fix: removed the use of the AZURE-OPENAI-CU-KEY secret across the infrastructure and scripts

Author: Avijit-Microsoft

infra/deploy_ai_foundry.bicep

@@ -300,14 +300,6 @@ resource azureOpenAICUEndpointEntry 'Microsoft.KeyVault/vaults/secrets@2021-11-0
   }
 }
 
-resource azureOpenAICUApiKeyEntry 'Microsoft.KeyVault/vaults/secrets@2021-11-01-preview' = {
-  parent: keyVault
-  name: 'AZURE-OPENAI-CU-KEY'
-  properties: {
-    value: aiServices_CU.listKeys().key1
-  }
-}
-
 resource azureOpenAICUApiVersionEntry 'Microsoft.KeyVault/vaults/secrets@2021-11-01-preview' = {
   parent: keyVault
   name: 'AZURE-OPENAI-CU-VERSION'

infra/main.json

@@ -5,7 +5,7 @@
     "_generator": {
       "name": "bicep",
       "version": "0.36.1.42791",
-      "templateHash": "14769206549361904379"
+      "templateHash": "14797468639789152416"
     }
   },
   "parameters": {
@@ -652,7 +652,7 @@
             "_generator": {
               "name": "bicep",
               "version": "0.36.1.42791",
-              "templateHash": "1294065809838303541"
+              "templateHash": "1288056001550775266"
             }
           },
           "parameters": {
@@ -1213,17 +1213,6 @@
                 "[resourceId('Microsoft.CognitiveServices/accounts', variables('aiServicesName_cu'))]"
               ]
             },
-            {
-              "type": "Microsoft.KeyVault/vaults/secrets",
-              "apiVersion": "2021-11-01-preview",
-              "name": "[format('{0}/{1}', parameters('keyVaultName'), 'AZURE-OPENAI-CU-KEY')]",
-              "properties": {
-                "value": "[listKeys(resourceId('Microsoft.CognitiveServices/accounts', variables('aiServicesName_cu')), '2025-04-01-preview').key1]"
-              },
-              "dependsOn": [
-                "[resourceId('Microsoft.CognitiveServices/accounts', variables('aiServicesName_cu'))]"
-              ]
-            },
             {
               "type": "Microsoft.KeyVault/vaults/secrets",
               "apiVersion": "2021-11-01-preview",
@@ -2521,7 +2510,7 @@
             "_generator": {
               "name": "bicep",
               "version": "0.36.1.42791",
-              "templateHash": "12601944025413037469"
+              "templateHash": "2610739623677529550"
             }
           },
           "parameters": {
@@ -2827,7 +2816,6 @@
               }
             },
             {
-              "condition": "[not(empty(parameters('azureExistingAIProjectResourceId')))]",
               "type": "Microsoft.Resources/deployments",
               "apiVersion": "2022-09-01",
               "name": "assignAiUserRoleToAiProject",

infra/scripts/index_scripts/02_create_cu_template_audio.py

@@ -28,7 +28,6 @@ def get_secrets_from_kv(kv_name, secret_name):
 sys.path.append(str(parent_dir))
 from content_understanding_client import AzureContentUnderstandingClient
 AZURE_AI_ENDPOINT = get_secrets_from_kv(key_vault_name,"AZURE-OPENAI-CU-ENDPOINT")
-AZURE_OPENAI_CU_KEY = get_secrets_from_kv(key_vault_name,"AZURE-OPENAI-CU-KEY")
 AZURE_AI_API_VERSION = "2024-12-01-preview" 
 
 
@@ -37,7 +36,6 @@ def get_secrets_from_kv(kv_name, secret_name):
 client = AzureContentUnderstandingClient(
     endpoint=AZURE_AI_ENDPOINT,
     api_version=AZURE_AI_API_VERSION,
-    subscription_key=AZURE_OPENAI_CU_KEY,
     token_provider=token_provider
 )
 

infra/scripts/index_scripts/02_create_cu_template_text.py

@@ -28,7 +28,6 @@ def get_secrets_from_kv(kv_name, secret_name):
 sys.path.append(str(parent_dir))
 from content_understanding_client import AzureContentUnderstandingClient
 AZURE_AI_ENDPOINT = get_secrets_from_kv(key_vault_name,"AZURE-OPENAI-CU-ENDPOINT")
-AZURE_OPENAI_CU_KEY = get_secrets_from_kv(key_vault_name,"AZURE-OPENAI-CU-KEY")
 AZURE_AI_API_VERSION = "2024-12-01-preview" 
 
 
@@ -38,7 +37,6 @@ def get_secrets_from_kv(kv_name, secret_name):
 client = AzureContentUnderstandingClient(
     endpoint=AZURE_AI_ENDPOINT,
     api_version=AZURE_AI_API_VERSION,
-    subscription_key=AZURE_OPENAI_CU_KEY,
     token_provider=token_provider
 )
 

infra/scripts/index_scripts/03_cu_process_data_text.py

@@ -182,7 +182,6 @@ def chunk_data(text):
 
 
 AZURE_AI_ENDPOINT = get_secrets_from_kv(key_vault_name,"AZURE-OPENAI-CU-ENDPOINT")
-AZURE_OPENAI_CU_KEY = get_secrets_from_kv(key_vault_name,"AZURE-OPENAI-CU-KEY")
 AZURE_AI_API_VERSION = "2024-12-01-preview" 
 
 credential = DefaultAzureCredential(managed_identity_client_id=managed_identity_client_id)
@@ -191,7 +190,6 @@ def chunk_data(text):
 client = AzureContentUnderstandingClient(
     endpoint=AZURE_AI_ENDPOINT,
     api_version=AZURE_AI_API_VERSION,
-    subscription_key=AZURE_OPENAI_CU_KEY,
     token_provider=token_provider
     )
 

infra/scripts/index_scripts/04_cu_process_data_new_data.py

@@ -256,7 +256,6 @@ def create_search_index():
 
 
 AZURE_AI_ENDPOINT = get_secrets_from_kv(key_vault_name,"AZURE-OPENAI-CU-ENDPOINT")
-AZURE_OPENAI_CU_KEY = get_secrets_from_kv(key_vault_name,"AZURE-OPENAI-CU-KEY")
 AZURE_AI_API_VERSION = "2024-12-01-preview" 
 
 credential = DefaultAzureCredential()
@@ -265,7 +264,6 @@ def create_search_index():
 client = AzureContentUnderstandingClient(
     endpoint=AZURE_AI_ENDPOINT,
     api_version=AZURE_AI_API_VERSION,
-    subscription_key=AZURE_OPENAI_CU_KEY,
     token_provider=token_provider
     )