You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: .github/skills/integration-test-prerequisites/SKILL.md
+10-5Lines changed: 10 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,6 +1,6 @@
1
1
---
2
2
name: "integration-test-prerequisites"
3
-
description: "Set up Azure and GitHub prerequisites for integration workflows using a user-assigned managed identity, OIDC federated credentials, RBAC roles, and environment secrets. Use when troubleshooting AADSTS70025/AADSTS700213 or authorization failures during integration-test or integration-redact-secrets workflow runs."
3
+
description: "Set up Azure and GitHub prerequisites for integration and release-tests workflows using a user-assigned managed identity, OIDC federated credentials, RBAC roles, and environment secrets. Use when troubleshooting AADSTS70025/AADSTS700213 or authorization failures during integration-test or release-tests workflow runs."
4
4
domain: "ci-cd"
5
5
confidence: "high"
6
6
source: "manual + observed from integration-test OIDC and RBAC troubleshooting"
@@ -10,14 +10,19 @@ source: "manual + observed from integration-test OIDC and RBAC troubleshooting"
10
10
11
11
Use this skill when preparing or repairing prerequisites for:
-`.github/workflows/release-tests.yml` — Orchestrator that calls CI, then both integration-test workflows sequentially
16
+
17
+
All integration-test workflows share the same GitHub environment (`integration-test`) and Azure identity. Setting up prerequisites once covers all three workflows.
15
18
16
19
These workflows expect:
17
-
- OIDC login through `azure/login@v2`
18
-
- GitHub environment `integration-test` (shared by both workflows)
20
+
- OIDC login through `azure/login@v3`
21
+
- GitHub environment `integration-test` (shared by all integration workflows)
19
22
- Azure identity with enough permissions to deploy resources and create role assignments in test resource groups
20
23
24
+
The `release-tests.yml` orchestrator calls `ci.yml` (no Azure prereqs), then `integration-test.yml` and `integration-redact-secrets.yml` (both use the `integration-test` environment). Secrets are passed through from the orchestrator's repo-level secrets to the called workflows' environment.
0 commit comments