Feature Branch for Terraform Lifecycle by ytimocin · Pull Request #11042 · radius-project/radius

ytimocin · 2026-01-21T04:04:13Z

Description

Feature branch for Radius.Core/terraformSettings, Radius.Core/bicepSettings, rad terraform commands, and more:

Feature Spec: Terraform and Bicep Settings Feature Spec design-notes#107
Design Doc: Design for Terraform/Bicep Settings design-notes#117

Tasks

Phase 1 - Core Implementation

Add REST controllers for Radius.Core/terraformSettings and Radius.Core/bicepSettings with CRUD operations (Add env terraform/bicep settings schema #11013)
Add TypeSpec definitions, regenerate SDKs, update datamodel converters (Add env terraform/bicep settings schema #11013)
Implement installer status storage and REST endpoints (install/uninstall/status) (feat: Terraform controller for install/uninstall/status #11014)
Register installer queue/worker with MaxOperationConcurrency=1 and async handler (feat: Terraform controller for install/uninstall/status #11014)
Implement binary lifecycle helpers (mirror downloads, checksum validation, PVC layout, symlink management) (feat: Terraform controller for install/uninstall/status #11014)
Add CLI commands: rad terraform install|uninstall|status with --wait semantics (feat: Add rad terraform CLI commands #11049)
Wire Radius.Core/environments controller to consume new settings resources
Add migration scaffolding (warnings, legacy compatibility checks)
Update Helm charts (PVC mounts, remove init-container, installer queue config)
Remove initContainers and update functional tests
- Add rad terraform install command to the necessary workflow because we are removing initContainers

Type of change

This pull request adds or changes features of Radius and has an approved issue (issue link required).

Fixes: #10615

Contributor checklist

Please verify that the PR meets the following requirements, where applicable:

An overview of proposed schema changes is included in a linked GitHub issue.
- Yes
- Not applicable
A design document PR is created in the design-notes repository, if new APIs are being introduced.
- Yes
- Not applicable
The design document has been reviewed and approved by Radius maintainers/approvers.
- Yes
- Not applicable
A PR for the samples repository is created, if existing samples are affected by the changes in this PR.
- Yes
- Not applicable
A PR for the documentation repository is created, if the changes in this PR affect the documentation or any user facing updates are made.
- Yes
- Not applicable
A PR for the recipes repository is created, if existing recipes are affected by the changes in this PR.
- Yes
- Not applicable

ytimocin · 2026-01-21T07:22:40Z

Hey @kachawla ! Thanks for the approval but this is the feature branch and there will be a lot of additions to this branch. This branch will only be merged once all of them are complete.

kachawla · 2026-01-21T16:54:43Z

Hey @kachawla ! Thanks for the approval but this is the feature branch and there will be a lot of additions to this branch. This branch will only be merged once all of them are complete.

I see. Thanks for letting me know. Should we move this PR to draft for now then?

pkg/terraform/installer/handler.go

ytimocin · 2026-01-27T17:23:19Z

Feature Handoff Document: https://microsoft.sharepoint.com/:w:/t/radiuscoreteam/IQCNStH1W8DKQ5RB7j4ynVa-ATYTWU3vLy4MqVYFBhcb7tY?e=A54ocL

# Description This pull request introduces conversion logic and related tests for the new `BicepSettingsResource` type in the `v20250801preview` API version, enabling seamless translation between versioned API models and internal datamodel representations. Additionally, it updates the `EnvironmentResource` conversion to include `BicepSettings` and `TerraformSettings`, and marks several dependencies as peer dependencies in package lock files. **API resource conversion logic:** * Added `bicepsettings_conversion.go` in `pkg/corerp/api/v20250801preview` to implement bidirectional conversion between `BicepSettingsResource` (versioned API type) and its internal datamodel, including detailed mapping for authentication registry settings. * Updated `environment_conversion.go` to support conversion of `BicepSettings` and `TerraformSettings` properties in `EnvironmentResource`. **Testing:** * Added comprehensive unit tests in `bicepsettings_conversion_test.go` to verify conversion logic for `BicepSettingsResource`, including authentication scenarios and error handling for invalid types. **Dependency management:** * Marked several dependencies as peer dependencies in `package-lock.json` for both `autorest.bicep` and `generator` packages to improve dependency resolution and avoid duplication. [[1]](diffhunk://#diff-075b4bbd5a7ae383d7c25934867346d6019accb02b5c5830c2fe6854ce420203R160) [[2]](diffhunk://#diff-075b4bbd5a7ae383d7c25934867346d6019accb02b5c5830c2fe6854ce420203R1661) [[3]](diffhunk://#diff-075b4bbd5a7ae383d7c25934867346d6019accb02b5c5830c2fe6854ce420203R1696) [[4]](diffhunk://#diff-075b4bbd5a7ae383d7c25934867346d6019accb02b5c5830c2fe6854ce420203R1731) [[5]](diffhunk://#diff-075b4bbd5a7ae383d7c25934867346d6019accb02b5c5830c2fe6854ce420203R1888) [[6]](diffhunk://#diff-075b4bbd5a7ae383d7c25934867346d6019accb02b5c5830c2fe6854ce420203R2205) [[7]](diffhunk://#diff-075b4bbd5a7ae383d7c25934867346d6019accb02b5c5830c2fe6854ce420203R2658) [[8]](diffhunk://#diff-075b4bbd5a7ae383d7c25934867346d6019accb02b5c5830c2fe6854ce420203R3612) [[9]](diffhunk://#diff-075b4bbd5a7ae383d7c25934867346d6019accb02b5c5830c2fe6854ce420203R5345) [[10]](diffhunk://#diff-075b4bbd5a7ae383d7c25934867346d6019accb02b5c5830c2fe6854ce420203R5426) [[11]](diffhunk://#diff-2c80cff24f8409b4ace1d93aae9e72fe0245398a137e056279b4fba9a788b99eR672) [[12]](diffhunk://#diff-2c80cff24f8409b4ace1d93aae9e72fe0245398a137e056279b4fba9a788b99eR741) [[13]](diffhunk://#diff-2c80cff24f8409b4ace1d93aae9e72fe0245398a137e056279b4fba9a788b99eR898) [[14]](diffhunk://#diff-2c80cff24f8409b4ace1d93aae9e72fe0245398a137e056279b4fba9a788b99eR1265) [[15]](diffhunk://#diff-2c80cff24f8409b4ace1d93aae9e72fe0245398a137e056279b4fba9a788b99eR2564) ## Type of change - This pull request adds or changes features of Radius and has an approved issue (issue link required). Fixes: #issue_number ## Contributor checklist Please verify that the PR meets the following requirements, where applicable:  - An overview of proposed schema changes is included in a linked GitHub issue. - [ ] Yes  - [x] Not applicable  - A design document PR is created in the [design-notes repository](https://github.com/radius-project/design-notes/), if new APIs are being introduced. - [ ] Yes  - [x] Not applicable  - The design document has been reviewed and approved by Radius maintainers/approvers. - [ ] Yes  - [x] Not applicable  - A PR for the [samples repository](https://github.com/radius-project/samples) is created, if existing samples are affected by the changes in this PR. - [ ] Yes  - [x] Not applicable  - A PR for the [documentation repository](https://github.com/radius-project/docs) is created, if the changes in this PR affect the documentation or any user facing updates are made. - [ ] Yes  - [x] Not applicable  - A PR for the [recipes repository](https://github.com/radius-project/recipes) is created, if existing recipes are affected by the changes in this PR. - [ ] Yes  - [x] Not applicable  --------- Signed-off-by: ytimocin <ytimocin@microsoft.com>

# Description This pull request introduces a new API and supporting backend for installing, uninstalling, and tracking the status of Terraform binaries in the Universal Control Plane (UCP). It includes new documentation, API endpoints, configuration options, and backend logic for managing Terraform installations, with a focus on supporting mirrored downloads and robust status tracking. The most important changes are: **API and Documentation Enhancements:** * Added a new section to the UCP documentation and created `terraform-installer.md` describing the Terraform Installer API, including endpoints for install, uninstall, and status, as well as usage notes. [[1]](diffhunk://#diff-314cc86e95eed998ca73d6e14e038dd28b57ab90a3e427d5850865329af88325L6-R16) [[2]](diffhunk://#diff-9463bcacbdcc18c9cdff7c3094700cd9756b440dddb69177fc6a04341f0a8867R1-R8) **Installer API Endpoints and Handlers:** * Implemented new HTTP endpoints under `/installer/terraform` for installing, uninstalling, and querying the status of Terraform binaries, with handlers for request validation, queueing, and status response. (`pkg/terraform/installer/routes.go`) * Introduced request/response types, status models, and enums for installer operations, version states, health, and API response formatting. (`pkg/terraform/installer/types.go`) **Installer Backend and Status Management:** * Added a persistent status store for installer metadata, including current/previous versions, per-version status, queue info, and error tracking, with database-backed implementation. (`pkg/terraform/installer/status_store.go`) * Added helper for updating queue information in the installer status (e.g., incrementing pending operations). (`pkg/terraform/installer/queue_status.go`) **Configuration and Constants:** * Added a new configuration option `sourceBaseUrl` in `TerraformOptions` to allow downloading Terraform from a mirror, supporting air-gapped setups. (`pkg/armrpc/hostoptions/providerconfig.go`) * Defined installer queue and status storage constants for consistent resource naming. (`pkg/terraform/installer/constants.go`) **Server Integration:** * Updated API service initialization to support the new handler registration pattern, improving clarity and maintainability. (`pkg/server/apiservice.go`) ## Type of change - This pull request adds or changes features of Radius and has an approved issue (issue link required). Fixes: #issue_number ## Contributor checklist Please verify that the PR meets the following requirements, where applicable:  - An overview of proposed schema changes is included in a linked GitHub issue. - [ ] Yes  - [x] Not applicable  - A design document PR is created in the [design-notes repository](https://github.com/radius-project/design-notes/), if new APIs are being introduced. - [ ] Yes  - [x] Not applicable  - The design document has been reviewed and approved by Radius maintainers/approvers. - [ ] Yes  - [x] Not applicable  - A PR for the [samples repository](https://github.com/radius-project/samples) is created, if existing samples are affected by the changes in this PR. - [ ] Yes  - [x] Not applicable  - A PR for the [documentation repository](https://github.com/radius-project/docs) is created, if the changes in this PR affect the documentation or any user facing updates are made. - [ ] Yes  - [x] Not applicable  - A PR for the [recipes repository](https://github.com/radius-project/recipes) is created, if existing recipes are affected by the changes in this PR. - [ ] Yes  - [x] Not applicable  Signed-off-by: ytimocin <ytimocin@microsoft.com>

# Description _Please explain the changes you've made._ ## Type of change  - This pull request fixes a bug in Radius and has an approved issue (issue link required). - This pull request adds or changes features of Radius and has an approved issue (issue link required). - This pull request is a minor refactor, code cleanup, test improvement, or other maintenance task and doesn't change the functionality of Radius (issue link optional).  Fixes: #issue_number ## Contributor checklist Please verify that the PR meets the following requirements, where applicable:  - An overview of proposed schema changes is included in a linked GitHub issue. - [ ] Yes  - [x] Not applicable  - A design document PR is created in the [design-notes repository](https://github.com/radius-project/design-notes/), if new APIs are being introduced. - [ ] Yes  - [x] Not applicable  - The design document has been reviewed and approved by Radius maintainers/approvers. - [ ] Yes  - [x] Not applicable  - A PR for the [samples repository](https://github.com/radius-project/samples) is created, if existing samples are affected by the changes in this PR. - [ ] Yes  - [x] Not applicable  - A PR for the [documentation repository](https://github.com/radius-project/docs) is created, if the changes in this PR affect the documentation or any user facing updates are made. - [ ] Yes  - [x] Not applicable  - A PR for the [recipes repository](https://github.com/radius-project/recipes) is created, if existing recipes are affected by the changes in this PR. - [ ] Yes  - [x] Not applicable  Signed-off-by: ytimocin <ytimocin@microsoft.com>

Signed-off-by: ytimocin <ytimocin@microsoft.com>

radius-functional-tests · 2026-01-29T22:40:29Z

Radius functional test overview

🔍 Go to test action run

Click here to see the test run details

Name	Value
Repository	radius-project/radius
Commit ref	`239047a`
Unique ID	funcb7ac3f6739
Image tag	pr-funcb7ac3f6739

gotestsum 1.13.0
KinD: v0.29.0
Dapr: 1.14.4
Azure KeyVault CSI driver: 1.4.2
Azure Workload identity webhook: 1.3.0
Bicep recipe location ghcr.io/radius-project/dev/test/testrecipes/test-bicep-recipes/<name>:pr-funcb7ac3f6739
Terraform recipe location http://tf-module-server.radius-test-tf-module-server.svc.cluster.local/<name>.zip (in cluster)
applications-rp test image location: ghcr.io/radius-project/dev/applications-rp:pr-funcb7ac3f6739
dynamic-rp test image location: ghcr.io/radius-project/dev/dynamic-rp:pr-funcb7ac3f6739
controller test image location: ghcr.io/radius-project/dev/controller:pr-funcb7ac3f6739
ucp test image location: ghcr.io/radius-project/dev/ucpd:pr-funcb7ac3f6739
deployment-engine test image location: ghcr.io/radius-project/deployment-engine:latest

Test Status

⌛ Building Radius and pushing container images for functional tests...
✅ Container images build succeeded
⌛ Publishing Bicep Recipes for functional tests...
✅ Recipe publishing succeeded
⌛ Starting corerp-cloud functional tests...
⌛ Starting ucp-cloud functional tests...
✅ ucp-cloud functional tests succeeded
✅ corerp-cloud functional tests succeeded

Signed-off-by: Vishwanath Hiremath <vhiremath@microsoft.com>

ytimocin requested review from a team as code owners January 21, 2026 04:04

ytimocin requested a deployment to functional-tests January 21, 2026 04:04 — with GitHub Actions Waiting

ytimocin temporarily deployed to publish-bicep January 21, 2026 04:04 — with GitHub Actions Inactive

kachawla previously approved these changes Jan 21, 2026

View reviewed changes

ytimocin force-pushed the features/terraform-bicep-settings branch from 968531a to 51932d8 Compare January 21, 2026 07:17

ytimocin temporarily deployed to functional-tests January 21, 2026 07:17 — with GitHub Actions Inactive

ytimocin temporarily deployed to publish-bicep January 21, 2026 07:17 — with GitHub Actions Inactive

ytimocin changed the title ~~Add env terraform/bicep settings schema (#11013)~~ Feature Branch for Terraform Lifecycle Jan 21, 2026

ytimocin marked this pull request as draft January 21, 2026 17:59

ytimocin force-pushed the features/terraform-bicep-settings branch from 51932d8 to 133ec36 Compare January 22, 2026 21:19

ytimocin requested a deployment to functional-tests January 22, 2026 21:20 — with GitHub Actions Waiting

ytimocin temporarily deployed to publish-bicep January 22, 2026 21:20 — with GitHub Actions Inactive

ytimocin force-pushed the features/terraform-bicep-settings branch from 133ec36 to 45c1a6a Compare January 23, 2026 00:33

ytimocin temporarily deployed to functional-tests January 23, 2026 00:34 — with GitHub Actions Inactive

ytimocin temporarily deployed to publish-bicep January 23, 2026 00:34 — with GitHub Actions Inactive

ytimocin force-pushed the features/terraform-bicep-settings branch from 45c1a6a to f61aa49 Compare January 24, 2026 04:08

ytimocin requested a deployment to functional-tests January 24, 2026 04:08 — with GitHub Actions Waiting

ytimocin temporarily deployed to publish-bicep January 24, 2026 04:08 — with GitHub Actions Inactive

ytimocin dismissed kachawla’s stale review via 2f83c6b January 24, 2026 05:29

ytimocin requested a deployment to functional-tests January 24, 2026 05:29 — with GitHub Actions Waiting

ytimocin temporarily deployed to publish-bicep January 24, 2026 05:30 — with GitHub Actions Inactive

github-advanced-security bot found potential problems Jan 24, 2026

View reviewed changes

ytimocin temporarily deployed to functional-tests January 26, 2026 17:35 — with GitHub Actions Inactive

ytimocin temporarily deployed to publish-bicep January 26, 2026 17:35 — with GitHub Actions Inactive

ytimocin marked this pull request as ready for review January 26, 2026 17:41

github-advanced-security bot found potential problems Jan 26, 2026

View reviewed changes

pkg/terraform/installer/handler.go Fixed Show fixed Hide fixed

pkg/terraform/installer/handler.go Fixed Show fixed Hide fixed

ytimocin force-pushed the features/terraform-bicep-settings branch from 642e7e2 to 14ec5e7 Compare January 27, 2026 00:42

ytimocin temporarily deployed to functional-tests January 27, 2026 00:42 — with GitHub Actions Inactive

ytimocin temporarily deployed to publish-bicep January 27, 2026 00:43 — with GitHub Actions Inactive

ytimocin force-pushed the features/terraform-bicep-settings branch from 14ec5e7 to b8f13ce Compare January 27, 2026 01:33

ytimocin temporarily deployed to functional-tests January 27, 2026 01:33 — with GitHub Actions Inactive

ytimocin temporarily deployed to publish-bicep January 27, 2026 01:34 — with GitHub Actions Inactive

ytimocin force-pushed the features/terraform-bicep-settings branch from b8f13ce to 7838f5a Compare January 27, 2026 17:13

ytimocin requested a deployment to functional-tests January 27, 2026 17:13 — with GitHub Actions Waiting

ytimocin force-pushed the features/terraform-bicep-settings branch from 7838f5a to 27dfca5 Compare January 27, 2026 17:13

ytimocin temporarily deployed to functional-tests January 27, 2026 17:13 — with GitHub Actions Inactive

ytimocin temporarily deployed to publish-bicep January 27, 2026 17:19 — with GitHub Actions Inactive

ytimocin force-pushed the features/terraform-bicep-settings branch from 27dfca5 to 5dbab9e Compare January 27, 2026 17:55

ytimocin temporarily deployed to functional-tests January 27, 2026 17:55 — with GitHub Actions Inactive

ytimocin temporarily deployed to publish-bicep January 27, 2026 17:55 — with GitHub Actions Inactive

ytimocin force-pushed the features/terraform-bicep-settings branch from 5dbab9e to 676491a Compare January 28, 2026 21:39

ytimocin temporarily deployed to publish-bicep January 28, 2026 21:39 — with GitHub Actions Inactive

ytimocin force-pushed the features/terraform-bicep-settings branch from 676491a to 9d080f1 Compare January 29, 2026 19:09

ytimocin temporarily deployed to publish-bicep January 29, 2026 19:09 — with GitHub Actions Inactive

ytimocin added 5 commits January 29, 2026 14:39

fix: Fixing an ineffectual assingment issue found during lint

a115658

Signed-off-by: ytimocin <ytimocin@microsoft.com>

fix: resolve gosec security warnings in terraform installer

239047a

Signed-off-by: ytimocin <ytimocin@microsoft.com>

ytimocin force-pushed the features/terraform-bicep-settings branch from 9d080f1 to 239047a Compare January 29, 2026 22:39

ytimocin temporarily deployed to publish-bicep January 29, 2026 22:42 — with GitHub Actions Inactive

Merge branch 'main' into features/terraform-bicep-settings

f2e4224

Signed-off-by: Vishwanath Hiremath <vhiremath@microsoft.com>

vishwahiremat requested a deployment to external-contributor-approval February 4, 2026 18:45 — with GitHub Actions Waiting

vishwahiremat temporarily deployed to publish-bicep February 4, 2026 18:45 — with GitHub Actions Inactive

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Feature Branch for Terraform Lifecycle#11042

Feature Branch for Terraform Lifecycle#11042
ytimocin wants to merge 6 commits intomainfrom
features/terraform-bicep-settings

ytimocin commented Jan 21, 2026 •

edited

Loading

Uh oh!

ytimocin commented Jan 21, 2026

Uh oh!

kachawla commented Jan 21, 2026

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

ytimocin commented Jan 27, 2026

Uh oh!

radius-functional-tests bot commented Jan 29, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

ytimocin commented Jan 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Description

Type of change

Contributor checklist

Uh oh!

ytimocin commented Jan 21, 2026

Uh oh!

kachawla commented Jan 21, 2026

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

ytimocin commented Jan 27, 2026

Uh oh!

radius-functional-tests bot commented Jan 29, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Radius functional test overview

Test Status

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

ytimocin commented Jan 21, 2026 •

edited

Loading

radius-functional-tests bot commented Jan 29, 2026 •

edited

Loading