Skip to content

Commit 18c7dbd

Browse files
v-thprav-thpra
committed
art5-1
1 parent 4f8aadb commit 18c7dbd

1 file changed

Lines changed: 24 additions & 24 deletions

File tree

‎articles/service-connector/tutorial-python-aks-openai-workload-identity.md‎

Lines changed: 24 additions & 24 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
---
22
title: "Tutorial: Connect AKS to Azure OpenAI with Service Connector and Workload Identity"
33
titleSuffix: Service Connector
4-
description: "Complete step-by-step guide: Connect Azure Kubernetes Service (AKS) to Azure OpenAI using Service Connector with workload identity authentication"
4+
description: "Complete step-by-step guide: Connect Azure Kubernetes Service (AKS) to Azure OpenAI using Service Connector with workload identity authentication."
55
#customer intent: As a developer, I want to connect my AKS resource to Azure OpenAI.
66
author: maud-lv
77
ms.author: malev
@@ -22,12 +22,12 @@ You'll complete the following tasks:
2222

2323
> [!div class="checklist"]
2424
>
25-
> * Create an AKS cluster and Azure OpenAI resource with GPT-4 model
26-
> * Configure Service Connector to establish the connection with workload identity
27-
> * Clone a sample application
28-
> * Build and push container images to Azure Container Registry
29-
> * Deploy the application to AKS and verify the connection
30-
> * Clean up resources
25+
> * Create an AKS cluster and Azure OpenAI resource with GPT-4 model.
26+
> * Configure Service Connector to establish the connection with workload identity.
27+
> * Clone a sample application.
28+
> * Build and push container images to Azure Container Registry.
29+
> * Deploy the application to AKS and verify the connection.
30+
> * Clean up resources.
3131
3232
## Prerequisites
3333

@@ -68,7 +68,7 @@ You start this tutorial by creating several Azure resources.
6868
--name MyAKSCluster
6969
```
7070
71-
1. Create an Azure OpenAI resource using the [az cognitiveservices account create](/cli/azure/cognitiveservices/account#az-cognitiveservices-account-create) command. Optionally refer to [this tutorial](/azure/ai-services/openai/how-to/create-resource) for more instructions. Azure OpenAI is the target service that the AKS cluster will connect to.
71+
1. Create an Azure OpenAI resource using the [az cognitiveservices account create](/cli/azure/cognitiveservices/account#az-cognitiveservices-account-create) command. Optionally refer to [this tutorial](/azure/ai-services/openai/how-to/create-resource) for more instructions. Azure OpenAI is the target service that the AKS cluster connects to.
7272
7373
```azurecli
7474
az cognitiveservices account create \
@@ -104,7 +104,7 @@ You start this tutorial by creating several Azure resources.
104104
--sku Standard
105105
```
106106
107-
1. Enable anonymous pull using [az acr update](/cli/azure/acr#az-acr-update) command so that the AKS cluster can consume the images in the registry.
107+
1. Enable anonymous pull using the [az acr update](/cli/azure/acr#az-acr-update) command so that the AKS cluster can consume the images in the registry.
108108
109109
```azurecli-interactive
110110
az acr update \
@@ -131,22 +131,22 @@ Refer to the [AKS service connection quickstart](quickstart-portal-aks-connectio
131131
132132
1. Basics tab:
133133
134-
| Setting | Example value | Description |
135-
|---------------------|-------------------| ------------------------------------------------------------------------------------------|
136-
| **Kubernetes namespace** | *default* | The Kubernetes namespace. |
137-
| **Service type** | *OpenAI Service* | The target service type. |
138-
| **Connection name** | *openai_conn* | Use the connection name provided by Service Connector or choose your own connection name. |
139-
| **Subscription** | *My Subscription* | The Azure subscription containing your Azure OpenAI resource. |
140-
| **OpenAI** | *MyOpenAI* | The target Azure OpenAI resource you want to connect to. |
141-
| **Client type** | *Python* | The programming language or framework for the connection configuration. |
134+
| Setting | Example value | Description |
135+
|---------------------|-------------------| ------------------------------------------------------------------------------------------|
136+
| **Kubernetes namespace** | *default* | The Kubernetes namespace. |
137+
| **Service type** | *OpenAI Service* | The target service type. |
138+
| **Connection name** | *openai_conn* | Use the connection name provided by Service Connector or choose your own connection name. |
139+
| **Subscription** | *My Subscription* | The Azure subscription containing your Azure OpenAI resource. |
140+
| **OpenAI** | *MyOpenAI* | The target Azure OpenAI resource you want to connect to. |
141+
| **Client type** | *Python* | The programming language or framework for the connection configuration. |
142142
143143
1. Authentication tab:
144144
145-
| Authentication Setting | Example value | Description |
146-
|--------------------------------|---------------------|-------------------------------------------------------------------------|
147-
| **Authentication type** | *Workload Identity* | The authentication method to connect the app to Azure OpenAI. Workload identity is recommended for enhanced security. Alternative methods include connection string and service principal, and require credential management considerations. |
148-
| **Subscription** | *My Subscription* | The subscription that contains the user-assigned managed identity. |
149-
| **User assigned managed identity** | *myidentity* | The user-assigned managed identity that enables workload identity authentication for the AKS cluster. |
145+
| Authentication Setting | Example value | Description |
146+
|--------------------------------|---------------------|-------------------------------------------------------------------------|
147+
| **Authentication type** | *Workload Identity* | The authentication method to connect the app to Azure OpenAI. Workload identity is recommended for enhanced security. Alternative methods include connection string and service principal, and require credential management considerations. |
148+
| **Subscription** | *My Subscription* | The subscription that contains the user-assigned managed identity. |
149+
| **User assigned managed identity** | *myidentity* | The user-assigned managed identity that enables workload identity authentication for the AKS cluster. |
150150
151151
Once the connection is created, you can view its details in the **Service Connector** pane.
152152
@@ -159,7 +159,7 @@ az aks connection create cognitiveservices \
159159
--workload-identity <user-identity-resource-id>
160160
```
161161

162-
When using the above command, Service Connector prompts you to specify the AKS resource group, AKS cluster name, target service resource group, cognitive service account name, and user-assigned identity resource ID step by step.
162+
When you use the preceding command, Service Connector prompts you step by step to specify the AKS resource group, AKS cluster name, target service resource group, cognitive service account name, and user-assigned identity resource ID.
163163

164164
Alternatively, you can provide the complete command directly:
165165

@@ -211,7 +211,7 @@ az aks connection create cognitiveservices \
211211
212212
1. Replace the placeholders in the `pod.yaml` file in the `azure-openai-workload-identity` folder.
213213
214-
* Replace `<YourContainerImage>` with the name of the image you built earlier. For example `<myregistry>.azurecr.io/<sc-demo-openai-identity>:<latest>`.
214+
* Replace `<YourContainerImage>` with the name of the image you built earlier. For example, `<myregistry>.azurecr.io/<sc-demo-openai-identity>:<latest>`.
215215
* Replace `<ServiceAccountCreatedByServiceConnector>` with the service account name. It can be found in the Azure portal, in the **Service Connector** pane.
216216
* Replace `<SecretCreatedByServiceConnector>` with the secret name. It can be found in the Azure portal, in the **Service Connector** pane.
217217

0 commit comments

Comments
 (0)