Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Solved issue 45: Add optional private endpoints for AI Services and Storage Accounts #55

Conversation

rliberoff
Copy link
Contributor

This PR would solve issue #45.

All private endpoints are set when the new variable use_private_endpoints is true. Also, the current IP address of the machine executing these templates is used as an allowed IP address to facilitate managing these services.

  • Increased the size of the subnet for Private Endpoints, from /29 to /28 since currently near 9 services requires them.
  • Increased the size of the subnet for the APIM to /27 as recommended by Microsoft's documentation.
    • Also, added delegation in the subnet for the APIM as specified by Microsoft's documentation.
  • Added support for private endpoints and related variables in Azure AI Search module.
  • Added support for private endpoints and related variables in OpenAI module.
  • Added support for private endpoints and related variables in Document Intelligence (a.k.a. Forms) module.
  • Added support for private endpoints and related variables in Cognitive Services module.
  • Added support for private endpoints and related variables for Storage Account services.
  • Now the Azure API Management is deployed with (External) VNet support when the use_private_endpoints variable is set to true.

rliberoff added 12 commits May 29, 2024 15:01
…turn the unique identifier of the created virtual network.
…rt when the `use_private_endpoints` variable is set to `true`.
…Account services. This private endpoints are set when the variable `use_private_endpoints` is `true`. Also, the current IP address of the machine executing these templates is used as a allowed IP address to facilitate managing these services.
…ntly near 9 services requires them.

- Increased the size of the subnet for the APIM as recommended by Microsoft's documentation.
- Also, added delegation in the subnet for the APIM as specified by Microsoft's documentation.
@rliberoff rliberoff added the enhancement New feature or request label May 30, 2024
@rliberoff rliberoff self-assigned this May 30, 2024
Copy link
Member

@cmendible cmendible left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Change the private DNS zone names and we'll be read to merge 🎉🎉🎉

@rliberoff
Copy link
Contributor Author

Change the private DNS zone names and we'll be read to merge 🎉🎉🎉

Done. Changed as agreed!

Copy link
Member

@cmendible cmendible left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@cmendible cmendible merged commit 5171865 into Azure:main May 31, 2024
4 checks passed
@rliberoff rliberoff deleted the 45_add_optional_private_endpoints_for_storage_account_and_ai_services branch June 4, 2024 08:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants