|
|
Customer-hosted Codebeamer AI is supported only on an Azure tenant.
|

cb-ai-chd-infra-<version>.zip
│
├── readme_chd_infra.txt ← Release notes & setup instructions
└── terraform/
├── deployment-profiles/
│ ├── infra-templates/ ← Platform stack — root module (infra provisioning)
│ │ ├── main.tf ← Module wiring: RG, VNet, AKS, OpenAI, monitoring
│ │ ├── variables.tf ← Input variables (resource_group_name is required)
│ │ ├── outputs.tf ← All outputs (AKS, networking, identity, OpenAI…)
│ │ ├── providers.tf ← Provider config (azurerm, azuread, kubernetes…)
│ │ ├── backend.conf ← Remote state backend (Azure Storage)
│ │ └── infra.tfvars.template ← Sample variable values — copy to infra.tfvars
│ └── policy-templates/ ← Governance stack — root module (Azure Policy)
│ ├── main.tf ← Policy definitions → initiative → assignment → exemption
│ ├── variables.tf ← Policy-specific inputs (effects, allowed SKUs, CIDRs…)
│ ├── providers.tf ← Provider config (azurerm)
│ ├── backend.conf ← Remote state backend (separate state file)
│ └── policy.tfvars.template ← Sample variable values — copy to policy.tfvars
├── modules/
│ ├── aks/ ← Azure Kubernetes Service cluster
│ ├── app_registration/ ← Azure AD App Registration + Service Principal (optional)
│ ├── cognitive/ ← Azure OpenAI Cognitive Services account
│ │ ├── deployment/ ← OpenAI model deployments (GPT-5-mini, GPT-5-nano)
│ │ └── rai_policy/ ← Responsible AI content filter policy
│ ├── kubernetes/
│ │ └── namespace/ ← Kubernetes namespace for workload identity
│ ├── managed_identity/ ← User-assigned managed identity
│ │ └── fed_credential/ ← Federated identity credential (workload identity)
│ ├── monitoring/
│ │ ├── diagnostic_settings/ ← Diagnostic settings → Log Analytics
│ │ └── log_analytics/ ← Log Analytics workspace + ContainerInsights
│ ├── network/ ← Virtual Network + flow logs
│ │ ├── nsg/ ← Network Security Group + subnet association
│ │ ├── private_dns_zone/ ← Private DNS zone (privatelink.openai.azure.com)
│ │ │ └── virtual_network_link/ ← Links the DNS zone to the VNet
│ │ ├── private_endpoint/ ← Private endpoint for OpenAI account
│ │ └── subnet/ ← Subnets (AKS subnet, OpenAI subnet)
│ ├── policy/ ← Azure Policy modules (governance stack)
│ │ ├── definition/ ← Custom policy definition from JSON
│ │ ├── initiative/ ← Policy initiative (bundles definitions)
│ │ ├── set_assignment/ ← Policy assignment to resource group
│ │ └── exemption/ ← Temporary policy exemption (upgrade waiver)
│ └── role_assignment/ ← Azure RBAC role assignment
└── policies/ ← Policy rule library (JSON definitions)
├── Cognitive Services/
├── General/
├── Identity/
├── Kubernetes/
└── Network/
cb-ai-chd-service-<version>.zip
│
├── readme-chd.txt ← Release notes & deployment instructions
├── cb-ai-chd-service-<version>.tar.gz ← Docker image
│
├── helm-chd/ ← Codebeamer AI service Helm chart
│ ├── Chart.yaml ← Chart metadata (name, version, appVersion)
│ ├── values.yaml ← Default values
│ ├── values-azure-customer-hosted.yaml ← Customer-hosted Azure overrides
│ └── templates/ ← Kubernetes manifest templates
│
└── helm-otel-chd/ ← Observability stack Helm chart (OpenTelemetry)
├── Chart.yaml ← Chart metadata
├── .helmignore ← Helm ignore patterns
├── README.md ← Observability stack documentation
├── values.yaml ← Default values
├── values-azure.yaml ← Azure-specific overrides
└── templates/ ← Kubernetes manifest templates