ai cooking
Merge pull request #205 from paulgmiller/infra
save arm specs and updated deployment
authored by
Paul Miller
and committed by
GitHub
bc5fc535
93b1de81
+960
-1
+1
-1
deploy/deploy.yaml
+1
-1
deploy/deploy.yaml
+644
infra/careme.json
+644
infra/careme.json
···
1
+
{
2
+
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
3
+
"contentVersion": "1.0.0.0",
4
+
"parameters": {
5
+
"databaseAccounts_caremedb_name": {
6
+
"type": "String"
7
+
},
8
+
"storageAccounts_caremecache_name": {
9
+
"type": "String"
10
+
},
11
+
"storageAccounts_caremetest_name": {
12
+
"type": "String"
13
+
},
14
+
"virtualNetworks_zebu_vnet_externalid": {
15
+
"type": "String"
16
+
}
17
+
},
18
+
"resources": [
19
+
{
20
+
"apiVersion": "2025-05-01-preview",
21
+
"identity": {
22
+
"type": "None"
23
+
},
24
+
"kind": "GlobalDocumentDB",
25
+
"location": "West US 3",
26
+
"name": "[parameters('databaseAccounts_caremedb_name')]",
27
+
"properties": {
28
+
"analyticalStorageConfiguration": {
29
+
"schemaType": "WellDefined"
30
+
},
31
+
"backupPolicy": {
32
+
"periodicModeProperties": {
33
+
"backupIntervalInMinutes": 240,
34
+
"backupRetentionIntervalInHours": 8,
35
+
"backupStorageRedundancy": "Geo"
36
+
},
37
+
"type": "Periodic"
38
+
},
39
+
"capabilities": [],
40
+
"capacity": {
41
+
"totalThroughputLimit": 4000
42
+
},
43
+
"capacityMode": "Serverless",
44
+
"consistencyPolicy": {
45
+
"defaultConsistencyLevel": "Session",
46
+
"maxIntervalInSeconds": 5,
47
+
"maxStalenessPrefix": 100
48
+
},
49
+
"cors": [],
50
+
"databaseAccountOfferType": "Standard",
51
+
"defaultIdentity": "FirstPartyIdentity",
52
+
"defaultPriorityLevel": "High",
53
+
"diagnosticLogSettings": {
54
+
"enableFullTextQuery": "None"
55
+
},
56
+
"disableKeyBasedMetadataWriteAccess": false,
57
+
"disableLocalAuth": false,
58
+
"enableAnalyticalStorage": false,
59
+
"enableAutomaticFailover": true,
60
+
"enableBurstCapacity": false,
61
+
"enableFreeTier": false,
62
+
"enableMaterializedViews": false,
63
+
"enableMultipleWriteLocations": false,
64
+
"enablePartitionMerge": false,
65
+
"enablePerRegionPerPartitionAutoscale": false,
66
+
"enablePriorityBasedExecution": false,
67
+
"ipRules": [],
68
+
"isVirtualNetworkFilterEnabled": false,
69
+
"locations": [
70
+
{
71
+
"failoverPriority": 0,
72
+
"isZoneRedundant": false,
73
+
"locationName": "West US 3"
74
+
}
75
+
],
76
+
"minimalTlsVersion": "Tls12",
77
+
"networkAclBypass": "None",
78
+
"networkAclBypassResourceIds": [],
79
+
"publicNetworkAccess": "Enabled",
80
+
"virtualNetworkRules": []
81
+
},
82
+
"tags": {
83
+
"defaultExperience": "Core (SQL)",
84
+
"hidden-cosmos-mmspecial": "",
85
+
"hidden-workload-type": "Learning"
86
+
},
87
+
"type": "Microsoft.DocumentDB/databaseAccounts"
88
+
},
89
+
{
90
+
"apiVersion": "2025-01-01",
91
+
"kind": "StorageV2",
92
+
"location": "westus3",
93
+
"name": "[parameters('storageAccounts_caremecache_name')]",
94
+
"properties": {
95
+
"accessTier": "Hot",
96
+
"allowBlobPublicAccess": false,
97
+
"allowCrossTenantReplication": false,
98
+
"allowSharedKeyAccess": true,
99
+
"defaultToOAuthAuthentication": false,
100
+
"dnsEndpointType": "Standard",
101
+
"encryption": {
102
+
"keySource": "Microsoft.Storage",
103
+
"requireInfrastructureEncryption": false,
104
+
"services": {
105
+
"blob": {
106
+
"enabled": true,
107
+
"keyType": "Account"
108
+
},
109
+
"file": {
110
+
"enabled": true,
111
+
"keyType": "Account"
112
+
}
113
+
}
114
+
},
115
+
"largeFileSharesState": "Enabled",
116
+
"minimumTlsVersion": "TLS1_2",
117
+
"networkAcls": {
118
+
"bypass": "Logging, Metrics, AzureServices",
119
+
"defaultAction": "Allow",
120
+
"ipRules": [],
121
+
"resourceAccessRules": [],
122
+
"virtualNetworkRules": [
123
+
{
124
+
"action": "Allow",
125
+
"id": "[concat(parameters('virtualNetworks_zebu_vnet_externalid'), '/subnets/default')]",
126
+
"state": "Succeeded"
127
+
}
128
+
]
129
+
},
130
+
"publicNetworkAccess": "Enabled",
131
+
"supportsHttpsTrafficOnly": true
132
+
},
133
+
"sku": {
134
+
"name": "Standard_RAGRS",
135
+
"tier": "Standard"
136
+
},
137
+
"type": "Microsoft.Storage/storageAccounts"
138
+
},
139
+
{
140
+
"apiVersion": "2025-01-01",
141
+
"kind": "StorageV2",
142
+
"location": "westus2",
143
+
"name": "[parameters('storageAccounts_caremetest_name')]",
144
+
"properties": {
145
+
"accessTier": "Hot",
146
+
"allowBlobPublicAccess": false,
147
+
"allowCrossTenantReplication": false,
148
+
"allowSharedKeyAccess": true,
149
+
"defaultToOAuthAuthentication": false,
150
+
"dnsEndpointType": "Standard",
151
+
"encryption": {
152
+
"keySource": "Microsoft.Storage",
153
+
"requireInfrastructureEncryption": false,
154
+
"services": {
155
+
"blob": {
156
+
"enabled": true,
157
+
"keyType": "Account"
158
+
},
159
+
"file": {
160
+
"enabled": true,
161
+
"keyType": "Account"
162
+
}
163
+
}
164
+
},
165
+
"largeFileSharesState": "Enabled",
166
+
"minimumTlsVersion": "TLS1_2",
167
+
"networkAcls": {
168
+
"bypass": "AzureServices",
169
+
"defaultAction": "Allow",
170
+
"ipRules": [],
171
+
"virtualNetworkRules": []
172
+
},
173
+
"publicNetworkAccess": "Enabled",
174
+
"supportsHttpsTrafficOnly": true
175
+
},
176
+
"sku": {
177
+
"name": "Standard_LRS",
178
+
"tier": "Standard"
179
+
},
180
+
"type": "Microsoft.Storage/storageAccounts"
181
+
},
182
+
{
183
+
"apiVersion": "2025-05-01-preview",
184
+
"dependsOn": [
185
+
"[resourceId('Microsoft.DocumentDB/databaseAccounts', parameters('databaseAccounts_caremedb_name'))]"
186
+
],
187
+
"name": "[concat(parameters('databaseAccounts_caremedb_name'), '/00000000-0000-0000-0000-000000000003')]",
188
+
"properties": {
189
+
"assignableScopes": [
190
+
"[resourceId('Microsoft.DocumentDB/databaseAccounts', parameters('databaseAccounts_caremedb_name'))]"
191
+
],
192
+
"permissions": [
193
+
{
194
+
"dataActions": [
195
+
"Microsoft.DocumentDB/databaseAccounts/readMetadata",
196
+
"Microsoft.DocumentDB/databaseAccounts/throughputSettings/read",
197
+
"Microsoft.DocumentDB/databaseAccounts/cassandra/containers/executeQuery",
198
+
"Microsoft.DocumentDB/databaseAccounts/cassandra/containers/readChangeFeed",
199
+
"Microsoft.DocumentDB/databaseAccounts/cassandra/containers/entities/read"
200
+
],
201
+
"notDataActions": []
202
+
}
203
+
],
204
+
"roleName": "Cosmos DB Cassandra Built-in Data Reader",
205
+
"type": "BuiltInRole"
206
+
},
207
+
"type": "Microsoft.DocumentDB/databaseAccounts/cassandraRoleDefinitions"
208
+
},
209
+
{
210
+
"apiVersion": "2025-05-01-preview",
211
+
"dependsOn": [
212
+
"[resourceId('Microsoft.DocumentDB/databaseAccounts', parameters('databaseAccounts_caremedb_name'))]"
213
+
],
214
+
"name": "[concat(parameters('databaseAccounts_caremedb_name'), '/00000000-0000-0000-0000-000000000004')]",
215
+
"properties": {
216
+
"assignableScopes": [
217
+
"[resourceId('Microsoft.DocumentDB/databaseAccounts', parameters('databaseAccounts_caremedb_name'))]"
218
+
],
219
+
"permissions": [
220
+
{
221
+
"dataActions": [
222
+
"Microsoft.DocumentDB/databaseAccounts/readMetadata",
223
+
"Microsoft.DocumentDB/databaseAccounts/throughputSettings/read",
224
+
"Microsoft.DocumentDB/databaseAccounts/throughputSettings/write",
225
+
"Microsoft.DocumentDB/databaseAccounts/cassandra/*",
226
+
"Microsoft.DocumentDB/databaseAccounts/cassandra/write",
227
+
"Microsoft.DocumentDB/databaseAccounts/cassandra/delete",
228
+
"Microsoft.DocumentDB/databaseAccounts/cassandra/containers/*",
229
+
"Microsoft.DocumentDB/databaseAccounts/cassandra/containers/entities/*"
230
+
],
231
+
"notDataActions": []
232
+
}
233
+
],
234
+
"roleName": "Cosmos DB Cassandra Built-in Data Contributor",
235
+
"type": "BuiltInRole"
236
+
},
237
+
"type": "Microsoft.DocumentDB/databaseAccounts/cassandraRoleDefinitions"
238
+
},
239
+
{
240
+
"apiVersion": "2025-05-01-preview",
241
+
"dependsOn": [
242
+
"[resourceId('Microsoft.DocumentDB/databaseAccounts', parameters('databaseAccounts_caremedb_name'))]"
243
+
],
244
+
"name": "[concat(parameters('databaseAccounts_caremedb_name'), '/00000000-0000-0000-0000-000000000003')]",
245
+
"properties": {
246
+
"assignableScopes": [
247
+
"[resourceId('Microsoft.DocumentDB/databaseAccounts', parameters('databaseAccounts_caremedb_name'))]"
248
+
],
249
+
"permissions": [
250
+
{
251
+
"dataActions": [
252
+
"Microsoft.DocumentDB/databaseAccounts/readMetadata",
253
+
"Microsoft.DocumentDB/databaseAccounts/throughputSettings/read",
254
+
"Microsoft.DocumentDB/databaseAccounts/gremlin/containers/executeQuery",
255
+
"Microsoft.DocumentDB/databaseAccounts/gremlin/containers/readChangeFeed",
256
+
"Microsoft.DocumentDB/databaseAccounts/gremlin/containers/entities/read"
257
+
],
258
+
"notDataActions": []
259
+
}
260
+
],
261
+
"roleName": "Cosmos DB Gremlin Built-in Data Reader",
262
+
"type": "BuiltInRole"
263
+
},
264
+
"type": "Microsoft.DocumentDB/databaseAccounts/gremlinRoleDefinitions"
265
+
},
266
+
{
267
+
"apiVersion": "2025-05-01-preview",
268
+
"dependsOn": [
269
+
"[resourceId('Microsoft.DocumentDB/databaseAccounts', parameters('databaseAccounts_caremedb_name'))]"
270
+
],
271
+
"name": "[concat(parameters('databaseAccounts_caremedb_name'), '/00000000-0000-0000-0000-000000000004')]",
272
+
"properties": {
273
+
"assignableScopes": [
274
+
"[resourceId('Microsoft.DocumentDB/databaseAccounts', parameters('databaseAccounts_caremedb_name'))]"
275
+
],
276
+
"permissions": [
277
+
{
278
+
"dataActions": [
279
+
"Microsoft.DocumentDB/databaseAccounts/readMetadata",
280
+
"Microsoft.DocumentDB/databaseAccounts/throughputSettings/read",
281
+
"Microsoft.DocumentDB/databaseAccounts/throughputSettings/write",
282
+
"Microsoft.DocumentDB/databaseAccounts/gremlin/*",
283
+
"Microsoft.DocumentDB/databaseAccounts/gremlin/write",
284
+
"Microsoft.DocumentDB/databaseAccounts/gremlin/delete",
285
+
"Microsoft.DocumentDB/databaseAccounts/gremlin/containers/*",
286
+
"Microsoft.DocumentDB/databaseAccounts/gremlin/containers/entities/*"
287
+
],
288
+
"notDataActions": []
289
+
}
290
+
],
291
+
"roleName": "Cosmos DB Gremlin Built-in Data Contributor",
292
+
"type": "BuiltInRole"
293
+
},
294
+
"type": "Microsoft.DocumentDB/databaseAccounts/gremlinRoleDefinitions"
295
+
},
296
+
{
297
+
"apiVersion": "2025-05-01-preview",
298
+
"dependsOn": [
299
+
"[resourceId('Microsoft.DocumentDB/databaseAccounts', parameters('databaseAccounts_caremedb_name'))]"
300
+
],
301
+
"name": "[concat(parameters('databaseAccounts_caremedb_name'), '/00000000-0000-0000-0000-000000000003')]",
302
+
"properties": {
303
+
"assignableScopes": [
304
+
"[resourceId('Microsoft.DocumentDB/databaseAccounts', parameters('databaseAccounts_caremedb_name'))]"
305
+
],
306
+
"permissions": [
307
+
{
308
+
"dataActions": [
309
+
"Microsoft.DocumentDB/databaseAccounts/readMetadata",
310
+
"Microsoft.DocumentDB/databaseAccounts/throughputSettings/read",
311
+
"Microsoft.DocumentDB/databaseAccounts/mongoMI/containers/executeQuery",
312
+
"Microsoft.DocumentDB/databaseAccounts/mongoMI/containers/readChangeFeed",
313
+
"Microsoft.DocumentDB/databaseAccounts/mongoMI/containers/entities/read"
314
+
],
315
+
"notDataActions": []
316
+
}
317
+
],
318
+
"roleName": "Cosmos DB Mongo Built-in Data Reader",
319
+
"type": "BuiltInRole"
320
+
},
321
+
"type": "Microsoft.DocumentDB/databaseAccounts/mongoMIRoleDefinitions"
322
+
},
323
+
{
324
+
"apiVersion": "2025-05-01-preview",
325
+
"dependsOn": [
326
+
"[resourceId('Microsoft.DocumentDB/databaseAccounts', parameters('databaseAccounts_caremedb_name'))]"
327
+
],
328
+
"name": "[concat(parameters('databaseAccounts_caremedb_name'), '/00000000-0000-0000-0000-000000000004')]",
329
+
"properties": {
330
+
"assignableScopes": [
331
+
"[resourceId('Microsoft.DocumentDB/databaseAccounts', parameters('databaseAccounts_caremedb_name'))]"
332
+
],
333
+
"permissions": [
334
+
{
335
+
"dataActions": [
336
+
"Microsoft.DocumentDB/databaseAccounts/readMetadata",
337
+
"Microsoft.DocumentDB/databaseAccounts/throughputSettings/read",
338
+
"Microsoft.DocumentDB/databaseAccounts/throughputSettings/write",
339
+
"Microsoft.DocumentDB/databaseAccounts/mongoMI/*",
340
+
"Microsoft.DocumentDB/databaseAccounts/mongoMI/write",
341
+
"Microsoft.DocumentDB/databaseAccounts/mongoMI/delete",
342
+
"Microsoft.DocumentDB/databaseAccounts/mongoMI/containers/*",
343
+
"Microsoft.DocumentDB/databaseAccounts/mongoMI/containers/entities/*"
344
+
],
345
+
"notDataActions": []
346
+
}
347
+
],
348
+
"roleName": "Cosmos DB Mongo Built-in Data Contributor",
349
+
"type": "BuiltInRole"
350
+
},
351
+
"type": "Microsoft.DocumentDB/databaseAccounts/mongoMIRoleDefinitions"
352
+
},
353
+
{
354
+
"apiVersion": "2025-05-01-preview",
355
+
"dependsOn": [
356
+
"[resourceId('Microsoft.DocumentDB/databaseAccounts', parameters('databaseAccounts_caremedb_name'))]"
357
+
],
358
+
"name": "[concat(parameters('databaseAccounts_caremedb_name'), '/00000000-0000-0000-0000-000000000001')]",
359
+
"properties": {
360
+
"assignableScopes": [
361
+
"[resourceId('Microsoft.DocumentDB/databaseAccounts', parameters('databaseAccounts_caremedb_name'))]"
362
+
],
363
+
"permissions": [
364
+
{
365
+
"dataActions": [
366
+
"Microsoft.DocumentDB/databaseAccounts/readMetadata",
367
+
"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/executeQuery",
368
+
"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/readChangeFeed",
369
+
"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/items/read"
370
+
],
371
+
"notDataActions": []
372
+
}
373
+
],
374
+
"roleName": "Cosmos DB Built-in Data Reader",
375
+
"type": "BuiltInRole"
376
+
},
377
+
"type": "Microsoft.DocumentDB/databaseAccounts/sqlRoleDefinitions"
378
+
},
379
+
{
380
+
"apiVersion": "2025-05-01-preview",
381
+
"dependsOn": [
382
+
"[resourceId('Microsoft.DocumentDB/databaseAccounts', parameters('databaseAccounts_caremedb_name'))]"
383
+
],
384
+
"name": "[concat(parameters('databaseAccounts_caremedb_name'), '/00000000-0000-0000-0000-000000000002')]",
385
+
"properties": {
386
+
"assignableScopes": [
387
+
"[resourceId('Microsoft.DocumentDB/databaseAccounts', parameters('databaseAccounts_caremedb_name'))]"
388
+
],
389
+
"permissions": [
390
+
{
391
+
"dataActions": [
392
+
"Microsoft.DocumentDB/databaseAccounts/readMetadata",
393
+
"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/*",
394
+
"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/items/*"
395
+
],
396
+
"notDataActions": []
397
+
}
398
+
],
399
+
"roleName": "Cosmos DB Built-in Data Contributor",
400
+
"type": "BuiltInRole"
401
+
},
402
+
"type": "Microsoft.DocumentDB/databaseAccounts/sqlRoleDefinitions"
403
+
},
404
+
{
405
+
"apiVersion": "2025-05-01-preview",
406
+
"dependsOn": [
407
+
"[resourceId('Microsoft.DocumentDB/databaseAccounts', parameters('databaseAccounts_caremedb_name'))]"
408
+
],
409
+
"name": "[concat(parameters('databaseAccounts_caremedb_name'), '/00000000-0000-0000-0000-000000000001')]",
410
+
"properties": {
411
+
"assignableScopes": [
412
+
"[resourceId('Microsoft.DocumentDB/databaseAccounts', parameters('databaseAccounts_caremedb_name'))]"
413
+
],
414
+
"permissions": [
415
+
{
416
+
"dataActions": [
417
+
"Microsoft.DocumentDB/databaseAccounts/readMetadata",
418
+
"Microsoft.DocumentDB/databaseAccounts/tables/containers/executeQuery",
419
+
"Microsoft.DocumentDB/databaseAccounts/tables/containers/readChangeFeed",
420
+
"Microsoft.DocumentDB/databaseAccounts/tables/containers/entities/read"
421
+
],
422
+
"notDataActions": []
423
+
}
424
+
],
425
+
"roleName": "Cosmos DB Built-in Data Reader",
426
+
"type": "BuiltInRole"
427
+
},
428
+
"type": "Microsoft.DocumentDB/databaseAccounts/tableRoleDefinitions"
429
+
},
430
+
{
431
+
"apiVersion": "2025-05-01-preview",
432
+
"dependsOn": [
433
+
"[resourceId('Microsoft.DocumentDB/databaseAccounts', parameters('databaseAccounts_caremedb_name'))]"
434
+
],
435
+
"name": "[concat(parameters('databaseAccounts_caremedb_name'), '/00000000-0000-0000-0000-000000000002')]",
436
+
"properties": {
437
+
"assignableScopes": [
438
+
"[resourceId('Microsoft.DocumentDB/databaseAccounts', parameters('databaseAccounts_caremedb_name'))]"
439
+
],
440
+
"permissions": [
441
+
{
442
+
"dataActions": [
443
+
"Microsoft.DocumentDB/databaseAccounts/readMetadata",
444
+
"Microsoft.DocumentDB/databaseAccounts/tables/*",
445
+
"Microsoft.DocumentDB/databaseAccounts/tables/containers/*",
446
+
"Microsoft.DocumentDB/databaseAccounts/tables/containers/entities/*"
447
+
],
448
+
"notDataActions": []
449
+
}
450
+
],
451
+
"roleName": "Cosmos DB Built-in Data Contributor",
452
+
"type": "BuiltInRole"
453
+
},
454
+
"type": "Microsoft.DocumentDB/databaseAccounts/tableRoleDefinitions"
455
+
},
456
+
{
457
+
"apiVersion": "2025-01-01",
458
+
"dependsOn": [
459
+
"[resourceId('Microsoft.Storage/storageAccounts', parameters('storageAccounts_caremecache_name'))]"
460
+
],
461
+
"name": "[concat(parameters('storageAccounts_caremecache_name'), '/default')]",
462
+
"properties": {
463
+
"containerDeleteRetentionPolicy": {
464
+
"days": 7,
465
+
"enabled": true
466
+
},
467
+
"cors": {
468
+
"corsRules": []
469
+
},
470
+
"deleteRetentionPolicy": {
471
+
"allowPermanentDelete": false,
472
+
"days": 7,
473
+
"enabled": true
474
+
}
475
+
},
476
+
"sku": {
477
+
"name": "Standard_RAGRS",
478
+
"tier": "Standard"
479
+
},
480
+
"type": "Microsoft.Storage/storageAccounts/blobServices"
481
+
},
482
+
{
483
+
"apiVersion": "2025-01-01",
484
+
"dependsOn": [
485
+
"[resourceId('Microsoft.Storage/storageAccounts', parameters('storageAccounts_caremetest_name'))]"
486
+
],
487
+
"name": "[concat(parameters('storageAccounts_caremetest_name'), '/default')]",
488
+
"properties": {
489
+
"containerDeleteRetentionPolicy": {
490
+
"days": 7,
491
+
"enabled": true
492
+
},
493
+
"cors": {
494
+
"corsRules": []
495
+
},
496
+
"deleteRetentionPolicy": {
497
+
"allowPermanentDelete": false,
498
+
"days": 7,
499
+
"enabled": true
500
+
}
501
+
},
502
+
"sku": {
503
+
"name": "Standard_LRS",
504
+
"tier": "Standard"
505
+
},
506
+
"type": "Microsoft.Storage/storageAccounts/blobServices"
507
+
},
508
+
{
509
+
"apiVersion": "2025-01-01",
510
+
"dependsOn": [
511
+
"[resourceId('Microsoft.Storage/storageAccounts', parameters('storageAccounts_caremecache_name'))]"
512
+
],
513
+
"name": "[concat(parameters('storageAccounts_caremecache_name'), '/default')]",
514
+
"properties": {
515
+
"cors": {
516
+
"corsRules": []
517
+
},
518
+
"protocolSettings": {
519
+
"smb": {}
520
+
},
521
+
"shareDeleteRetentionPolicy": {
522
+
"days": 7,
523
+
"enabled": true
524
+
}
525
+
},
526
+
"sku": {
527
+
"name": "Standard_RAGRS",
528
+
"tier": "Standard"
529
+
},
530
+
"type": "Microsoft.Storage/storageAccounts/fileServices"
531
+
},
532
+
{
533
+
"apiVersion": "2025-01-01",
534
+
"dependsOn": [
535
+
"[resourceId('Microsoft.Storage/storageAccounts', parameters('storageAccounts_caremetest_name'))]"
536
+
],
537
+
"name": "[concat(parameters('storageAccounts_caremetest_name'), '/default')]",
538
+
"properties": {
539
+
"cors": {
540
+
"corsRules": []
541
+
},
542
+
"protocolSettings": {
543
+
"smb": {}
544
+
},
545
+
"shareDeleteRetentionPolicy": {
546
+
"days": 7,
547
+
"enabled": true
548
+
}
549
+
},
550
+
"sku": {
551
+
"name": "Standard_LRS",
552
+
"tier": "Standard"
553
+
},
554
+
"type": "Microsoft.Storage/storageAccounts/fileServices"
555
+
},
556
+
{
557
+
"apiVersion": "2025-01-01",
558
+
"dependsOn": [
559
+
"[resourceId('Microsoft.Storage/storageAccounts', parameters('storageAccounts_caremecache_name'))]"
560
+
],
561
+
"name": "[concat(parameters('storageAccounts_caremecache_name'), '/default')]",
562
+
"properties": {
563
+
"cors": {
564
+
"corsRules": []
565
+
}
566
+
},
567
+
"type": "Microsoft.Storage/storageAccounts/queueServices"
568
+
},
569
+
{
570
+
"apiVersion": "2025-01-01",
571
+
"dependsOn": [
572
+
"[resourceId('Microsoft.Storage/storageAccounts', parameters('storageAccounts_caremetest_name'))]"
573
+
],
574
+
"name": "[concat(parameters('storageAccounts_caremetest_name'), '/default')]",
575
+
"properties": {
576
+
"cors": {
577
+
"corsRules": []
578
+
}
579
+
},
580
+
"type": "Microsoft.Storage/storageAccounts/queueServices"
581
+
},
582
+
{
583
+
"apiVersion": "2025-01-01",
584
+
"dependsOn": [
585
+
"[resourceId('Microsoft.Storage/storageAccounts', parameters('storageAccounts_caremecache_name'))]"
586
+
],
587
+
"name": "[concat(parameters('storageAccounts_caremecache_name'), '/default')]",
588
+
"properties": {
589
+
"cors": {
590
+
"corsRules": []
591
+
}
592
+
},
593
+
"type": "Microsoft.Storage/storageAccounts/tableServices"
594
+
},
595
+
{
596
+
"apiVersion": "2025-01-01",
597
+
"dependsOn": [
598
+
"[resourceId('Microsoft.Storage/storageAccounts', parameters('storageAccounts_caremetest_name'))]"
599
+
],
600
+
"name": "[concat(parameters('storageAccounts_caremetest_name'), '/default')]",
601
+
"properties": {
602
+
"cors": {
603
+
"corsRules": []
604
+
}
605
+
},
606
+
"type": "Microsoft.Storage/storageAccounts/tableServices"
607
+
},
608
+
{
609
+
"apiVersion": "2025-01-01",
610
+
"dependsOn": [
611
+
"[resourceId('Microsoft.Storage/storageAccounts/blobServices', parameters('storageAccounts_caremecache_name'), 'default')]",
612
+
"[resourceId('Microsoft.Storage/storageAccounts', parameters('storageAccounts_caremecache_name'))]"
613
+
],
614
+
"name": "[concat(parameters('storageAccounts_caremecache_name'), '/default/logs')]",
615
+
"properties": {
616
+
"defaultEncryptionScope": "$account-encryption-key",
617
+
"denyEncryptionScopeOverride": false,
618
+
"immutableStorageWithVersioning": {
619
+
"enabled": false
620
+
},
621
+
"publicAccess": "None"
622
+
},
623
+
"type": "Microsoft.Storage/storageAccounts/blobServices/containers"
624
+
},
625
+
{
626
+
"apiVersion": "2025-01-01",
627
+
"dependsOn": [
628
+
"[resourceId('Microsoft.Storage/storageAccounts/blobServices', parameters('storageAccounts_caremecache_name'), 'default')]",
629
+
"[resourceId('Microsoft.Storage/storageAccounts', parameters('storageAccounts_caremecache_name'))]"
630
+
],
631
+
"name": "[concat(parameters('storageAccounts_caremecache_name'), '/default/recipes')]",
632
+
"properties": {
633
+
"defaultEncryptionScope": "$account-encryption-key",
634
+
"denyEncryptionScopeOverride": false,
635
+
"immutableStorageWithVersioning": {
636
+
"enabled": false
637
+
},
638
+
"publicAccess": "None"
639
+
},
640
+
"type": "Microsoft.Storage/storageAccounts/blobServices/containers"
641
+
}
642
+
],
643
+
"variables": {}
644
+
}
+315
infra/zebu.json
+315
infra/zebu.json
···
1
+
{
2
+
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
3
+
"contentVersion": "1.0.0.0",
4
+
"parameters": {
5
+
"managedClusters_zebu_name": {
6
+
"type": "String"
7
+
},
8
+
"userAssignedIdentities_zebu_agentpool_externalid": {
9
+
"type": "String"
10
+
},
11
+
"virtualNetworks_zebu_vnet_name": {
12
+
"type": "String"
13
+
}
14
+
},
15
+
"resources": [
16
+
{
17
+
"apiVersion": "2024-07-01",
18
+
"location": "westus3",
19
+
"name": "[parameters('virtualNetworks_zebu_vnet_name')]",
20
+
"properties": {
21
+
"addressSpace": {
22
+
"addressPrefixes": [
23
+
"10.0.0.0/8"
24
+
]
25
+
},
26
+
"enableDdosProtection": false,
27
+
"privateEndpointVNetPolicies": "Disabled",
28
+
"subnets": [
29
+
{
30
+
"id": "[resourceId('Microsoft.Network/virtualNetworks/subnets', parameters('virtualNetworks_zebu_vnet_name'), 'default')]",
31
+
"name": "default",
32
+
"properties": {
33
+
"addressPrefix": "10.240.0.0/16",
34
+
"delegations": [],
35
+
"privateEndpointNetworkPolicies": "Disabled",
36
+
"privateLinkServiceNetworkPolicies": "Enabled",
37
+
"serviceEndpoints": [
38
+
{
39
+
"locations": [
40
+
"westus3",
41
+
"eastus"
42
+
],
43
+
"service": "Microsoft.Storage"
44
+
}
45
+
]
46
+
},
47
+
"type": "Microsoft.Network/virtualNetworks/subnets"
48
+
},
49
+
{
50
+
"id": "[resourceId('Microsoft.Network/virtualNetworks/subnets', parameters('virtualNetworks_zebu_vnet_name'), 'dns')]",
51
+
"name": "dns",
52
+
"properties": {
53
+
"addressPrefix": "10.241.0.0/28",
54
+
"delegations": [],
55
+
"privateEndpointNetworkPolicies": "Disabled",
56
+
"privateLinkServiceNetworkPolicies": "Enabled"
57
+
},
58
+
"type": "Microsoft.Network/virtualNetworks/subnets"
59
+
}
60
+
],
61
+
"virtualNetworkPeerings": []
62
+
},
63
+
"type": "Microsoft.Network/virtualNetworks"
64
+
},
65
+
{
66
+
"apiVersion": "2025-05-01",
67
+
"dependsOn": [
68
+
"[resourceId('Microsoft.Network/virtualNetworks/subnets', parameters('virtualNetworks_zebu_vnet_name'), 'default')]"
69
+
],
70
+
"identity": {
71
+
"type": "SystemAssigned"
72
+
},
73
+
"location": "westus3",
74
+
"name": "[parameters('managedClusters_zebu_name')]",
75
+
"properties": {
76
+
"addonProfiles": {
77
+
"azureKeyvaultSecretsProvider": {
78
+
"enabled": false
79
+
},
80
+
"azurepolicy": {
81
+
"enabled": false
82
+
},
83
+
"httpApplicationRouting": {
84
+
"enabled": false
85
+
}
86
+
},
87
+
"agentPoolProfiles": [
88
+
{
89
+
"count": 2,
90
+
"enableAutoScaling": false,
91
+
"enableEncryptionAtHost": false,
92
+
"enableFIPS": false,
93
+
"enableNodePublicIP": false,
94
+
"enableUltraSSD": false,
95
+
"kubeletDiskType": "OS",
96
+
"maxPods": 250,
97
+
"mode": "System",
98
+
"name": "main",
99
+
"orchestratorVersion": "1.33.6",
100
+
"osDiskSizeGB": 128,
101
+
"osDiskType": "Managed",
102
+
"osSKU": "Ubuntu",
103
+
"osType": "Linux",
104
+
"powerState": {
105
+
"code": "Running"
106
+
},
107
+
"scaleDownMode": "Delete",
108
+
"securityProfile": {
109
+
"enableSecureBoot": false,
110
+
"enableVTPM": false
111
+
},
112
+
"type": "VirtualMachineScaleSets",
113
+
"upgradeSettings": {
114
+
"maxSurge": "10%",
115
+
"maxUnavailable": "0",
116
+
"undrainableNodeBehavior": "Schedule"
117
+
},
118
+
"vmSize": "Standard_B2s_v2",
119
+
"vnetSubnetID": "[resourceId('Microsoft.Network/virtualNetworks/subnets', parameters('virtualNetworks_zebu_vnet_name'), 'default')]"
120
+
}
121
+
],
122
+
"autoUpgradeProfile": {
123
+
"upgradeChannel": "stable"
124
+
},
125
+
"azureMonitorProfile": {
126
+
"metrics": {
127
+
"enabled": false
128
+
}
129
+
},
130
+
"bootstrapProfile": {
131
+
"artifactSource": "Direct"
132
+
},
133
+
"disableLocalAccounts": false,
134
+
"dnsPrefix": "[concat(parameters('managedClusters_zebu_name'), '-dns')]",
135
+
"enableRBAC": true,
136
+
"identityProfile": {
137
+
"kubeletidentity": {
138
+
"clientId": "eed6c37c-24b2-4b76-980a-8453ff1b12bd",
139
+
"objectId": "687a9a3d-7a14-403a-b885-730dccfe7c6d",
140
+
"resourceId": "[parameters('userAssignedIdentities_zebu_agentpool_externalid')]"
141
+
}
142
+
},
143
+
"kubernetesVersion": "1.33.6",
144
+
"metricsProfile": {
145
+
"costAnalysis": {
146
+
"enabled": false
147
+
}
148
+
},
149
+
"networkProfile": {
150
+
"dnsServiceIP": "10.0.0.10",
151
+
"ipFamilies": [
152
+
"IPv4"
153
+
],
154
+
"loadBalancerProfile": {
155
+
"backendPoolType": "nodeIPConfiguration",
156
+
"managedOutboundIPs": {
157
+
"count": 1
158
+
}
159
+
},
160
+
"loadBalancerSku": "standard",
161
+
"networkDataplane": "cilium",
162
+
"networkPlugin": "azure",
163
+
"networkPluginMode": "overlay",
164
+
"networkPolicy": "cilium",
165
+
"outboundType": "loadBalancer",
166
+
"podCidr": "192.168.0.0/16",
167
+
"podCidrs": [
168
+
"192.168.0.0/16"
169
+
],
170
+
"serviceCidr": "10.0.0.0/16",
171
+
"serviceCidrs": [
172
+
"10.0.0.0/16"
173
+
]
174
+
},
175
+
"nodeProvisioningProfile": {
176
+
"defaultNodePools": "Auto",
177
+
"mode": "Manual"
178
+
},
179
+
"nodeResourceGroup": "[concat('MC_', parameters('managedClusters_zebu_name'), '_', parameters('managedClusters_zebu_name'), '_westus3')]",
180
+
"oidcIssuerProfile": {
181
+
"enabled": false
182
+
},
183
+
"securityProfile": {},
184
+
"servicePrincipalProfile": {
185
+
"clientId": "msi"
186
+
},
187
+
"storageProfile": {
188
+
"diskCSIDriver": {
189
+
"enabled": true
190
+
},
191
+
"fileCSIDriver": {
192
+
"enabled": true
193
+
},
194
+
"snapshotController": {
195
+
"enabled": true
196
+
}
197
+
},
198
+
"supportPlan": "KubernetesOfficial",
199
+
"windowsProfile": {
200
+
"adminUsername": "azureuser",
201
+
"enableCSIProxy": true
202
+
},
203
+
"workloadAutoScalerProfile": {}
204
+
},
205
+
"sku": {
206
+
"name": "Base",
207
+
"tier": "Free"
208
+
},
209
+
"type": "Microsoft.ContainerService/managedClusters"
210
+
},
211
+
{
212
+
"apiVersion": "2024-07-01",
213
+
"dependsOn": [
214
+
"[resourceId('Microsoft.Network/virtualNetworks', parameters('virtualNetworks_zebu_vnet_name'))]"
215
+
],
216
+
"name": "[concat(parameters('virtualNetworks_zebu_vnet_name'), '/default')]",
217
+
"properties": {
218
+
"addressPrefix": "10.240.0.0/16",
219
+
"delegations": [],
220
+
"privateEndpointNetworkPolicies": "Disabled",
221
+
"privateLinkServiceNetworkPolicies": "Enabled",
222
+
"serviceEndpoints": [
223
+
{
224
+
"locations": [
225
+
"westus3",
226
+
"eastus"
227
+
],
228
+
"service": "Microsoft.Storage"
229
+
}
230
+
]
231
+
},
232
+
"type": "Microsoft.Network/virtualNetworks/subnets"
233
+
},
234
+
{
235
+
"apiVersion": "2024-07-01",
236
+
"dependsOn": [
237
+
"[resourceId('Microsoft.Network/virtualNetworks', parameters('virtualNetworks_zebu_vnet_name'))]"
238
+
],
239
+
"name": "[concat(parameters('virtualNetworks_zebu_vnet_name'), '/dns')]",
240
+
"properties": {
241
+
"addressPrefix": "10.241.0.0/28",
242
+
"delegations": [],
243
+
"privateEndpointNetworkPolicies": "Disabled",
244
+
"privateLinkServiceNetworkPolicies": "Enabled"
245
+
},
246
+
"type": "Microsoft.Network/virtualNetworks/subnets"
247
+
},
248
+
{
249
+
"apiVersion": "2025-05-01",
250
+
"dependsOn": [
251
+
"[resourceId('Microsoft.ContainerService/managedClusters', parameters('managedClusters_zebu_name'))]",
252
+
"[resourceId('Microsoft.Network/virtualNetworks/subnets', parameters('virtualNetworks_zebu_vnet_name'), 'default')]"
253
+
],
254
+
"name": "[concat(parameters('managedClusters_zebu_name'), '/main')]",
255
+
"properties": {
256
+
"count": 2,
257
+
"enableAutoScaling": false,
258
+
"enableEncryptionAtHost": false,
259
+
"enableFIPS": false,
260
+
"enableNodePublicIP": false,
261
+
"enableUltraSSD": false,
262
+
"kubeletDiskType": "OS",
263
+
"maxPods": 250,
264
+
"mode": "System",
265
+
"orchestratorVersion": "1.33.6",
266
+
"osDiskSizeGB": 128,
267
+
"osDiskType": "Managed",
268
+
"osSKU": "Ubuntu",
269
+
"osType": "Linux",
270
+
"powerState": {
271
+
"code": "Running"
272
+
},
273
+
"scaleDownMode": "Delete",
274
+
"securityProfile": {
275
+
"enableSecureBoot": false,
276
+
"enableVTPM": false
277
+
},
278
+
"type": "VirtualMachineScaleSets",
279
+
"upgradeSettings": {
280
+
"maxSurge": "10%",
281
+
"maxUnavailable": "0",
282
+
"undrainableNodeBehavior": "Schedule"
283
+
},
284
+
"vmSize": "Standard_B2s_v2",
285
+
"vnetSubnetID": "[resourceId('Microsoft.Network/virtualNetworks/subnets', parameters('virtualNetworks_zebu_vnet_name'), 'default')]"
286
+
},
287
+
"type": "Microsoft.ContainerService/managedClusters/agentPools"
288
+
},
289
+
{
290
+
"apiVersion": "2025-04-02-preview",
291
+
"dependsOn": [
292
+
"[resourceId('Microsoft.ContainerService/managedClusters/agentPools', parameters('managedClusters_zebu_name'), 'main')]",
293
+
"[resourceId('Microsoft.ContainerService/managedClusters', parameters('managedClusters_zebu_name'))]"
294
+
],
295
+
"name": "[concat(parameters('managedClusters_zebu_name'), '/main/aks-main-11118102-vmss000000')]",
296
+
"properties": {
297
+
"network": {}
298
+
},
299
+
"type": "Microsoft.ContainerService/managedClusters/agentPools/machines"
300
+
},
301
+
{
302
+
"apiVersion": "2025-04-02-preview",
303
+
"dependsOn": [
304
+
"[resourceId('Microsoft.ContainerService/managedClusters/agentPools', parameters('managedClusters_zebu_name'), 'main')]",
305
+
"[resourceId('Microsoft.ContainerService/managedClusters', parameters('managedClusters_zebu_name'))]"
306
+
],
307
+
"name": "[concat(parameters('managedClusters_zebu_name'), '/main/aks-main-11118102-vmss000001')]",
308
+
"properties": {
309
+
"network": {}
310
+
},
311
+
"type": "Microsoft.ContainerService/managedClusters/agentPools/machines"
312
+
}
313
+
],
314
+
"variables": {}
315
+
}