new schema shape with a real SecretStore reference (was previously a no-op BasicAuth without a secret, which would now be rejected). Docs: - docs/architecture/terraform-bicep-config.md updated for the new schema, the credentials/token rendering, and the architecture README index now links the page (Copilot review #5).

Test_BicepConfig_CRUD and Test_TerraformConfig_BicepConfig_Combined were failing because the new test bicep files declared Applications.Core/secretStores resources at the default (global) scope without a properties.resource value. The secretStore controller rejects this with: $.properties.resource cannot be empty for global scoped resource. Bind each test secretStore to a Kubernetes secret in the env namespace (matching the pattern used by corerp-resources-terraform-postgres.bicep and corerp-resources-terraform-private-git-repo-redis.bicep).

…d tests Two bugs surfaced by Brooke's PR review: 1. validateConfigRef never rejected missing references. Operation.GetResource clears database.ErrNotFound (returning nil err with a nil resource), so the existing 'if err != nil' guard always passed. Now inspect the returned resource pointer too: nil => BadRequest 'does not exist'; transport errors => InternalServerError. New unit tests in validateconfigref_test.go cover invalid-id, wrong-type, not-found, db-error, and happy-path cases for both terraformConfig and bicepConfig. 2. In recipes/terraform/execute.go Deploy, generateConfig (which calls terraform get to download the module) ran before setEnvironmentVariables wrote .terraformrc and exported TF_CLI_CONFIG_FILE. Module fetches from authenticated registries therefore happened without the configured credentials block in effect. Move setEnvironmentVariables ahead of generateConfig so the rc file is in scope for the entire init/get/apply pipeline. Also fills in the missing test coverage Brooke called out: - pkg/corerp/api/v20250801preview/terraformconfig_conversion_test.go: nil, NetworkMirror-only, Direct-only, both, multi-host Credentials, nil-entry skipped, wrong-type, round-trip identity, pointer-aliasing guard. - pkg/corerp/api/v20250801preview/bicepconfig_conversion_test.go: empty, BasicAuth, AzureWI, AwsIrsa, nil-entry skipped, wrong-type, round-trip identity, two-distinct-entries pointer-aliasing guard for the fromBicepRegistryAuthDataModel loop. - pkg/recipes/configloader/environment_v20250801_bridge_test.go: terraform Credentials/Env/ProviderInstallation mapping, Bicep BasicAuth mapping, silent-skip behavior for entries without BasicAuthSecretId, no synthesized empty Authentication map, and error wrapping for both fetch failures.

…ltipleCredentialHosts

radius-functional-tests · 2026-05-12T21:00:46Z

Radius functional test overview

🔍 Go to test action run

Click here to see the test run details

Name	Value
Repository	radius-project/radius
Commit ref	`b304290`
Unique ID	funcdff781c873
Image tag	pr-funcdff781c873

gotestsum 1.13.0
KinD: v0.29.0
Dapr: 1.14.4
Azure KeyVault CSI driver: 1.4.2
Azure Workload identity webhook: 1.3.0
Bicep recipe location ghcr.io/radius-project/dev/test/testrecipes/test-bicep-recipes/<name>:pr-funcdff781c873
Terraform recipe location http://tf-module-server.radius-test-tf-module-server.svc.cluster.local/<name>.zip (in cluster)
applications-rp test image location: ghcr.io/radius-project/dev/applications-rp:pr-funcdff781c873
dynamic-rp test image location: ghcr.io/radius-project/dev/dynamic-rp:pr-funcdff781c873
controller test image location: ghcr.io/radius-project/dev/controller:pr-funcdff781c873
ucp test image location: ghcr.io/radius-project/dev/ucpd:pr-funcdff781c873
deployment-engine test image location: ghcr.io/radius-project/deployment-engine:latest

Test Status

brooke-hamilton

🚀

sylvainsf added the pr:standard label Apr 29, 2026

github-actions Bot mentioned this pull request Apr 30, 2026

Causinator 9000 CI Failure Digest — 2026-04-11 #11633

Open

sylvainsf mentioned this pull request Apr 30, 2026

Test_TerraformPrivateGitModule_KubernetesRedis failing on main: 'Missing required argument: context' #11791

Open

Copilot AI mentioned this pull request Apr 30, 2026

fix: compute recipe context before terraform get to satisfy required argument validation #11792

Draft

12 tasks

sylvainsf force-pushed the add-terraform-bicep-config branch 3 times, most recently from a99b027 to 371a010 Compare May 4, 2026 20:44

sylvainsf marked this pull request as ready for review May 4, 2026 21:01

sylvainsf requested review from a team as code owners May 4, 2026 21:01

Copilot AI review requested due to automatic review settings May 4, 2026 21:01

sylvainsf requested a review from a team as a code owner May 4, 2026 21:01

Copilot started reviewing on behalf of sylvainsf May 4, 2026 21:02 View session

Copilot AI reviewed May 4, 2026

View reviewed changes

DariuszPorowski reviewed May 4, 2026

View reviewed changes

Comment thread docs/architecture/terraform-bicep-config.md Outdated

DariuszPorowski reviewed May 4, 2026

View reviewed changes

Comment thread docs/architecture/terraform-bicep-config.md Outdated

willdavsmith reviewed May 4, 2026

View reviewed changes

Comment thread docs/architecture/terraform-bicep-config.md

willdavsmith reviewed May 4, 2026

View reviewed changes

Comment thread docs/architecture/terraform-bicep-config.md

willdavsmith reviewed May 4, 2026

View reviewed changes

Comment thread docs/architecture/terraform-bicep-config.md

willdavsmith reviewed May 4, 2026

View reviewed changes

Comment thread docs/architecture/terraform-bicep-config.md

willtsai mentioned this pull request May 5, 2026

[Compute Extensibility] Documentation Overhaul and Migration Guide radius-project/docs#1835

Open

6 tasks

Copilot AI mentioned this pull request May 7, 2026

Compute extensibility documentation overhaul and migration guide radius-project/docs#1836

Draft

brooke-hamilton self-assigned this May 11, 2026

sylvainsf force-pushed the add-terraform-bicep-config branch from 23ab261 to 27b6f97 Compare May 11, 2026 19:39

brooke-hamilton removed their assignment May 11, 2026

brooke-hamilton reviewed May 11, 2026

View reviewed changes

sylvainsf mentioned this pull request May 11, 2026

Terraform recipe Delete drops environment variables and secret references #11856

Open

sylvainsf added 18 commits May 12, 2026 13:54

Register terraformConfigs and bicepConfigs REST controllers

393c9af

Add resource registrations in SetupRadiusCoreNamespace using default sync CRUD controllers. Add route test entries for Put and Patch operations.

Fix staticcheck S1016: convert TerraformCredentialConfig to SecretConfig

d075f09

TerraformCredentialConfig and SecretConfig both have a single Secret string field; staticcheck (S1016) prefers a type conversion over a struct literal.

Re-trigger CI: previous corerp-noncloud run hit kind cluster connecti…

4942c27

…on failure (EOF on 127.0.0.1:45533) affecting 16 unrelated tests

Document UCP manifest registration in architecture code map

90f9e5d

gofmt: align Credentials map keys in TestTerraformConfig_ConvertTo_Mu…

b304290

…ltipleCredentialHosts

sylvainsf force-pushed the add-terraform-bicep-config branch from 58aa321 to b304290 Compare May 12, 2026 20:59

sylvainsf requested review from brooke-hamilton and willdavsmith May 12, 2026 21:06

brooke-hamilton approved these changes May 12, 2026

View reviewed changes

sylvainsf merged commit 735157a into main May 12, 2026
61 checks passed

sylvainsf deleted the add-terraform-bicep-config branch May 12, 2026 21:42

rad-ci-bot mentioned this pull request May 12, 2026

Update auto-generated documentation (PR #11780) radius-project/docs#1841

Open

Conversation

sylvainsf commented Apr 29, 2026 • edited by nicolejms Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Description

Type of change

Contributor checklist

Uh oh!

github-actions Bot commented Apr 29, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Dependency Review

Scanned Files

Uh oh!

github-actions Bot commented Apr 29, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Unit Tests

Uh oh!

codecov Bot commented Apr 29, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

brooke-hamilton left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

sylvainsf commented May 11, 2026

Uh oh!

radius-functional-tests Bot commented May 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Radius functional test overview

Test Status

Uh oh!

radius-functional-tests Bot commented May 12, 2026

Radius functional test overview

Test Status

Uh oh!

brooke-hamilton left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants

sylvainsf commented Apr 29, 2026 •

edited by nicolejms

Loading

github-actions Bot commented Apr 29, 2026 •

edited

Loading

github-actions Bot commented Apr 29, 2026 •

edited

Loading

codecov Bot commented Apr 29, 2026 •

edited

Loading

radius-functional-tests Bot commented May 12, 2026 •

edited

Loading