feat: enable workload identity for aoai auth

[pauldotyu]

Purpose

This change is to enable Azure AD auth support in the ai-service so that auth can use either OpenAI API key or Azure AD Workload Identity.

Does this introduce a breaking change?

[ ] Yes
[x] No

Pull Request Type

What kind of change does this Pull Request introduce?

[ ] Bugfix
[x] Feature
[ ] Code style update (formatting, local variables)
[x] Refactoring (no functional changes, no api changes)
[ ] Documentation content changes
[ ] Other... Please describe:

How to Test

• Get the code
• Log into Azure CLI
• Open terminal and run make azure-ai from root of the repo

git clone https://github.com/pauldotyu/aks-store-demo
cd aks-store-demo
git checkout aoai-workload-identity

# set the region and only build the ai-service
export LOC_NAME=westeurope BUILD_AI_SERVICE=true GPT_35_TURBO_VERSION=0301 && make azure-ai

• To test workload identity, run through sections 3 and 4 in this lab guide

What to Check

Verify that the following are valid

• Get the public IP of the store-admin service and browse to the site
• Ensure you can add a new product with an OpenAI generated product description when using either OpenAI API key or Azure AD workload identity

Other Information

This will address #59

To clean up deployment

# set your resource group name and run make clean-azure
export RG_NAME=rg-store-demo-14268 && make clean-azure && unset RG_NAME

[chzbrgr71]

Tested this end to end and it worked beautifully

[chzbrgr71]

Merging like a Los Angeles freeway