fix: fix for disablelocalauth issue #206
Merged
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Purpose
This pull request introduces several changes to the
infradeployment files for AI Foundry. The updates primarily focus on transitioning the AI services authentication method from API key-based to Azure Active Directory (AAD), modifying parameter handling, and adding new role assignments for AI projects. Below is a categorized summary of the most important changes:Authentication Method Update:
authTypefor AI services from'ApiKey'to'AAD'in theaiHubresource definition, and removed thecredentialsblock that previously used the API key. (infra/deploy_ai_foundry.bicep,infra/main.json) [1] [2]Parameter Adjustments:
aiServicesobject parameter with a simpleraiServicesKeystring parameter, affecting multiple references to AI service keys. (infra/deploy_ai_foundry.bicep,infra/main.bicep) [1] [2] [3] [4]Role Assignment for AI Projects:
aiDevelopertoAIProjectto assign theaiDeveloperrole to AI projects, enabling specific permissions for project identities. (infra/deploy_ai_foundry.bicep,infra/main.json) [1] [2]Template Metadata Updates:
templateHashvalues ininfra/main.jsonto reflect the changes in the deployment templates. (infra/main.json) [1] [2]These changes collectively improve security by adopting AAD for authentication, simplify parameter management, and enhance role-based access control for AI projects.
Does this introduce a breaking change?
How to Test
What to Check
Verify that the following are valid
Other Information