Copilot skills for building CLI, container images, and installing Radius by sk593 · Pull Request #11402 · radius-project/radius

sk593 · 2026-03-09T21:26:10Z

Description

Adds three new GitHub Copilot skills to help developers build and deploy Radius from source, and updates .github/copilot-instructions.md to register them.

New skills added:

.github/skills/radius-build-cli/SKILL.md — Step-by-step procedure for building the rad CLI binary using make build-rad, including cross-compilation and debug build variants.
.github/skills/radius-build-images/SKILL.md — Procedure for building and pushing Radius Docker images to a registry, including multi-arch builds and registry authentication guidance.
.github/skills/radius-install-custom/SKILL.md — Procedure for installing Radius on Kubernetes from custom-built images, including private registry auth, reinstall, and troubleshooting.

Type of change

This pull request is a minor refactor, code cleanup, test improvement, or other maintenance task and doesn't change the functionality of Radius (issue link optional).

Contributor checklist

Please verify that the PR meets the following requirements, where applicable:

An overview of proposed schema changes is included in a linked GitHub issue.
- Yes
- Not applicable
A design document PR is created in the design-notes repository, if new APIs are being introduced.
- Yes
- Not applicable
The design document has been reviewed and approved by Radius maintainers/approvers.
- Yes
- Not applicable
A PR for the samples repository is created, if existing samples are affected by the changes in this PR.
- Yes
- Not applicable
A PR for the documentation repository is created, if the changes in this PR affect the documentation or any user facing updates are made.
- Yes
- Not applicable
A PR for the recipes repository is created, if existing recipes are affected by the changes in this PR.
- Yes
- Not applicable

Copilot

Pull request overview

This PR adds new GitHub Copilot skills that document how to build the rad CLI, build/push Radius container images, and install Radius from custom images. It also introduces new DynamicRP schema-annotation helpers and a frontend update filter intended to interact with sensitive-field schema metadata.

Changes:

Add 3 new Copilot skills under .github/skills/ and register them in .github/copilot-instructions.md.
Add GetSensitiveFieldPaths / ExtractSensitiveFieldPaths implementation + tests under pkg/dynamicrp/schema/.
Add a new DynamicRP frontend update filter factory + tests under pkg/dynamicrp/frontend/.

Reviewed changes

Copilot reviewed 8 out of 8 changed files in this pull request and generated 11 comments.

Show a summary per file

File	Description
pkg/dynamicrp/schema/annotations.go	New schema annotation helper implementation for sensitive-field paths
pkg/dynamicrp/schema/annotations_test.go	Unit tests for the new DynamicRP schema helper
pkg/dynamicrp/frontend/updatefilter.go	New frontend update filter factory that fetches sensitive-field paths
pkg/dynamicrp/frontend/updatefilter_test.go	Tests covering the new update filter behavior
.github/skills/radius-build-cli/SKILL.md	New skill: build `rad` from source
.github/skills/radius-build-images/SKILL.md	New skill: build/push Radius images (incl. multi-arch)
.github/skills/radius-install-custom/SKILL.md	New skill: install Radius using custom-built images
.github/copilot-instructions.md	Registers the newly added skills

You can also share your feedback on Copilot code review. Take the survey.

pkg/dynamicrp/schema/annotations.go

pkg/dynamicrp/frontend/updatefilter.go

.github/skills/radius-install-custom/SKILL.md

pkg/dynamicrp/schema/annotations.go

pkg/dynamicrp/schema/annotations_test.go

pkg/dynamicrp/frontend/updatefilter.go

Copilot · 2026-03-09T21:30:59Z

.github/skills/radius-build-images/SKILL.md

+## Key Environment Variables
+
+| Variable | Default | Description |
+|----------|---------|-------------|
+| `DOCKER_REGISTRY` | `$(whoami)` | Target registry (e.g. `ghcr.io/myorg`) |
+| `DOCKER_TAG_VERSION` | `latest` | Image tag |
+| `DOCKER_CACHE_GHA` | `0` | Set to `1` to enable GitHub Actions layer caching |


The "Key Environment Variables" table lists DOCKER_REGISTRY defaulting to $(whoami), but the repository Makefile includes build/test.mk before build/docker.mk, and build/test.mk sets DOCKER_REGISTRY ?= ghcr.io/radius-project/dev — which becomes the effective default. Update the table (or call out the include-order behavior) so the documented default matches what make docker-build/docker-push will actually use when the user doesn’t export DOCKER_REGISTRY.

Copilot · 2026-03-09T21:30:59Z

.github/skills/radius-build-images/SKILL.md

+kubectl create secret docker-registry regcred \
+  --docker-server=${DOCKER_REGISTRY} \
+  --docker-username=<username> \
+  --docker-password=<password> \
+  -n radius-system


This example uses the --docker-password flag, which causes the registry password to appear in shell history, process listings, and potentially CI logs, making it easier for an attacker with host or log access to steal credentials and compromise the registry. Prefer approaches that do not place secrets directly on the command line (for example using --docker-password-stdin or other mechanisms supported by your tooling) so that passwords are not recorded in plaintext.

Copilot · 2026-03-09T21:31:00Z

.github/skills/radius-install-custom/SKILL.md

+kubectl create secret docker-registry regcred \
+  --docker-server=${DOCKER_REGISTRY} \
+  --docker-username=<username> \
+  --docker-password=<password> \
+  -n radius-system


This command passes the registry password via the --docker-password flag, which can expose credentials in shell history, process listings, and CI logs where the command line is captured. An attacker with access to these logs or the host could recover registry credentials and push or pull malicious images. Use a safer method such as --docker-password-stdin or an identity-based mechanism so the password is never present directly on the command line.

brooke-hamilton

**DOCKER_REGISTRY default
--set-string is not a registered flag on rad install kubernetes

.github/skills/radius-build-images/SKILL.md

.github/skills/radius-install-custom/SKILL.md

Signed-off-by: sk593 <shruthikumar@microsoft.com>

Copilot AI review requested due to automatic review settings March 9, 2026 21:26

sk593 requested review from a team as code owners March 9, 2026 21:26

sk593 requested a deployment to external-contributor-approval March 9, 2026 21:26 — with GitHub Actions Waiting

Copilot started reviewing on behalf of sk593 March 9, 2026 21:26 View session

Copilot AI reviewed Mar 9, 2026

View reviewed changes

sk593 force-pushed the add-build-skills branch from 02975a9 to 1a19350 Compare March 9, 2026 21:31

sk593 requested a deployment to external-contributor-approval March 9, 2026 21:31 — with GitHub Actions Waiting

brooke-hamilton requested changes Mar 9, 2026

View reviewed changes

.github/skills/radius-build-images/SKILL.md Outdated Show resolved Hide resolved

.github/skills/radius-install-custom/SKILL.md Outdated Show resolved Hide resolved

This comment was marked as duplicate.

Sign in to view

sk593 requested a deployment to external-contributor-approval March 10, 2026 23:14 — with GitHub Actions Waiting

sk593 added 3 commits March 10, 2026 16:15

add build and install skills

1993273

Signed-off-by: sk593 <shruthikumar@microsoft.com>

add build and install skills

1a6de15

Signed-off-by: sk593 <shruthikumar@microsoft.com>

address comments and add AKS path

3ca0542

Signed-off-by: sk593 <shruthikumar@microsoft.com>

sk593 force-pushed the add-build-skills branch from b99f247 to 3ca0542 Compare March 10, 2026 23:16

sk593 deployed to external-contributor-approval March 10, 2026 23:16 — with GitHub Actions Active

brooke-hamilton approved these changes Mar 11, 2026

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Copilot skills for building CLI, container images, and installing Radius#11402

Copilot skills for building CLI, container images, and installing Radius#11402
sk593 wants to merge 3 commits intomainfrom
add-build-skills

sk593 commented Mar 9, 2026 •

edited

Loading

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Copilot AI Mar 9, 2026

Uh oh!

Copilot AI Mar 9, 2026

Uh oh!

Copilot AI Mar 9, 2026

Uh oh!

brooke-hamilton left a comment •

edited

Loading

Uh oh!

Uh oh!

Uh oh!

This comment was marked as duplicate.

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

sk593 commented Mar 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Description

Type of change

Contributor checklist

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Copilot AI Mar 9, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Mar 9, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Mar 9, 2026

Choose a reason for hiding this comment

Uh oh!

brooke-hamilton left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

This comment was marked as duplicate.

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

sk593 commented Mar 9, 2026 •

edited

Loading

brooke-hamilton left a comment •

edited

Loading