Azure Deployment

Azure Deployment Skill

This skill provides guidance for deploying the Foundry Agent Accelerator to Azure.

Deployment Options

Option 1: Azure Developer CLI (Recommended)

# Initialize (first time only)
azd init

# Deploy everything
azd up

Option 2: Manual Docker Deployment

Step 1: Build Docker Image

cd src

# Build the image
docker build -t foundry-agent-accelerator:latest .

# Tag for your registry
docker tag foundry-agent-accelerator:latest <your-acr>.azurecr.io/foundry-agent-accelerator:latest

Step 2: Push to Azure Container Registry

# Login to ACR
az acr login --name <your-acr>

# Push image
docker push <your-acr>.azurecr.io/foundry-agent-accelerator:latest

Step 3: Deploy to Container Apps

az containerapp create \
  --name foundry-agent \
  --resource-group <your-rg> \
  --environment <your-container-app-env> \
  --image <your-acr>.azurecr.io/foundry-agent-accelerator:latest \
  --target-port 8000 \
  --ingress external \
  --registry-server <your-acr>.azurecr.io \
  --env-vars \
    AZURE_EXISTING_AIPROJECT_ENDPOINT=<your-endpoint> \
    AZURE_AI_CHAT_DEPLOYMENT_NAME=<your-model> \
    AZURE_AI_AGENT_NAME=<agent-name> \
    AGENT_CONFIG_SOURCE=local

Environment Variables

Managed Identity Setup

For production, use Managed Identity:

# Enable system-assigned managed identity
az containerapp identity assign \
  --name foundry-agent \
  --resource-group <your-rg> \
  --system-assigned

# Get identity principal ID
PRINCIPAL_ID=$(az containerapp identity show \
  --name foundry-agent \
  --resource-group <your-rg> \
  --query principalId -o tsv)

# Assign role to Foundry project
az role assignment create \
  --assignee $PRINCIPAL_ID \
  --role "Contributor" \
  --scope <foundry-project-resource-id>

Production Configuration

Enable Basic Auth

az containerapp update \
  --name foundry-agent \
  --resource-group <your-rg> \
  --set-env-vars \
    WEB_APP_USERNAME=admin \
    WEB_APP_PASSWORD=<secure-password>

Use Portal Mode

az containerapp update \
  --name foundry-agent \
  --resource-group <your-rg> \
  --set-env-vars \
    AGENT_CONFIG_SOURCE=portal

Scale Configuration

az containerapp update \
  --name foundry-agent \
  --resource-group <your-rg> \
  --min-replicas 1 \
  --max-replicas 10 \
  --cpu 0.5 \
  --memory 1Gi

Updating Deployments

# Build new image
docker build -t <your-acr>.azurecr.io/foundry-agent-accelerator:v2 .

# Push
docker push <your-acr>.azurecr.io/foundry-agent-accelerator:v2

# Update Container App
az containerapp update \
  --name foundry-agent \
  --resource-group <your-rg> \
  --image <your-acr>.azurecr.io/foundry-agent-accelerator:v2

Monitoring

View Logs

az containerapp logs show \
  --name foundry-agent \
  --resource-group <your-rg> \
  --follow

Check Health

URL=$(az containerapp show \
  --name foundry-agent \
  --resource-group <your-rg> \
  --query properties.configuration.ingress.fqdn -o tsv)

curl https://$URL/

Troubleshooting

Container won't start

• Check logs: az containerapp logs show ...
• Verify environment variables are set correctly
• Test image locally first with docker run

Authentication errors

• Enable managed identity
• Grant identity proper RBAC roles on Foundry project
• Verify network connectivity to Azure services

Health checks failing

• Ensure port 8000 is exposed
• Check the app starts successfully in logs
• Verify ingress is configured as external