Sharing the learning along the way we been gathering to enable Azure OpenAI at enterprise scale in a secure manner. GPT-RAG core is a Retrieval-Augmented Generation pattern running in Azure, using Azure Cognitive Search for retrieval and Azure OpenAI large language models to power ChatGPT-style and Q&A experiences.
This pull request includes several important changes to the network configuration and function app deployment parameters in the Bicep files. The changes primarily focus on updating subnet address prefixes and adding a new parameter for shared key access in storage accounts.
infra/core/network/vnet.bicep: Updated the virtual network and subnet address prefixes to accommodate a larger address space.
infra/main.bicep: Adjusted the default values for virtual network and subnet address prefixes to align with the new address space configuration. [1][2]
Function App Deployment Parameters:
infra/core/host/functions.bicep: Added a new parameter allowSharedKeyAccess to control access to storage accounts using shared keys.
infra/core/host/functions.bicep: Modified the storage account resource properties to include the new allowSharedKeyAccess parameter.
This pull request includes several important changes to the network configuration and function app deployment parameters in the Bicep files. The changes primarily focus on updating subnet address prefixes and adding a new parameter for shared key access in storage accounts.
Fixes: https://github.com/Azure/GPT-RAG/issues/226 https://github.com/Azure/GPT-RAG/issues/225
Network Configuration Updates:
infra/core/network/vnet.bicep: Updated the virtual network and subnet address prefixes to accommodate a larger address space.infra/main.bicep: Adjusted the default values for virtual network and subnet address prefixes to align with the new address space configuration. [1] [2]Function App Deployment Parameters:
infra/core/host/functions.bicep: Added a new parameterallowSharedKeyAccessto control access to storage accounts using shared keys.infra/core/host/functions.bicep: Modified the storage account resource properties to include the newallowSharedKeyAccessparameter.