Add CMK support for Base Workspace #4161
Conversation
…02-cmk-support
…02-cmk-support
|
/test-extended |
|
🤖 pr-bot 🤖 🏃 Running extended tests: https://github.com/microsoft/AzureTRE/actions/runs/12161171332 (with refid (in response to this comment from @yuvalyaron) |
1 similar comment
|
🤖 pr-bot 🤖 🏃 Running extended tests: https://github.com/microsoft/AzureTRE/actions/runs/12161171332 (with refid (in response to this comment from @yuvalyaron) |
|
/test-extended |
|
🤖 pr-bot 🤖 🏃 Running extended tests: https://github.com/microsoft/AzureTRE/actions/runs/12181387380 (with refid (in response to this comment from @yuvalyaron) |
|
/test |
|
🤖 pr-bot 🤖 🏃 Running tests: https://github.com/microsoft/AzureTRE/actions/runs/12237063379 (with refid (in response to this comment from @yuvalyaron) |
|
/test |
|
🤖 pr-bot 🤖 🏃 Running tests: https://github.com/microsoft/AzureTRE/actions/runs/12237514119 (with refid (in response to this comment from @yuvalyaron) |
|
successful test run: |
|
/test-force-approve |
|
🤖 pr-bot 🤖 ✅ Marking tests as complete (for commit 373f154) (in response to this comment from @yuvalyaron) |
4 participants
Partially Resolves #4145
What is being addressed
Added CMK support for the base workspace
How is this addressed
Propagated the
ENABLE_CMK_ENCRYPTIONandKEY_STORE_IDenvironment variables to the resource processor, ensuring the workspace is automatically deployed with CMK encryption if set at the TRE level.Added an identity for the workspace, allowing it to access the Key Vault for creating the CMK.