docs(architect): weekly KB update — 52 files refreshed (2026-04)

Key content changes:
- MLOps: MLflow 3 scorers expanded (RetrievalRelevance, Fluency, multi-turn judges)
- MLflow 3 A/B eval: mirror_traffic GA confirmed, new scorer catalog
- CI/CD: OIDC auth replaces deprecated --sdk-auth (Azure ML GitHub Actions)
- Agent framework A2A: updated SDK patterns (A2ACardResolver, BearerAuth)
- AG-UI backend tool rendering: accurate TOOL_CALL_* event shapes
- Computer Use agents: US region requirement, credentials patterns
- Purview governance: bulk term edit, expire/delete workflows
- CAF AI Secure: 3-phase structure confirmed current
- Copilot Studio: Claude Sonnet 4.5/4.6 GA, new orchestration controls
- M365 manifest: v1.26 GA (April 2026), copilotAgents node
- Power Platform: agent flow capacity enforcement corrected
- Azure Monitor: Simple Log Alerts GA, AMBA for policy-based alerting
- Security Copilot: SCU capacity model (400 SCU/1000 users)
- EU Data Boundary: all EU + EFTA countries confirmed
- gateway-multi-backend: added 4th topology, subscription-level quota note

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
Kjell Tore Guttormsen 2026-04-10 11:31:11 +02:00
commit be4925a8ff
40 changed files with 398 additions and 239 deletions

View file

@ -1,7 +1,6 @@
# CI/CD Pipelines for Machine Learning Models
**Last updated:** 2026-02
**Verified:** MCP 2026-04
**Last updated:** 2026-04
**Status:** GA
**Category:** MLOps & GenAIOps
@ -290,8 +289,10 @@ Disse signalene indikerer at din ML CI/CD ikke er production-ready:
### GitHub Actions Integration
### GitHub Actions with Azure Machine Learning (2026 Update)
The recommended authentication approach is **OpenID Connect (OIDC) with federated credentials** — eliminates long-lived secrets.
### GitHub Actions with Azure Machine Learning (Verified MCP 2026-04)
The recommended authentication approach is **OpenID Connect (OIDC) with federated credentials** — eliminates long-lived secrets. Two options:
- **Option 1: Microsoft Entra application** — Create app registration, configure federated identity credential, assign role.
- **Option 2: User-assigned managed identity** — Create UAI, configure federated identity credential, assign role.
**Workflow structure** (`/.github/workflows/`):
```yaml
@ -300,6 +301,7 @@ permissions:
jobs:
build:
steps:
- uses: actions/checkout@v4
- uses: azure/login@v2
with:
client-id: ${{ secrets.AZURE_CLIENT_ID }}
@ -311,11 +313,13 @@ jobs:
**MLOps v2 GitHub setup** (recommended end-to-end):
1. Fork `Azure/mlops-v2-gha-demo` template repo
2. Set GitHub secrets: `ARM_CLIENT_ID`, `ARM_CLIENT_SECRET`, `ARM_SUBSCRIPTION_ID`, `ARM_TENANT_ID`
3. Deploy infrastructure via `tf-gha-deploy-infra.yml` workflow
3. Deploy infrastructure via `tf-gha-deploy-infra.yml` workflow (Terraform)
4. Run `deploy-model-training-pipeline` and `deploy-online-endpoint-pipeline` workflows
**Pipeline stages**: Prepare Data → Train Model → Evaluate Model → Register Model → Deploy Endpoint
**Note (2026-04):** The `--json-auth`/`--sdk-auth` parameters for `az ad sp create-for-rbac` are deprecated. New projects should use OIDC with federated credentials instead.
**Setup:**
- Opprett `.github/workflows/` directory i repo
@ -666,7 +670,7 @@ CI/CD pipelines for ML krever compute for training og deployment:
1. **Use GitHub Actions with Azure Machine Learning**
https://learn.microsoft.com/en-us/azure/machine-learning/how-to-github-actions-machine-learning
(Status: Verified 2026-02, fullstendig guide til GitHub Actions + Azure ML CLI v2)
(Status: Verified MCP 2026-04 — OIDC recommended; supports Entra app or user-assigned managed identity)
2. **MLOps and GenAIOps for AI workloads on Azure**
https://learn.microsoft.com/en-us/azure/well-architected/ai/mlops-genaiops
@ -674,7 +678,7 @@ CI/CD pipelines for ML krever compute for training og deployment:
3. **Set up MLOps with GitHub**
https://learn.microsoft.com/en-us/azure/machine-learning/how-to-setup-mlops-github-azure-ml
(Status: Verified 2026-02, end-to-end MLOps setup med GitHub Actions)
(Status: Verified MCP 2026-04 — uses mlops-v2-gha-demo accelerator; --json-auth deprecated, OIDC recommended)
4. **How does Databricks support CI/CD for machine learning?**
https://learn.microsoft.com/en-us/azure/databricks/machine-learning/mlops/ci-cd-for-ml