2
38%
master: 38%

Ran 26 May 2026 01:22AM UTC

Files 13

Run time 1s

Badge

Embed ▾

Committed 26 May 2026 01:17AM UTC coverage: 0.0%. Remained the same

Job # 26426786651.2

Build Type

push

github

Committed by

web-flow

Commit Message

[ARO-27277] Holmes: use Entra ID token auth for Azure OpenAI (#4852)

* feat: use Entra ID token auth for Holmes Azure OpenAI (ARO-27277)

Replace API key authentication with Entra ID token-based authentication
for the Holmes investigation admin API. The RP's managed identity (prod)
or dev service principal (dev) acquires a short-lived token scoped to
cognitiveservices.azure.com at request time, eliminating the need to
store API keys in Key Vault or environment variables.

This enables setting disableLocalAuth=true on the Azure OpenAI resource,
which the security team requires.

* fix: address Copilot review feedback for deploy script

- Ensure custom subdomain is set on existing AOAI accounts (required
  for Entra token auth)
- Narrow blank line removal to only strip trailing blanks instead of
  all blank lines in secrets/env

* docs: update Holmes documentation for Entra ID token auth

Remove references to HOLMES_AZURE_API_KEY and holmes-azure-api-key
across documentation. Update config loading, Key Vault provisioning,
and dev setup instructions to reflect Entra ID token authentication.

Coverage Stats

0 of 1651 relevant lines covered (0.0%)

0.0 hits per line

Azure / ARO-RP / 26426786651 / 2
38%
master: 38%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job cmd - 26426786651.2

Azure / ARO-RP / 26426786651 / 2 38% master: 38%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job cmd - 26426786651.2

Azure / ARO-RP / 26426786651 / 2
38%
master: 38%

README BADGES
x