Redesign airlock storage account architecture - #5048

Open

Marcus Robinson (marrobi) wants to merge 67 commits into

microsoft:mainfrom

marrobi:copilot/copilotredesign-airlock-storage-accounts

Commits on Aug 17, 2026

Redesign airlock storage account architecture
Marcus Robinson (marrobi)
committed
260a1be
Merge branch 'main' into copilot/copilotredesign-airlock-storage-accounts
Marcus Robinson (marrobi)
authored
63e8ab0

Commits on Aug 18, 2026

Fix airlock v2 defaults, scan verdict persistence, and processor edge cases (#5048)
Marcus Robinson (marrobi)
committed
d64ec28
Airlock v2: allow API-issued SAS to read import-in-progress for review VMs (#5048)
Marcus Robinson (marrobi)
committed
53118a7
Consolidate airlock v2 changelog into a single enhancement with doc link (#5048)
Marcus Robinson (marrobi)
committed
bf205c1
Store early airlock scan verdict on request instead of container metadata
Marcus Robinson (marrobi)
committed
0f477db
Address PR #5048 review: per-workspace airlock DNS, request migration, scan/stage edge cases (#5048)
Marcus Robinson (marrobi)
committed
6e7909e
Restore per-workspace airlock SAS signer + version-change guard from PR #4964 (#5048)
Marcus Robinson (marrobi)
committed
963df68
Finish legacy-airlock guards and address review comments (#5048)
Marcus Robinson (marrobi)
committed
560175f
Version-aware import-review: restore v1 (stalimip) connectivity behind enable_legacy_airlock (#5048)
Marcus Robinson (marrobi)
committed
19609d4
Backfill airlock_version in the startup guard before the block check (#5048)
Marcus Robinson (marrobi)
committed
8d5c8f7
Address review: v2 submit file handling, version-change/patch guards, core import-in-progress private-link (#5048)
Marcus Robinson (marrobi)
committed
d1751f5
Address PR #5048 review #4963131058: guard/blob-created/review-workspace fixes
Marcus Robinson (marrobi)
committed
cf281ac
Fix airlock review #4963547500 + live-found isPrivateLink ABAC bug
Marcus Robinson (marrobi)
committed
6fc28b6
Address suppressed review #4964016031 (K1/K2/K3)
Marcus Robinson (marrobi)
committed
7a0eb3c
Make airlock CHANGELOG entry concise
Marcus Robinson (marrobi)
committed
8ac8674
Add breaking-change note to set enable_legacy_airlock explicitly
Marcus Robinson (marrobi)
committed
6f9fee5
update changelog
Marcus Robinson (marrobi)
committed
9c38eba
Create the airlock SAS signer for every workspace, including manual auth
Marcus Robinson (marrobi)
committed
a61df5f
Revert unintended terraform lock file provider bump
Marcus Robinson (marrobi)
committed
9db39d4
Correct stale airlock docs/comments after manual-auth v2 support
Marcus Robinson (marrobi)
committed
db13c7d
Make the airlock container stage update atomic and stop dead-lettering stale scan verdicts
Marcus Robinson (marrobi)
committed
c87fe95
Delete a workspace's airlock containers when the workspace is deleted
Marcus Robinson (marrobi)
committed
413d32d
Give core its own DNS zone for the shared global airlock account
Marcus Robinson (marrobi)
committed
8fa83a1
Remove the App Gateway airlock storage proxy
Marcus Robinson (marrobi)
committed
a304c4f
Address review 4965636608: legacy-safe version defaults, retry fields, container ABAC
Marcus Robinson (marrobi)
committed
fdc7030
Check an airlock request belongs to the workspace in the path
Marcus Robinson (marrobi)
committed
61c6dc6
Address review feedback: sovereign-cloud signer issuer, airlock_version validation, non-destructive workspace delete, v2-scoped container cleanup, migration docs
Marcus Robinson (marrobi)
committed
0c9651b

Commits on Aug 19, 2026

Commits on Aug 20, 2026