deployAzureResources.ps1

# Copyright (c) Microsoft Corporation.
# Licensed under the MIT license.

param(
    [Parameter(Mandatory= $True,
               HelpMessage='Enter the Azure subscription ID to deploy your resources')]
    [string]
    $subscriptionID = '',

    [Parameter(Mandatory=$True, 
               HelpMessage='Enter the Azure Data Center Region to deploy your resources')]
    [ValidateSet(
        'EastUS', 'EastUS2', 'WestUS', 'WestUS2', 'WestUS3', 'CentralUS', 'NorthCentralUS', 'SouthCentralUS', 
        'WestEurope', 'NorthEurope', 'SoutheastAsia', 'EastAsia', 'JapanEast', 'JapanWest', 
        'AustraliaEast', 'AustraliaSoutheast', 'CentralIndia', 'SouthIndia', 'CanadaCentral', 
        'CanadaEast', 'UKSouth', 'UKWest', 'FranceCentral', 'FranceSouth', 'KoreaCentral', 
        'KoreaSouth', 'GermanyWestCentral', 'GermanyNorth', 'NorwayWest', 'NorwayEast', 
        'SwitzerlandNorth', 'SwitzerlandWest', 'UAENorth', 'UAECentral', 'SouthAfricaNorth', 
        'SouthAfricaWest', 'BrazilSouth', 'BrazilSoutheast', 'QatarCentral', 'ChinaNorth', 
        'ChinaEast', 'ChinaNorth2', 'ChinaEast2'
    )]
    [string]
    $location = '',

    [Parameter(Mandatory=$True, 
               HelpMessage='Enter Your Email address for the certificate management')]
    [string]
    $email = '',

    [Parameter(Mandatory=$True, 
               HelpMessage='Enter an IP range as comma separated list of CIDRs to allow access to the services')]
    [string]
    $ipRange = ''
)

function LoginAzure([string]$subscriptionID) {
        Write-Host "Log in to Azure.....`r`n" -ForegroundColor Yellow
        az login
        az account set --subscription $subscriptionID
        Write-Host "Switched subscription to '$subscriptionID' `r`n" -ForegroundColor Yellow
}

function DeployAzureResources([string]$location) {
    Write-Host "Started Deploying ESG AI Document Analysis Service Azure resources.....`r`n" -ForegroundColor Yellow
    
    try {
        # Generate a random number between 0 and 99999
        $randomNumber = Get-Random -Minimum 0 -Maximum 99999
        # Pad the number with leading zeros to ensure it is 5 digits long
        $randomNumberPadded = $randomNumber.ToString("D5")
        # Make deployment name unique by appending random number
        $deploymentResult = az deployment sub create --template-file ..\bicep\main_services.bicep -l $location -n "ESG_Document_Analysis_Deployment$randomNumberPadded"

        $joinedString = $deploymentResult -join "" 
        $jsonString = ConvertFrom-Json $joinedString 
        
        return $jsonString
    } catch {
        Write-Host "An error occurred during the deployment process:" -ForegroundColor Red
        Write-Host $_.Exception.Message -ForegroundColor Red
        Write-Host $_.InvocationInfo.PositionMessage -ForegroundColor Red
        Write-Host $_.ScriptStackTrace -ForegroundColor Red
        exit 1
    }
}

function DisplayResult([pscustomobject]$jsonString) {
    $resourcegroupName = $jsonString.properties.outputs.gs_resourcegroup_name.value
    $storageAccountName = $jsonString.properties.outputs.gs_storageaccount_name.value
    $azsearchServiceName = $jsonString.properties.outputs.gs_azsearch_name.value
    $logicAppDocumentProcessWatcherName = $jsonString.properties.outputs.gs_logicapp_docregistprocesswatcher_name.value
    $logicAppBenchmarkProcessWatcherName = $jsonString.properties.outputs.gs_logicapp_benchmarkprocesswatcher_name.value
    $logicAppGapAnalysisProcessWatcherName = $jsonString.properties.outputs.gs_logicapp_ProcessWatcher_name.value
    $aksName = $jsonString.properties.outputs.gs_aks_name.value
    $containerRegistryName = $jsonString.properties.outputs.gs_containerregistry_name.value
    $azcognitiveserviceName = $jsonString.properties.outputs.gs_azcognitiveservice_name.value
    $azopenaiServiceName = $jsonString.properties.outputs.gs_openaiservice_name.value
    $azcosmosDBName = $jsonString.properties.outputs.gs_cosmosdb_name.value
    
    $azLogicAppDocumentRegistProcessWatcherUrl = $jsonString.properties.outputs.gs_logicapp_docregistprocesswatcher_endpoint.value
    $azLogicAppBenchmarkProcessWatcherUrl = $jsonString.properties.outputs.gs_logicapp_benchmarkprocesswatcher_endpoint.value
    $azLogicAppGapAnalysisProcessWatcherUrl = $jsonString.properties.outputs.gs_logicapp_docregistprocesswatcher_endpoint.value
    
    
    Write-Host "--------------------------------------------`r`n" -ForegroundColor White
    Write-Host "Deployment output: `r`n" -ForegroundColor White
    Write-Host "Subscription Id: $subscriptionID `r`n" -ForegroundColor Yellow
    Write-Host "ESG AI Document Analysis resource group: $resourcegroupName `r`n" -ForegroundColor Yellow
    Write-Host "Azure Kubernetes Account $aksName has been created" -ForegroundColor Yellow
    Write-Host "Azure Container Registry $containerRegistryName has been created" -ForegroundColor Yellow
    Write-Host "Azure Search Service $azsearchServiceName has been created" -ForegroundColor Yellow
    Write-Host "Azure Open AI Service $azopenaiServiceName has been created" -ForegroundColor Yellow
    Write-Host "Azure Cognitive Service $azcognitiveserviceName has been created" -ForegroundColor Yellow
    Write-Host "Azure Stroage Account $storageAccountName has been created" -ForegroundColor Yellow 
    Write-Host "Azure Cosmos DB $azcosmosDBName has been created " -ForegroundColor Yellow
    Write-Host "Document Registration Process Watcher Logic App $logicAppDocumentProcessWatcherName has been deployed " -ForegroundColor Yellow
    Write-Host "($azLogicAppDocumentRegistProcessWatcherUrl) " -ForegroundColor Yellow
    Write-Host "Benchmark Process Watcher $logicAppBenchmarkProcessWatcherName has been deployed" -ForegroundColor Yellow
    Write-Host "($azLogicAppBenchmarkProcessWatcherUrl) " -ForegroundColor Yellow
    Write-Host "GapAnalysis Process Watcher $logicAppGapAnalysisProcessWatcherName has been deployed" -ForegroundColor Yellow
    Write-Host "($azLogicAppGapAnalysisProcessWatcherUrl) " -ForegroundColor Yellow
    Write-Host "--------------------------------------------`r`n" -ForegroundColor White
}


class DeploymentResult {
    [string]$ResourceGroupName
    [string]$StorageAccountName
    [string]$StorageAccountConnectionString
    [string]$AzSearchServiceName
    [string]$AzSearchServicEndpoint
    [string]$AzSearchAdminKey
    [string]$LogicAppDocumentProcessWatcherName
    [string]$LogicAppBenchmarkProcessWatcherName
    [string]$LogicAppGapAnalysisProcessWatcherName
    [string]$AzLogicAppDocumentRegistProcessWatcherUrl
    [string]$AzLogicAppBenchmarkProcessWatcherUrl
    [string]$AzLogicAppGapAnalysisProcessWatcherUrl
    [string]$AksName
    [string]$ContainerRegistryName
    [string]$AzCognitiveServiceName
    [string]$AzCognitiveServiceKey
    [string]$AzCognitiveServiceEndpoint
    [string]$AzOpenAiServiceName
    [string]$AzGPT4oModelName
    [string]$AzGPT4oModelId
    [string]$AzGPT4_32KModelName
    [string]$AzGPT4_32KModelId
    [string]$AzGPTEmbeddingModelName
    [string]$AzGPTEmbeddingModelId
    [string]$AzOpenAiServiceEndpoint
    [string]$AzOpenAiServiceKey
    [string]$AzCosmosDBName
    [string]$AzCosmosDBConnectionString

    DeploymentResult() {
        # Resource Group
        $this.ResourceGroupName = ""
        # Storage Account
        $this.StorageAccountName = ""
        $this.StorageAccountConnectionString = ""
        # Azure Search
        $this.AzSearchServiceName = ""
        $this.AzSearchServicEndpoint = ""
        $this.AzSearchAdminKey = ""
        # Logic Apps
        $this.LogicAppDocumentProcessWatcherName = ""
        $this.LogicAppBenchmarkProcessWatcherName = ""
        $this.LogicAppGapAnalysisProcessWatcherName = ""
        $this.AzLogicAppDocumentRegistProcessWatcherUrl = ""
        $this.AzLogicAppBenchmarkProcessWatcherUrl = ""
        $this.AzLogicAppGapAnalysisProcessWatcherUrl = ""
        # AKS
        $this.AksName = ""
        # Container Registry
        $this.ContainerRegistryName = ""
        # Cognitive Service - Azure AI Intelligence Document Service
        $this.AzCognitiveServiceName = ""
        $this.AzCognitiveServiceEndpoint = ""
        $this.AzCognitiveServiceKey = ""
        # Open AI Service
        $this.AzOpenAiServiceName = ""
        $this.AzOpenAiServiceEndpoint = ""
        $this.AzOpenAiServiceKey = ""
        # Model - GPT4o
        $this.AzGPT4oModelName = ""
        $this.AzGPT4oModelId = ""
        # Model - GPT4_32K
        $this.AzGPT4_32KModelName = ""
        $this.AzGPT4_32KModelId = ""
        # Model - Embedding
        $this.AzGPTEmbeddingModelName = ""
        $this.AzGPTEmbeddingModelId = ""
        # Cosmos DB
        $this.AzCosmosDBName = ""
        $this.AzCosmosDBConnectionString = ""
    }

    [void]MapResult([pscustomobject]$jsonString) {
        # Add your code here
        $this.ResourceGroupName = $jsonString.properties.outputs.gs_resourcegroup_name.value
        $this.StorageAccountName = $jsonString.properties.outputs.gs_storageaccount_name.value
        $this.AzSearchServiceName = $jsonString.properties.outputs.gs_azsearch_name.value
        $this.AzSearchServicEndpoint =  "https://$($this.AzSearchServiceName).search.windows.net"
        $this.LogicAppDocumentProcessWatcherName = $jsonString.properties.outputs.gs_logicapp_docregistprocesswatcher_name.value
        $this.LogicAppBenchmarkProcessWatcherName = $jsonString.properties.outputs.gs_logicapp_benchmarkprocesswatcher_name.value
        $this.LogicAppGapAnalysisProcessWatcherName = $jsonString.properties.outputs.gs_logicapp_ProcessWatcher_name.value
        $this.AksName = $jsonString.properties.outputs.gs_aks_name.value
        $this.ContainerRegistryName = $jsonString.properties.outputs.gs_containerregistry_name.value
        $this.AzCognitiveServiceName = $jsonString.properties.outputs.gs_azcognitiveservice_name.value
        $this.AzCognitiveServiceEndpoint = $jsonString.properties.outputs.gs_azcognitiveservice_endpoint.value
        $this.AzOpenAiServiceName = $jsonString.properties.outputs.gs_openaiservice_name.value
        $this.AzOpenAiServiceEndpoint = $jsonString.properties.outputs.gs_openaiservice_endpoint.value
        $this.AzCosmosDBName = $jsonString.properties.outputs.gs_cosmosdb_name.value
        $this.AzLogicAppDocumentRegistProcessWatcherUrl = $jsonString.properties.outputs.gs_logicapp_docregistprocesswatcher_endpoint.value
        $this.AzLogicAppBenchmarkProcessWatcherUrl = $jsonString.properties.outputs.gs_logicapp_benchmarkprocesswatcher_endpoint.value
        $this.AzLogicAppGapAnalysisProcessWatcherUrl = $jsonString.properties.outputs.gs_logicapp_docregistprocesswatcher_endpoint.value
        $this.AzGPT4oModelName = $jsonString.properties.outputs.gs_openaiservicemodels_gpt4o_model_name.value
        $this.AzGPT4oModelId = $jsonString.properties.outputs.gs_openaiservicemodels_gpt4o_model_id.value
        $this.AzGPT4_32KModelName = $jsonString.properties.outputs.gs_openaiservicemodels_gpt4_32k_model_name.value
        $this.AzGPT4_32KModelId = $jsonString.properties.outputs.gs_openaiservicemodels_gpt4_32k_model_id.value
        $this.AzGPTEmbeddingModelName = $jsonString.properties.outputs.gs_openaiservicemodels_text_embedding_model_name.value
        $this.AzGPTEmbeddingModelId = $jsonString.properties.outputs.gs_openaiservicemodels_text_embedding_model_id.value
    }
}

function Get-LogicAppTriggerUrl {
    param (
        [string]$subscriptionId,
        [string]$resourceGroupName,
        [string]$logicAppName,
        [string]$triggerName
    )
    $url = "https://management.azure.com/subscriptions/$subscriptionId/resourceGroups/$resourceGroupName/providers/Microsoft.Logic/workflows/$logicAppName/triggers/$triggerName/listCallbackUrl?api-version=2016-06-01"
    $callbackUrl = az rest --method POST --uri $url --query "value" -o tsv
    return $callbackUrl
}

# Function to replace placeholders in a template with actual values
function Invoke-PlaceholdersReplacement($template, $placeholders) {
    foreach ($key in $placeholders.Keys) {
        $template = $template -replace $key, $placeholders[$key]
    }
    return $template
}
# Function to get the external IP address of a service
function Get-ExternalIP {
    param (
        [string]$serviceName,
        [string]$namespace
    )
    $externalIP = kubectl get svc $serviceName -n $namespace -o jsonpath='{.status.loadBalancer.ingress[0].ip}'
    return $externalIP
}

try {
    ###############################################################
    # Step 1 : Deploy Azure resources
    Write-Host "Step 1 : Deploy Azure resources" -ForegroundColor Yellow
    ###############################################################
    $deploymentResult = [DeploymentResult]::new()
    LoginAzure($subscriptionID)
    # Deploy Azure Resources
    Write-Host "Deploying Azure resources in $location region.....`r`n" -ForegroundColor Yellow
    $resultJson = DeployAzureResources($location)
    # Map the deployment result to DeploymentResult object
    $deploymentResult.MapResult($resultJson)
    # Display the deployment result
    DisplayResult($resultJson)

    ###############################################################
    # Step 2 : Get Secrets from Azure resources
    Write-Host "Step 2 : Get Secrets from Azure resources" -ForegroundColor Yellow
    ###############################################################
    # Get the storage account key
    $storageAccountKey = az storage account keys list --account-name $deploymentResult.StorageAccountName --resource-group $deploymentResult.ResourceGroupName --query "[0].value" -o tsv
    ## Construct the connection string manually
    $storageAccountConnectionString = "DefaultEndpointsProtocol=https;AccountName=$($deploymentResult.StorageAccountName);AccountKey=$storageAccountKey;EndpointSuffix=core.windows.net"
    ## Assign the connection string to the deployment result object
    $deploymentResult.StorageAccountConnectionString = $storageAccountConnectionString    
    # Get the Azure Logic App workflow URLs
    $triggerName = "When_a_HTTP_request_is_received" # Logic App trigger name for all logic apps HTTP trigger
    ## Get Logic Workflow URL for Document Registration Process Watcher
    $deploymentResult.AzLogicAppDocumentRegistProcessWatcherUrl = Get-LogicAppTriggerUrl -subscriptionId $subscriptionID -resourceGroupName $deploymentResult.ResourceGroupName -logicAppName $deploymentResult.LogicAppDocumentProcessWatcherName -triggerName $triggerName
    ## Get Logic Workflow URL for Benchmark Process Watcher
    $deploymentResult.AzLogicAppBenchmarkProcessWatcherUrl = Get-LogicAppTriggerUrl -subscriptionId $subscriptionID -resourceGroupName $deploymentResult.ResourceGroupName -logicAppName $deploymentResult.LogicAppBenchmarkProcessWatcherName -triggerName $triggerName
    ## Get Logic Workflow URL for GapAnalysis Process Watcher
    $deploymentResult.AzLogicAppGapAnalysisProcessWatcherUrl = Get-LogicAppTriggerUrl -subscriptionId $subscriptionID -resourceGroupName $deploymentResult.ResourceGroupName -logicAppName $deploymentResult.LogicAppGapAnalysisProcessWatcherName -triggerName $triggerName
    # Get MongoDB connection string
    $deploymentResult.AzCosmosDBConnectionString = az cosmosdb keys list --name $deploymentResult.AzCosmosDBName --resource-group $deploymentResult.ResourceGroupName --type connection-strings --query "connectionStrings[0].connectionString" -o tsv
    # Get Azure Cognitive Service API Key
    $deploymentResult.AzCognitiveServiceKey = az cognitiveservices account keys list --name $deploymentResult.AzCognitiveServiceName --resource-group $deploymentResult.ResourceGroupName --query "key1" -o tsv
    # Get Azure Search Service Admin Key
    $deploymentResult.AzSearchAdminKey = az search admin-key show --service-name $deploymentResult.AzSearchServiceName --resource-group $deploymentResult.ResourceGroupName --query "primaryKey" -o tsv
    # Get Azure Open AI Service API Key
    $deploymentResult.AzOpenAiServiceKey = az cognitiveservices account keys list --name $deploymentResult.AzOpenAiServiceName --resource-group $deploymentResult.ResourceGroupName --query "key1" -o tsv
    
    ######################################################################################################################
    # Step 3 : Update App Configuration files with Secrets and information for AI Service and Kernel Memory Service.
    write-host "Step 3 : Update App Configuration files with Secrets and information for AI Service and Kernel Memory Service." -ForegroundColor Yellow
    ######################################################################################################################

    # Step 3-1 Loading aiservice's configuration file template then replace the placeholder with the actual values
    # Define the placeholders and their corresponding values for AI service configuration
    
    $aiServicePlaceholders = @{
        '{{ gpt4-32Kendpoint }}' = $deploymentResult.AzOpenAiServiceEndpoint
        '{{ gpt4-32Kapikey }}' = $deploymentResult.AzOpenAiServiceKey
        '{{ gpt4-32Kmodelname }}' = $deploymentResult.AzGPT4_32KModelName
        '{{ gpt4-32Kmodelid }}' = $deploymentResult.AzGPT4_32KModelId
        '{{ gpt4-32Kembeddingmodelname }}' = $deploymentResult.AzGPTEmbeddingModelName
        '{{ mongodbconnectionstring }}' = $deploymentResult.AzCosmosDBConnectionString
        '{{ blobstorageconnectionstring }}' = $deploymentResult.StorageAccountConnectionString
        '{{ documentpreprocessingprocesswatcherurl }}' = $deploymentResult.AzLogicAppDocumentRegistProcessWatcherUrl
        '{{ benchmarkprocesswatcherurl }}' = $deploymentResult.AzLogicAppBenchmarkProcessWatcherUrl
        '{{ gapanalysisprocesswatcherurl }}' = $deploymentResult.AzLogicAppGapAnalysisProcessWatcherUrl
    }

    # Load and update the AI service configuration template
    $aiServiceConfigTemplate = Get-Content -Path ..\..\Services\appconfig\aiservice\appsettings.dev.json.template -Raw
    $aiServiceConfigTemplate = Invoke-PlaceholdersReplacement $aiServiceConfigTemplate $aiServicePlaceholders

    # Save the updated AI service configuration file
    $aiServiceConfigPath = "..\..\Services\appconfig\aiservice\appsettings.dev.json"
    $aiServiceConfigTemplate | Set-Content -Path $aiServiceConfigPath -Force
    Write-Host "ESG AI Document Service Application Configuration file have been updated successfully." -ForegroundColor Green

    # Step 3-2 Loading kernel memory service's configuration file template then replace the placeholder with the actual values
    # Define the placeholders and their corresponding values for kernel memory service configuration

    $kernelMemoryServicePlaceholders = @{
        '{{ blobstorageName }}' = $deploymentResult.StorageAccountName
        '{{ blobstorageconnectionstring }}' = $deploymentResult.StorageAccountConnectionString
        '{{ azuresearchendpoint }}' = $deploymentResult.AzSearchServicEndpoint
        '{{ azuresearchadminkey }}' = $deploymentResult.AzSearchAdminKey
        '{{ azureopenaiendpoint }}' = $deploymentResult.AzOpenAiServiceEndpoint
        '{{ azureopenaiapikey }}' = $deploymentResult.AzOpenAiServiceKey
        '{{ azuregpt4omodelname }}' = $deploymentResult.AzGPT4oModelName
        '{{ embeddingmodelname }}' = $deploymentResult.AzGPTEmbeddingModelName
        '{{ azurecognitiveservicapikey }}' = $deploymentResult.AzCognitiveServiceKey
        '{{ azurecognitiveserviceendpoint }}' = $deploymentResult.AzCognitiveServiceEndpoint
    }

    # Load and update the kernel memory service configuration template
    $kernelMemoryServiceConfigTemplate = Get-Content -Path ..\..\Services\appconfig\kernelmemory\appsettings.development.json.template -Raw
    $kernelMemoryServiceConfigTemplate = Invoke-PlaceholdersReplacement $kernelMemoryServiceConfigTemplate $kernelMemoryServicePlaceholders

    # Save the updated kernel memory service configuration file
    $kernelMemoryServiceConfigPath = "..\..\Services\appconfig\kernelmemory\appsettings.development.json"
    $kernelMemoryServiceConfigTemplate | Set-Content -Path $kernelMemoryServiceConfigPath -Force
    Write-Host "Kernel Memory Service Application Configuration file have been updated successfully." -ForegroundColor Green
        
    # Step 3-3 Copy the configuration files to the source folders
    # Copy two configuration files to each source folder

    Write-Host "Copying the configuration files to the source folders" -ForegroundColor Green
    Copy-Item -Path $aiServiceConfigPath -Destination "..\..\Services\src\esg-ai-doc-analysis\CFS.SK.Sustainability.AI.Host\appsettings.dev.json" -Force
    Copy-Item -Path $kernelMemoryServiceConfigPath -Destination "..\..\Services\src\kernel-memory\service\Service\appsettings.Development.json" -Force


    ######################################################################################################################
    # Step 4 : docker build and push container images to Azure Container Registry
    Write-Host "Step 4 : docker build and push container images to Azure Container Registry" -ForegroundColor Yellow
    ######################################################################################################################
    
    # 1. Login to Azure Container Registry
    az acr login --name $deploymentResult.ContainerRegistryName
    $acrNamespace = "esg-ai-docanalysis"
    
    # 2. Build and push the images to Azure Container Registry
    #  2-1. Build and push the AI Service container image to  Azure Container Registry
    $acrAIServiceTag = "$($deploymentResult.ContainerRegistryName).azurecr.io/$acrNamespace/aiservice"
    docker build ..\..\Services\src\esg-ai-doc-analysis\. --no-cache -t $acrAIServiceTag
    docker push $acrAIServiceTag

    #  2-2. Build and push the Kernel Memory Service container image to Azure Container Registry
    $acrKernelMemoryTag = "$($deploymentResult.ContainerRegistryName).azurecr.io/$acrNamespace/kernelmemory"
    docker build ..\..\Services\src\kernel-memory\. --no-cache -t $acrKernelMemoryTag
    docker push $acrKernelMemoryTag
    
    ######################################################################################################################
    # Step 5 : Configure Kubernetes Infrastructure
    Write-Host "Step 5 : Configure Kubernetes Infrastructure" -ForegroundColor Yellow
    ######################################################################################################################
    # 0. Attach Container Registry to AKS
    Write-Host "Attach Container Registry to AKS" -ForegroundColor Green
    az aks update --name $deploymentResult.AksName --resource-group $deploymentResult.ResourceGroupName --attach-acr $deploymentResult.ContainerRegistryName

    $kubenamepsace = "ns-esg-docanalysis"

    # 1. Get the Kubernetes resource group
    #$aksResourceGroupName = $(az aks show --resource-group $deploymentResult.ResourceGroupName --name $deploymentResult.AksName --query nodeResourceGroup --output tsv)

    try {
        Write-Host "Getting the Kubernetes resource group..." -ForegroundColor Cyan
        $aksResourceGroupName = $(az aks show --resource-group $deploymentResult.ResourceGroupName --name $deploymentResult.AksName --query nodeResourceGroup --output tsv)
        Write-Host "Kubernetes resource group: $aksResourceGroupName" -ForegroundColor Green
    }
    catch {
        Write-Host "Failed to get the Kubernetes resource group." -ForegroundColor Red
        Write-Host "Error details:" -ForegroundColor Red
        Write-Host $_.Exception.Message -ForegroundColor Red
        Write-Host $_.Exception.StackTrace -ForegroundColor Red
        exit 1
    }


    # 2.Connect to AKS cluster
    #az aks get-credentials --resource-group $deploymentResult.ResourceGroupName --name $deploymentResult.AksName --overwrite-existing
    try {
        Write-Host "Connecting to AKS cluster..." -ForegroundColor Cyan
        az aks get-credentials --resource-group $deploymentResult.ResourceGroupName --name $deploymentResult.AksName --overwrite-existing
        Write-Host "Connected to AKS cluster." -ForegroundColor Green
    }
    catch {
        Write-Host "Failed to connect to AKS cluster." -ForegroundColor Red
        Write-Host "Error details:" -ForegroundColor Red
        Write-Host $_.Exception.Message -ForegroundColor Red
        Write-Host $_.Exception.StackTrace -ForegroundColor Red
        exit 1
    }
    

    ###################################################################
    # 3. Create System Assigned Managed Identity for AKS
    ###################################################################
    # Get vmss Resource group Name
    $vmssResourceGroupName = $(az aks show --resource-group $deploymentResult.ResourceGroupName --name $deploymentResult.AksName --query nodeResourceGroup --output tsv)
    # Get vmss Name
    $vmssName = $(az vmss list --resource-group $vmssResourceGroupName --query "[0].name" --output tsv)
    # Create System Assigned Managed Identity for AKS
    $systemAssignedIdentity = $(az vmss identity assign --resource-group $vmssResourceGroupName --name $vmssName --query systemAssignedIdentity --output tsv)

    # Assign the role for aks system assigned managed identity to Azure blob Storage Data contributor role with the scope of the storage account
    az role assignment create --role "Storage Blob Data Contributor" --assignee $systemAssignedIdentity --scope "/subscriptions/$subscriptionID/resourceGroups/$($deploymentResult.ResourceGroupName)/providers/Microsoft.Storage/storageAccounts/$($deploymentResult.StorageAccountName)"

    # Assigne the role for aks system assigned managed identity to Azure queue data contributor role with the scope of the storage account
    az role assignment create --role "Storage Queue Data Contributor" --assignee $systemAssignedIdentity --scope "/subscriptions/$subscriptionID/resourceGroups/$($deploymentResult.ResourceGroupName)/providers/Microsoft.Storage/storageAccounts/$($deploymentResult.StorageAccountName)"


    # Update aks nodepools to updated new role
    try {
        Write-Host "Upgrading node pools..." -ForegroundColor Cyan
        $nodePools = $(az aks nodepool list --resource-group $deploymentResult.ResourceGroupName --cluster-name $deploymentResult.AksName --query [].name --output tsv)
        foreach ($nodePool in $nodePools) {
            Write-Host "Upgrading node pool: $nodePool" -ForegroundColor Cyan
            Write-Host "Node pool $nodePool upgrade initiated." -ForegroundColor Green
            az aks nodepool upgrade --resource-group $deploymentResult.ResourceGroupName --cluster-name $deploymentResult.AksName --name $nodePool 
        }
    }
    catch {
        Write-Host "Failed to upgrade node pools." -ForegroundColor Red
        Write-Host "Error details:" -ForegroundColor Red
        Write-Host $_.Exception.Message -ForegroundColor Red
        Write-Host $_.Exception.StackTrace -ForegroundColor Red
        exit 1
    }

    # 3.Create namespace for AI Service
    kubectl create namespace $kubenamepsace
    
    Write-Host "Enable Add routing addon for AKS" -ForegroundColor Yellow
    # 4.approuting enable and enable addons for http_application_routing
    # Import-Module ..\kubernetes\enable_approuting.psm1
    # Enable-AppRouting -ResourceGroupName $deploymentResult.ResourceGroupName -ClusterName $deploymentResult.AksName
    try {
        Write-Host "Enabling application routing addon for AKS..." -ForegroundColor Cyan
        Import-Module ..\kubernetes\enable_approuting.psm1
        Enable-AppRouting -ResourceGroupName $deploymentResult.ResourceGroupName -ClusterName $deploymentResult.AksName
        Write-Host "Application routing addon enabled." -ForegroundColor Green
    }
    catch {
        Write-Host "Failed to enable application routing addon." -ForegroundColor Red
        Write-Host "Error details:" -ForegroundColor Red
        Write-Host $_.Exception.Message -ForegroundColor Red
        Write-Host $_.Exception.StackTrace -ForegroundColor Red
        exit 1
    }
    
    # 5. Deploy nginx ingress public controller for dedicated public IP address
    # https://learn.microsoft.com/en-us/azure/aks/app-routing-nginx-configuration
    Write-Host "Deploy nginx ingress public controller for dedicated public IP address" -ForegroundColor Green
    
    kubectl apply -f ..\kubernetes\deploy.nginx-public-contoller.yaml
    # Get the public IP address for the public ingress controller
    $appRoutingNamespace = "app-routing-system"
    while ($true) {
        $externalIP = Get-ExternalIP -serviceName 'nginx-public-0' -namespace $appRoutingNamespace
        if ($externalIP -and $externalIP -ne "<none>") {
            Write-Host "EXTERNAL-IP for nginx-public-0 in $appRoutingNamespace namespace is: $externalIP"
            break
        } else {
            Write-Host "Waiting for EXTERNAL-IP to be assigned..."
            Start-Sleep -Seconds 10
        }
    }
    # 6. Assign DNS Name to the public IP address
    #  6-1. Get Az Network resource Name with the public IP address

    Write-Host "Assign DNS Name to the public IP address" -ForegroundColor Green
    $publicIpName=$(az network public-ip list --query "[?ipAddress=='$externalIP'].name" --output tsv)
    #  6-2. Generate Unique ESG API fqdn Name - esgdocanalysis-3 digit random number with padding 0
    $dnsName = "esgdocanalysis-$($(Get-Random -Minimum 0 -Maximum 999).ToString("D3"))"
    #  6-3. Assign DNS Name to the public IP address
    az network public-ip update --resource-group $aksResourceGroupName --name $publicIpName --dns-name $dnsName
    #  6-4. Get FQDN for the public IP address    
    $fqdn = az network public-ip show --resource-group $aksResourceGroupName --name $publicIpName --query "dnsSettings.fqdn" --output tsv
    Write-Host "FQDN for the public IP address is: $fqdn" -ForegroundColor Green

    #########################################################################################################################################
    # Step 6 : Update Kubernetes configuration files with the FQDN, Container Image Path and Email address for the certificate management
    Write-Host "Step 6 : Update Kubernetes configuration files with the FQDN, Container Image Path and Email address for the certificate management" -ForegroundColor Yellow
    #########################################################################################################################################

    # 6.1 Update deploy.certclusterissuer.yaml.template file and save as deploy.certclusterissuer.yaml
    $certManagerTemplate = Get-Content -Path ..\kubernetes\deploy.certclusterissuer.yaml.template -Raw
    $certManagerTemplate = $certManagerTemplate -replace '{{ your-email }}', $email
    $certManagerPath = "..\kubernetes\deploy.certclusterissuer.yaml"
    $certManagerTemplate | Set-Content -Path $certManagerPath -Force

    # 6.2 Update deploy.ingress.yaml.template file and save as deploy.ingress.yaml
    $ingressTemplate = Get-Content -Path ..\kubernetes\deploy.ingress.yaml.template -Raw
    $ingressTemplate = $ingressTemplate -replace '{{ fqdn }}', $fqdn
    $ingressTemplate = $ingressTemplate -replace '{{ ip_range }}', $ipRange
    $ingressPath = "..\kubernetes\deploy.ingress.yaml"
    $ingressTemplate | Set-Content -Path $ingressPath -Force

    # 6.3 Update deploy.deployment.yaml.template file and save as deploy.deployment.yaml
    $deploymentTemplate = Get-Content -Path ..\kubernetes\deploy.deployment.yaml.template -Raw
    $deploymentTemplate = $deploymentTemplate -replace '{{ aiservice-imagepath }}', "$($deploymentResult.ContainerRegistryName).azurecr.io/$acrNamespace/aiservice"
    $deploymentTemplate = $deploymentTemplate -replace '{{ kernelmemory-imagepath }}', "$($deploymentResult.ContainerRegistryName).azurecr.io/$acrNamespace/kernelmemory"
    $deploymentPath = "..\kubernetes\deploy.deployment.yaml"
    $deploymentTemplate | Set-Content -Path $deploymentPath -Force

    ########################################################################################################################################################
    # Step 7 : Configure AKS (deploy Cert Manager, Ingress Controller) and Deploy Images on the kubernetes cluster
    Write-Host "Step 7 : Configure AKS (deploy Cert Manager, Ingress Controller) and Deploy Images on the kubernetes cluster" -ForegroundColor Yellow
    ########################################################################################################################################################
    function Wait-ForCertManager {
        Write-Host "Waiting for Cert-Manager to be ready..." -ForegroundColor Cyan
        while ($true) {
            $certManagerPods = kubectl get pods -n cert-manager -l app.kubernetes.io/instance=cert-manager -o jsonpath='{.items[*].status.phase}'
            if ($certManagerPods -eq "Running Running Running") {
                Write-Host "Cert-Manager is running." -ForegroundColor Green
                break
            } else {
                Write-Host "Cert-Manager is not ready yet. Waiting..." -ForegroundColor Yellow
                Start-Sleep -Seconds 10
            }
        }
    }
    
    Write-Host "Deploying Cert Manager and Ingress Controller in Kubernetes cluster" -ForegroundColor Green
    # 7.1. Install Cert Manager and nginx ingress controller in Kubernetes for SSL/TLS certificate
    # Install Cert-Manager
    Write-Host "Deploying...." -ForegroundColor Green
    helm repo add jetstack https://charts.jetstack.io --force-update
    kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.15.1/cert-manager.yaml
    
    # Wait for Cert-Manager to be ready
    Wait-ForCertManager

    # 7.2. Deploy ClusterIssuer in Kubernetes for SSL/TLS certificate
    kubectl apply -f ..\kubernetes\deploy.certclusterissuer.yaml

    # 7.3. Deploy Deployment in Kubernetes
    kubectl apply -f ..\kubernetes\deploy.deployment.yaml -n $kubenamepsace

    # 7.4. Deploy Services in Kubernetes
    kubectl apply -f ..\kubernetes\deploy.service.yaml -n $kubenamepsace

    # 7.5. Deploy Ingress Controller in Kubernetes for external access
    kubectl apply -f ..\kubernetes\deploy.ingress.yaml -n $kubenamepsace

    #####################################################################
    # Step 8 : Display the deployment result and following instructions
    #####################################################################
    Write-Host "Deployment completed successfully." -ForegroundColor Green
    $messageString = "Deployment completed successfully. Please find the deployment details below: `r`n" +
                    "1. Check your Logic Apps Teams Channel connection `n`r" +
                    "`t- Document Registration Process Watcher: $($deploymentResult.LogicAppDocumentProcessWatcherName) `n`r" +
                    "`t- Benchmark Process Watcher: $($deploymentResult.LogicAppBenchmarkProcessWatcherName) `n`r" +
                    "`t- GapAnalysis Process Watcher: $($deploymentResult.LogicAppGapAnalysisProcessWatcherName) `n`r" +
                    "2. Check API Service Endpoint with this URL - https://$($fqdn) `n`r" +
                    "3. Check GPT Model's TPM rate - Set each values high as much as you can set`n`r" +
                    "`t- GPT4o Model - $($deploymentResult.AzGPT4oModelName) `n`r" +
                    "`t- GPT4 32K Model - $($deploymentResult.AzGPT4_32KModelName) `n`r" +
                    "`t- GPT Embedding Model - $($deploymentResult.AzGPTEmbeddingModelName) `n`r`n`r" +
                    "`You may control the TPM rate in Azure Open AI Studio Deployments section."
    Write-Host $messageString -ForegroundColor Yellow
}
catch {
    Write-Host "An error occurred during deployment." -ForegroundColor Red
    Write-Host "Error details:" -ForegroundColor Red
    Write-Host $_.Exception.Message -ForegroundColor Red
    Write-Host $_.Exception.StackTrace -ForegroundColor Red
}