-
Notifications
You must be signed in to change notification settings - Fork 165
fix: Fixing of EXP Deployment - Bug#33406 #698
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: dev
Are you sure you want to change the base?
Conversation
|
@Shubhangi-Microsoft please read the following Contributor License Agreement(CLA). If you agree with the CLA, please reply with the following information.
Contributor License AgreementContribution License AgreementThis Contribution License Agreement (“Agreement”) is agreed to by the party signing below (“You”),
|
Purpose
Does this introduce a breaking change?
Golden Path Validation
Deployment Validation
What to Check
Verify that the following are valid
Other Information
This pull request adds support for assigning required RBAC roles to a managed identity when reusing an existing Azure AI Foundry project from a different resource group or subscription. The main changes introduce a new Bicep module for role assignment and update the infrastructure deployment logic to call this module when an existing AI Foundry project is used.
Role Assignment for Existing AI Services:
modules/deploy_foundry_role_assignment.bicepthat assigns the necessary RBAC roles (Azure AI UserandCognitive Services OpenAI User) to a managed identity on an existing AI Services account. This ensures the identity has the correct permissions for both image generation and chat completions.content-gen/infra/main.bicepto deploy the new role assignment module (existingAiServicesRoleAssignments) when an existing AI Foundry project is specified, passing in the required parameters and scoping the deployment to the correct resource group and subscription.Subscription ID Handling:
content-gen/infra/main.bicepto correctly extract the subscription ID from the existing AI project resource ID, ensuring deployments are scoped to the proper subscription when using an existing AI Foundry project.