Repository navigation
Sovereign Cloud enhancements - LocalBox automation - #609
Open
Jan Egil Ring (janegilring) wants to merge 38 commits into
Open
Jan Egil Ring (janegilring) wants to merge 38 commits into
Jan Egil Ring (janegilring) wants to merge 38 commits into
Conversation
Monitor nested deployment with Console token refresh, run default guest preparation and Pester tests, pass the event Entra group, and retain private diagnostics. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Resolve missing guest sources from a checksum-verified immutable revision and validate the package before deployment changes. Cover labautomation-only mounts, corrupt sources, and preflight failure propagation. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Capture guest prerequisites inside diagnostics and install a private cluster-compatible client for SYSTEM without changing machine tools. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Cover private kubectl installation, version validation, retries and early diagnostics; update the immutable Console source pin and hosted-event documentation. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Use a validated temporary ActiveStore API host route around the health child process, preserve existing routes and verify cleanup on success and failure. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Document route ownership and lifecycle and cover matching/conflicting routes, endpoint validation, interface selection and success/failure cleanup. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Print actual suite counts, assessment status, scope and remaining manual checks after all readiness validations; explicitly report failed or unverified gates without claiming success. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Suppress Blob transfer progress, avoid parsing download metadata and separate native stderr from JSON while preserving failures. Verified against completed test-06 artifacts. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Keep NAT outbound access and Challenge 7 Standard Bastion unchanged. Share the deployment path with manual setup and reject automatic dedicated-Bastion migrations. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Use a resumable managed command with existing local ARM files, a two-minute backoff and the remaining nested-readiness budget. Require successful correlated validation before deploying; retain terminal errors and avoid duplicate deployments. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Report correlated guest phases, NUnit failure counts and bounded redacted error details while preserving strict readiness gates and the original failure. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Verify in-cluster state before hosted health tests, allow one unchanged Azure pool PUT after a bounded grace period, persist the attempt before submission and require runtime convergence. Preserve read-only health checks and route cleanup. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Submit AKS asynchronously after validation, import the image while Azure provisions AKS, and join strict AKS/Arc/MetalLB readiness before reference VM creation. Preserve existing-cluster ordering and add a sequential fallback. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Add bounded verified base-image staging, immutable new-VM bootstrap protection, replay prevention and correlated Console startup monitoring. Preserve existing unprotected instances and all final readiness gates. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Prevent WinGet/download startup races, resolve installed AzCopy despite a stale PATH, and retain startup identity through upstream progress tag replacement. Reject existing monitored VMs with missing identity rather than replaying bootstrap. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Keep guard operations strict without promoting upstream non-terminating lookups to fatal failures. Embed the shared diagnostic formatter so startup reports include bounded redacted underlying errors. Verify with regression tests and read-only PowerShell 7 checks on both nested nodes. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Guard WinGet repair and native configuration results, remove the retired Azure Data Studio prerequisite, preserve module error semantics, and refresh the validation retry PATH. Include bounded retry diagnostics, regression tests, and verified live recovery evidence without claiming Full readiness. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Require new scoped ARM correlation before accepting the observed aksarc post-submission 404. Resume existing accepted deployments without recreating AKS and retain image overlap and final readiness gates. Add regression tests and live evidence. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Pin the complete guest source set to 32397bf and update the preparation hash. Record 501 passing preparation and automation tests. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Use the version reported by az extension show rather than a bundled Python dependency's metadata. Keep the implementation comment version-independent and record the resumed image-import stage. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Retry release resolution, installer download and installation with fixed-version attempts, explicit deadlines and final node readiness checks. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Await the resolved GUI process with a bounded timeout, retain explicit BGInfo error logs, and verify stale-exit and real-failure handling. Validated with 302 tests and live PowerShell 7/5.1 probes. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Preserve the saved region and confidential SKU, credit allocated lab compute, and reserve only missing capacity. Add quota resume regression tests. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Add scoped forceUpdateTag reruns, bounded waits, live readiness checks, and Console retry guidance without recreating lab infrastructure. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Clarify hosted and manual responsibilities, regional policy guidance, recovery evidence and remaining event checks. Include TEST14 Console completion and source-pin promotion requirements. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Inspect nested ARM failures before advancing candidates, permit v5 fallback only without an existing VM, and preserve partial regional resources. Check subscription SKU restrictions and family/regional quota; retain the hosted policy identity location across retries. Add regression coverage and document the authorized TEST16 cleanup. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Jan Egil Ring (janegilring)
marked this pull request as ready for review
November 12, 2026 04:03
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This pull request introduces several improvements to the Azure Sovereign Cloud lab automation, focusing on more robust infrastructure preparation, enhanced LocalBox deployment and validation, and clearer event documentation. The most significant changes include improved handling of confidential compute resource selection and quota validation, the introduction of automated LocalBox preparation and health checks, and updates to the documentation to reflect the new processes and fallback scenarios.
Infrastructure and Compute Resource Handling:
deploy-lab.ps1to use existing compute resources and resume candidates, ensuring that retries credit previously allocated resources and do not require full lab capacity again. Improved quota validation to check only for additional vCPUs needed, and now throw errors immediately on missing VM sizes instead of continuing silently. [1] [2] [3] [4]LocalBox Deployment and Automation:
deploy-localbox.ps1to substitute a custom network module, support optional Bastion Developer deployment, and enforce network compatibility checks before deployment. Added startup protection metadata and logic to ensure consistent VM bootstrapping and safe updates, including correlation of startup IDs and handling of legacy clients. [1] [2] [3] [4] [5] [6] [7]localbox-automation-source.json) and supporting logic inglobal-event-deploy.ps1to automate LocalBox preparation and health checks, providing organizers with a results URI for private validation. [1] [2] [3] [4]Documentation Updates:
These changes collectively improve the reliability, security, and clarity of the lab setup process, reducing manual steps and making event preparation more repeatable and auditable.