Add support for CMK options in workflows

[tamirkamara]

Resolves #4148

What is being addressed

Adding support for CMK GH Actions workflows.

How is this addressed

• Add 3 new options to the workflows.
• Add Terraform validation for the new options + config schema (this is unrelated to GH actions)

[github-actions]

Unit Test Results

0 tests   0 ✅  0s ⏱️
0 suites  0 💤
0 files    0 ❌

Results for commit 0975c9b.

♻️ This comment has been updated with latest results.

[tamirkamara]

/test

[github-actions]

🤖 pr-bot 🤖

🏃 Running tests: https://github.com/microsoft/AzureTRE/actions/runs/12620906900 (with refid 8c2167bd)

(in response to this comment from @tamirkamara)

[tamirkamara]

/test

[github-actions]

🤖 pr-bot 🤖

🏃 Running tests: https://github.com/microsoft/AzureTRE/actions/runs/12627794742 (with refid 8c2167bd)

(in response to this comment from @tamirkamara)

[tamirkamara]

/test

[github-actions]

🤖 pr-bot 🤖

🏃 Running tests: https://github.com/microsoft/AzureTRE/actions/runs/12632163170 (with refid 8c2167bd)

(in response to this comment from @tamirkamara)

[Copilot]

Copilot reviewed 5 out of 15 changed files in this pull request and generated 3 comments.

Files not reviewed (10)

• config_schema.json: Language not supported
• core/terraform/variables.tf: Language not supported
• core/version.txt: Language not supported
• devops/terraform/variables.tf: Language not supported
• devops/version.txt: Language not supported
• .github/workflows/pr_comment_bot.yml: Evaluated as low risk
• docs/tre-admins/environment-variables.md: Evaluated as low risk
• docs/tre-admins/setup-instructions/cicd-pre-deployment-steps.md: Evaluated as low risk
• .github/workflows/deploy_tre.yml: Evaluated as low risk
• .github/workflows/deploy_tre_branch.yml: Evaluated as low risk

Comments suppressed due to low confidence (1)

.github/actions/devcontainer_run_command/action.yml:141

• [nitpick] The description for 'ENCRYPTION_KV_NAME' is empty. It should be more descriptive, e.g., 'The name of the Key Vault for CMK encryption'.

description: ""

[marrobi]

LGTM albeit haven't tested, couple of comments/questions.

Has this been tested somewhere - the workflows with CMK enabled? Be good to see a successful run.

[tamirkamara]

/test

[github-actions]

🤖 pr-bot 🤖

🏃 Running tests: https://github.com/microsoft/AzureTRE/actions/runs/12632841658 (with refid 8c2167bd)

(in response to this comment from @tamirkamara)

[marrobi]

@yuvalyaron do you know what this is waiting for/why it is in draft?

[yuvalyaron]

@marrobi not sure, perhaps it wasn't tested?
I can assign it to myself and test/merge if we do want to merge it.

[marrobi]

@marrobi not sure, perhaps it wasn't tested? I can assign it to me and test/merge if we do want to merge it.

We want to enable CMK via CI/CD, so will assign to yourself.

[yuvalyaron]

/test

[github-actions]

🤖 pr-bot 🤖

🏃 Running tests: https://github.com/microsoft/AzureTRE/actions/runs/13392638924 (with refid 8c2167bd)

(in response to this comment from @yuvalyaron)