@@ -555,37 +555,6 @@ var aiSearchIndexNameForRFPSummary = 'macae-rfp-summary-index'
555555var aiSearchIndexNameForRFPRisk = 'macae-rfp-risk-index'
556556var aiSearchIndexNameForRFPCompliance = 'macae-rfp-compliance-index'
557557
558- // var aiFoundryRoleIds = {
559- // foundryUser: '53ca6127-db72-4b80-b1b0-d745d6d5456d'
560- // azureAiDeveloper: '64702f94-c441-49e6-a78b-ef80e0188fee'
561- // cognitiveServicesOpenAIUser: '5e0bd9bd-7b93-4f28-af87-19fc36ad61bd'
562- // }
563-
564- // var existingAiFoundryManagedIdentityRoles = [
565- // {
566- // suffix: 'managedidentity-foundry-user'
567- // roleDefinitionId: format('/subscriptions/{0}/providers/Microsoft.Authorization/roleDefinitions/{1}', aiFoundryAiServicesSubscriptionId, aiFoundryRoleIds.foundryUser)
568- // }
569- // {
570- // suffix: 'managedidentity-ai-developer'
571- // roleDefinitionId: format('/subscriptions/{0}/providers/Microsoft.Authorization/roleDefinitions/{1}', aiFoundryAiServicesSubscriptionId, aiFoundryRoleIds.azureAiDeveloper)
572- // }
573- // {
574- // suffix: 'managedidentity-openai-user'
575- // roleDefinitionId: format('/subscriptions/{0}/providers/Microsoft.Authorization/roleDefinitions/{1}', aiFoundryAiServicesSubscriptionId, aiFoundryRoleIds.cognitiveServicesOpenAIUser)
576- // }
577- // ]
578-
579- // var existingAiFoundryDeployerRoles = [
580- // {
581- // suffix: 'deployer-foundry-user'
582- // roleDefinitionId: format('/subscriptions/{0}/providers/Microsoft.Authorization/roleDefinitions/{1}', aiFoundryAiServicesSubscriptionId, aiFoundryRoleIds.foundryUser)
583- // }
584- // {
585- // suffix: 'deployer-ai-developer'
586- // roleDefinitionId: format('/subscriptions/{0}/providers/Microsoft.Authorization/roleDefinitions/{1}', aiFoundryAiServicesSubscriptionId, aiFoundryRoleIds.azureAiDeveloper)
587- // }
588- // ]
589558
590559// ============================================================================
591560// Resource Group Tags
@@ -758,6 +727,7 @@ module virtualMachine './modules/compute/virtual-machine.bicep' = if (enablePriv
758727 location : location
759728 tags : tags
760729 enableTelemetry : enableTelemetry
730+ deployingUserPrincipalId : deployingUserPrincipalId
761731 vmSize : vmSize
762732 adminUsername : vmAdminUsername ?? 'JumpboxAdminUser'
763733 adminPassword : vmAdminPassword ?? 'JumpboxAdminP@ssw0rd1234!'
@@ -833,32 +803,7 @@ module ai_foundry_project './modules/ai/ai-foundry-project.bicep' = if (!useExis
833803 }
834804}
835805
836- // @batchSize(1)
837- // module existingAiFoundryManagedIdentityRoleAssignments './modules/identity/cross-scope-role-assignment.bicep' = [for role in existingAiFoundryManagedIdentityRoles: if (useExistingAIProject) {
838- // name: take('module.existing-aif-mi-${role.suffix}.${solutionName}', 64)
839- // scope: resourceGroup(aiFoundryAiServicesSubscriptionId, aiFoundryAiServicesResourceGroupName)
840- // params: {
841- // principalId: managed_identity.outputs.principalId
842- // roleDefinitionId: role.roleDefinitionId
843- // roleAssignmentName: guid(solutionSuffix, aiFoundryAiServicesResourceName, role.suffix)
844- // aiFoundryName: aiFoundryAiServicesResourceName
845- // principalType: 'ServicePrincipal'
846- // }
847- // }]
848-
849- // @batchSize(1)
850- // module existingAiFoundryDeployerRoleAssignments './modules/identity/cross-scope-role-assignment.bicep' = [for role in existingAiFoundryDeployerRoles: if (useExistingAIProject) {
851- // name: take('module.existing-aif-deployer-${role.suffix}.${solutionName}', 64)
852- // scope: resourceGroup(aiFoundryAiServicesSubscriptionId, aiFoundryAiServicesResourceGroupName)
853- // params: {
854- // principalId: deployingUserPrincipalId
855- // roleDefinitionId: role.roleDefinitionId
856- // roleAssignmentName: guid(solutionSuffix, aiFoundryAiServicesResourceName, role.suffix)
857- // aiFoundryName: aiFoundryAiServicesResourceName
858- // principalType: deployerPrincipalType
859- // }
860- // }]
861-
806+ // Commented Private Endpoints as MCP KnowledgeBase Connections doesn't work private endpoints
862807// module aiFoundryPrivateEndpoint './modules/networking/private-endpoint.bicep' = if (enablePrivateNetworking && !useExistingAIProject) {
863808// name: take('module.pe-ai-foundry.${solutionName}', 64)
864809// params: {
@@ -895,12 +840,12 @@ module ai_foundry_project './modules/ai/ai-foundry-project.bicep' = if (!useExis
895840// }
896841// }
897842
898- var aiFoundryAiProjectName = useExistingAIProject ? existing_project_setup !.outputs .aiProjectName : ai_foundry_project !.outputs .projectName
843+ var aiFoundryAiProjectName = useExistingAIProject ? existing_project_setup !.outputs .projectName : ai_foundry_project !.outputs .projectName
899844var aiFoundryAiProjectEndpoint = useExistingAIProject ? existing_project_setup !.outputs .projectEndpoint : ai_foundry_project !.outputs .projectEndpoint
900- var aiFoundryAiProjectPrincipalId = useExistingAIProject ? existing_project_setup !.outputs .aiProjectPrincipalId : ai_foundry_project !.outputs .projectIdentityPrincipalId
901- var aiFoundryAiServicesEndpoint = useExistingAIProject ? existing_project_setup !.outputs .aiFoundryEndpoint : ai_foundry_project !.outputs .endpoint
845+ var aiFoundryAiProjectPrincipalId = useExistingAIProject ? existing_project_setup !.outputs .projectIdentityPrincipalId : ai_foundry_project !.outputs .projectIdentityPrincipalId
846+ var aiFoundryAiServicesEndpoint = useExistingAIProject ? existing_project_setup !.outputs .endpoint : ai_foundry_project !.outputs .endpoint
902847var aiFoundryOpenAIEndpoint = 'https://${aiFoundryAiServicesResourceName }.openai.azure.com/'
903- var aiFoundryResourceId = useExistingAIProject ? existing_project_setup !.outputs .aiFoundryResourceId : ai_foundry_project !.outputs .resourceId
848+ var aiFoundryResourceId = useExistingAIProject ? existing_project_setup !.outputs .resourceId : ai_foundry_project !.outputs .resourceId
904849
905850@batchSize (1 )
906851module model_deployments './modules/ai/ai-foundry-model-deployment.bicep' = [for (deployment , i ) in aiModelDeployments : {
@@ -1426,6 +1371,7 @@ module webSite './modules/compute/app-service.bicep' = {
14261371 virtualNetworkSubnetId : enablePrivateNetworking ? virtualNetwork !.outputs .webserverfarmSubnetResourceId : ''
14271372 publicNetworkAccess : 'Enabled'
14281373 diagnosticSettings : monitoringDiagnosticSettings
1374+ applicationInsightResourceId : enableMonitoring ? app_insights !.outputs .resourceId : ''
14291375 }
14301376}
14311377
0 commit comments