You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
* WIP: Merge lio's work
* WIP able to start cd container
* WIP start working on logging
* WIP: Have aci logging, able to run cd
* WIP: fix the cd permission
* WIP: able to build
* Implement config and down api
* Update hash and go.mod
* Update nix sha
* Address PR comments
* Switch to container apps to run cd, use key vault for config
* Update nix sha
* Add build log
* Update nix sha
* Streaming cd log
* Add test coverage and fix linting
* Azure BYOC: device-code login, drop App Configuration, separate blob containers
- Add MSAL-based device-code auth in pkg/clouds/azure/login.go with
token-cache persistence via defang's TokenStore; tries
DefaultAzureCredential, then silent MSAL, then interactive. Wired up
through ByocAzure.Authenticate then driver.Authenticate.
- Drop the appcfg/ package and the dual-write path; config now lives
only in Key Vault. PutConfig/ListConfig/DeleteConfig updated
accordingly.
- Implement GetService/GetServices by reading the project.pb blob
(same pattern as AWS/GCP providers).
- Split the CD storage account into three blob containers: `uploads`
(payloads/tarballs), `pulumi` (Pulumi state backend), `projects`
(project.pb audit blobs). GetProjectUpdate now reads from `projects`.
- Add read-only discovery helpers (FindStorageAccount, KeyVault.Find,
findForConfig) so GetProjectUpdate / ListConfig / DeleteConfig don't
provision resources just to read or clean up.
- Improve Key Vault UX: actionable error when the caller lacks
Microsoft.Authorization/roleAssignments/write, plus retry on
transient ForbiddenByRbac while RBAC propagates after SetUp.
- KeyVault.New now takes the full Azure struct so the authenticated
credential propagates instead of each call falling back to
DefaultAzureCredential.
* No need to pass the RG and keyvault as env var to cd
* Update Nix vendorHash to sha256-RDLJgsMv0iRbIiNWENOoV4JDcgjzD+4Hbi0vJiUxTzU=
* Apply suggestions from code review
Co-authored-by: Lio李歐 <lionello@users.noreply.github.com>
* Trim off pre-signed token from context url
* Self assign keyvault permissions if missing
* Remove location from the resource group
* Rename config keyvault from kv- to defang-config-
* fix: ensure proper closure of log channels by waiting for all goroutines to finish
* fix: return raw error for transient failures in GetDeploymentStatus
* fix: increase cliTimeout to 90 seconds for improved Azure CLI performance
* fix: add DEFANG_PULUMI_DEBUG and DEFANG_PULUMI_DIFF environment variables for enhanced debugging
* fix: increase CD container resources for improved Pulumi performance
* fix: update PollUntilDone calls to use azure.PollOptions for consistency and improved polling behavior
* fix(azure): cd ls command used wrong blob container
* fix(azure): ensure container resources are explicitly set in job execution to avoid default fallback
* fix(azure): update blob iteration and state file parsing to use specified container name
---------
Co-authored-by: Edward J <edw@defang.io>
Co-authored-by: Lio李歐 <lionello@users.noreply.github.com>
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: Lionello Lunesu <lio+git@lunesu.com>
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?v=4&size=40){kind=avatar}
0 commit comments