Skip to content

Sovereign Cloud - Add global deployment model for LocalBox environment - #576

Merged
Marco Weber (qxsch) merged 3 commits into
microsoft:mainfrom
janegilring:feature/sovereign-global-localbox
Oct 26, 2026
Merged

Marco Weber (qxsch) merged 3 commits into
microsoft:mainfrom
janegilring:feature/sovereign-global-localbox

Conversation

@janegilring

Copy link
Copy Markdown
Collaborator

This pull request introduces a new global deployment model for the "LocalBox" VM environment in Sovereign Cloud MicroHack labs, shifting from per-subscription to event-wide deployment. The documentation, automation scripts, and cost estimates are updated to reflect this change. Additionally, the deployment logic is improved for idempotency and efficiency, and cost calculation fields are clarified.

Global LocalBox Deployment and Cost Model

  • Introduced global-event-deploy.ps1 to deploy a single LocalBox instance per event, rather than per subscription, and to assign necessary roles and tags for all participants.
  • Updated documentation in Readme.md and challenge-06.md to clarify that hosted events now use one shared LocalBox for all subscriptions, with updated cost guidance and instructions for participants. [1] [2]
  • Modified lab-defaults.json to distinguish between shared (per-subscription) and global (per-event) LocalBox deployment costs, setting shared deployment cost to zero and introducing a new field for global deployment cost.

Automation and Idempotency Improvements

  • Updated deploy-lab.ps1 and main.bicep to check for existing Security Reader role assignments before creating new ones, preventing duplicate assignments and improving idempotency. [1] [2]
  • Refactored shared-deploy-lab.ps1 to remove LocalBox deployment logic, delegating this responsibility to the new global deployment script, and improved error handling. [1] [2]

Minor Updates

  • Improved error messages in localbox-credentials.ps1 to reference the new global event hook.
  • Minor cleanup in main.bicep for module declarations.

Move LocalBox provisioning to the Console global event hook, grant event-wide access, publish shared resource discovery, and update cost estimates and participant guidance. Preserve per-subscription governance and quota preparation and add global lifecycle and cross-subscription command tests. Live cross-subscription VM creation remains an integration gate.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Avoid RoleAssignmentExists for participants in the global LocalBox subscription by preserving existing direct grants. Keep default creation in other subscriptions, fail on lookup errors, and cover recovery with focused regression tests.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Add participant subscription-selection guidance, TEST4 deployment screenshots and integration evidence, and the observed 4h24m preparation duration with readiness caveats.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@qxsch
Marco Weber (qxsch) merged commit 1659e03 into microsoft:main Oct 26, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants