Purpose

• ...
  This pull request includes several updates to the automation scripts for managing Azure resources. The changes focus on improving authentication mechanisms, enhancing script robustness, and ensuring better role assignments. Below is a summary of the most important changes:

Authentication Improvements:

• infra/scripts/add_user_scripts/create-sql-user-and-role.ps1: Updated the script to use Azure AD authentication instead of the owner-managed identity for SQL database tasks. Introduced a switch parameter $UseManagedIdentity for flexible authentication options. [1] [2] [3]

Role Assignments:

• infra/scripts/copy_kb_files.sh: Added logic to check and assign the "Storage Blob Data Contributor" and "Key Vault Secrets User" roles to the signed-in user if not already assigned.

Script Enhancements:

• infra/scripts/index_scripts/*.py: Modified the scripts to accept key_vault_name and managed_identity_client_id as command-line arguments, replacing hardcoded values. [1] [2] [3] [4]

New Script:

• infra/scripts/process_sample_data.sh: Added a new script to streamline the process of copying KB files, creating indexes, and setting up SQL users and roles. This script includes error handling and logging for better traceability.

Script Refactoring:

• infra/scripts/run_create_index_scripts.sh: Refactored to remove hardcoded URLs, added authentication checks, and ensured the creation of a virtual environment for Python dependencies.

Does this introduce a breaking change?

No

Golden Path Validation

• I have tested the primary workflows (the "golden path") to ensure they function correctly without errors.

Deployment Validation

• I have validated the deployment process successfully and all services are running as expected with this change.

What to Check

Verify that the following are valid

• ...

Other Information