mlops-azure-infrastructure-with-sp-creation
databricks/mlops-azure-infrastructure-with-sp-creation/databricks
This module sets up multi-workspace model registry between an Azure Databricks development (dev) workspace, staging workspace, and production (prod) workspace, allowing READ access from dev/staging workspaces to staging & prod model registries. It also creates the relevant Azure Active Directory (AAD) applications for the service principals.
MLOps Azure Infrastructure Module with Service Principal Creation This module sets up multi-workspace model registry between a development (dev) workspace, a staging workspace, and a production (prod) workspace, allowing READ access from dev/staging workspaces to staging & prod model registries. The module performs this setup by creating AAD applications and associating them with newly created Azure Databricks service principals in the staging and prod workspaces, then giving them READ-only access to their respective model registries. It will also create secret scopes and store the necessary secrets in the dev and staging workspaces, and only give READ access to this secret scope to the "users" group and the generated service principals group. The output of this module will be the secret s
| Name | Type | Description | Default |
|---|---|---|---|
| azure_tenant_id | string | The Azure tenant ID of the AAD subscription. Must match the one used for the Azu | |
| staging_workspace_id | string | Workspace ID of the staging workspace (can be often found in the URL) used for r | |
| prod_workspace_id | string | Workspace ID of the prod workspace (can be often found in the URL) used for remo | |
| additional_token_usage_groups | list(string) | List of groups that should have token usage permissions in the staging and prod | [] |
dev_secret_scope_name_for_staging — The name of the secret scope created in the dev workspace that is used for remote model registry accdev_secret_scope_name_for_prod — The name of the secret scope created in the dev workspace that is used for remote model registry accstaging_secret_scope_name_for_prod — The name of the secret scope created in the staging workspace that is used for remote model registrydev_secret_scope_prefix_for_staging — The prefix used in the dev workspace secret scope for remote model registry access to the staging wodev_secret_scope_prefix_for_prod — The prefix used in the dev workspace secret scope for remote model registry access to the prod worksstaging_secret_scope_prefix_for_prod — The prefix used in the staging workspace secret scope for remote model registry access to the prod wservice_principal_group_name — The name of the service principal group created in the staging and prod workspace.