Upmerge to edge (#1131)

* Update docs for v0.33.0

* update gh to ado sync workflow to use service principals (#1118)

* Update docs for v0.32.0

* Update environment logic (#1097)

Signed-off-by: Aaron Crawfis <[email protected]>

* Superbeeny/adding podspec secrets (#1100)

* Adding example on how to access secrets and add them to the container environment

Signed-off-by: Nick Beenham <[email protected]>

* Adding code tabs where the commands differ between linux/windows

Signed-off-by: Nick Beenham <[email protected]>

* Apply suggestions from code review

Co-authored-by: Will <[email protected]>
Signed-off-by: Nick Beenham <[email protected]>

* Updates requested from PR review

Signed-off-by: Nick Beenham <[email protected]>

* nit: add a new line for spacing aesthetics

Signed-off-by: Will <[email protected]>

---------

Signed-off-by: Nick Beenham <[email protected]>
Signed-off-by: Will <[email protected]>
Co-authored-by: Will <[email protected]>

* Make env configurable (#1102)

Signed-off-by: Reshma Abdul Rahim <[email protected]>
Co-authored-by: Will <[email protected]>

* fix(bug): Update index.md (#1113)

* fix(bug): Update index.md

Fixed a bug in the cleanup script.

The command `rad app delete demo -y`
results in this output:
`Application 'demo' does not exist or has already been deleted.`

The command should be:
`rad app delete -y`
The output will be:
`Application first-app deleted`

Signed-off-by: Loek Duys <[email protected]>

* Update docs/content/getting-started/index.md

Signed-off-by: Reshma Abdul Rahim <[email protected]>

---------

Signed-off-by: Loek Duys <[email protected]>
Signed-off-by: Reshma Abdul Rahim <[email protected]>
Co-authored-by: Reshma Abdul Rahim <[email protected]>

* Fix broken link in faq (#1112)

* fix broken link in index.md

Signed-off-by: Dan Moseley <[email protected]>

* Update index.md

Signed-off-by: Dan Moseley <[email protected]>

* Update docs/content/concepts/faq/index.md

Signed-off-by: Reshma Abdul Rahim <[email protected]>

---------

Signed-off-by: Dan Moseley <[email protected]>
Signed-off-by: Reshma Abdul Rahim <[email protected]>
Co-authored-by: Reshma Abdul Rahim <[email protected]>

* update gh to ado sync workflow to use service principals

Signed-off-by: Will Tsai <[email protected]>

* add Connections crosslinks to Existing app tutorial (#1103)

* add Connections crosslinks to Existing app tutorial

Signed-off-by: Will Tsai <[email protected]>

* add more crosslinks

Signed-off-by: Will Tsai <[email protected]>

---------

Signed-off-by: Will Tsai <[email protected]>

* Update config.toml

Signed-off-by: Will <[email protected]>

---------

Signed-off-by: Aaron Crawfis <[email protected]>
Signed-off-by: Nick Beenham <[email protected]>
Signed-off-by: Will <[email protected]>
Signed-off-by: Reshma Abdul Rahim <[email protected]>
Signed-off-by: Loek Duys <[email protected]>
Signed-off-by: Reshma Abdul Rahim <[email protected]>
Signed-off-by: Dan Moseley <[email protected]>
Signed-off-by: Will Tsai <[email protected]>
Co-authored-by: Radius CI Bot <[email protected]>
Co-authored-by: Aaron Crawfis <[email protected]>
Co-authored-by: Nick Beenham <[email protected]>
Co-authored-by: Reshma Abdul Rahim <[email protected]>
Co-authored-by: Loek Duys <[email protected]>
Co-authored-by: Dan Moseley <[email protected]>

* Update index.md (#1121)

Fixed typo `-resource-group myResourceGroup` into `--resource-group myResourceGroup`

(added missing `-`)

Signed-off-by: Loek Duys <[email protected]>

* add new logo types (#1122)

Signed-off-by: Will Tsai <[email protected]>

* Add CNCF website guidelines (#1123)

* Add copyrights

Signed-off-by: Reshma Abdul Rahim <[email protected]>

* Add trademark

Signed-off-by: Reshma Abdul Rahim <[email protected]>

* Add trademark

Signed-off-by: Reshma Abdul Rahim <[email protected]>

---------

Signed-off-by: Reshma Abdul Rahim <[email protected]>

---------

Signed-off-by: Aaron Crawfis <[email protected]>
Signed-off-by: Nick Beenham <[email protected]>
Signed-off-by: Will <[email protected]>
Signed-off-by: Reshma Abdul Rahim <[email protected]>
Signed-off-by: Loek Duys <[email protected]>
Signed-off-by: Reshma Abdul Rahim <[email protected]>
Signed-off-by: Dan Moseley <[email protected]>
Signed-off-by: Will Tsai <[email protected]>
Co-authored-by: Will <[email protected]>
Co-authored-by: Aaron Crawfis <[email protected]>
Co-authored-by: Nick Beenham <[email protected]>
Co-authored-by: Reshma Abdul Rahim <[email protected]>
Co-authored-by: Loek Duys <[email protected]>
Co-authored-by: Dan Moseley <[email protected]>

.github/workflows/issues.yml

@@ -1,27 +1,49 @@
-name: Issues Automation
+name: Sync issue to Azure DevOps work item
 
 on:
   issues:
-    types: [opened, edited, deleted, closed, reopened, labeled, unlabeled, assigned]
+    types:
+      [opened, edited, deleted, closed, reopened, labeled, unlabeled, assigned]
 
 concurrency:
   group: issue-${{ github.event.issue.number }}
   cancel-in-progress: false
 
+# Extra permissions needed to login with Entra ID service principal via federated identity
+permissions:
+  id-token: write
+  issues: write
+
 jobs:
   ado:
-    name: Sync issue to Azure DevOps
     runs-on: ubuntu-latest
+    environment:
+      name: issues
     steps:
-      - uses: danhellem/[email protected]
+      # Auth using Azure Service Principals was added as a part of v2.3
+      # reference: https://github.com/danhellem/github-actions-issue-to-work-item/pull/143
+      - name: Login to Azure
+        uses: azure/login@v2
+        with:
+          client-id: ${{ vars.AZURE_SP_DEVOPS_SYNC_CLIENT_ID }}
+          tenant-id: ${{ vars.AZURE_SP_DEVOPS_SYNC_TENANT_ID }}
+          allow-no-subscriptions: true
+      - name: Get Azure DevOps token
+        id: get_ado_token
+        run:
+          # The resource ID for Azure DevOps is always 499b84ac-1321-427f-aa17-267ca6975798
+          # https://learn.microsoft.com/azure/devops/integrate/get-started/authentication/service-principal-managed-identity
+          echo "ADO_TOKEN=$(az account get-access-token --resource 499b84ac-1321-427f-aa17-267ca6975798 --query "accessToken" --output tsv)" >> $GITHUB_ENV
+      - name: Sync issue to Azure DevOps
+        uses: danhellem/[email protected]
         env:
-          ado_token: "${{ secrets.ADO_AOCTO_BOT_TOKEN }}"
-          github_token: "${{ secrets.GH_RAD_CI_BOT_PAT }}"
-          ado_organization: "azure-octo"
-          ado_project: "Incubations"
+          ado_token: ${{ env.ADO_TOKEN }}
+          github_token: '${{ secrets.GH_RAD_CI_BOT_PAT }}'
+          ado_organization: 'azure-octo'
+          ado_project: 'Incubations'
           ado_area_path: "Incubations\\Radius"
           ado_iteration_path: "Incubations\\Radius"
-          ado_new_state: "New"
-          ado_active_state: "Active"
-          ado_close_state: "Closed"
-          ado_wit: "GitHub Issue"
+          ado_new_state: 'New'
+          ado_active_state: 'Active'
+          ado_close_state: 'Closed'
+          ado_wit: 'GitHub Issue'

docs/content/guides/operations/kubernetes/overview/index.md

@@ -164,7 +164,7 @@ Visit the [Kubernetes docs](https://kubernetes.io/docs/tasks/configure-pod-conta
 Visit the [Azure docs](https://docs.microsoft.com/azure/aks/cluster-container-registry-integration?tabs=azure-cli)to learn how to configure access to an ACR registry.
 
 ```bash
-az aks update --name myAKSCluster -resource-group myResourceGroup --subscription mySubscription --attach-acr <acr-name>
+az aks update --name myAKSCluster --resource-group myResourceGroup --subscription mySubscription --attach-acr <acr-name>
 ```
 
 {{% /codetab %}}