Architecture doc describing credentials

[brooke-hamilton]

Description

This pull request updates the architecture documentation to include information about cloud credentials and their management. The main changes add a new reference to a credentials.md document, both in the list of architecture documents and in the recommended reading order for new contributors.

Documentation updates:

• Added a reference to credentials.md in the main architecture documentation list, describing how cloud credentials are stored and used for deployments, and how clients authenticate to a Radius install.
• Updated the recommended reading order for new contributors to include credentials.md before application-graph.md.

Type of change

• This pull request is a minor refactor, code cleanup, test improvement, or other maintenance task and doesn't change the functionality of Radius (issue link optional).

Fixes: N/A

Contributor checklist

Please verify that the PR meets the following requirements, where applicable:

• An overview of proposed schema changes is included in a linked GitHub issue.
  • Yes
  • Not applicable
• A design document is added or updated under eng/design-notes/ in this repository, if new APIs are being introduced.
  • Yes
  • Not applicable
• The design document has been reviewed and approved by Radius maintainers/approvers.
  • Yes
  • Not applicable
• A PR for resource-types-contrib is created, if resource types or recipes are affected by the changes in this PR.
  • Yes
  • Not applicable
• A PR for dashboard is created, if the Radius Dashboard is affected by the changes in this PR.
  • Yes
  • Not applicable
• A PR for the documentation repository is created, if the changes in this PR affect the documentation or any user facing updates are made.
  • Yes
  • Not applicable

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Scanned Files

None

[Copilot]

Pull request overview

Updates the architecture documentation set to cover how Radius manages cloud credentials (outbound) and how clients authenticate to a Radius install (inbound), and adds this new doc to the architecture reading list for contributors.

Changes:

• Added a new architecture document, docs/architecture/credentials.md, describing credential storage, resolution flows, supported auth kinds, and supported cluster topologies.
• Updated docs/architecture/README.md to reference credentials.md and include it in the recommended reading order.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 1 comment.

File	Description
docs/architecture/README.md	Adds credentials.md to the architecture index and contributor reading order.
docs/architecture/credentials.md	New end-to-end credential/auth architecture doc grounded in current code paths and Helm configuration.

[radius-functional-tests]

Radius functional test overview

🔍 Go to test action run

Click here to see the test run details

Name	Value
Repository	radius-project/radius
Commit ref	860ff4d
Unique ID	funcbe8b7eb6b1
Image tag	pr-funcbe8b7eb6b1

• gotestsum 1.13.0
• KinD: v0.29.0
• Dapr: 1.14.4
• Azure KeyVault CSI driver: 1.4.2
• Azure Workload identity webhook: 1.3.0
• Bicep recipe location ghcr.io/radius-project/dev/test/testrecipes/test-bicep-recipes/<name>:pr-funcbe8b7eb6b1
• Terraform recipe location http://tf-module-server.radius-test-tf-module-server.svc.cluster.local/<name>.zip (in cluster)
• applications-rp test image location: ghcr.io/radius-project/dev/applications-rp:pr-funcbe8b7eb6b1
• dynamic-rp test image location: ghcr.io/radius-project/dev/dynamic-rp:pr-funcbe8b7eb6b1
• controller test image location: ghcr.io/radius-project/dev/controller:pr-funcbe8b7eb6b1
• ucp test image location: ghcr.io/radius-project/dev/ucpd:pr-funcbe8b7eb6b1
• deployment-engine test image location: ghcr.io/radius-project/deployment-engine:latest

Test Status

⌛ Building Radius and pushing container images for functional tests...
✅ Container images build succeeded
⌛ Publishing Bicep Recipes for functional tests...
✅ Container images build succeeded
⌛ Publishing Bicep Recipes for functional tests...
✅ Recipe publishing succeeded
⌛ Starting ucp-cloud functional tests...
⌛ Starting corerp-cloud functional tests...
✅ Recipe publishing succeeded
⌛ Starting corerp-cloud functional tests...
⌛ Starting ucp-cloud functional tests...
✅ ucp-cloud functional tests succeeded
✅ ucp-cloud functional tests succeeded
✅ corerp-cloud functional tests succeeded
✅ corerp-cloud functional tests succeeded

[github-actions]

Unit Tests

    2 files  ±0    420 suites  ±0   7m 1s ⏱️ +18s
5 022 tests ±0  5 020 ✅ ±0  2 💤 ±0  0 ❌ ±0 
6 049 runs  ±0  6 047 ✅ ±0  2 💤 ±0  0 ❌ ±0 

Results for commit 860ff4d. ± Comparison against base commit 073b796.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 51.22%. Comparing base (073b796) to head (860ff4d).

Additional details and impacted files

@@            Coverage Diff             @@
##             main   #11837      +/-   ##
==========================================
+ Coverage   51.20%   51.22%   +0.01%     
==========================================
  Files         715      715              
  Lines       45074    45074              
==========================================
+ Hits        23079    23087       +8     
+ Misses      19798    19794       -4     
+ Partials     2197     2193       -4     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.