From d22bf67fe484b4d804111956aeee5a08232f3b92 Mon Sep 17 00:00:00 2001 From: sophia chen Date: Thu, 12 Nov 2026 12:11:59 +1100 Subject: [PATCH 1/4] UID2-8294: Use Azure OIDC for e2e tests --- .github/workflows/run-e2e-tests-on-operator.yaml | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/.github/workflows/run-e2e-tests-on-operator.yaml b/.github/workflows/run-e2e-tests-on-operator.yaml index e0c0c61e8..97ac818be 100644 --- a/.github/workflows/run-e2e-tests-on-operator.yaml +++ b/.github/workflows/run-e2e-tests-on-operator.yaml @@ -117,6 +117,10 @@ on: jobs: e2e-test: name: E2E Test + permissions: + contents: write + packages: read + id-token: write uses: IABTechLab/uid2-shared-actions/.github/workflows/shared-run-e2e-tests.yaml@v3 with: operator_type: ${{ inputs.operator_type }} @@ -137,4 +141,7 @@ jobs: aws_region: ${{ fromJson(inputs.aws).region }} aws_ami: ${{ fromJson(inputs.aws).ami }} aws_pcr0: ${{ fromJson(inputs.aws).pcr0 }} + azure_client_id: ${{ vars.AZURE_CLIENT_ID }} + azure_tenant_id: ${{ vars.AZURE_TENANT_ID }} + azure_subscription_id: ${{ vars.AZURE_SUBSCRIPTION_ID }} secrets: inherit From a1f3a41c4464cb7830ea685740ec356e177ce12d Mon Sep 17 00:00:00 2001 From: sophia chen Date: Thu, 12 Nov 2026 14:13:14 +1100 Subject: [PATCH 2/4] UID2-8294: Centralize Azure OIDC identifiers --- .github/workflows/run-e2e-tests-on-operator.yaml | 3 --- 1 file changed, 3 deletions(-) diff --git a/.github/workflows/run-e2e-tests-on-operator.yaml b/.github/workflows/run-e2e-tests-on-operator.yaml index 97ac818be..2fbe54d00 100644 --- a/.github/workflows/run-e2e-tests-on-operator.yaml +++ b/.github/workflows/run-e2e-tests-on-operator.yaml @@ -141,7 +141,4 @@ jobs: aws_region: ${{ fromJson(inputs.aws).region }} aws_ami: ${{ fromJson(inputs.aws).ami }} aws_pcr0: ${{ fromJson(inputs.aws).pcr0 }} - azure_client_id: ${{ vars.AZURE_CLIENT_ID }} - azure_tenant_id: ${{ vars.AZURE_TENANT_ID }} - azure_subscription_id: ${{ vars.AZURE_SUBSCRIPTION_ID }} secrets: inherit From c6ec203571d10af7ba7043cd75856f121c48dade Mon Sep 17 00:00:00 2001 From: sophia chen Date: Thu, 12 Nov 2026 14:48:53 +1100 Subject: [PATCH 3/4] UID2-8294: Configure Azure OIDC from caller variables --- .github/workflows/run-e2e-tests-on-operator.yaml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/run-e2e-tests-on-operator.yaml b/.github/workflows/run-e2e-tests-on-operator.yaml index 2fbe54d00..97ac818be 100644 --- a/.github/workflows/run-e2e-tests-on-operator.yaml +++ b/.github/workflows/run-e2e-tests-on-operator.yaml @@ -141,4 +141,7 @@ jobs: aws_region: ${{ fromJson(inputs.aws).region }} aws_ami: ${{ fromJson(inputs.aws).ami }} aws_pcr0: ${{ fromJson(inputs.aws).pcr0 }} + azure_client_id: ${{ vars.AZURE_CLIENT_ID }} + azure_tenant_id: ${{ vars.AZURE_TENANT_ID }} + azure_subscription_id: ${{ vars.AZURE_SUBSCRIPTION_ID }} secrets: inherit From 8fac5d1a0893a272b9b8ba7b5ad60648adbd6a4b Mon Sep 17 00:00:00 2001 From: sophia chen Date: Thu, 12 Nov 2026 16:14:03 +1100 Subject: [PATCH 4/4] UID2-8294: Select Azure E2E environment --- .github/workflows/run-e2e-tests-on-operator.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/run-e2e-tests-on-operator.yaml b/.github/workflows/run-e2e-tests-on-operator.yaml index 97ac818be..b9463bf69 100644 --- a/.github/workflows/run-e2e-tests-on-operator.yaml +++ b/.github/workflows/run-e2e-tests-on-operator.yaml @@ -144,4 +144,5 @@ jobs: azure_client_id: ${{ vars.AZURE_CLIENT_ID }} azure_tenant_id: ${{ vars.AZURE_TENANT_ID }} azure_subscription_id: ${{ vars.AZURE_SUBSCRIPTION_ID }} + azure_environment: ${{ (inputs.operator_type == 'azure' || inputs.operator_type == 'aks') && 'e2e-test' || '' }} secrets: inherit