Skip to content

feat: update azure workflow process to make pulumi first-class for new user workflow (#202) - #231

Closed
Arshadul-Monir wants to merge 22 commits into
add-kellyfrom
main
Closed

feat: update azure workflow process to make pulumi first-class for new user workflow (#202)#231
Arshadul-Monir wants to merge 22 commits into
add-kellyfrom
main

Conversation

@Arshadul-Monir

Copy link
Copy Markdown
Member

feat: update azure workflow process to make pulumi first-class for new user workflow (#202)

chore: remove userAdministrator from most Azure users (this allow (#203)

s one to reset anyones password / manage other users, which is overkill)

chore: remove globalReader from Kevin Ma (globalReader is globalAdministrator without any write perms, so it is redundant) (#204)

chore: add angela yu as azure user (#205)

chore: add nancy huang to azure (#207)

fix: update azure secret credentials (as well as add the cmd that should be used to reset when necessary) (#210)

chore: add just auth and just re-auth (#209)

chore: remove newUser from angela (#206)

feat: support adding apps to main branch bypass as well as teams (#211)

feat: allow patAgent to bypass main branch protections to merge updates (#212)

chore: explicitly add PULUMI_BACKEND_URL so that it knows exactly what state to target (required if a dev has multiple pulumi repos with differing states) (#213) (#215)

add grafana-all-ro-sa (will be used as a datasource in grafana) (#219)

Secrets: Added Digital Ocean DNS PAT (#220)

add mainBranchRequiredReviewers to all repositories (#216)

delete CODEOWNERS (#217)

add ryan (spiffyy99) to infra & cicd team (#224)

chore: remove newUser from nancy (#208)

chore: add comment indicating how to unblock CI when azure creds are refreshed (#214)

TAN-36: encrypt codebloom.yaml (#226)

Update DigitalOcean DNS PAT (#227)

Update tahminator's membership type on codebloom team to maintainer (#228)

user: onboarded kelly lin (#230)

tahminator and others added 22 commits July 8, 2026 19:53
s one to reset anyones password / manage other users, which is overkill)
…istrator without any write perms, so it is redundant) (#204)
…t state to target (required if a dev has multiple pulumi repos with differing states) (#213) (#215)

Copy link
Copy Markdown
Member Author

This stack of pull requests is managed by Graphite. Learn more about stacking.

@sonarqubecloud

Copy link
Copy Markdown

@pat-agent

pat-agent Bot commented Aug 17, 2026

Copy link
Copy Markdown

Preview of current changes:

Change Summary

Operation Count
🟢 Create 7
Unchanged 426

Detailed Diff

Click to view full diff
Previewing update (main):
  pulumi:pulumi:Stack: (same)
    [urn=urn:pulumi:main::platform-infra::pulumi:pulumi:Stack::platform-infra-main]
+   + azuread:index/user:User: (create)
        [urn=urn:pulumi:main::platform-infra::azuread:index/user:User::azure-user-kelly-lin]
        [provider=urn:pulumi:main::platform-infra::pulumi:providers:azuread::azuread::536820c4-ccab-4f35-9a73-771eefe81dd7]
        accountEnabled           : true
        disablePasswordExpiration: false
        disableStrongPassword    : false
        displayName              : "Kelly Lin"
        forcePasswordChange      : true
        givenName                : "Kelly"
        mail                     : "kelly.lin@patinanetwork.onmicrosoft.com"
        mailNickname             : "kelly.lin"
        password                 : [secret]
        showInAddressList        : true
        surname                  : "Lin"
        userPrincipalName        : "kelly.lin@patinanetwork.onmicrosoft.com"
+   + github:index/teamMembership:TeamMembership: (create)
        [urn=urn:pulumi:main::platform-infra::github:index/teamMembership:TeamMembership::Patina-Network-team-patchats-member-Kxlcl]
        [provider=urn:pulumi:main::platform-infra::pulumi:providers:github::github::0e691a42-5644-4fd9-90dc-49c3d6bc221e]
        role      : "member"
        teamId    : "17082384"
        username  : "Kxlcl"
+   + github:index/teamMembership:TeamMembership: (create)
        [urn=urn:pulumi:main::platform-infra::github:index/teamMembership:TeamMembership::Patina-Network-team-developers-member-Kxlcl]
        [provider=urn:pulumi:main::platform-infra::pulumi:providers:github::github::0e691a42-5644-4fd9-90dc-49c3d6bc221e]
        role      : "member"
        teamId    : "17039372"
        username  : "Kxlcl"
+   + azuread:index/groupMember:GroupMember: (create)
        [urn=urn:pulumi:main::platform-infra::azuread:index/groupMember:GroupMember::azure-group-k8s-manifests-readers-member-kelly.lin]
        [provider=urn:pulumi:main::platform-infra::pulumi:providers:azuread::azuread::536820c4-ccab-4f35-9a73-771eefe81dd7]
        groupObjectId : "6272a35a-c42d-41ae-b0c6-d6d849249a19"
        memberObjectId: [unknown]
+   + azure-native:authorization:RoleAssignment: (create)
        [urn=urn:pulumi:main::platform-infra::azure-native:authorization:RoleAssignment::azure-role-assignment-kelly.lin-global-reader]
        [provider=urn:pulumi:main::platform-infra::pulumi:providers:azure-native::azure::36fe3124-ad43-4647-bcea-b6c62094cde9]
        azureApiVersion     : "2022-04-01"
        principalId         : [unknown]
        principalType       : "User"
        roleAssignmentName  : "f96f8b30-c980-6997-2006-d2721d3c4c82"
        roleDefinitionId    : "/subscriptions/7779681e-36d2-4f42-9289-8160bd1a407d/providers/Microsoft.Authorization/roleDefinitions/acdd72a7-3385-48ef-bd42-f606fba81ae7"
        scope               : "/subscriptions/7779681e-36d2-4f42-9289-8160bd1a407d"
+   + azuread:index/groupMember:GroupMember: (create)
        [urn=urn:pulumi:main::platform-infra::azuread:index/groupMember:GroupMember::azure-group-sops-master-readers-member-kelly.lin]
        [provider=urn:pulumi:main::platform-infra::pulumi:providers:azuread::azuread::536820c4-ccab-4f35-9a73-771eefe81dd7]
        groupObjectId : "e746cd14-1607-421b-b2b6-03bee4eeb3e4"
        memberObjectId: [unknown]
+   + azuread:index/directoryRoleAssignment:DirectoryRoleAssignment: (create)
        [urn=urn:pulumi:main::platform-infra::azuread:index/directoryRoleAssignment:DirectoryRoleAssignment::azure-directory-role-assignment-kelly.lin-globalReader]
        [provider=urn:pulumi:main::platform-infra::pulumi:providers:azuread::azuread::536820c4-ccab-4f35-9a73-771eefe81dd7]
        directoryScopeId : "/"
        principalObjectId: [unknown]
        roleId           : "f2ef992c-3afb-46b9-b7cf-a126ee74c451"
Resources:
+   + 7 to create
    426 unchanged

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants