Document containerImages Bicep recipe design#12372
Open
AzureMike wants to merge 4 commits into
Open
Conversation
AzureMike
requested a deployment
to
external-contributor-approval
July 10, 2026 22:35 — with 
GitHub Actions
Waiting
GitHub Actions
Waiting
Contributor
There was a problem hiding this comment.
Pull request overview
Adds a new design note documenting how a Kubernetes Bicep recipe for Radius.Compute/containerImages will be executed via a scoped post-deployment hook in the Bicep driver, including the private imageBuild output contract and embedded build.sh behavior. This fits into the broader recipes system by describing a targeted extension to the generic Bicep driver path used by dynamic-rp.
Changes:
- Document the high-level flow and the Bicep-to-driver private contract (
imageBuildoutput + embeddedradiusContainerImagesBuildScript). - Describe the embedded BuildKit script contract, compatibility differences vs Terraform, and security boundary considerations.
- Capture test/validation plans and remaining release/open questions for shipping the hook and recipe.
AzureMike
marked this pull request as draft
July 13, 2026 18:11
added 2 commits
July 14, 2026 10:31
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 02f56b94-06c1-4607-a961-824552d82076
AzureMike
force-pushed
the
docs/container-images-bicep-design
branch
from
July 14, 2026 17:32
da0ccb1 to
a0f8f01
Compare
AzureMike
marked this pull request as ready for review
July 14, 2026 17:33
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 5b3219d9-0b93-4ab8-b255-57d9ca7d1df8
| BuildKit remains an install-time opt-in: | ||
|
|
||
| ```sh | ||
| rad install kubernetes --set dynamicrp.buildkit.enabled=true |
Contributor
There was a problem hiding this comment.
does this also keep the bicep build hook uninstalled or no?
Author
There was a problem hiding this comment.
Good point. Right now, the hook is always present regardless of the dynamicrp.buildkit.enabled flag.
sk593
reviewed
Jul 15, 2026
willdavsmith
left a comment
willdavsmith
left a comment
Contributor
There was a problem hiding this comment.
nice work! left a couple of comments but overall looks good.
|
|
||
| 1. `dynamic-rp` downloads the compiled Bicep recipe and adds the Radius recipe context. | ||
| 2. UCP deploys the Bicep template and returns `result` plus the private `imageBuild` output. | ||
| 3. The Bicep driver checks the resource type. Only `Radius.Compute/containerImages` uses this hook. |
Member
There was a problem hiding this comment.
What is a hook in this context?
lakshmimsft
reviewed
Jul 17, 2026
Contributor
|
overall /lgtm, great work! |
- Define build hook and clarify it is driver-owned, not developer-supplied - Attribute immutable-ref guidance to the developer via build.source - Note the build hook is always present; only BuildKit sidecar is opt-in - Add multi-cluster advantage of running from the control plane - Reframe recipeDigest and script-constraint items as future enhancements - Add open questions for Bicep/Terraform recipe sync and multi-cluster credentials
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Radius.Compute/containerImagesRelated implementation: #12361
Related recipe: radius-project/resource-types-contrib#228