Prek-Deploy-Your-AI-Application-In-Production/azure.yaml at main · Prekshith-Microsoft/Prek-Deploy-Your-AI-Application-In-Production · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
name: deploy-your-ai-application-in-production

requiredVersions:
  azd: ">=1.15.0"

infra:
  provider: "bicep"
  path: "infra"
  module: "main"
  parameters: "main.bicepparam"

metadata:
  template: deploy-your-ai-application-in-production@1.0

# Pre/Post-provision automation hooks
hooks:
  preprovision:
    # Integrated preprovision:
    # - Runs AI Landing Zone preprovision to generate deploy/ files and Template Specs
    # - Ensures our wrapper points to deploy/main.bicep (Template Spec-based) to avoid ARM 4MB template limit
    # On Windows, `shell: sh` may not be available; the PowerShell script is a fallback.
    - shell: sh
      run: ./scripts/preprovision-integrated.sh
      interactive: false
      continueOnError: true

    - shell: pwsh
      run: ./scripts/preprovision-integrated.ps1
      interactive: false
      continueOnError: false

  postprovision:
    # Clean up any stale environment files
    - run: ./scripts/automationScripts/00_cleanup_environment.ps1
      interactive: false
      shell: pwsh
      continueOnError: false

    # Stage 1: Fabric Capacity Validation (capacity deployed in main.bicep)
    - run: ./scripts/automationScripts/FabricWorkspace/CreateWorkspace/ensure_active_capacity.ps1
      interactive: false
      shell: pwsh
      continueOnError: false

    # Stage 2: Fabric Domain Creation
    - run: ./scripts/automationScripts/FabricWorkspace/CreateWorkspace/create_fabric_domain.ps1
      interactive: false
      shell: pwsh
      continueOnError: false

    # Stage 3: Fabric Workspace Creation
    - run: ./scripts/automationScripts/FabricWorkspace/CreateWorkspace/create_fabric_workspace.ps1
      interactive: false
      shell: pwsh
      continueOnError: false

    # Stage 4: Assign Workspace to Domain
    - run: ./scripts/automationScripts/FabricWorkspace/CreateWorkspace/assign_workspace_to_domain.ps1
      interactive: false
      shell: pwsh
      continueOnError: false

    # Stage 5: Purview Collection Creation
    - run: ./scripts/automationScripts/FabricPurviewAutomation/create_purview_collection.ps1
      interactive: false
      shell: pwsh
      continueOnError: false

    # Stage 6: Register Fabric as Purview Data Source
    - run: ./scripts/automationScripts/FabricWorkspace/CreateWorkspace/register_fabric_datasource.ps1
      interactive: false
      shell: pwsh
      continueOnError: false

    # Stage 7: Create Lakehouses (bronze, silver, gold)
    - run: ./scripts/automationScripts/FabricWorkspace/CreateWorkspace/create_lakehouses.ps1
      interactive: false
      shell: pwsh
      continueOnError: false

    # Stage 8: Setup Fabric Workspace Private Link (for VNet integration)
    - run: ./scripts/automationScripts/FabricWorkspace/SecureWorkspace/setup_fabric_private_link.ps1
      interactive: false
      shell: pwsh
      continueOnError: false

    # Stage 9: Materialize Document Folders in Bronze Lakehouse
    - run: ./scripts/automationScripts/FabricWorkspace/CreateWorkspace/materialize_document_folders.ps1
      interactive: false
      shell: pwsh
      continueOnError: false

    # Stage 10: OneLake Indexing - Setup RBAC
    - run: ./scripts/automationScripts/OneLakeIndex/01_setup_rbac.ps1
      interactive: false
      shell: pwsh
      continueOnError: false

    # Stage 11: OneLake Indexing - Create Skillsets
    - run: ./scripts/automationScripts/OneLakeIndex/02_create_onelake_skillsets.ps1
      interactive: false
      shell: pwsh
      continueOnError: false

    # Stage 12: OneLake Indexing - Create Index
    - run: ./scripts/automationScripts/OneLakeIndex/03_create_onelake_index.ps1
      interactive: false
      shell: pwsh
      continueOnError: false

    # Stage 13: OneLake Indexing - Create Data Source
    - run: ./scripts/automationScripts/OneLakeIndex/04_create_onelake_datasource.ps1
      interactive: false
      shell: pwsh
      continueOnError: false

    # Stage 14: OneLake Indexing - Create Indexer
    - run: ./scripts/automationScripts/OneLakeIndex/05_create_onelake_indexer.ps1
      interactive: false
      shell: pwsh
      continueOnError: false

    # Stage 15: AI Foundry Search RBAC Setup
    - run: ./scripts/automationScripts/OneLakeIndex/06_setup_ai_foundry_search_rbac.ps1
      interactive: false
      shell: pwsh
      continueOnError: false

    # Stage 16: Re-enable workspace inbound protection
    - run: ./scripts/automationScripts/FabricWorkspace/SecureWorkspace/enable_fabric_workspace_inbound_protection.ps1
      interactive: false
      shell: pwsh
      continueOnError: false

    # Stage 17: Trigger Purview Scan (if Purview enabled)
    - run: ./scripts/automationScripts/FabricPurviewAutomation/trigger_purview_scan_for_fabric_workspace.ps1
      interactive: false
      shell: pwsh
      continueOnError: false

    # Stage 18: Connect Log Analytics (placeholder)
    - run: ./scripts/automationScripts/FabricPurviewAutomation/connect_log_analytics.ps1
      interactive: false
      shell: pwsh
      continueOnError: false

    # Stage 19: Clean up AI Landing Zone template specs
    - run: ./submodules/ai-landing-zone/bicep/scripts/postprovision.ps1
      interactive: false
      shell: pwsh
      continueOnError: false