6
38%
master: 38%

Ran 26 May 2026 01:22AM UTC

Files 313

Run time 19s

Badge

Embed ▾

Committed 26 May 2026 01:17AM UTC coverage: 20.673% (+0.003%) from 20.67%

Job # 26426786651.6

Build Type

push

github

Committed by

web-flow

Commit Message

[ARO-27277] Holmes: use Entra ID token auth for Azure OpenAI (#4852)

* feat: use Entra ID token auth for Holmes Azure OpenAI (ARO-27277)

Replace API key authentication with Entra ID token-based authentication
for the Holmes investigation admin API. The RP's managed identity (prod)
or dev service principal (dev) acquires a short-lived token scoped to
cognitiveservices.azure.com at request time, eliminating the need to
store API keys in Key Vault or environment variables.

This enables setting disableLocalAuth=true on the Azure OpenAI resource,
which the security team requires.

* fix: address Copilot review feedback for deploy script

- Ensure custom subdomain is set on existing AOAI accounts (required
  for Entra token auth)
- Narrow blank line removal to only strip trailing blanks instead of
  all blank lines in secrets/env

* docs: update Holmes documentation for Entra ID token auth

Remove references to HOLMES_AZURE_API_KEY and holmes-azure-api-key
across documentation. Update config loading, Key Vault provisioning,
and dev setup instructions to reflect Entra ID token authentication.

Coverage Stats

3699 of 17893 relevant lines covered (20.67%)

0.24 hits per line

Azure / ARO-RP / 26426786651 / 6
38%
master: 38%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job pkg-util - 26426786651.6

Azure / ARO-RP / 26426786651 / 6 38% master: 38%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job pkg-util - 26426786651.6

Azure / ARO-RP / 26426786651 / 6
38%
master: 38%

README BADGES
x