Pass RADIUS_STATE_* vars to rad startup/shutdown in deploy workflows

[sk593]

Description

Deploys dispatched through the Radius canvas extension fail in the Restore Radius state step with:

Error: failed to open state archive: OCI archive repository is not configured; set RADIUS_STATE_REGISTRY or RADIUS_GRAPH_REGISTRY
Command failed: ... rad startup

Root cause

The canvas extension provisions the OCI state package and sets these environment-scoped GitHub variables on the target GitHub Environment at environment-creation time:

• RADIUS_STATE_BACKEND (e.g. oci)
• RADIUS_STATE_REGISTRY (e.g. ghcr.io/<owner>/<repo>-radius-state-<env>-<hash>)
• RADIUS_STATE_ARCHIVE (e.g. radius-state)

But the deploy workflow templates never map these into the process environment, so rad startup (shared restore-state action) and rad shutdown (shared teardown action) never see them. run-rad-commands-azure.yml / run-rad-commands-aws.yml only expose ENVIRONMENT, APP_FILE, APP_IMAGE, and recipe-pack vars.

Fix

Add a job-level env: block to the deploy job in both run-rad-commands-azure.yml and run-rad-commands-aws.yml exposing the three RADIUS_STATE_* vars.

Job level is deliberate: environment-scoped vars.* only resolve within a job that declares environment:, and a job-level env: is inherited by every step — including the shared restore-state/teardown composite actions where rad startup/rad shutdown run, plus the deploy/app-graph commands.

    env:
      RADIUS_STATE_BACKEND: ${{ vars.RADIUS_STATE_BACKEND }}
      RADIUS_STATE_REGISTRY: ${{ vars.RADIUS_STATE_REGISTRY }}
      RADIUS_STATE_ARCHIVE: ${{ vars.RADIUS_STATE_ARCHIVE }}

Type of change

• This pull request fixes a bug in Radius and has an approved issue (issue link required).

Fixes #12471

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Scanned Files

None

[radius-functional-tests]

Radius functional test overview

🔍 Go to test action run

Click here to see the test run details

Name	Value
Repository	radius-project/radius
Commit ref	e2bd012
Unique ID	func02c475133b
Image tag	pr-func02c475133b

• Dapr: 1.14.4
• Azure KeyVault CSI driver: 1.4.2
• Azure Workload identity webhook: 1.3.0
• Bicep recipe location ghcr.io/radius-project/dev/test/testrecipes/test-bicep-recipes/<name>:pr-func02c475133b
• Terraform recipe location http://tf-module-server.radius-test-tf-module-server.svc.cluster.local/<name>.zip (in cluster)
• applications-rp test image location: ghcr.io/radius-project/dev/applications-rp:pr-func02c475133b
• dynamic-rp test image location: ghcr.io/radius-project/dev/dynamic-rp:pr-func02c475133b
• controller test image location: ghcr.io/radius-project/dev/controller:pr-func02c475133b
• ucp test image location: ghcr.io/radius-project/dev/ucpd:pr-func02c475133b
• deployment-engine test image location: ghcr.io/radius-project/deployment-engine:latest

Test Status

⌛ Building Radius and pushing container images for functional tests...
✅ Container images build succeeded
⌛ Publishing Bicep Recipes for functional tests...
✅ Recipe publishing succeeded
⌛ Starting corerp-cloud functional tests...
⌛ Starting ucp-cloud functional tests...
✅ ucp-cloud functional tests succeeded
✅ corerp-cloud functional tests succeeded

[Copilot]

Pull request overview

This PR fixes GitHub Actions deploy failures triggered by the Radius canvas extension by ensuring environment-scoped RADIUS_STATE_* GitHub Environment variables are surfaced into the job process environment so the shared restore-state (rad startup) and teardown (rad shutdown) composite actions can access the OCI state archive configuration.

Changes:

• Add job-level env: mappings for RADIUS_STATE_BACKEND, RADIUS_STATE_REGISTRY, and RADIUS_STATE_ARCHIVE in the Azure deploy workflow template.
• Add the same job-level env: mappings in the AWS deploy workflow template.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File	Description
.github/extension/run-rad-commands-azure.yml	Exposes environment-scoped RADIUS_STATE_* variables at the deploy job level so rad startup/shutdown can open the OCI state archive.
.github/extension/run-rad-commands-aws.yml	Mirrors the Azure workflow fix for AWS so state restore/persist works consistently across templates.

[github-actions]

Unit Tests

    2 files  ±0    456 suites  ±0   7m 22s ⏱️ -7s
5 995 tests ±0  5 993 ✅ ±0  2 💤 ±0  0 ❌ ±0 
7 198 runs  ±0  7 196 ✅ ±0  2 💤 ±0  0 ❌ ±0 

Results for commit e2bd012. ± Comparison against base commit 9cdd784.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 53.41%. Comparing base (9cdd784) to head (e2bd012).

Additional details and impacted files

@@            Coverage Diff             @@
##             main   #12472      +/-   ##
==========================================
- Coverage   53.42%   53.41%   -0.02%     
==========================================
  Files         762      762              
  Lines       50246    50246              
==========================================
- Hits        26843    26837       -6     
- Misses      20879    20882       +3     
- Partials     2524     2527       +3     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.