feat: replacing DefaultAzureCredential with ManagedIdentityCredential

[Ragini-Microsoft]

Purpose

This pull request introduces changes to improve Azure credential handling by introducing a utility for managing credentials based on the environment (dev or prod). It also updates various files to use this utility, adds environment variable support for APP_ENV, and includes new tests for the credential utility.

Azure credential management improvements:

• Added helpers/azure_credential_utils.py to provide synchronous and asynchronous credential utilities that switch between DefaultAzureCredential for dev environments and ManagedIdentityCredential for prod environments.
• Updated src/backend/app_config.py, src/backend/config_kernel.py, src/backend/context/cosmos_memory_kernel.py, and src/backend/utils_kernel.py to replace direct usage of DefaultAzureCredential with the new utility get_azure_credential. [1] [2] [3] [4] [5] [6]

Environment variable updates:

• Introduced APP_ENV environment variable in .env.sample files for both backend and frontend to specify the application environment (dev or prod). [1] [2]
• Updated infra/main.bicep to include APP_ENV in container app and website configurations. [1] [2]

Testing enhancements:

• Added src/backend/tests/helpers/test_azure_credential_utils.py to test both synchronous and asynchronous credential utilities for dev and prod environments.
• Removed outdated tests related to DefaultAzureCredential from src/backend/tests/test_config.py.

Does this introduce a breaking change?

• Yes
• No

How to Test

• Get the code

git clone [repo-address]
cd [repo-name]
git checkout [branch-name]
npm install

• Test the code

What to Check

Verify that the following are valid

• ...

Other Information

[Copilot]

Pull Request Overview

This PR introduces environment-based Azure credential management by replacing direct usage of DefaultAzureCredential with a utility that switches between DefaultAzureCredential for development environments and ManagedIdentityCredential for production environments.

• Added azure_credential_utils.py helper module with synchronous and asynchronous credential management functions
• Updated multiple backend files to use the new credential utility instead of directly instantiating DefaultAzureCredential
• Added APP_ENV environment variable support across configuration files and infrastructure

Reviewed Changes

Copilot reviewed 10 out of 10 changed files in this pull request and generated 3 comments.

Show a summary per file

File	Description
src/backend/helpers/azure_credential_utils.py	New utility module providing environment-based credential selection
src/backend/app_config.py	Updated to use credential utility and removed deprecated get_azure_credentials method
src/backend/config_kernel.py	Updated to use new credential utility
src/backend/context/cosmos_memory_kernel.py	Replaced direct DefaultAzureCredential usage with utility function
src/backend/utils_kernel.py	Updated credential instantiation to use utility function
src/backend/tests/helpers/test_azure_credential_utils.py	Added comprehensive tests for the new credential utility
src/backend/tests/test_config.py	Removed outdated credential-related tests
src/backend/.env.sample	Added APP_ENV environment variable
src/frontend/.env.sample	Added APP_ENV environment variable
infra/main.bicep	Added APP_ENV configuration for container app and website

[github-actions]

🎉 This PR is included in version 2.2.0 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀