test(ui): add Azure provider management E2E tests (#8949)

.github/workflows/ui-e2e-tests.yml

@@ -24,6 +24,10 @@ jobs:
       E2E_AWS_PROVIDER_ACCESS_KEY: ${{ secrets.E2E_AWS_PROVIDER_ACCESS_KEY }}
       E2E_AWS_PROVIDER_SECRET_KEY: ${{ secrets.E2E_AWS_PROVIDER_SECRET_KEY }}
       E2E_AWS_PROVIDER_ROLE_ARN: ${{ secrets.E2E_AWS_PROVIDER_ROLE_ARN }}
+      E2E_AZURE_SUBSCRIPTION_ID: ${{ secrets.E2E_AZURE_SUBSCRIPTION_ID }}
+      E2E_AZURE_CLIENT_ID: ${{ secrets.E2E_AZURE_CLIENT_ID }}
+      E2E_AZURE_SECRET_ID: ${{ secrets.E2E_AZURE_SECRET_ID }}
+      E2E_AZURE_TENANT_ID: ${{ secrets.E2E_AZURE_TENANT_ID }}
       E2E_NEW_PASSWORD: ${{ secrets.E2E_NEW_PASSWORD }}
     steps:
       - name: Checkout repository

ui/tests/providers/providers-page.ts

@@ -10,6 +10,12 @@ export interface AWSProviderData {
   accessKeyId?: string;
   secretAccessKey?: string;
 }
+  
+// AZURE provider data
+export interface AZUREProviderData {
+  subscriptionId: string;
+  alias?: string;
+}
 
 // AWS credential options
 export const AWS_CREDENTIAL_OPTIONS = {
@@ -29,6 +35,23 @@ export interface AWSProviderCredential {
   secretAccessKey?: string;
 }
 
+// AZURE credential options
+export const AZURE_CREDENTIAL_OPTIONS = {
+  AZURE_CREDENTIALS: "credentials"
+} as const;
+
+// AZURE credential type
+type AZURECredentialType = (typeof AZURE_CREDENTIAL_OPTIONS)[keyof typeof AZURE_CREDENTIAL_OPTIONS];
+
+// AZURE provider credential
+export interface AZUREProviderCredential {
+  type: AZURECredentialType;
+  clientId:string;
+  clientSecret:string;
+  tenantId:string;
+}
+
+
 // Providers page
 export class ProvidersPage extends BasePage {
 
@@ -64,6 +87,12 @@ export class ProvidersPage extends BasePage {
   readonly accessKeyIdInput: Locator;
   readonly secretAccessKeyInput: Locator;
 
+  // AZURE provider form elements
+  readonly azureSubscriptionIdInput: Locator;
+  readonly azureClientIdInput: Locator;
+  readonly azureClientSecretInput: Locator;
+  readonly azureTenantIdInput: Locator;
+
   // Delete button
   readonly deleteProviderConfirmationButton: Locator;
 
@@ -96,6 +125,14 @@ export class ProvidersPage extends BasePage {
 
     // AWS provider form inputs
     this.accountIdInput = page.getByRole("textbox", { name: "Account ID" });
+    
+    // AZURE provider form inputs
+    this.azureSubscriptionIdInput = page.getByRole("textbox", { name: "Subscription ID" });
+    this.azureClientIdInput = page.getByRole("textbox", { name: "Client ID" });
+    this.azureClientSecretInput = page.getByRole("textbox", { name: "Client Secret" });
+    this.azureTenantIdInput = page.getByRole("textbox", { name: "Tenant ID" });
+
+    // Alias input
     this.aliasInput = page.getByRole("textbox", { name: "Provider alias (optional)" });
 
     // Navigation buttons in the form (next and back)
@@ -150,11 +187,19 @@ export class ProvidersPage extends BasePage {
   }
 
   async selectAWSProvider(): Promise<void> {
+
     // Prefer label-based click for radios, force if overlay intercepts
     await this.awsProviderRadio.click({ force: true });
     await this.waitForPageLoad();
   }
 
+  async selectAZUREProvider(): Promise<void> {
+    
+    // Prefer label-based click for radios, force if overlay intercepts
+    await this.azureProviderRadio.click({ force: true });
+    await this.waitForPageLoad();
+  }
+  
   async fillAWSProviderDetails(data: AWSProviderData): Promise<void> {
     // Fill the AWS provider details
 
@@ -165,6 +210,16 @@ export class ProvidersPage extends BasePage {
     }
   }
 
+  async fillAZUREProviderDetails(data: AZUREProviderData): Promise<void> {
+    // Fill the AWS provider details
+
+    await this.azureSubscriptionIdInput.fill(data.subscriptionId);
+
+    if (data.alias) {
+      await this.aliasInput.fill(data.alias);
+    }
+  }
+
   async clickNext(): Promise<void> {
     // The wizard interface may use different labels for its primary action button on each step.
     // This function determines which button to click depending on the current URL and page content.
@@ -318,6 +373,20 @@ export class ProvidersPage extends BasePage {
     }
   }
 
+  async fillAZURECredentials(credentials: AZUREProviderCredential): Promise<void> {
+    // Fill the azure credentials form
+
+    if (credentials.clientId) {
+      await this.azureClientIdInput.fill(credentials.clientId);
+    }
+    if (credentials.clientSecret) {
+      await this.azureClientSecretInput.fill(credentials.clientSecret);
+    }
+    if (credentials.tenantId) {
+      await this.azureTenantIdInput.fill(credentials.tenantId);
+    }
+  }
+
   async verifyPageLoaded(): Promise<void> {
     // Verify the providers page is loaded
 

ui/tests/providers/providers.md

@@ -107,3 +107,55 @@
 - Provider cleanup performed before each test to ensure clean state
 - Requires valid AWS account with role assumption permissions
 - Role ARN must be properly configured
+
+---
+
+## Test Case: `PROVIDER-E2E-003` - Add Azure Provider with Static Credentials
+
+**Priority:** `critical`
+
+**Tags:**
+
+- type → @e2e, @serial
+- feature → @providers
+- provider → @azure
+
+**Description/Objective:** Validates the complete flow of adding a new Azure provider using static client credentials (Client ID, Client Secret, Tenant ID)
+
+**Preconditions:**
+
+- Admin user authentication required (admin.auth.setup setup)
+- Environment variables configured: E2E_AZURE_SUBSCRIPTION_ID, E2E_AZURE_CLIENT_ID, E2E_AZURE_SECRET_ID, E2E_AZURE_TENANT_ID
+- Remove any existing provider with the same Subscription ID before starting the test
+- This test must be run serially and never in parallel with other tests, as it requires the Subscription ID not to be already registered beforehand.
+
+### Flow Steps:
+
+1. Navigate to providers page
+2. Click "Add Provider" button
+3. Select Azure provider type
+4. Fill provider details (subscription ID and alias)
+5. Fill Azure credentials (client ID, client secret, tenant ID)
+6. Launch initial scan
+7. Verify redirect to provider management page
+
+### Expected Result:
+
+- Azure provider successfully added with static credentials
+- Initial scan launched successfully
+- User redirected to provider details page
+
+### Key verification points:
+
+- Provider page loads correctly
+- Connect account page displays Azure option
+- Azure credentials form accepts all required fields
+- Launch scan page appears
+- Successful redirect to provider page after scan launch
+
+### Notes:
+
+- Test uses environment variables for Azure credentials
+- Provider cleanup performed before each test to ensure clean state
+- Requires valid Azure subscription with appropriate permissions
+- Client credentials must have sufficient permissions for security scanning

ui/tests/providers/providers.spec.ts

@@ -4,172 +4,260 @@ import {
   ProvidersPage,
   AWSProviderData,
   AWSProviderCredential,
-  AWS_CREDENTIAL_OPTIONS
+  AWS_CREDENTIAL_OPTIONS,
+  AZUREProviderData,
+  AZUREProviderCredential,
+  AZURE_CREDENTIAL_OPTIONS,
 } from "./providers-page";
 
+test.describe("Add Provider", () => {
+  test.describe.serial("Add AWS Provider", () => {
+    // Providers page object
+    let providersPage: ProvidersPage;
+    let scansPage: ScansPage;
+    // Test data from environment variables
+    const accountId = process.env.E2E_AWS_PROVIDER_ACCOUNT_ID;
+    const accessKey = process.env.E2E_AWS_PROVIDER_ACCESS_KEY;
+    const secretKey = process.env.E2E_AWS_PROVIDER_SECRET_KEY;
+    const roleArn = process.env.E2E_AWS_PROVIDER_ROLE_ARN;
 
-test.describe.serial("Add AWS Provider", () => {
-  // Providers page object
-  let providersPage: ProvidersPage;
-  let scansPage: ScansPage;
-  // Test data from environment variables
-  const accountId = process.env.E2E_AWS_PROVIDER_ACCOUNT_ID;
-  const accessKey = process.env.E2E_AWS_PROVIDER_ACCESS_KEY;
-  const secretKey = process.env.E2E_AWS_PROVIDER_SECRET_KEY;
-  const roleArn = process.env.E2E_AWS_PROVIDER_ROLE_ARN;
+    // Validate required environment variables
+    if (!accountId) {
+      throw new Error(
+        "E2E_AWS_PROVIDER_ACCOUNT_ID environment variable is not set",
+      );
+    }
 
-  // Validate required environment variables
-  if (!accountId) {
-    throw new Error(
-      "E2E_AWS_PROVIDER_ACCOUNT_ID environment variable is not set",
+    // Setup before each test
+    test.beforeEach(async ({ page }) => {
+      providersPage = new ProvidersPage(page);
+      // Clean up existing provider to ensure clean test state
+      await providersPage.deleteProviderIfExists(accountId);
+    });
+
+    // Use admin authentication for provider management
+    test.use({ storageState: "playwright/.auth/admin_user.json" });
+
+    test(
+      "should add a new AWS provider with static credentials",
+      {
+        tag: [
+          "@critical",
+          "@e2e",
+          "@providers",
+          "@aws",
+          "@serial",
+          "@PROVIDER-E2E-001",
+        ],
+      },
+      async ({ page }) => {
+        // Validate required environment variables
+        if (!accountId || !accessKey || !secretKey) {
+          throw new Error(
+            "E2E_AWS_PROVIDER_ACCOUNT_ID, E2E_AWS_PROVIDER_ACCESS_KEY, and E2E_AWS_PROVIDER_SECRET_KEY environment variables are not set",
+          );
+        }
+
+        // Prepare test data for AWS provider
+        const awsProviderData: AWSProviderData = {
+          accountId: accountId,
+          alias: "Test E2E AWS Account - Credentials",
+        };
+
+        // Prepare static credentials
+        const staticCredentials: AWSProviderCredential = {
+          type: AWS_CREDENTIAL_OPTIONS.AWS_CREDENTIALS,
+          accessKeyId: accessKey,
+          secretAccessKey: secretKey,
+        };
+
+        // Navigate to providers page
+        await providersPage.goto();
+        await providersPage.verifyPageLoaded();
+
+        // Start adding new provider
+        await providersPage.clickAddProvider();
+        await providersPage.verifyConnectAccountPageLoaded();
+
+        // Select AWS provider
+        await providersPage.selectAWSProvider();
+
+        // Fill provider details
+        await providersPage.fillAWSProviderDetails(awsProviderData);
+        await providersPage.clickNext();
+
+        // Select static credentials type
+        await providersPage.selectCredentialsType(
+          AWS_CREDENTIAL_OPTIONS.AWS_CREDENTIALS,
+        );
+        await providersPage.verifyCredentialsPageLoaded();
+
+        // Fill static credentials
+        await providersPage.fillStaticCredentials(staticCredentials);
+        await providersPage.clickNext();
+
+        // Launch scan
+        await providersPage.verifyLaunchScanPageLoaded();
+        await providersPage.clickNext();
+
+        // Wait for redirect to provider page
+        scansPage = new ScansPage(page);
+        await scansPage.verifyPageLoaded();
+      },
     );
-  }
 
-  // Setup before each test
-  test.beforeEach(async ({ page }) => {
-    providersPage = new ProvidersPage(page);
-    // Clean up existing provider to ensure clean test state
-    await providersPage.deleteProviderIfExists(accountId);
+    test(
+      "should add a new AWS provider with assume role credentials with Access Key and Secret Key",
+      {
+        tag: [
+          "@critical",
+          "@e2e",
+          "@providers",
+          "@aws",
+          "@serial",
+          "@PROVIDER-E2E-002",
+        ],
+      },
+      async ({ page }) => {
+        // Validate required environment variables
+        if (!accountId || !accessKey || !secretKey || !roleArn) {
+          throw new Error(
+            "E2E_AWS_PROVIDER_ACCOUNT_ID, E2E_AWS_PROVIDER_ACCESS_KEY, E2E_AWS_PROVIDER_SECRET_KEY, and E2E_AWS_PROVIDER_ROLE_ARN environment variables are not set",
+          );
+        }
+
+        // Prepare test data for AWS provider
+        const awsProviderData: AWSProviderData = {
+          accountId: accountId,
+          alias: "Test E2E AWS Account - Credentials",
+        };
+
+        // Prepare role-based credentials
+        const roleCredentials: AWSProviderCredential = {
+          type: AWS_CREDENTIAL_OPTIONS.AWS_ROLE_ARN,
+          accessKeyId: accessKey,
+          secretAccessKey: secretKey,
+          roleArn: roleArn,
+        };
+
+        // Navigate to providers page
+        await providersPage.goto();
+        await providersPage.verifyPageLoaded();
+
+        // Start adding new provider
+        await providersPage.clickAddProvider();
+        await providersPage.verifyConnectAccountPageLoaded();
+
+        // Select AWS provider
+        await providersPage.selectAWSProvider();
+
+        // Fill provider details
+        await providersPage.fillAWSProviderDetails(awsProviderData);
+        await providersPage.clickNext();
+
+        // Select role credentials type
+        await providersPage.selectCredentialsType(
+          AWS_CREDENTIAL_OPTIONS.AWS_ROLE_ARN,
+        );
+        await providersPage.verifyCredentialsPageLoaded();
+
+        // Fill role credentials
+        await providersPage.fillRoleCredentials(roleCredentials);
+        await providersPage.clickNext();
+
+        // Launch scan
+        await providersPage.verifyLaunchScanPageLoaded();
+        await providersPage.clickNext();
+
+        // Wait for redirect to provider page
+        scansPage = new ScansPage(page);
+        await scansPage.verifyPageLoaded();
+      },
+    );
   });
 
-  // Use admin authentication for provider management
-  test.use({ storageState: "playwright/.auth/admin_user.json" });
+  test.describe.serial("Add AZURE Provider", () => {
+    // Providers page object
+    let providersPage: ProvidersPage;
+    let scansPage: ScansPage;
 
-  test(
-    "should add a new AWS provider with static credentials",
-    {
-      tag: [
-        "@critical",
-        "@e2e",
-        "@providers",
-        "@aws",
-        "@serial",
-        "@PROVIDER-E2E-001",
-      ],
-    },
-    async ({ page }) => {
-      // Validate required environment variables
-      if (!accountId || !accessKey || !secretKey) {
-        throw new Error(
-          "E2E_AWS_PROVIDER_ACCOUNT_ID, E2E_AWS_PROVIDER_ACCESS_KEY, and E2E_AWS_PROVIDER_SECRET_KEY environment variables are not set",
-        );
-      }
+    // Test data from environment variables
+    const subscriptionId = process.env.E2E_AZURE_SUBSCRIPTION_ID;
+    const clientId = process.env.E2E_AZURE_CLIENT_ID;
+    const clientSecret = process.env.E2E_AZURE_SECRET_ID;
+    const tenantId = process.env.E2E_AZURE_TENANT_ID;
 
-      // Prepare test data for AWS provider
-      const awsProviderData: AWSProviderData = {
-        accountId: accountId,
-        alias: "Test E2E AWS Account - Credentials",
-      };
-
-      // Prepare static credentials
-      const staticCredentials: AWSProviderCredential = {
-        type: AWS_CREDENTIAL_OPTIONS.AWS_CREDENTIALS,
-        accessKeyId: accessKey,
-        secretAccessKey: secretKey,
-      };
-
-      // Navigate to providers page
-      await providersPage.goto();
-      await providersPage.verifyPageLoaded();
-
-      // Start adding new provider
-      await providersPage.clickAddProvider();
-      await providersPage.verifyConnectAccountPageLoaded();
-
-      // Select AWS provider
-      await providersPage.selectAWSProvider();
-
-      // Fill provider details
-      await providersPage.fillAWSProviderDetails(awsProviderData);
-      await providersPage.clickNext();
-
-      // Select static credentials type
-      await providersPage.selectCredentialsType(
-        AWS_CREDENTIAL_OPTIONS.AWS_CREDENTIALS,
+    // Validate required environment variables
+    if (!subscriptionId || !clientId || !clientSecret || !tenantId) {
+      throw new Error(
+        "E2E_AZURE_SUBSCRIPTION_ID, E2E_AZURE_CLIENT_ID, E2E_AZURE_SECRET_ID, and E2E_AZURE_TENANT_ID environment variables are not set",
       );
-      await providersPage.verifyCredentialsPageLoaded();
+    }
 
-      // Fill static credentials
-      await providersPage.fillStaticCredentials(staticCredentials);
-      await providersPage.clickNext();
+    // Setup before each test
+    test.beforeEach(async ({ page }) => {
+      providersPage = new ProvidersPage(page);
+      // Clean up existing provider to ensure clean test state
+      await providersPage.deleteProviderIfExists(subscriptionId);
+    });
 
-      // Launch scan
-      await providersPage.verifyLaunchScanPageLoaded();
-      await providersPage.clickNext();
+    // Use admin authentication for provider management
+    test.use({ storageState: "playwright/.auth/admin_user.json" });
 
-      // Wait for redirect to provider page
-      scansPage = new ScansPage(page);
-      await scansPage.verifyPageLoaded();
-    },
-  );
+    test(
+      "should add a new Azure provider with static credentials",
+      {
+        tag: [
+          "@critical",
+          "@e2e",
+          "@providers",
+          "@azure",
+          "@serial",
+          "@PROVIDER-E2E-003",
+        ],
+      },
+      async ({ page }) => {
+        // Prepare test data for AZURE provider
+        const azureProviderData: AZUREProviderData = {
+          subscriptionId: subscriptionId,
+          alias: "Test E2E AZURE Account - Credentials",
+        };
 
-  test(
-    "should add a new AWS provider with assume role credentials with Access Key and Secret Key",
-    {
-      tag: [
-        "@critical",
-        "@e2e",
-        "@providers",
-        "@aws",
-        "@serial",
-        "@PROVIDER-E2E-002",
-      ],
-    },
-    async ({ page }) => {
-      // Validate required environment variables
-      if (!accountId || !accessKey || !secretKey || !roleArn) {
-        throw new Error(
-          "E2E_AWS_PROVIDER_ACCOUNT_ID, E2E_AWS_PROVIDER_ACCESS_KEY, E2E_AWS_PROVIDER_SECRET_KEY, and E2E_AWS_PROVIDER_ROLE_ARN environment variables are not set",
-        );
-      }
+        // Prepare static credentials
+        const azureCredentials: AZUREProviderCredential = {
+          type: AZURE_CREDENTIAL_OPTIONS.AZURE_CREDENTIALS,
+          clientId: clientId,
+          clientSecret: clientSecret,
+          tenantId: tenantId,
+        };
 
-      // Prepare test data for AWS provider
-      const awsProviderData: AWSProviderData = {
-        accountId: accountId,
-        alias: "Test E2E AWS Account - Credentials",
-      };
+        // Navigate to providers page
+        await providersPage.goto();
+        await providersPage.verifyPageLoaded();
 
-      // Prepare role-based credentials
-      const roleCredentials: AWSProviderCredential = {
-        type: AWS_CREDENTIAL_OPTIONS.AWS_ROLE_ARN,
-        accessKeyId: accessKey,
-        secretAccessKey: secretKey,
-        roleArn: roleArn,
-      };
+        // Start adding new provider
+        await providersPage.clickAddProvider();
+        await providersPage.verifyConnectAccountPageLoaded();
 
-      // Navigate to providers page
-      await providersPage.goto();
-      await providersPage.verifyPageLoaded();
+        // Select AZURE provider
+        await providersPage.selectAZUREProvider();
 
-      // Start adding new provider
-      await providersPage.clickAddProvider();
-      await providersPage.verifyConnectAccountPageLoaded();
+        // Fill provider details
+        await providersPage.fillAZUREProviderDetails(azureProviderData);
+        await providersPage.clickNext();
 
-      // Select AWS provider
-      await providersPage.selectAWSProvider();
+        // Fill static credentials details
+        await providersPage.fillAZURECredentials(azureCredentials);
+        await providersPage.clickNext();
 
-      // Fill provider details
-      await providersPage.fillAWSProviderDetails(awsProviderData);
-      await providersPage.clickNext();
+        // Launch scan
+        await providersPage.verifyLaunchScanPageLoaded();
+        await providersPage.clickNext();
 
-      // Select role credentials type
-      await providersPage.selectCredentialsType(
-        AWS_CREDENTIAL_OPTIONS.AWS_ROLE_ARN,
-      );
-      await providersPage.verifyCredentialsPageLoaded();
-
-      // Fill role credentials
-      await providersPage.fillRoleCredentials(roleCredentials);
-      await providersPage.clickNext();
-
-      // Launch scan
-      await providersPage.verifyLaunchScanPageLoaded();
-      await providersPage.clickNext();
-
-      // Wait for redirect to provider page
-      scansPage = new ScansPage(page);
-      await scansPage.verifyPageLoaded();
-    },
-  );
+        // Wait for redirect to scan page
+        scansPage = new ScansPage(page);
+        await scansPage.verifyPageLoaded();
+      },
+    );
+  });
 });
-