feat(rcv1p): unify cert bootstrap flow and add Windows CA refresh task#8096

Open

rchincha wants to merge 26 commits intomainfrom

origin/rchinchani/rcv1p-2

Commits on May 2, 2026

feat: bump windows image version for 2026-03B (#8074)

authored and
Ramkumar Chinchani
committed
feat(rcv1p): unify cert bootstrap flow and add Windows CA refresh task
Ramkumar Chinchani
committed
feat: enhance CA certificates refresh task with endpoint mode based on location
Ramkumar Chinchani
committed
feat: add tests for certificate endpoint mode handling in AKS custom cloud spec
Ramkumar Chinchani
committed
feat: simplify certificate endpoint mode handling and refresh task registration
Ramkumar Chinchani
committed
feat: implement conditional CA certificates refresh task registration for legacy and opted-in rcv1p modes
Ramkumar Chinchani
committed
feat: enhance CA certificates refresh task registration for legacy CSE packages
Ramkumar Chinchani
committed
feat: update tests for certificate endpoint mode handling and refresh schedule installation
Ramkumar Chinchani
committed
feat: refactor test setup functions for improved readability and consistency
Ramkumar Chinchani
committed
feat: update Get-CustomCloudCertEndpointModeFromLocation to clarify endpoint mode handling for legacy and rcv1p regions
Ramkumar Chinchani
committed
feat: enhance tests for Should-InstallCACertificatesRefreshTask and Get-CACertificates to verify URI handling
Ramkumar Chinchani
committed
feat: update cse_cmd.sh and cse_cmd.sh.gtpl to ensure consistent logging of custom cloud file paths
Ramkumar Chinchani
committed
feat: update CA certificates functions for backward compatibility with optional Location parameter
Ramkumar Chinchani
committed
feat: remove deprecated Ubuntu repository initialization logic from init-aks-custom-cloud.sh
Ramkumar Chinchani
committed
Split init-aks-custom-cloud.sh to fix Flatcar/ACL customData size limit

Ramkumar Chinchani
and
Copilot
committed
feat(e2e): add RCV1P cert mode end-to-end tests

Ramkumar Chinchani
and
Copilot
committed
Address PR review feedback: fix multi-subscription, validation, and error handling

Ramkumar Chinchani
and
Copilot
committed
Add Windows not-opted-in negative test for RCV1P cert mode

Ramkumar Chinchani
and
Copilot
committed
e2e: add VM instance-level tag update for RCV1P wireserver opt-in

Ramkumar Chinchani
and
Copilot
committed
e2e: use JSON injection for VM profile tags at VMSS creation time

Ramkumar Chinchani
and
Copilot
committed
e2e: use lightweight PATCH for VM instance tags instead of JSON injection

Ramkumar Chinchani
and
Copilot
committed
Revert "e2e: use lightweight PATCH for VM instance tags instead of JSON injection"
Ramkumar Chinchani
committed
e2e: use Microsoft.Resources/tags API for VM instance tag patching

Ramkumar Chinchani
and
Copilot
committed
e2e: use BeginUpdate + deferred CSE for VM instance tagging

Ramkumar Chinchani
and
Copilot
committed
e2e: add feature flag check for RCV1P subscription

Ramkumar Chinchani
and
Copilot
committed
REVERT ME: poll wireserver IsOptedInForRootCerts with retry loop

Ramkumar Chinchani
and
Copilot
committed