Fix Azure E2E (#287)

* update ci scripts

* fix typo in workflow file

* update generate script

* update generate script

* remove additional comments

Author: yishi-ttd

.github/workflows/e2e-azure-cc-enclave.yaml

@@ -3,7 +3,7 @@ on:
   workflow_dispatch:
     inputs:
       operator_image_version:
-        description: 'The version of GCP enclave image'
+        description: 'The version of Azure enclave image'
         type: string
         required: true
       core_image_version:

e2e/prepare_azure_cc_artifacts.sh

@@ -25,7 +25,36 @@ if [[ -d $OUT_PUT_DIR ]]; then
   echo "$OUT_PUT_DIR  exist. Skip. This only happens during local test."
 else
   mkdir -p $OUT_PUT_DIR
-  source ../scripts/azure-cc/generate-deployment-artifacts.sh
+
+  # Install confcom extension, az is originally available in GitHub workflow environment
+  az extension add --name confcom
+  if [[ $? -ne 0 ]]; then
+    echo "Failed to install Azure confcom extension"
+    exit 1
+  fi
+
+  # Required by az confcom
+  sudo usermod -aG docker $USER
+  if [[ $? -ne 0 ]]; then
+    echo "Failed to add current user to docker group"
+    exit 1
+  fi
+
+  # Generate deployment template
+  cp $INPUT_TEMPLATE_FILE $OUTPUT_TEMPLATE_FILE
+  sed -i "s#IMAGE_PLACEHOLDER#$IMAGE#g" $OUTPUT_TEMPLATE_FILE
+  if [[ $? -ne 0 ]]; then
+    echo "Failed to pre-process template file"
+    exit 1
+  fi
+
+  az confcom acipolicygen --approve-wildcards --template-file $OUTPUT_TEMPLATE_FILE > $OUTPUT_POLICY_DIGEST_FILE
+  if [[ $? -ne 0 ]]; then
+    echo "Failed to generate template file"
+    exit 1
+  fi
+
+  cp $INPUT_PARAMETERS_FILE $OUTPUT_PARAMETERS_FILE
 fi
 
 if [ -z "$GITHUB_OUTPUT" ]; then

e2e/start_azure_cc_enclave.sh

@@ -3,7 +3,7 @@ set -ex
 
 ROOT="."
 # below resources should be prepared ahead
-RESOURCE_GROUP=uid-enclave-test
+RESOURCE_GROUP=uid-enclave-ci-cd
 IDENTITY=uid-operator
 VAULT_NAME=uid-operator
 OPERATOR_KEY_NAME=operator-key-ci

e2e/stop_azure_cc_enclave.sh

@@ -1,7 +1,7 @@
 #!/usr/bin/env bash
 set -ex
 
-RESOURCE_GROUP=uid-enclave-test
+RESOURCE_GROUP=uid-enclave-ci-cd
 
 if [ -z "$CONTAINER_GROUP_NAME" ]; then
   echo "CONTAINER_GROUP_NAME can not be empty"