Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion infra/DEPLOY_NEW_INSTANCE.md
Original file line number Diff line number Diff line change
Expand Up @@ -24,7 +24,7 @@ within an instance. The trust boundary is Entra group membership.
| `az login` with Graph permissions | The script creates Entra app registrations, which requires Graph API access. Run `az login --scope https://graph.microsoft.com//.default` |
| Azure permissions | **Owner** (or Contributor + User Access Administrator) on the subscription, and **Application Administrator** in Entra ID for app registrations and Graph API operations |
| Container image pushed to ACR | Build and push before deploying (see [Building the Image](#building-the-image)) |
| A `.env` file with runtime config | Copy and fill in `infra/env.demo.template`. Contains target endpoints and content safety config. `AZURE_SQL_DB_CONNECTION_STRING` and `AZURE_STORAGE_ACCOUNT_DB_DATA_CONTAINER_URL` are auto-injected by the script — you can omit them. Required for the default `target, airt` initializer. Targets can also be created manually in the GUI if deploying with the `target` initializer only |
| A `.env` file with runtime config | Copy and fill in `infra/env.demo.template`. Contains target endpoints and content safety config. `AZURE_SQL_DB_CONNECTION_STRING` and `AZURE_STORAGE_ACCOUNT_DB_DATA_CONTAINER_URL` are auto-injected by the script — you can omit them. Required for the default `target` initializer. Targets can also be created manually in the GUI if deploying with the `target` initializer only |

### What the script creates (per-instance)

Expand Down
2 changes: 1 addition & 1 deletion infra/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -419,7 +419,7 @@ needed in the container.

| .pyrit_conf field | Bicep param | Env var | Notes |
|-------------------|-------------|---------|-------|
| `initializers` | `pyritInitializer` | `PYRIT_INITIALIZER` | Default `target, airt`: `target` populates the TargetRegistry (read by the GUI); `airt` loads converter, scorer, and adversarial defaults |
| `initializers` | `pyritInitializer` | `PYRIT_INITIALIZER` | Default `target`: `target` populates the TargetRegistry (read by the GUI);|
| `operator` | — | Set per-user in the GUI | |
| `operation` | — | Set per-user in the GUI | |

Expand Down
4 changes: 2 additions & 2 deletions infra/main.bicep
Original file line number Diff line number Diff line change
Expand Up @@ -68,8 +68,8 @@ param sqlDatabaseName string
// Note: operator and operation are per-user settings configured in the GUI,
// not deployment-level config.

@description('PyRIT initializer to run. Default "target, airt" registers target configs + attack defaults.')
param pyritInitializer string = 'target, airt'
@description('PyRIT initializer to run. Default "target" registers target configs.')
param pyritInitializer string = 'target'

@description('Key Vault secret name containing the .env file contents (all endpoints, models, and API keys). The secret is mounted as an env var and PyRIT parses it at startup.')
param envSecretName string = 'env-global'
Expand Down
2 changes: 1 addition & 1 deletion infra/parameters.demo.json
Original file line number Diff line number Diff line change
Expand Up @@ -29,7 +29,7 @@
"value": "REPLACE_SQL_DATABASE"
},
"pyritInitializer": {
"value": "target, airt"
"value": "target"
},
"envFileContents": {
"value": "PYRIT_REPLACE_ME=set-via-secure-channel"
Expand Down
2 changes: 1 addition & 1 deletion infra/parameters.example.json
Original file line number Diff line number Diff line change
Expand Up @@ -27,7 +27,7 @@
"value": "YOUR_DATABASE_NAME"
},
"pyritInitializer": {
"value": "target, airt"
"value": "target"
},
"envSecretName": {
"value": "env-global"
Expand Down
Loading