/

/azure-prepare

351

Prepare azd-based Azure projects for deployment: generates azure.yaml, infrastructure (Bicep/Terraform), and Dockerfiles for the Azure Developer CLI (azd) workflow. USE ONLY when the user explicitly wants to use azd as the deployment tool, or the project already has an azure.yaml file. DO NOT USE FOR: non-azd deployments, Python App Service code-only deploys (use python-appservice-deploy), or cross-cloud migration (use azure-cloud-migrate). WHEN: prepare app for azd, create azure.yaml, set up azd infrastructure, modernize app for Azure with azd, deploy with azd, function app, timer trigger, service bus trigger, event-driven function, managed identity, generate Bicep, generate Terraform, create and deploy to Azure.

166 files
556.7 KB
MIT
Updated last week
GitHub
2 warnings

Ask your Agent

Use this Skill: https://skilld.dev/gh/microsoft/skills/azure-prepare

This session only. Nothing lands on disk.

referencesservicesaksaddons.md

1015 B raw

≈254 tokens on demand. Your agent reads this file only when SKILL.md points to it.

AKS - Add-ons

Container Monitoring

addonProfiles: {
  omsagent: {
    enabled: true
    config: {
      logAnalyticsWorkspaceResourceID: logAnalytics.id
    }
  }
}

Azure CNI Networking

networkProfile: {
  networkPlugin: 'azure'
  networkPolicy: 'calico'
}

Azure Key Vault Provider

addonProfiles: {
  azureKeyvaultSecretsProvider: {
    enabled: true
    config: {
      enableSecretRotation: 'true'
    }
  }
}

Application Gateway Ingress Controller

addonProfiles: {
  ingressApplicationGateway: {
    enabled: true
    config: {
      applicationGatewayId: appGateway.id
    }
  }
}

Add-ons Summary

Add-on	Purpose
omsagent	Container Insights monitoring
azureKeyvaultSecretsProvider	Mount Key Vault secrets as volumes
ingressApplicationGateway	Application Gateway as ingress controller
azurepolicy	Azure Policy for Kubernetes

Source: SKILL.md on GitHub

Third-party checks

2 warnings3d4 checks · Risk SAFE

Gen Agent Trust Hub3d
This skill includes security considerations related to the processing of untrusted project files and the retrieval of external development templates. While these operations are essential for modernizing and preparing Azure applications, they represent a surface area for indirect prompt injection and depend on the integrity of external template repositories.
Socket3d
5 alerts: gptAnomaly, gptSecurity
Snyk3d
Risk: LOW · No issues
Runlayer7mo
86/87 files flagged

Provenance

Signed by skilld at b8a1c66. This ties the file your Agent reads to that commit on GitHub. It does not review the instructions.

Last checked against GitHub 20 hours ago.

Activeupdated last week

Capability

metadata: { "author": "Microsoft", "version": "1.3.4" }