feat: update azure workflow process to make pulumi first-class for new user workflow (#202) - #231
Closed
Arshadul-Monir wants to merge 22 commits into
Closed
feat: update azure workflow process to make pulumi first-class for new user workflow (#202)#231Arshadul-Monir wants to merge 22 commits into
Arshadul-Monir wants to merge 22 commits into
Conversation
Member
Author
This stack of pull requests is managed by Graphite. Learn more about stacking. |
|
Preview of current changes:Change Summary
Detailed DiffClick to view full diffPreviewing update (main):
pulumi:pulumi:Stack: (same)
[urn=urn:pulumi:main::platform-infra::pulumi:pulumi:Stack::platform-infra-main]
+ + azuread:index/user:User: (create)
[urn=urn:pulumi:main::platform-infra::azuread:index/user:User::azure-user-kelly-lin]
[provider=urn:pulumi:main::platform-infra::pulumi:providers:azuread::azuread::536820c4-ccab-4f35-9a73-771eefe81dd7]
accountEnabled : true
disablePasswordExpiration: false
disableStrongPassword : false
displayName : "Kelly Lin"
forcePasswordChange : true
givenName : "Kelly"
mail : "kelly.lin@patinanetwork.onmicrosoft.com"
mailNickname : "kelly.lin"
password : [secret]
showInAddressList : true
surname : "Lin"
userPrincipalName : "kelly.lin@patinanetwork.onmicrosoft.com"
+ + github:index/teamMembership:TeamMembership: (create)
[urn=urn:pulumi:main::platform-infra::github:index/teamMembership:TeamMembership::Patina-Network-team-patchats-member-Kxlcl]
[provider=urn:pulumi:main::platform-infra::pulumi:providers:github::github::0e691a42-5644-4fd9-90dc-49c3d6bc221e]
role : "member"
teamId : "17082384"
username : "Kxlcl"
+ + github:index/teamMembership:TeamMembership: (create)
[urn=urn:pulumi:main::platform-infra::github:index/teamMembership:TeamMembership::Patina-Network-team-developers-member-Kxlcl]
[provider=urn:pulumi:main::platform-infra::pulumi:providers:github::github::0e691a42-5644-4fd9-90dc-49c3d6bc221e]
role : "member"
teamId : "17039372"
username : "Kxlcl"
+ + azuread:index/groupMember:GroupMember: (create)
[urn=urn:pulumi:main::platform-infra::azuread:index/groupMember:GroupMember::azure-group-k8s-manifests-readers-member-kelly.lin]
[provider=urn:pulumi:main::platform-infra::pulumi:providers:azuread::azuread::536820c4-ccab-4f35-9a73-771eefe81dd7]
groupObjectId : "6272a35a-c42d-41ae-b0c6-d6d849249a19"
memberObjectId: [unknown]
+ + azure-native:authorization:RoleAssignment: (create)
[urn=urn:pulumi:main::platform-infra::azure-native:authorization:RoleAssignment::azure-role-assignment-kelly.lin-global-reader]
[provider=urn:pulumi:main::platform-infra::pulumi:providers:azure-native::azure::36fe3124-ad43-4647-bcea-b6c62094cde9]
azureApiVersion : "2022-04-01"
principalId : [unknown]
principalType : "User"
roleAssignmentName : "f96f8b30-c980-6997-2006-d2721d3c4c82"
roleDefinitionId : "/subscriptions/7779681e-36d2-4f42-9289-8160bd1a407d/providers/Microsoft.Authorization/roleDefinitions/acdd72a7-3385-48ef-bd42-f606fba81ae7"
scope : "/subscriptions/7779681e-36d2-4f42-9289-8160bd1a407d"
+ + azuread:index/groupMember:GroupMember: (create)
[urn=urn:pulumi:main::platform-infra::azuread:index/groupMember:GroupMember::azure-group-sops-master-readers-member-kelly.lin]
[provider=urn:pulumi:main::platform-infra::pulumi:providers:azuread::azuread::536820c4-ccab-4f35-9a73-771eefe81dd7]
groupObjectId : "e746cd14-1607-421b-b2b6-03bee4eeb3e4"
memberObjectId: [unknown]
+ + azuread:index/directoryRoleAssignment:DirectoryRoleAssignment: (create)
[urn=urn:pulumi:main::platform-infra::azuread:index/directoryRoleAssignment:DirectoryRoleAssignment::azure-directory-role-assignment-kelly.lin-globalReader]
[provider=urn:pulumi:main::platform-infra::pulumi:providers:azuread::azuread::536820c4-ccab-4f35-9a73-771eefe81dd7]
directoryScopeId : "/"
principalObjectId: [unknown]
roleId : "f2ef992c-3afb-46b9-b7cf-a126ee74c451"
Resources:
+ + 7 to create
426 unchanged |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.




feat: update azure workflow process to make pulumi first-class for new user workflow (#202)
chore: remove userAdministrator from most Azure users (this allow (#203)
s one to reset anyones password / manage other users, which is overkill)
chore: remove globalReader from Kevin Ma (globalReader is globalAdministrator without any write perms, so it is redundant) (#204)
chore: add angela yu as azure user (#205)
chore: add nancy huang to azure (#207)
fix: update azure secret credentials (as well as add the cmd that should be used to reset when necessary) (#210)
chore: add
just authandjust re-auth(#209)chore: remove newUser from angela (#206)
feat: support adding apps to main branch bypass as well as teams (#211)
feat: allow patAgent to bypass main branch protections to merge updates (#212)
chore: explicitly add PULUMI_BACKEND_URL so that it knows exactly what state to target (required if a dev has multiple pulumi repos with differing states) (#213) (#215)
add grafana-all-ro-sa (will be used as a datasource in grafana) (#219)
Secrets: Added Digital Ocean DNS PAT (#220)
add mainBranchRequiredReviewers to all repositories (#216)
delete CODEOWNERS (#217)
add ryan (spiffyy99) to infra & cicd team (#224)
chore: remove newUser from nancy (#208)
chore: add comment indicating how to unblock CI when azure creds are refreshed (#214)
TAN-36: encrypt codebloom.yaml (#226)
Update DigitalOcean DNS PAT (#227)
Update tahminator's membership type on codebloom team to maintainer (#228)
user: onboarded kelly lin (#230)