Feat/RW-1123

[stewartshea]

• Updated the Azure resource type registry to include new resource types such as Azure Cosmos SQL databases, MySQL flexible servers, PostgreSQL databases, and Redis caches, improving the breadth of resource discovery.
• Refactored the Azure API indexer to support selective indexing, ensuring that only relevant resources are processed based on workspace configuration.
• Improved error handling for Azure Service Principal configuration, providing clearer feedback when required fields are missing.
• Enhanced documentation to clarify the new resource types and indexing logic, ensuring developers have up-to-date information on the indexing process and available resources.
• Updated Dockerfile and Python dependencies to support the new Azure SDK features, ensuring compatibility and stability in resource management.

---

Note

Low Risk
Changes are limited to workflows, test harnesses, and Helm values; no production application logic in this diff.

Overview
This PR aligns RunWhen Local integration tests and CI with the Workspace Builder on port 8000 (replacing 8081), drops MkDocs cheat-sheet stamping from image build workflows, and adds live Azure azureapi indexer validation.

Port and packaging: Docker/Helm/Taskfile fixtures map host ports to 8000; chart comments describe the REST service instead of a separate cheat sheet. EKS Helm values drop cheatSheet.disabled.

CI: ado-ci-test path filters include azureapi, azure_common, and resource_writer sources. merge_to_main and pr_open no longer run sed on mkdocs.yml for version/date.

Azure backend tests: Adds diff_resource_dump.py to compare resource-dump.yaml from cloudquery vs azureapi (ignoring _cq_* metadata). multi-subscription-aks gains run-backend-equivalence-test. New .test/azure/no-aks-resources fixture (cheap Terraform RGs/storage/KV) with Taskfile CI for baseline discovery, selective per-RG LOD, excludeTags, and cross-backend equivalence via resources.sqlite and indexer log counters.

^{Reviewed by Cursor Bugbot for commit 39ca6e5. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Unused DiffError exception class never raised

Low Severity

DiffError is defined but never raised or referenced anywhere in diff_resource_dump.py. It appears to be leftover scaffolding from an earlier design where errors were raised rather than collected into the differences list.

 

^{Reviewed by Cursor Bugbot for commit 0ed9cf5. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

There are 2 total unresolved issues (including 1 from previous review).

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 39ca6e5. Configure here.}

[cursor]

Assertions grep missing container_logs.log file

Medium Severity

The assert-selective and assert-tag-filter tasks grep both run_sh_output.log and container_logs.log for required indexer log patterns (e.g. selective discovery, skipped_tag_filter, skipped_lod_filter). However, the run-rwl-discovery task never creates container_logs.log — unlike the ADO fixture which explicitly runs docker logs "$CONTAINER_NAME" > container_logs.log 2>&1. If the indexer summary line is emitted by the container's main process rather than the exec'd run.sh, it won't appear in run_sh_output.log, and the assertion will incorrectly fail because container_logs.log doesn't exist.

Additional Locations (2)

• .test/azure/no-aks-resources/Taskfile.yaml#L346-L347
• .test/azure/no-aks-resources/Taskfile.yaml#L387-L388

 

^{Reviewed by Cursor Bugbot for commit 39ca6e5. Configure here.}