Skip to content

Commit d6f24e0

Browse files
EMaherCopilot
andcommitted
docs: update integration-test-prerequisites skill for release-tests workflow
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
1 parent 8f854f4 commit d6f24e0

1 file changed

Lines changed: 10 additions & 5 deletions

File tree

  • .github/skills/integration-test-prerequisites

.github/skills/integration-test-prerequisites/SKILL.md

Lines changed: 10 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
---
22
name: "integration-test-prerequisites"
3-
description: "Set up Azure and GitHub prerequisites for integration workflows using a user-assigned managed identity, OIDC federated credentials, RBAC roles, and environment secrets. Use when troubleshooting AADSTS70025/AADSTS700213 or authorization failures during integration-test or integration-redact-secrets workflow runs."
3+
description: "Set up Azure and GitHub prerequisites for integration and release-tests workflows using a user-assigned managed identity, OIDC federated credentials, RBAC roles, and environment secrets. Use when troubleshooting AADSTS70025/AADSTS700213 or authorization failures during integration-test or release-tests workflow runs."
44
domain: "ci-cd"
55
confidence: "high"
66
source: "manual + observed from integration-test OIDC and RBAC troubleshooting"
@@ -10,14 +10,19 @@ source: "manual + observed from integration-test OIDC and RBAC troubleshooting"
1010

1111
Use this skill when preparing or repairing prerequisites for:
1212

13-
- `.github/workflows/integration-test.yml`
14-
- `.github/workflows/integration-redact-secrets.yml`
13+
- `.github/workflows/integration-test.yml` — Extract→Publish round-trip
14+
- `.github/workflows/integration-redact-secrets.yml` — Secret redaction validation
15+
- `.github/workflows/release-tests.yml` — Orchestrator that calls CI, then both integration-test workflows sequentially
16+
17+
All integration-test workflows share the same GitHub environment (`integration-test`) and Azure identity. Setting up prerequisites once covers all three workflows.
1518

1619
These workflows expect:
17-
- OIDC login through `azure/login@v2`
18-
- GitHub environment `integration-test` (shared by both workflows)
20+
- OIDC login through `azure/login@v3`
21+
- GitHub environment `integration-test` (shared by all integration workflows)
1922
- Azure identity with enough permissions to deploy resources and create role assignments in test resource groups
2023

24+
The `release-tests.yml` orchestrator calls `ci.yml` (no Azure prereqs), then `integration-test.yml` and `integration-redact-secrets.yml` (both use the `integration-test` environment). Secrets are passed through from the orchestrator's repo-level secrets to the called workflows' environment.
25+
2126
Preferred identity model: user-assigned managed identity (UAMI).
2227

2328
## Required Inputs

0 commit comments

Comments
 (0)