ai cooking
0
fork

Configure Feed

Select the types of activity you want to include in your feed.

save arm specs and updated deployment

+960 -1
+1 -1
deploy/deploy.yaml
··· 21 21 runAsGroup: 65532 22 22 containers: 23 23 - name: careme 24 - image: ghcr.io/paulgmiller/careme:4ca0caa # was f30296d 24 + image: ghcr.io/paulgmiller/careme:a4aae54 # was 3ef7ea6 25 25 imagePullPolicy: IfNotPresent 26 26 ports: 27 27 - containerPort: 8080
+644
infra/careme.json
··· 1 + { 2 + "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", 3 + "contentVersion": "1.0.0.0", 4 + "parameters": { 5 + "databaseAccounts_caremedb_name": { 6 + "type": "String" 7 + }, 8 + "storageAccounts_caremecache_name": { 9 + "type": "String" 10 + }, 11 + "storageAccounts_caremetest_name": { 12 + "type": "String" 13 + }, 14 + "virtualNetworks_zebu_vnet_externalid": { 15 + "type": "String" 16 + } 17 + }, 18 + "resources": [ 19 + { 20 + "apiVersion": "2025-05-01-preview", 21 + "identity": { 22 + "type": "None" 23 + }, 24 + "kind": "GlobalDocumentDB", 25 + "location": "West US 3", 26 + "name": "[parameters('databaseAccounts_caremedb_name')]", 27 + "properties": { 28 + "analyticalStorageConfiguration": { 29 + "schemaType": "WellDefined" 30 + }, 31 + "backupPolicy": { 32 + "periodicModeProperties": { 33 + "backupIntervalInMinutes": 240, 34 + "backupRetentionIntervalInHours": 8, 35 + "backupStorageRedundancy": "Geo" 36 + }, 37 + "type": "Periodic" 38 + }, 39 + "capabilities": [], 40 + "capacity": { 41 + "totalThroughputLimit": 4000 42 + }, 43 + "capacityMode": "Serverless", 44 + "consistencyPolicy": { 45 + "defaultConsistencyLevel": "Session", 46 + "maxIntervalInSeconds": 5, 47 + "maxStalenessPrefix": 100 48 + }, 49 + "cors": [], 50 + "databaseAccountOfferType": "Standard", 51 + "defaultIdentity": "FirstPartyIdentity", 52 + "defaultPriorityLevel": "High", 53 + "diagnosticLogSettings": { 54 + "enableFullTextQuery": "None" 55 + }, 56 + "disableKeyBasedMetadataWriteAccess": false, 57 + "disableLocalAuth": false, 58 + "enableAnalyticalStorage": false, 59 + "enableAutomaticFailover": true, 60 + "enableBurstCapacity": false, 61 + "enableFreeTier": false, 62 + "enableMaterializedViews": false, 63 + "enableMultipleWriteLocations": false, 64 + "enablePartitionMerge": false, 65 + "enablePerRegionPerPartitionAutoscale": false, 66 + "enablePriorityBasedExecution": false, 67 + "ipRules": [], 68 + "isVirtualNetworkFilterEnabled": false, 69 + "locations": [ 70 + { 71 + "failoverPriority": 0, 72 + "isZoneRedundant": false, 73 + "locationName": "West US 3" 74 + } 75 + ], 76 + "minimalTlsVersion": "Tls12", 77 + "networkAclBypass": "None", 78 + "networkAclBypassResourceIds": [], 79 + "publicNetworkAccess": "Enabled", 80 + "virtualNetworkRules": [] 81 + }, 82 + "tags": { 83 + "defaultExperience": "Core (SQL)", 84 + "hidden-cosmos-mmspecial": "", 85 + "hidden-workload-type": "Learning" 86 + }, 87 + "type": "Microsoft.DocumentDB/databaseAccounts" 88 + }, 89 + { 90 + "apiVersion": "2025-01-01", 91 + "kind": "StorageV2", 92 + "location": "westus3", 93 + "name": "[parameters('storageAccounts_caremecache_name')]", 94 + "properties": { 95 + "accessTier": "Hot", 96 + "allowBlobPublicAccess": false, 97 + "allowCrossTenantReplication": false, 98 + "allowSharedKeyAccess": true, 99 + "defaultToOAuthAuthentication": false, 100 + "dnsEndpointType": "Standard", 101 + "encryption": { 102 + "keySource": "Microsoft.Storage", 103 + "requireInfrastructureEncryption": false, 104 + "services": { 105 + "blob": { 106 + "enabled": true, 107 + "keyType": "Account" 108 + }, 109 + "file": { 110 + "enabled": true, 111 + "keyType": "Account" 112 + } 113 + } 114 + }, 115 + "largeFileSharesState": "Enabled", 116 + "minimumTlsVersion": "TLS1_2", 117 + "networkAcls": { 118 + "bypass": "Logging, Metrics, AzureServices", 119 + "defaultAction": "Allow", 120 + "ipRules": [], 121 + "resourceAccessRules": [], 122 + "virtualNetworkRules": [ 123 + { 124 + "action": "Allow", 125 + "id": "[concat(parameters('virtualNetworks_zebu_vnet_externalid'), '/subnets/default')]", 126 + "state": "Succeeded" 127 + } 128 + ] 129 + }, 130 + "publicNetworkAccess": "Enabled", 131 + "supportsHttpsTrafficOnly": true 132 + }, 133 + "sku": { 134 + "name": "Standard_RAGRS", 135 + "tier": "Standard" 136 + }, 137 + "type": "Microsoft.Storage/storageAccounts" 138 + }, 139 + { 140 + "apiVersion": "2025-01-01", 141 + "kind": "StorageV2", 142 + "location": "westus2", 143 + "name": "[parameters('storageAccounts_caremetest_name')]", 144 + "properties": { 145 + "accessTier": "Hot", 146 + "allowBlobPublicAccess": false, 147 + "allowCrossTenantReplication": false, 148 + "allowSharedKeyAccess": true, 149 + "defaultToOAuthAuthentication": false, 150 + "dnsEndpointType": "Standard", 151 + "encryption": { 152 + "keySource": "Microsoft.Storage", 153 + "requireInfrastructureEncryption": false, 154 + "services": { 155 + "blob": { 156 + "enabled": true, 157 + "keyType": "Account" 158 + }, 159 + "file": { 160 + "enabled": true, 161 + "keyType": "Account" 162 + } 163 + } 164 + }, 165 + "largeFileSharesState": "Enabled", 166 + "minimumTlsVersion": "TLS1_2", 167 + "networkAcls": { 168 + "bypass": "AzureServices", 169 + "defaultAction": "Allow", 170 + "ipRules": [], 171 + "virtualNetworkRules": [] 172 + }, 173 + "publicNetworkAccess": "Enabled", 174 + "supportsHttpsTrafficOnly": true 175 + }, 176 + "sku": { 177 + "name": "Standard_LRS", 178 + "tier": "Standard" 179 + }, 180 + "type": "Microsoft.Storage/storageAccounts" 181 + }, 182 + { 183 + "apiVersion": "2025-05-01-preview", 184 + "dependsOn": [ 185 + "[resourceId('Microsoft.DocumentDB/databaseAccounts', parameters('databaseAccounts_caremedb_name'))]" 186 + ], 187 + "name": "[concat(parameters('databaseAccounts_caremedb_name'), '/00000000-0000-0000-0000-000000000003')]", 188 + "properties": { 189 + "assignableScopes": [ 190 + "[resourceId('Microsoft.DocumentDB/databaseAccounts', parameters('databaseAccounts_caremedb_name'))]" 191 + ], 192 + "permissions": [ 193 + { 194 + "dataActions": [ 195 + "Microsoft.DocumentDB/databaseAccounts/readMetadata", 196 + "Microsoft.DocumentDB/databaseAccounts/throughputSettings/read", 197 + "Microsoft.DocumentDB/databaseAccounts/cassandra/containers/executeQuery", 198 + "Microsoft.DocumentDB/databaseAccounts/cassandra/containers/readChangeFeed", 199 + "Microsoft.DocumentDB/databaseAccounts/cassandra/containers/entities/read" 200 + ], 201 + "notDataActions": [] 202 + } 203 + ], 204 + "roleName": "Cosmos DB Cassandra Built-in Data Reader", 205 + "type": "BuiltInRole" 206 + }, 207 + "type": "Microsoft.DocumentDB/databaseAccounts/cassandraRoleDefinitions" 208 + }, 209 + { 210 + "apiVersion": "2025-05-01-preview", 211 + "dependsOn": [ 212 + "[resourceId('Microsoft.DocumentDB/databaseAccounts', parameters('databaseAccounts_caremedb_name'))]" 213 + ], 214 + "name": "[concat(parameters('databaseAccounts_caremedb_name'), '/00000000-0000-0000-0000-000000000004')]", 215 + "properties": { 216 + "assignableScopes": [ 217 + "[resourceId('Microsoft.DocumentDB/databaseAccounts', parameters('databaseAccounts_caremedb_name'))]" 218 + ], 219 + "permissions": [ 220 + { 221 + "dataActions": [ 222 + "Microsoft.DocumentDB/databaseAccounts/readMetadata", 223 + "Microsoft.DocumentDB/databaseAccounts/throughputSettings/read", 224 + "Microsoft.DocumentDB/databaseAccounts/throughputSettings/write", 225 + "Microsoft.DocumentDB/databaseAccounts/cassandra/*", 226 + "Microsoft.DocumentDB/databaseAccounts/cassandra/write", 227 + "Microsoft.DocumentDB/databaseAccounts/cassandra/delete", 228 + "Microsoft.DocumentDB/databaseAccounts/cassandra/containers/*", 229 + "Microsoft.DocumentDB/databaseAccounts/cassandra/containers/entities/*" 230 + ], 231 + "notDataActions": [] 232 + } 233 + ], 234 + "roleName": "Cosmos DB Cassandra Built-in Data Contributor", 235 + "type": "BuiltInRole" 236 + }, 237 + "type": "Microsoft.DocumentDB/databaseAccounts/cassandraRoleDefinitions" 238 + }, 239 + { 240 + "apiVersion": "2025-05-01-preview", 241 + "dependsOn": [ 242 + "[resourceId('Microsoft.DocumentDB/databaseAccounts', parameters('databaseAccounts_caremedb_name'))]" 243 + ], 244 + "name": "[concat(parameters('databaseAccounts_caremedb_name'), '/00000000-0000-0000-0000-000000000003')]", 245 + "properties": { 246 + "assignableScopes": [ 247 + "[resourceId('Microsoft.DocumentDB/databaseAccounts', parameters('databaseAccounts_caremedb_name'))]" 248 + ], 249 + "permissions": [ 250 + { 251 + "dataActions": [ 252 + "Microsoft.DocumentDB/databaseAccounts/readMetadata", 253 + "Microsoft.DocumentDB/databaseAccounts/throughputSettings/read", 254 + "Microsoft.DocumentDB/databaseAccounts/gremlin/containers/executeQuery", 255 + "Microsoft.DocumentDB/databaseAccounts/gremlin/containers/readChangeFeed", 256 + "Microsoft.DocumentDB/databaseAccounts/gremlin/containers/entities/read" 257 + ], 258 + "notDataActions": [] 259 + } 260 + ], 261 + "roleName": "Cosmos DB Gremlin Built-in Data Reader", 262 + "type": "BuiltInRole" 263 + }, 264 + "type": "Microsoft.DocumentDB/databaseAccounts/gremlinRoleDefinitions" 265 + }, 266 + { 267 + "apiVersion": "2025-05-01-preview", 268 + "dependsOn": [ 269 + "[resourceId('Microsoft.DocumentDB/databaseAccounts', parameters('databaseAccounts_caremedb_name'))]" 270 + ], 271 + "name": "[concat(parameters('databaseAccounts_caremedb_name'), '/00000000-0000-0000-0000-000000000004')]", 272 + "properties": { 273 + "assignableScopes": [ 274 + "[resourceId('Microsoft.DocumentDB/databaseAccounts', parameters('databaseAccounts_caremedb_name'))]" 275 + ], 276 + "permissions": [ 277 + { 278 + "dataActions": [ 279 + "Microsoft.DocumentDB/databaseAccounts/readMetadata", 280 + "Microsoft.DocumentDB/databaseAccounts/throughputSettings/read", 281 + "Microsoft.DocumentDB/databaseAccounts/throughputSettings/write", 282 + "Microsoft.DocumentDB/databaseAccounts/gremlin/*", 283 + "Microsoft.DocumentDB/databaseAccounts/gremlin/write", 284 + "Microsoft.DocumentDB/databaseAccounts/gremlin/delete", 285 + "Microsoft.DocumentDB/databaseAccounts/gremlin/containers/*", 286 + "Microsoft.DocumentDB/databaseAccounts/gremlin/containers/entities/*" 287 + ], 288 + "notDataActions": [] 289 + } 290 + ], 291 + "roleName": "Cosmos DB Gremlin Built-in Data Contributor", 292 + "type": "BuiltInRole" 293 + }, 294 + "type": "Microsoft.DocumentDB/databaseAccounts/gremlinRoleDefinitions" 295 + }, 296 + { 297 + "apiVersion": "2025-05-01-preview", 298 + "dependsOn": [ 299 + "[resourceId('Microsoft.DocumentDB/databaseAccounts', parameters('databaseAccounts_caremedb_name'))]" 300 + ], 301 + "name": "[concat(parameters('databaseAccounts_caremedb_name'), '/00000000-0000-0000-0000-000000000003')]", 302 + "properties": { 303 + "assignableScopes": [ 304 + "[resourceId('Microsoft.DocumentDB/databaseAccounts', parameters('databaseAccounts_caremedb_name'))]" 305 + ], 306 + "permissions": [ 307 + { 308 + "dataActions": [ 309 + "Microsoft.DocumentDB/databaseAccounts/readMetadata", 310 + "Microsoft.DocumentDB/databaseAccounts/throughputSettings/read", 311 + "Microsoft.DocumentDB/databaseAccounts/mongoMI/containers/executeQuery", 312 + "Microsoft.DocumentDB/databaseAccounts/mongoMI/containers/readChangeFeed", 313 + "Microsoft.DocumentDB/databaseAccounts/mongoMI/containers/entities/read" 314 + ], 315 + "notDataActions": [] 316 + } 317 + ], 318 + "roleName": "Cosmos DB Mongo Built-in Data Reader", 319 + "type": "BuiltInRole" 320 + }, 321 + "type": "Microsoft.DocumentDB/databaseAccounts/mongoMIRoleDefinitions" 322 + }, 323 + { 324 + "apiVersion": "2025-05-01-preview", 325 + "dependsOn": [ 326 + "[resourceId('Microsoft.DocumentDB/databaseAccounts', parameters('databaseAccounts_caremedb_name'))]" 327 + ], 328 + "name": "[concat(parameters('databaseAccounts_caremedb_name'), '/00000000-0000-0000-0000-000000000004')]", 329 + "properties": { 330 + "assignableScopes": [ 331 + "[resourceId('Microsoft.DocumentDB/databaseAccounts', parameters('databaseAccounts_caremedb_name'))]" 332 + ], 333 + "permissions": [ 334 + { 335 + "dataActions": [ 336 + "Microsoft.DocumentDB/databaseAccounts/readMetadata", 337 + "Microsoft.DocumentDB/databaseAccounts/throughputSettings/read", 338 + "Microsoft.DocumentDB/databaseAccounts/throughputSettings/write", 339 + "Microsoft.DocumentDB/databaseAccounts/mongoMI/*", 340 + "Microsoft.DocumentDB/databaseAccounts/mongoMI/write", 341 + "Microsoft.DocumentDB/databaseAccounts/mongoMI/delete", 342 + "Microsoft.DocumentDB/databaseAccounts/mongoMI/containers/*", 343 + "Microsoft.DocumentDB/databaseAccounts/mongoMI/containers/entities/*" 344 + ], 345 + "notDataActions": [] 346 + } 347 + ], 348 + "roleName": "Cosmos DB Mongo Built-in Data Contributor", 349 + "type": "BuiltInRole" 350 + }, 351 + "type": "Microsoft.DocumentDB/databaseAccounts/mongoMIRoleDefinitions" 352 + }, 353 + { 354 + "apiVersion": "2025-05-01-preview", 355 + "dependsOn": [ 356 + "[resourceId('Microsoft.DocumentDB/databaseAccounts', parameters('databaseAccounts_caremedb_name'))]" 357 + ], 358 + "name": "[concat(parameters('databaseAccounts_caremedb_name'), '/00000000-0000-0000-0000-000000000001')]", 359 + "properties": { 360 + "assignableScopes": [ 361 + "[resourceId('Microsoft.DocumentDB/databaseAccounts', parameters('databaseAccounts_caremedb_name'))]" 362 + ], 363 + "permissions": [ 364 + { 365 + "dataActions": [ 366 + "Microsoft.DocumentDB/databaseAccounts/readMetadata", 367 + "Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/executeQuery", 368 + "Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/readChangeFeed", 369 + "Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/items/read" 370 + ], 371 + "notDataActions": [] 372 + } 373 + ], 374 + "roleName": "Cosmos DB Built-in Data Reader", 375 + "type": "BuiltInRole" 376 + }, 377 + "type": "Microsoft.DocumentDB/databaseAccounts/sqlRoleDefinitions" 378 + }, 379 + { 380 + "apiVersion": "2025-05-01-preview", 381 + "dependsOn": [ 382 + "[resourceId('Microsoft.DocumentDB/databaseAccounts', parameters('databaseAccounts_caremedb_name'))]" 383 + ], 384 + "name": "[concat(parameters('databaseAccounts_caremedb_name'), '/00000000-0000-0000-0000-000000000002')]", 385 + "properties": { 386 + "assignableScopes": [ 387 + "[resourceId('Microsoft.DocumentDB/databaseAccounts', parameters('databaseAccounts_caremedb_name'))]" 388 + ], 389 + "permissions": [ 390 + { 391 + "dataActions": [ 392 + "Microsoft.DocumentDB/databaseAccounts/readMetadata", 393 + "Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/*", 394 + "Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/items/*" 395 + ], 396 + "notDataActions": [] 397 + } 398 + ], 399 + "roleName": "Cosmos DB Built-in Data Contributor", 400 + "type": "BuiltInRole" 401 + }, 402 + "type": "Microsoft.DocumentDB/databaseAccounts/sqlRoleDefinitions" 403 + }, 404 + { 405 + "apiVersion": "2025-05-01-preview", 406 + "dependsOn": [ 407 + "[resourceId('Microsoft.DocumentDB/databaseAccounts', parameters('databaseAccounts_caremedb_name'))]" 408 + ], 409 + "name": "[concat(parameters('databaseAccounts_caremedb_name'), '/00000000-0000-0000-0000-000000000001')]", 410 + "properties": { 411 + "assignableScopes": [ 412 + "[resourceId('Microsoft.DocumentDB/databaseAccounts', parameters('databaseAccounts_caremedb_name'))]" 413 + ], 414 + "permissions": [ 415 + { 416 + "dataActions": [ 417 + "Microsoft.DocumentDB/databaseAccounts/readMetadata", 418 + "Microsoft.DocumentDB/databaseAccounts/tables/containers/executeQuery", 419 + "Microsoft.DocumentDB/databaseAccounts/tables/containers/readChangeFeed", 420 + "Microsoft.DocumentDB/databaseAccounts/tables/containers/entities/read" 421 + ], 422 + "notDataActions": [] 423 + } 424 + ], 425 + "roleName": "Cosmos DB Built-in Data Reader", 426 + "type": "BuiltInRole" 427 + }, 428 + "type": "Microsoft.DocumentDB/databaseAccounts/tableRoleDefinitions" 429 + }, 430 + { 431 + "apiVersion": "2025-05-01-preview", 432 + "dependsOn": [ 433 + "[resourceId('Microsoft.DocumentDB/databaseAccounts', parameters('databaseAccounts_caremedb_name'))]" 434 + ], 435 + "name": "[concat(parameters('databaseAccounts_caremedb_name'), '/00000000-0000-0000-0000-000000000002')]", 436 + "properties": { 437 + "assignableScopes": [ 438 + "[resourceId('Microsoft.DocumentDB/databaseAccounts', parameters('databaseAccounts_caremedb_name'))]" 439 + ], 440 + "permissions": [ 441 + { 442 + "dataActions": [ 443 + "Microsoft.DocumentDB/databaseAccounts/readMetadata", 444 + "Microsoft.DocumentDB/databaseAccounts/tables/*", 445 + "Microsoft.DocumentDB/databaseAccounts/tables/containers/*", 446 + "Microsoft.DocumentDB/databaseAccounts/tables/containers/entities/*" 447 + ], 448 + "notDataActions": [] 449 + } 450 + ], 451 + "roleName": "Cosmos DB Built-in Data Contributor", 452 + "type": "BuiltInRole" 453 + }, 454 + "type": "Microsoft.DocumentDB/databaseAccounts/tableRoleDefinitions" 455 + }, 456 + { 457 + "apiVersion": "2025-01-01", 458 + "dependsOn": [ 459 + "[resourceId('Microsoft.Storage/storageAccounts', parameters('storageAccounts_caremecache_name'))]" 460 + ], 461 + "name": "[concat(parameters('storageAccounts_caremecache_name'), '/default')]", 462 + "properties": { 463 + "containerDeleteRetentionPolicy": { 464 + "days": 7, 465 + "enabled": true 466 + }, 467 + "cors": { 468 + "corsRules": [] 469 + }, 470 + "deleteRetentionPolicy": { 471 + "allowPermanentDelete": false, 472 + "days": 7, 473 + "enabled": true 474 + } 475 + }, 476 + "sku": { 477 + "name": "Standard_RAGRS", 478 + "tier": "Standard" 479 + }, 480 + "type": "Microsoft.Storage/storageAccounts/blobServices" 481 + }, 482 + { 483 + "apiVersion": "2025-01-01", 484 + "dependsOn": [ 485 + "[resourceId('Microsoft.Storage/storageAccounts', parameters('storageAccounts_caremetest_name'))]" 486 + ], 487 + "name": "[concat(parameters('storageAccounts_caremetest_name'), '/default')]", 488 + "properties": { 489 + "containerDeleteRetentionPolicy": { 490 + "days": 7, 491 + "enabled": true 492 + }, 493 + "cors": { 494 + "corsRules": [] 495 + }, 496 + "deleteRetentionPolicy": { 497 + "allowPermanentDelete": false, 498 + "days": 7, 499 + "enabled": true 500 + } 501 + }, 502 + "sku": { 503 + "name": "Standard_LRS", 504 + "tier": "Standard" 505 + }, 506 + "type": "Microsoft.Storage/storageAccounts/blobServices" 507 + }, 508 + { 509 + "apiVersion": "2025-01-01", 510 + "dependsOn": [ 511 + "[resourceId('Microsoft.Storage/storageAccounts', parameters('storageAccounts_caremecache_name'))]" 512 + ], 513 + "name": "[concat(parameters('storageAccounts_caremecache_name'), '/default')]", 514 + "properties": { 515 + "cors": { 516 + "corsRules": [] 517 + }, 518 + "protocolSettings": { 519 + "smb": {} 520 + }, 521 + "shareDeleteRetentionPolicy": { 522 + "days": 7, 523 + "enabled": true 524 + } 525 + }, 526 + "sku": { 527 + "name": "Standard_RAGRS", 528 + "tier": "Standard" 529 + }, 530 + "type": "Microsoft.Storage/storageAccounts/fileServices" 531 + }, 532 + { 533 + "apiVersion": "2025-01-01", 534 + "dependsOn": [ 535 + "[resourceId('Microsoft.Storage/storageAccounts', parameters('storageAccounts_caremetest_name'))]" 536 + ], 537 + "name": "[concat(parameters('storageAccounts_caremetest_name'), '/default')]", 538 + "properties": { 539 + "cors": { 540 + "corsRules": [] 541 + }, 542 + "protocolSettings": { 543 + "smb": {} 544 + }, 545 + "shareDeleteRetentionPolicy": { 546 + "days": 7, 547 + "enabled": true 548 + } 549 + }, 550 + "sku": { 551 + "name": "Standard_LRS", 552 + "tier": "Standard" 553 + }, 554 + "type": "Microsoft.Storage/storageAccounts/fileServices" 555 + }, 556 + { 557 + "apiVersion": "2025-01-01", 558 + "dependsOn": [ 559 + "[resourceId('Microsoft.Storage/storageAccounts', parameters('storageAccounts_caremecache_name'))]" 560 + ], 561 + "name": "[concat(parameters('storageAccounts_caremecache_name'), '/default')]", 562 + "properties": { 563 + "cors": { 564 + "corsRules": [] 565 + } 566 + }, 567 + "type": "Microsoft.Storage/storageAccounts/queueServices" 568 + }, 569 + { 570 + "apiVersion": "2025-01-01", 571 + "dependsOn": [ 572 + "[resourceId('Microsoft.Storage/storageAccounts', parameters('storageAccounts_caremetest_name'))]" 573 + ], 574 + "name": "[concat(parameters('storageAccounts_caremetest_name'), '/default')]", 575 + "properties": { 576 + "cors": { 577 + "corsRules": [] 578 + } 579 + }, 580 + "type": "Microsoft.Storage/storageAccounts/queueServices" 581 + }, 582 + { 583 + "apiVersion": "2025-01-01", 584 + "dependsOn": [ 585 + "[resourceId('Microsoft.Storage/storageAccounts', parameters('storageAccounts_caremecache_name'))]" 586 + ], 587 + "name": "[concat(parameters('storageAccounts_caremecache_name'), '/default')]", 588 + "properties": { 589 + "cors": { 590 + "corsRules": [] 591 + } 592 + }, 593 + "type": "Microsoft.Storage/storageAccounts/tableServices" 594 + }, 595 + { 596 + "apiVersion": "2025-01-01", 597 + "dependsOn": [ 598 + "[resourceId('Microsoft.Storage/storageAccounts', parameters('storageAccounts_caremetest_name'))]" 599 + ], 600 + "name": "[concat(parameters('storageAccounts_caremetest_name'), '/default')]", 601 + "properties": { 602 + "cors": { 603 + "corsRules": [] 604 + } 605 + }, 606 + "type": "Microsoft.Storage/storageAccounts/tableServices" 607 + }, 608 + { 609 + "apiVersion": "2025-01-01", 610 + "dependsOn": [ 611 + "[resourceId('Microsoft.Storage/storageAccounts/blobServices', parameters('storageAccounts_caremecache_name'), 'default')]", 612 + "[resourceId('Microsoft.Storage/storageAccounts', parameters('storageAccounts_caremecache_name'))]" 613 + ], 614 + "name": "[concat(parameters('storageAccounts_caremecache_name'), '/default/logs')]", 615 + "properties": { 616 + "defaultEncryptionScope": "$account-encryption-key", 617 + "denyEncryptionScopeOverride": false, 618 + "immutableStorageWithVersioning": { 619 + "enabled": false 620 + }, 621 + "publicAccess": "None" 622 + }, 623 + "type": "Microsoft.Storage/storageAccounts/blobServices/containers" 624 + }, 625 + { 626 + "apiVersion": "2025-01-01", 627 + "dependsOn": [ 628 + "[resourceId('Microsoft.Storage/storageAccounts/blobServices', parameters('storageAccounts_caremecache_name'), 'default')]", 629 + "[resourceId('Microsoft.Storage/storageAccounts', parameters('storageAccounts_caremecache_name'))]" 630 + ], 631 + "name": "[concat(parameters('storageAccounts_caremecache_name'), '/default/recipes')]", 632 + "properties": { 633 + "defaultEncryptionScope": "$account-encryption-key", 634 + "denyEncryptionScopeOverride": false, 635 + "immutableStorageWithVersioning": { 636 + "enabled": false 637 + }, 638 + "publicAccess": "None" 639 + }, 640 + "type": "Microsoft.Storage/storageAccounts/blobServices/containers" 641 + } 642 + ], 643 + "variables": {} 644 + }
+315
infra/zebu.json
··· 1 + { 2 + "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", 3 + "contentVersion": "1.0.0.0", 4 + "parameters": { 5 + "managedClusters_zebu_name": { 6 + "type": "String" 7 + }, 8 + "userAssignedIdentities_zebu_agentpool_externalid": { 9 + "type": "String" 10 + }, 11 + "virtualNetworks_zebu_vnet_name": { 12 + "type": "String" 13 + } 14 + }, 15 + "resources": [ 16 + { 17 + "apiVersion": "2024-07-01", 18 + "location": "westus3", 19 + "name": "[parameters('virtualNetworks_zebu_vnet_name')]", 20 + "properties": { 21 + "addressSpace": { 22 + "addressPrefixes": [ 23 + "10.0.0.0/8" 24 + ] 25 + }, 26 + "enableDdosProtection": false, 27 + "privateEndpointVNetPolicies": "Disabled", 28 + "subnets": [ 29 + { 30 + "id": "[resourceId('Microsoft.Network/virtualNetworks/subnets', parameters('virtualNetworks_zebu_vnet_name'), 'default')]", 31 + "name": "default", 32 + "properties": { 33 + "addressPrefix": "10.240.0.0/16", 34 + "delegations": [], 35 + "privateEndpointNetworkPolicies": "Disabled", 36 + "privateLinkServiceNetworkPolicies": "Enabled", 37 + "serviceEndpoints": [ 38 + { 39 + "locations": [ 40 + "westus3", 41 + "eastus" 42 + ], 43 + "service": "Microsoft.Storage" 44 + } 45 + ] 46 + }, 47 + "type": "Microsoft.Network/virtualNetworks/subnets" 48 + }, 49 + { 50 + "id": "[resourceId('Microsoft.Network/virtualNetworks/subnets', parameters('virtualNetworks_zebu_vnet_name'), 'dns')]", 51 + "name": "dns", 52 + "properties": { 53 + "addressPrefix": "10.241.0.0/28", 54 + "delegations": [], 55 + "privateEndpointNetworkPolicies": "Disabled", 56 + "privateLinkServiceNetworkPolicies": "Enabled" 57 + }, 58 + "type": "Microsoft.Network/virtualNetworks/subnets" 59 + } 60 + ], 61 + "virtualNetworkPeerings": [] 62 + }, 63 + "type": "Microsoft.Network/virtualNetworks" 64 + }, 65 + { 66 + "apiVersion": "2025-05-01", 67 + "dependsOn": [ 68 + "[resourceId('Microsoft.Network/virtualNetworks/subnets', parameters('virtualNetworks_zebu_vnet_name'), 'default')]" 69 + ], 70 + "identity": { 71 + "type": "SystemAssigned" 72 + }, 73 + "location": "westus3", 74 + "name": "[parameters('managedClusters_zebu_name')]", 75 + "properties": { 76 + "addonProfiles": { 77 + "azureKeyvaultSecretsProvider": { 78 + "enabled": false 79 + }, 80 + "azurepolicy": { 81 + "enabled": false 82 + }, 83 + "httpApplicationRouting": { 84 + "enabled": false 85 + } 86 + }, 87 + "agentPoolProfiles": [ 88 + { 89 + "count": 2, 90 + "enableAutoScaling": false, 91 + "enableEncryptionAtHost": false, 92 + "enableFIPS": false, 93 + "enableNodePublicIP": false, 94 + "enableUltraSSD": false, 95 + "kubeletDiskType": "OS", 96 + "maxPods": 250, 97 + "mode": "System", 98 + "name": "main", 99 + "orchestratorVersion": "1.33.6", 100 + "osDiskSizeGB": 128, 101 + "osDiskType": "Managed", 102 + "osSKU": "Ubuntu", 103 + "osType": "Linux", 104 + "powerState": { 105 + "code": "Running" 106 + }, 107 + "scaleDownMode": "Delete", 108 + "securityProfile": { 109 + "enableSecureBoot": false, 110 + "enableVTPM": false 111 + }, 112 + "type": "VirtualMachineScaleSets", 113 + "upgradeSettings": { 114 + "maxSurge": "10%", 115 + "maxUnavailable": "0", 116 + "undrainableNodeBehavior": "Schedule" 117 + }, 118 + "vmSize": "Standard_B2s_v2", 119 + "vnetSubnetID": "[resourceId('Microsoft.Network/virtualNetworks/subnets', parameters('virtualNetworks_zebu_vnet_name'), 'default')]" 120 + } 121 + ], 122 + "autoUpgradeProfile": { 123 + "upgradeChannel": "stable" 124 + }, 125 + "azureMonitorProfile": { 126 + "metrics": { 127 + "enabled": false 128 + } 129 + }, 130 + "bootstrapProfile": { 131 + "artifactSource": "Direct" 132 + }, 133 + "disableLocalAccounts": false, 134 + "dnsPrefix": "[concat(parameters('managedClusters_zebu_name'), '-dns')]", 135 + "enableRBAC": true, 136 + "identityProfile": { 137 + "kubeletidentity": { 138 + "clientId": "eed6c37c-24b2-4b76-980a-8453ff1b12bd", 139 + "objectId": "687a9a3d-7a14-403a-b885-730dccfe7c6d", 140 + "resourceId": "[parameters('userAssignedIdentities_zebu_agentpool_externalid')]" 141 + } 142 + }, 143 + "kubernetesVersion": "1.33.6", 144 + "metricsProfile": { 145 + "costAnalysis": { 146 + "enabled": false 147 + } 148 + }, 149 + "networkProfile": { 150 + "dnsServiceIP": "10.0.0.10", 151 + "ipFamilies": [ 152 + "IPv4" 153 + ], 154 + "loadBalancerProfile": { 155 + "backendPoolType": "nodeIPConfiguration", 156 + "managedOutboundIPs": { 157 + "count": 1 158 + } 159 + }, 160 + "loadBalancerSku": "standard", 161 + "networkDataplane": "cilium", 162 + "networkPlugin": "azure", 163 + "networkPluginMode": "overlay", 164 + "networkPolicy": "cilium", 165 + "outboundType": "loadBalancer", 166 + "podCidr": "192.168.0.0/16", 167 + "podCidrs": [ 168 + "192.168.0.0/16" 169 + ], 170 + "serviceCidr": "10.0.0.0/16", 171 + "serviceCidrs": [ 172 + "10.0.0.0/16" 173 + ] 174 + }, 175 + "nodeProvisioningProfile": { 176 + "defaultNodePools": "Auto", 177 + "mode": "Manual" 178 + }, 179 + "nodeResourceGroup": "[concat('MC_', parameters('managedClusters_zebu_name'), '_', parameters('managedClusters_zebu_name'), '_westus3')]", 180 + "oidcIssuerProfile": { 181 + "enabled": false 182 + }, 183 + "securityProfile": {}, 184 + "servicePrincipalProfile": { 185 + "clientId": "msi" 186 + }, 187 + "storageProfile": { 188 + "diskCSIDriver": { 189 + "enabled": true 190 + }, 191 + "fileCSIDriver": { 192 + "enabled": true 193 + }, 194 + "snapshotController": { 195 + "enabled": true 196 + } 197 + }, 198 + "supportPlan": "KubernetesOfficial", 199 + "windowsProfile": { 200 + "adminUsername": "azureuser", 201 + "enableCSIProxy": true 202 + }, 203 + "workloadAutoScalerProfile": {} 204 + }, 205 + "sku": { 206 + "name": "Base", 207 + "tier": "Free" 208 + }, 209 + "type": "Microsoft.ContainerService/managedClusters" 210 + }, 211 + { 212 + "apiVersion": "2024-07-01", 213 + "dependsOn": [ 214 + "[resourceId('Microsoft.Network/virtualNetworks', parameters('virtualNetworks_zebu_vnet_name'))]" 215 + ], 216 + "name": "[concat(parameters('virtualNetworks_zebu_vnet_name'), '/default')]", 217 + "properties": { 218 + "addressPrefix": "10.240.0.0/16", 219 + "delegations": [], 220 + "privateEndpointNetworkPolicies": "Disabled", 221 + "privateLinkServiceNetworkPolicies": "Enabled", 222 + "serviceEndpoints": [ 223 + { 224 + "locations": [ 225 + "westus3", 226 + "eastus" 227 + ], 228 + "service": "Microsoft.Storage" 229 + } 230 + ] 231 + }, 232 + "type": "Microsoft.Network/virtualNetworks/subnets" 233 + }, 234 + { 235 + "apiVersion": "2024-07-01", 236 + "dependsOn": [ 237 + "[resourceId('Microsoft.Network/virtualNetworks', parameters('virtualNetworks_zebu_vnet_name'))]" 238 + ], 239 + "name": "[concat(parameters('virtualNetworks_zebu_vnet_name'), '/dns')]", 240 + "properties": { 241 + "addressPrefix": "10.241.0.0/28", 242 + "delegations": [], 243 + "privateEndpointNetworkPolicies": "Disabled", 244 + "privateLinkServiceNetworkPolicies": "Enabled" 245 + }, 246 + "type": "Microsoft.Network/virtualNetworks/subnets" 247 + }, 248 + { 249 + "apiVersion": "2025-05-01", 250 + "dependsOn": [ 251 + "[resourceId('Microsoft.ContainerService/managedClusters', parameters('managedClusters_zebu_name'))]", 252 + "[resourceId('Microsoft.Network/virtualNetworks/subnets', parameters('virtualNetworks_zebu_vnet_name'), 'default')]" 253 + ], 254 + "name": "[concat(parameters('managedClusters_zebu_name'), '/main')]", 255 + "properties": { 256 + "count": 2, 257 + "enableAutoScaling": false, 258 + "enableEncryptionAtHost": false, 259 + "enableFIPS": false, 260 + "enableNodePublicIP": false, 261 + "enableUltraSSD": false, 262 + "kubeletDiskType": "OS", 263 + "maxPods": 250, 264 + "mode": "System", 265 + "orchestratorVersion": "1.33.6", 266 + "osDiskSizeGB": 128, 267 + "osDiskType": "Managed", 268 + "osSKU": "Ubuntu", 269 + "osType": "Linux", 270 + "powerState": { 271 + "code": "Running" 272 + }, 273 + "scaleDownMode": "Delete", 274 + "securityProfile": { 275 + "enableSecureBoot": false, 276 + "enableVTPM": false 277 + }, 278 + "type": "VirtualMachineScaleSets", 279 + "upgradeSettings": { 280 + "maxSurge": "10%", 281 + "maxUnavailable": "0", 282 + "undrainableNodeBehavior": "Schedule" 283 + }, 284 + "vmSize": "Standard_B2s_v2", 285 + "vnetSubnetID": "[resourceId('Microsoft.Network/virtualNetworks/subnets', parameters('virtualNetworks_zebu_vnet_name'), 'default')]" 286 + }, 287 + "type": "Microsoft.ContainerService/managedClusters/agentPools" 288 + }, 289 + { 290 + "apiVersion": "2025-04-02-preview", 291 + "dependsOn": [ 292 + "[resourceId('Microsoft.ContainerService/managedClusters/agentPools', parameters('managedClusters_zebu_name'), 'main')]", 293 + "[resourceId('Microsoft.ContainerService/managedClusters', parameters('managedClusters_zebu_name'))]" 294 + ], 295 + "name": "[concat(parameters('managedClusters_zebu_name'), '/main/aks-main-11118102-vmss000000')]", 296 + "properties": { 297 + "network": {} 298 + }, 299 + "type": "Microsoft.ContainerService/managedClusters/agentPools/machines" 300 + }, 301 + { 302 + "apiVersion": "2025-04-02-preview", 303 + "dependsOn": [ 304 + "[resourceId('Microsoft.ContainerService/managedClusters/agentPools', parameters('managedClusters_zebu_name'), 'main')]", 305 + "[resourceId('Microsoft.ContainerService/managedClusters', parameters('managedClusters_zebu_name'))]" 306 + ], 307 + "name": "[concat(parameters('managedClusters_zebu_name'), '/main/aks-main-11118102-vmss000001')]", 308 + "properties": { 309 + "network": {} 310 + }, 311 + "type": "Microsoft.ContainerService/managedClusters/agentPools/machines" 312 + } 313 + ], 314 + "variables": {} 315 + }