feature/azure uami vs spns#176
Conversation
JohannesRudolph
commented
May 20, 2026
- feat: clarify use of UAMIs as preferred over SPNs
- docs: document agent instructions for azure modules
- feat: extend the scorecard with a category summary per module
- fix(azure/budget-alert): migrate backplane to UAMI + WIF pattern
- fix(azure/storage-account): migrate backplane to UAMI + WIF pattern
- feat: deploy azure backplanes into named resource groups
- fix: wait for tofu 1.12+ to enable const for hub module source variable
standardize on AGENTS.md format for all agent instructions, and add detailed conventions for Azure backplanes based on our learnings from the first few implementations. This includes the rationale for using UAMIs, the implementation pattern, required variables/outputs, wiring in `meshstack_integration.tf`, and a checklist for Azure backplanes.
this allows us to see maturity at a glance
- Replace azuread_application/service_principal with azurerm_user_assigned_identity - Replace azuread_application_federated_identity_credential with azurerm_federated_identity_credential - Remove azuread_application_password and directory role assignments - Remove create_service_principal_name/existing_principal_ids toggle pattern - Add location and resource_group_name variables for UAMI placement - Add identity output (client_id, principal_id, tenant_id) - Update meshstack_integration.tf: add const=true to hub var, use var.hub.git_ref in backplane source - Add azure_resource_group_name and azure_location integration variables - Fix ARM_CLIENT_ID to reference module.backplane.identity.client_id - Fix time provider version to ~> 0.11 in buildingblock/versions.tf - Remove azuread provider from integration and e2e - Add azure_resource_group_name to e2e test fixtures
- Replace azuread_application/service_principal with azurerm_user_assigned_identity - Replace azuread_application_federated_identity_credential with azurerm_federated_identity_credential - Remove azuread_application_password resources - Remove create_service_principal_name/existing_principal_ids toggle pattern - Add location and resource_group_name variables for UAMI placement - Add identity output (client_id, principal_id, tenant_id) - Update meshstack_integration.tf: add const=true to hub var, use var.hub.git_ref in backplane source - Add azure_resource_group_name integration variable - Fix ARM_CLIENT_ID to reference module.backplane.identity.client_id - Remove azuread provider from backplane/versions.tf, integration, and e2e - Add azure_resource_group_name to e2e test fixtures
Derive resource group names automatically from backplane name inputs. In e2e tests, this is automatically randomized by the test context name suffix.
🎨 Missing Building Block IconsFound 2 building block(s) without Copy the AI Prompts below and use them with your favorite AI image generator (Gemini, DALL-E, Midjourney, Stable Diffusion, etc.). Then follow the Post-Processing Steps to prepare the icons for upload. Azure Virtual Machine StarterkitPlatform: Path: AI Prompt (copy this to image generator)Post-Processing InstructionsStep 1: Remove white background with GIMP (free) a) Open image in GIMP Step 2: Resize to 800x800 pixels if needed
Step 3: Compress with pngquant (free command line tool)
Target specs: 800x800px PNG with transparent background, under 100KB Kubernetes Manifest (Helm)Platform: Path: AI Prompt (copy this to image generator)Post-Processing InstructionsStep 1: Remove white background with GIMP (free) a) Open image in GIMP Step 2: Resize to 800x800 pixels if needed
Step 3: Compress with pngquant (free command line tool)
Target specs: 800x800px PNG with transparent background, under 100KB |
|
📋 Janny has opened a Feature Shipping Tracker: Azure UAMI + WIF Pattern for Backplane Modules for this PR. |
|
This pull request is automatically being deployed by Amplify Hosting (learn more). |
…backplane' for consistency
not yet supported until we upgrade to tofu 1.12+