Skip to content

fix: merging dev to main #647

Merged
Roopan-Microsoft merged 31 commits into
mainfrom
dev
Nov 24, 2025
Merged

fix: merging dev to main #647
Roopan-Microsoft merged 31 commits into
mainfrom
dev

Conversation

@Roopan-Microsoft

@Roopan-Microsoft Roopan-Microsoft commented Nov 17, 2025

Copy link
Copy Markdown
Contributor

Purpose

  • This pull request introduces significant changes to the infrastructure and data processing scripts to standardize and improve the use of Azure Managed Identities and Azure AI Foundry (Inference) services. The main updates include replacing the previous SQL-specific managed identity with a more general backend managed identity, updating role assignments and resource references throughout the Bicep infrastructure, and refactoring Python scripts to use the new Azure AI Foundry clients for embeddings and chat completions.

Infrastructure changes:

  • Replaced the dedicated SQL managed identity (sqlUserAssignedIdentity) with a new, more general backend managed identity (backendUserAssignedIdentity). All resource assignments, outputs, and environment variables now reference the backend identity instead of the SQL-specific one. [1] [2] [3] [4] [5]
  • Updated role assignments for Azure AI services, Search, and CosmosDB to grant necessary permissions to the backend managed identity, ensuring it has access to required resources. [1] [2] [3] [4]
  • Adjusted outputs and deployment script parameters to use the backend managed identity, streamlining identity usage across the solution. [1] [2]

Python script refactoring:

  • Migrated from the legacy openai library to the new Azure AI Foundry (Inference) clients (ChatCompletionsClient, EmbeddingsClient) for chat completions and embeddings, improving compatibility and future-proofing. [1] [2] [3] [4]
  • Refactored secret retrieval and endpoint configuration to use new Azure AI Agent endpoints and deployment names, supporting the new inference clients. [1] [2]
  • Updated embedding and chat completion utility functions and their usage throughout the scripts to work with the new client interfaces, simplifying function signatures and error handling. [1] [2] [3] [4]

These changes collectively enhance security, maintainability, and alignment with Azure best practices for identity and AI service integration.

References:
[1] [2] [3] [4] [5] [6] [7] [8] [9] [10] [11] [12] [13] [14] [15] [16] [17] [18] [19] [20] [21]

Does this introduce a breaking change?

  • Yes
  • No

Golden Path Validation

  • I have tested the primary workflows (the "golden path") to ensure they function correctly without errors.

Deployment Validation

  • I have validated the deployment process successfully and all services are running as expected with this change.

What to Check

Verify that the following are valid

  • ...

Other Information

Thanusree-Microsoft and others added 4 commits November 21, 2025 15:05
Added note about disabling Log Analytics workspace replication before resource group deletion.
feat: Add Troubleshooting Guide for Log Analytics Workspace Deletion Issues
chore: downmerge main to dev
@Roopan-Microsoft
Roopan-Microsoft merged commit f1b779d into main Nov 24, 2025
11 checks passed
@github-actions

Copy link
Copy Markdown
Contributor

🎉 This PR is included in version 3.15.0 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants