fix: apim and tests by mishraomp · Pull Request #124 · bcgov/ai-hub-tracking

mishraomp · 2026-03-01T15:59:25Z

AI Hub Infra Changes

Summary: 1 to add, 2 to change, 1 to destroy (across 2 stack(s))

Show plan details

Terraform will perform the following actions:

  # module.hub_key_vault.azurerm_role_assignment.this["deployer_secrets_officer"] must be replaced
-/+ resource "azurerm_role_assignment" "this" {
      + condition_version                      = (known after apply)
      ~ id                                     = "/subscriptions/****/resourceGroups/ai-services-hub-test/providers/Microsoft.KeyVault/vaults/ai-services-hub-test-hkv/providers/Microsoft.Authorization/roleAssignments/****" -> (known after apply)
      ~ name                                   = "****" -> (known after apply)
      ~ principal_id                           = "****" -> "****" # forces replacement
      ~ principal_type                         = "User" -> (known after apply)
      ~ role_definition_id                     = "/subscriptions/****/providers/Microsoft.Authorization/roleDefinitions/****" -> (known after apply)
        # (6 unchanged attributes hidden)
    }

Plan: 1 to add, 0 to change, 1 to destroy.

Warning: Argument is deprecated

  with module.hub_key_vault.azurerm_key_vault.this,
  on .terraform/modules/hub_key_vault/main.tf line 7, in resource "azurerm_key_vault" "this":
   7:   enable_rbac_authorization       = !var.legacy_access_policies_enabled

This property has been renamed to `rbac_authorization_enabled` and will be
removed in v5.0 of the provider

─────────────────────────────────────────────────────────────────────────────

Note: You didn't use the -out option to save this plan, so Terraform can't
guarantee to take exactly these actions if you run "terraform apply" now.
Releasing state lock. This may take a few moments...
2026-03-01T16:30:41Z [SUCCESS] terraform plan (shared) (attempt 1/5) completed successfully
2026-03-01T16:30:43Z [INFO] Running 5 tenants in parallel
2026-03-01T16:30:43Z [INFO] Starting terraform init (tenant:ai-hub-admin)
2026-03-01T16:30:43.538Z [INFO]  Terraform version: 1.12.2
2026-03-01T16:30:43.538Z [INFO]  Go runtime version: go1.24.2
2026-03-01T16:30:43.538Z [INFO]  CLI args: []string{"terraform", "init", "-input=false", "-upgrade", "-reconfigure", "-backend-config=resource_group_name=da4cf6-test-networking", "-backend-config=storage_account_name=tftestaihubtracking", "-backend-config=container_name=tfstate", "-backend-config=key=ai-services-hub/test/tenant-ai-hub-admin.tfstate", "-backend-config=subscription_id=****", "-backend-config=tenant_id=****", "-backend-config=client_id=****", "-backend-config=use_oidc=true"}
2026-03-01T16:30:43.539Z [INFO]  TF_CLI_ARGS value: "-no-color"
2026-03-01T16:30:43.539Z [INFO]  CLI command args: []string{"init", "-no-color", "-input=false", "-upgrade", "-reconfigure", "-backend-config=resource_group_name=da4cf6-test-networking", "-backend-config=storage_account_name=tftestaihubtracking", "-backend-config=container_name=tfstate", "-backend-config=key=ai-services-hub/test/tenant-ai-hub-admin.tfstate", "-backend-config=subscription_id=****", "-backend-config=tenant_id=****", "-backend-config=client_id=****", "-backend-config=use_oidc=true"}
Initializing the backend...

Successfully configured the backend "azurerm"! Terraform will automatically
use this backend unless the backend configuration changes.
Upgrading modules...
- tenant in ../../modules/tenant
Downloading registry.terraform.io/Azure/avm-res-search-searchservice/azurerm 0.2.0 for tenant.ai_search...
- tenant.ai_search in /home/runner/work/ai-hub-tracking/ai-hub-tracking/infra-ai-hub/.terraform-tenant-test-ai-hub-admin/modules/tenant.ai_search
Downloading registry.terraform.io/Azure/avm-res-cognitiveservices-account/azurerm 0.7.1 for tenant.document_intelligence...
- tenant.document_intelligence in /home/runner/work/ai-hub-tracking/ai-hub-tracking/infra-ai-hub/.terraform-tenant-test-ai-hub-admin/modules/tenant.document_intelligence
Downloading registry.terraform.io/Azure/avm-res-keyvault-vault/azurerm 0.10.2 for tenant.key_vault...
- tenant.key_vault in /home/runner/work/ai-hub-tracking/ai-hub-tracking/infra-ai-hub/.terraform-tenant-test-ai-hub-admin/modules/tenant.key_vault
- tenant.key_vault.keys in /home/runner/work/ai-hub-tracking/ai-hub-tracking/infra-ai-hub/.terraform-tenant-test-ai-hub-admin/modules/tenant.key_vault/modules/key
- tenant.key_vault.secrets in /home/runner/work/ai-hub-tracking/ai-hub-tracking/infra-ai-hub/.terraform-tenant-test-ai-hub-admin/modules/tenant.key_vault/modules/secret
Downloading registry.terraform.io/Azure/avm-res-cognitiveservices-account/azurerm 0.7.1 for tenant.speech_services...
- tenant.speech_services in /home/runner/work/ai-hub-tracking/ai-hub-tracking/infra-ai-hub/.terraform-tenant-test-ai-hub-admin/modules/tenant.speech_services
Initializing provider plugins...
- terraform.io/builtin/terraform is built in to Terraform
- Finding azure/modtm versions matching "~> 0.3"...
- Finding hashicorp/time versions matching "~> 0.9"...
- Finding azure/azapi versions matching "~> 2.0, ~> 2.4, >= 2.5.0"...
- Finding hashicorp/azurerm versions matching ">= 3.117.0, ~> 4.0, >= 4.17.0, >= 4.38.0, < 5.0.0"...
- Finding hashicorp/random versions matching ">= 3.5.0, ~> 3.5, >= 3.7.0, < 4.0.0"...
- Finding hashicorp/null versions matching ">= 3.2.0"...
- Installing hashicorp/azurerm v4.62.0...
- Installed hashicorp/azurerm v4.62.0 (signed by HashiCorp)
- Installing hashicorp/random v3.8.1...
- Installed hashicorp/random v3.8.1 (signed by HashiCorp)
- Installing hashicorp/null v3.2.4...
- Installed hashicorp/null v3.2.4 (signed by HashiCorp)
- Installing azure/modtm v0.3.5...
- Installed azure/modtm v0.3.5 (signed by a HashiCorp partner, key ID 6F0B91BDE98478CF)
- Installing hashicorp/time v0.13.1...
- Installed hashicorp/time v0.13.1 (signed by HashiCorp)
- Installing azure/azapi v2.8.0...
- Installed azure/azapi v2.8.0 (signed by a HashiCorp partner, key ID 6F0B91BDE98478CF)
Partner and community providers are signed by their developers.
If you'd like to know more about provider signing, you can read about it here:
https://developer.hashicorp.com/terraform/cli/plugins/signing
Terraform has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that Terraform can guarantee to make the same selections by default when
you run "terraform init" in the future.

Terraform has been successfully initialized!

You may now begin working with Terraform. Try running "terraform plan" to see
any changes that are required for your infrastructure. All Terraform commands
should now work.

If you ever set or change modules or backend configuration for Terraform,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.
2026-03-01T16:30:55Z [SUCCESS] terraform init (tenant:ai-hub-admin) completed successfully
2026-03-01T16:30:55Z [INFO] Starting terraform plan (tenant:ai-hub-admin) (attempt 1/5)
2026-03-01T16:30:55.292Z [INFO]  Terraform version: 1.12.2
2026-03-01T16:30:55.292Z [INFO]  Go runtime version: go1.24.2
2026-03-01T16:30:55.292Z [INFO]  CLI args: []string{"terraform", "plan", "-input=false", "-var-file=/home/runner/work/ai-hub-tracking/ai-hub-tracking/infra-ai-hub/params/test/shared.tfvars", "-var-file=/home/runner/work/ai-hub-tracking/ai-hub-tracking/infra-ai-hub/.tenant-test-ai-hub-admin.auto.tfvars", "-var=backend_resource_group=da4cf6-test-networking", "-var=backend_storage_account=tftestaihubtracking", "-var=backend_container_name=tfstate", "-var=app_env=test"}
2026-03-01T16:30:55.293Z [INFO]  TF_CLI_ARGS value: "-no-color"
2026-03-01T16:30:55.293Z [INFO]  CLI command args: []string{"plan", "-no-color", "-input=false", "-var-file=/home/runner/work/ai-hub-tracking/ai-hub-tracking/infra-ai-hub/params/test/shared.tfvars", "-var-file=/home/runner/work/ai-hub-tracking/ai-hub-tracking/infra-ai-hub/.tenant-test-ai-hub-admin.auto.tfvars", "-var=backend_resource_group=da4cf6-test-networking", "-var=backend_storage_account=tftestaihubtracking", "-var=backend_container_name=tfstate", "-var=app_env=test"}
2026-03-01T16:30:56.309Z [INFO]  backend/local: starting Plan operation
Acquiring state lock. This may take a few moments...
2026-03-01T16:30:57.360Z [INFO]  provider: configuring client automatic mTLS
2026-03-01T16:30:57.393Z [INFO]  provider.terraform-provider-azapi_v2.8.0: configuring server automatic mTLS: timestamp=2026-03-01T16:30:57.392Z
2026-03-01T16:30:57.474Z [INFO]  provider: plugin process exited: plugin=/home/runner/work/ai-hub-tracking/ai-hub-tracking/infra-ai-hub/.terraform-tenant-test-ai-hub-admin/providers/registry.terraform.io/azure/azapi/2.8.0/linux_amd64/terraform-provider-azapi_v2.8.0 id=4405
2026-03-01T16:30:57.474Z [INFO]  provider: configuring client automatic mTLS
2026-03-01T16:30:57.487Z [INFO]  provider.terraform-provider-modtm_v0.3.5: configuring server automatic mTLS: timestamp=2026-03-01T16:30:57.487Z
2026-03-01T16:30:57.530Z [INFO]  provider: plugin process exited: plugin=/home/runner/work/ai-hub-tracking/ai-hub-tracking/infra-ai-hub/.terraform-tenant-test-ai-hub-admin/providers/registry.terraform.io/azure/modtm/0.3.5/linux_amd64/terraform-provider-modtm_v0.3.5 id=4444
2026-03-01T16:30:57.530Z [INFO]  provider: configuring client automatic mTLS
2026-03-01T16:30:57.686Z [INFO]  provider.terraform-provider-azurerm_v4.62.0_x5: configuring server automatic mTLS: timestamp=2026-03-01T16:30:57.685Z
2026-03-01T16:30:58.336Z [INFO]  provider: plugin process exited: plugin=/home/runner/work/ai-hub-tracking/ai-hub-tracking/infra-ai-hub/.terraform-tenant-test-ai-hub-admin/providers/registry.terraform.io/hashicorp/azurerm/4.62.0/linux_amd64/terraform-provider-azurerm_v4.62.0_x5 id=4467
2026-03-01T16:30:58.336Z [INFO]  provider: configuring client automatic mTLS
2026-03-01T16:30:58.348Z [INFO]  provider.terraform-provider-null_v3.2.4_x5: configuring server automatic mTLS: timestamp=2026-03-01T16:30:58.348Z
2026-03-01T16:30:58.390Z [INFO]  provider: plugin process exited: plugin=/home/runner/work/ai-hub-tracking/ai-hub-tracking/infra-ai-hub/.terraform-tenant-test-ai-hub-admin/providers/registry.terraform.io/hashicorp/null/3.2.4/linux_amd64/terraform-provider-null_v3.2.4_x5 id=4603
2026-03-01T16:30:58.390Z [INFO]  provider: configuring client automatic mTLS
2026-03-01T16:30:58.404Z [INFO]  provider.terraform-provider-random_v3.8.1_x5: configuring server automatic mTLS: timestamp=2026-03-01T16:30:58.404Z
2026-03-01T16:30:58.447Z [INFO]  provider: plugin process exited: plugin=/home/runner/work/ai-hub-tracking/ai-hub-tracking/infra-ai-hub/.terraform-tenant-test-ai-hub-admin/providers/registry.terraform.io/hashicorp/random/3.8.1/linux_amd64/terraform-provider-random_v3.8.1_x5 id=4625
2026-03-01T16:30:58.448Z [INFO]  provider: configuring client automatic mTLS
2026-03-01T16:30:58.460Z [INFO]  provider.terraform-provider-time_v0.13.1_x5: configuring server automatic mTLS: timestamp=2026-03-01T16:30:58.460Z
2026-03-01T16:30:58.504Z [INFO]  provider: plugin process exited: plugin=/home/runner/work/ai-hub-tracking/ai-hub-tracking/infra-ai-hub/.terraform-tenant-test-ai-hub-admin/providers/registry.terraform.io/hashicorp/time/0.13.1/linux_amd64/terraform-provider-time_v0.13.1_x5 id=4644
2026-03-01T16:30:58.551Z [ERROR] AttachSchemaTransformer: No provider config schema available for provider["terraform.io/builtin/terraform"]
2026-03-01T16:30:58.825Z [INFO]  provider: configuring client automatic mTLS
2026-03-01T16:30:58.858Z [INFO]  provider.terraform-provider-null_v3.2.4_x5: configuring server automatic mTLS: timestamp=2026-03-01T16:30:58.858Z
2026-03-01T16:30:58.945Z [INFO]  provider: configuring client automatic mTLS
2026-03-01T16:30:58.971Z [INFO]  provider.terraform-provider-modtm_v0.3.5: configuring server automatic mTLS: timestamp=2026-03-01T16:30:58.971Z
2026-03-01T16:30:59.019Z [INFO]  provider: configuring client automatic mTLS
2026-03-01T16:30:59.032Z [INFO]  provider.terraform-provider-random_v3.8.1_x5: configuring server automatic mTLS: timestamp=2026-03-01T16:30:
(truncated, see workflow logs for complete plan)

Updated by CI — plan against test environment (run #229) at 2026-03-01 16:32:24 UTC.

fix: apim and tests

0b52752

mishraomp temporarily deployed to tools March 1, 2026 15:59 — with GitHub Actions Inactive

mishraomp temporarily deployed to test March 1, 2026 16:02 — with GitHub Actions Inactive

mishraomp self-assigned this Mar 1, 2026

mishraomp added bug Something isn't working Terraform devops apim Issues or Pull Requests related Azure APIM bash labels Mar 1, 2026

fix: kv drift

328018d

mishraomp temporarily deployed to tools March 1, 2026 16:27 — with GitHub Actions Inactive

mishraomp temporarily deployed to test March 1, 2026 16:29 — with GitHub Actions Inactive

mishraomp temporarily deployed to tools March 1, 2026 16:35 — with GitHub Actions Inactive

mishraomp temporarily deployed to test March 1, 2026 16:37 — with GitHub Actions Inactive

mishraomp temporarily deployed to test March 1, 2026 16:42 — with GitHub Actions Inactive

mishraomp merged commit b2b30a3 into main Mar 1, 2026
19 checks passed

mishraomp deleted the fix/integration-kv-tests branch March 1, 2026 17:15

mishraomp mentioned this pull request Mar 1, 2026

APIM key rotation | move from GHA to Azure Functions #103

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix: apim and tests#124

fix: apim and tests#124
mishraomp merged 2 commits intomainfrom
fix/integration-kv-tests

mishraomp commented Mar 1, 2026 •

edited by github-actions bot

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

mishraomp commented Mar 1, 2026 • edited by github-actions bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

AI Hub Infra Changes

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

mishraomp commented Mar 1, 2026 •

edited by github-actions bot

Loading