feat(acl): convert ACL VHDs to COSI and publish to PMC - #8848

Open

Adams Anaglo (adamsanaglo) wants to merge 68 commits into

mainfrom

aa/cosi-pmc-reconcile

Commits on Jun 29, 2026

Add COSI conversion for ACL VHD images

bfjelds (bfjelds)
and
Copilot
committed
de9e531
Split COSI blob copy into its own pipeline task

bfjelds (bfjelds)
and
Copilot
committed
377092c
Move COSI convert after immutable copy, revert echo text

bfjelds (bfjelds)
and
Copilot
committed
c63ef74
Reorder: Convert COSI, copy COSI, then copy VHD to immutable

bfjelds (bfjelds)
and
Copilot
committed
0e67853
Set IMG_CUSTOMIZER_VERSION to 1.2

bfjelds (bfjelds)
and
Copilot
committed
7dda8ae
Remove unused SIG_SOURCE_* variables from ACL jobs

bfjelds (bfjelds)
and
Copilot
committed
cc051f9
Add IMG_CUSTOMIZER_* variables to ACL FIPS jobs

bfjelds (bfjelds)
and
Copilot
committed
c41a42d
Add cosi-publishing-info.json generation and pipeline artifact

bfjelds (bfjelds)
and
Copilot
committed
6288af4
Merge cosi-publishing-info generation into convert-vhd-to-cosi.sh

bfjelds (bfjelds)
and
Copilot
committed
8491224
Hardcode OS_NAME=Linux in convert-vhd-to-cosi.sh

bfjelds (bfjelds)
and
Copilot
committed
f2586f0
fix: set execute permission on convert-vhd-to-cosi.sh

bfjelds (bfjelds)
and
Copilot
committed
4630759
fix: remove redundant 'imagecustomizer' from docker run command

bfjelds (bfjelds)
and
Copilot
committed
410f241
Update ImageCustomizer version to 1.3 for ACL builds

bfjelds (bfjelds)
and
Copilot
committed
774fdf0
Update ACL imagecustomizer version from 1.3 to 1.4
bfjelds (bfjelds)
committed
805ec22
feat(acl): add opt-in GHCR fallback for ImageCustomizer and bump to 1.5

bfjelds (bfjelds)
and
Copilot
committed
5c95049
refactor(acl): fold ImageCustomizer tag into container refs

bfjelds (bfjelds)
and
Copilot
committed
00cd199

Commits on Jul 6, 2026

acl(cosi): upload COSI directly to PMC via AFD under PMC's service connection

Adams Anaglo
authored and
Adams Anaglo (adamsanaglo)
committed
80801e2
acl(cosi): reference PMC service connection by literal name to satisfy ADO compile-time authz

Adams Anaglo
authored and
Adams Anaglo (adamsanaglo)
committed
5de911a
Fix azcopy

Adams Anaglo
authored and
Adams Anaglo (adamsanaglo)
committed
010dd65
acl(cosi): upload COSI via Blob REST PUT with AAD token instead of azcopy

Adams Anaglo
authored and
Adams Anaglo (adamsanaglo)
committed
25e3479
acl(cosi): upload COSI via azblob SDK chunked block-blob upload

Adams Anaglo
authored and
Adams Anaglo (adamsanaglo)
committed
d40bc9c
Reference service connection variable

Adams Anaglo
authored and
Adams Anaglo (adamsanaglo)
committed
cd7181d
Merge remote-tracking branch 'upstream/main' into aa/cosi-pmc-reconcile
Adams Anaglo (adamsanaglo)
committed
e898180

Commits on Jul 7, 2026

Commits on Jul 16, 2026

Use QEMU to support arm64 kernel cmdline extractions from UKI
Adams Anaglo (adamsanaglo)
committed
1facc1a

Commits on Jul 20, 2026

QEMU
Adams Anaglo (adamsanaglo)
committed
c1ea9fc
Fix mounting
Adams Anaglo (adamsanaglo)
committed
c5c1482

Commits on Jul 21, 2026

Commits on Jul 22, 2026

Commits on Jul 30, 2026

Commits on Aug 6, 2026

Normalize image version and fips/non-fips
Adams Anaglo (adamsanaglo)
committed
c8cf1ed

Commits on Sep 8, 2026

Fix
Adams Anaglo (adamsanaglo)
committed
e75d365
Merge branch 'main' of https://github.com/Azure/AgentBaker into aa/cosi-pmc-reconcile
Adams Anaglo (adamsanaglo)
committed
a1b52ee
chore: tidy go.mod
aks-node-assistant[bot]
authored
3978b41
chore: tidy go.sum
aks-node-assistant[bot]
authored
eba427e
Harden COSI conversion bootstrap

Copilot
and
Adams Anaglo (adamsanaglo)
authored
d06bb2c
Finalize review feedback fixes

Copilot
and
Adams Anaglo (adamsanaglo)
authored
755fb10
Harden COSI bootstrap downloads

Copilot
and
Adams Anaglo (adamsanaglo)
authored
aa30655
Create COSI uploader output directory

Copilot
and
Adams Anaglo (adamsanaglo)
authored
eb5d9d1
Install Azure CLI on apt via pinned Microsoft repository

Copilot
and
Adams Anaglo (adamsanaglo)
authored
e6eacdc
Improve Go installation logic in builder template

Adams Anaglo (adamsanaglo)
and
Copilot
authored
d2a6e47
Revert unrelated CSE snapshot regeneration
Adams Anaglo (adamsanaglo)
committed
385cc99

Commits on Sep 18, 2026

Fix arm64 COSI convert azcopy download (azureedge.net CDN retired)
Adams Anaglo (adamsanaglo)
committed
713030c

Commits on Sep 21, 2026

Commits on Sep 22, 2026

Wait for VHD copy
Adams Anaglo (adamsanaglo)
committed
8a14746
Merge main
Adams Anaglo (adamsanaglo)
committed
831449e
Gate COSI publishing
Adams Anaglo (adamsanaglo)
committed
839c50c
Match VHD source
Adams Anaglo (adamsanaglo)
committed
f252bee
Scope COSI artifacts
Adams Anaglo (adamsanaglo)
committed
e7f5793
Check Go before convert
Adams Anaglo (adamsanaglo)
committed
0d8bbca
Reuse VHD copies
Adams Anaglo (adamsanaglo)
committed
de3a935
Test COSI uploads
Adams Anaglo (adamsanaglo)
committed
ac3b59b
chore: tidy go.mod
aks-node-assistant[bot]
authored
f86bcf5
Pin COSI inputs
Adams Anaglo (adamsanaglo)
committed
c52bca2
Skip unused conversion
Adams Anaglo (adamsanaglo)
committed
3feb088
Gate COSI handoff
Adams Anaglo (adamsanaglo)
committed
fa2990f