search

microsoft / PubSec-Info-Assistant

Information Assistant, built with Azure OpenAI Service, Industry Accelerator
MIT License
348 stars 788 forks source link

Secure Deployment needed, can't get past Policy for Private Endpoints #905

Open willstMSFT opened 2 weeks ago

willstMSFT commented 2 weeks ago

We have a State customer who has an Azure Policy that doesn't allow any public endpoints. While we requested the customer bypass the Policy to move forward, they were not willing to. Could you modify the template to make the deployment include the deployment of the Private Endpoints, versus having it be a two step process?

bjakems commented 2 weeks ago

The latest version in main (1.2) deploys out private endpoints in step 1. In step 2, you must establish VPN connectivity since the resources are network restricted in order to deploy the code to the infrastructure. Which assets are you seeing that do not have private endpoints and are failing the Azure Policy? Please note, in the local.env you must set "export SECURE_MODE=true" in order for the deployment to leverage private endpoints. Please review the documentation as there are other settings required here.