feat: testing azure ref. arch.

[florianow]

No description provided.

[github-actions]

Scorecard Check

Scorecard run on commit 2a04c5c38a7b0fb4c7a5b362a40fb20ce2668209 relative to origin/main

📊 meshstack-hub Module Scorecard

Generated: 2026-09-04 | Modules scanned: 2 | Categories: 7

📋 Per-Module Category Summary

Score per category per building block. n/a = category does not apply to this module.

Module	Overall	Core Structure	Integration	AWS Backplane	Azure Backplane	GCP Backplane	STACKIT Backplane	Testing
azure/hub-network	🟢 91%	🟢 100%	🟢 93%	n/a	🟢 100%	n/a	n/a	🟡 50%
azure/spoke-network	🟢 91%	🟢 100%	🟢 93%	n/a	🟢 100%	n/a	n/a	🟡 50%

⚠️ 2 modules have failing checks — failing categories are expanded below.

Core Structure — ✅ all passing

Basic module file structure and documentation — applies to 2 modules

Module	Score	📦	🔗	📋	📝	🖼️	📌	🚦	🔒
azure/hub-network	🟢 100%	✅	✅	➖	✅	✅	✅	➖	✅
azure/spoke-network	🟢 100%	✅	✅	➖	✅	✅	✅	➖	✅

Core Structure — Summary

Emoji	Criterion	Coverage	Status
📦	buildingblock/ directory exists	2/2	🟢 100%
🔗	meshstack_integration.tf present	2/2	🟢 100%
📋	buildingblock/APP_TEAM_README.md present (no-integration fallback)	n/a	—
📝	buildingblock/README.md with YAML front-matter	2/2	🟢 100%
🖼️	buildingblock/logo.png included	2/2	🟢 100%
📌	buildingblock/versions.tf present	2/2	🟢 100%
🚦	Child meshstack_building_block asserts a SUCCEEDED run	n/a	—
🔒	Provider versions use minimum constraint (>=)	2/2	🟢 100%

Integration — some checks failing

meshstack_integration.tf conventions — applies to 2 modules

Module	Score	🏷️	🏢	📤	🔌	📎	🔀	🌱	📋	🏷️	🧱	📖	📝	📊	🚫	🔄
azure/hub-network	🟢 93%	✅	✅	✅	✅	❌	✅	✅	✅	✅	✅	✅	✅	✅	✅	➖
azure/spoke-network	🟢 93%	✅	✅	✅	✅	✅	✅	❌	✅	✅	✅	✅	✅	✅	✅	➖

Integration — Summary

Emoji	Criterion	Coverage	Status
🏷️	variable "hub" in integration	2/2	🟢 100%
🏢	variable "meshstack" in integration	2/2	🟢 100%
📤	building_block_definition output exposed	2/2	🟢 100%
🔌	meshcloud/meshstack in required_providers	2/2	🟢 100%
📎	backplane source uses var.hub.git_ref	1/2	🟡 50%
🔀	ref_name uses var.hub.git_ref	2/2	🟢 100%
🌱	BBD terraform_version >= 1.12.0	1/2	🟡 50%
📋	version_spec.draft uses var.hub.bbd_draft	2/2	🟢 100%
🏷️	BBD metadata.tags forwards var.meshstack.tags	2/2	🟢 100%
🧱	BBD input argument vars with optional() have explicit defaults	2/2	🟢 100%
📖	BBD readme field present	2/2	🟢 100%
📝	BBD readme starts with plain-text description (no heading)	2/2	🟢 100%
📊	BBD readme has shared responsibility table (✅/❌)	2/2	🟢 100%
🚫	No documentation_md output in backplane	2/2	🟢 100%
🔄	meshstack_platform has lifecycle ignore_changes = [availability]	n/a	—

AWS Backplane — not applicable

AWS automation principal conventions (WIF or cross-account StackSet) — applies to 0 modules

No applicable modules.

Azure Backplane — ✅ all passing

Azure UAMI-based automation principal conventions — applies to 2 modules

Module	Score	🪪	🚫	🚫	🔑	🔗	⚡	🧹	📤	📍
azure/hub-network	🟢 100%	✅	✅	✅	✅	✅	✅	✅	✅	✅
azure/spoke-network	🟢 100%	✅	✅	✅	✅	✅	✅	✅	✅	✅

Azure Backplane — Summary

Emoji	Criterion	Coverage	Status
🪪	Uses azurerm_user_assigned_identity	2/2	🟢 100%
🚫	No azuread_application resources	2/2	🟢 100%
🚫	No azuread_service_principal resources	2/2	🟢 100%
🔑	No azuread_application_password resources	2/2	🟢 100%
🔗	Uses azurerm_federated_identity_credential	2/2	🟢 100%
⚡	workload_identity_federation is non-nullable	2/2	🟢 100%
🧹	No create_service_principal_name toggle	2/2	🟢 100%
📤	Outputs identity (client_id, principal_id, tenant_id)	2/2	🟢 100%
📍	Integration has azure_location	2/2	🟢 100%

GCP Backplane — not applicable

GCP workload-identity-federation automation principal conventions — applies to 0 modules

No applicable modules.

STACKIT Backplane — not applicable

STACKIT WIF-based automation principal conventions — applies to 0 modules

No applicable modules.

Testing — some checks failing

End-to-end test coverage — applies to 2 modules

Module	Score	⚙️	🧪	🚫	✅
azure/hub-network	🟡 50%	✅	❌	✅	❌
azure/spoke-network	🟡 50%	✅	❌	✅	❌

Testing — Summary

Emoji	Criterion	Coverage	Status
⚙️	backplane/ directory (optional tier)	2/2	🟢 100%
🧪	e2e/ test directory exists	0/2	🔴 0%
🚫	no .tftest.hcl outside e2e/	2/2	🟢 100%
✅	e2e/ contains .tftest.hcl files	0/2	🔴 0%

📈 Overall Summary

Overall Average Score: 91%

Score Distribution

• 🟢 High maturity (≥80%): 2 modules
• 🟡 Medium maturity (50–79%): 0 modules
• 🔴 Low maturity (<50%): 0 modules

[aws-amplify-eu-central-1]

This pull request is automatically being deployed by Amplify Hosting (learn more).

Access this pull request here: https://pr-303.d1o16zfeoh2slu.amplifyapp.com