Skip to content

Checklist and Prerequisites

Deploying YData Fabric in the Microsoft Azure offers a scalable and efficient solution for managing and generating synthetic data. AWS provides a robust infrastructure that ensures high availability, security, and performance, making it an ideal platform for YData Fabric.

This cloud deployment allows for rapid scaling of resources to meet varying workloads, ensuring optimal performance and cost-efficiency.

With Microsoft's comprehensive security features, including data encryption, network firewalls, and identity management, your synthetic data and models are protected against unauthorized access and threats. Additionally, Azure's global infrastructure allows for the deployment of YData Fabric in multiple regions, ensuring low latency and high availability for users worldwide.

Prerequisites

If you don't have an Azure account, create a free account before you begin.

Basic Configuration

  • Subscription: where the platform will be installed

  • Resource group: where the managed app will be installed:

    • A new one is recommended and can be created automatically during the deployment.

  • Location: where to install the Managed APP and create the resource groups. The available location for now are:

    • West Europe - Netherlands [westeurope]
    • West US - California [westus]
    • West US - Washington [westus2]
    • Canada Central [canadacentral]
    • Sweden Central [swedencentral]*

    If you need another region, please fill up a support case at support.ydata.ai.

    *Regions without available GPU’s machine types at the time

  • Application Name: the Managed APP name

  • Managed Resource Group: the resource group created by the Managed APP and where all the infrastructure services will be created (this is created automatically).

Permissions

Check and add (if needed) the necessary permissions to the subscription where the platform will be installed.

  • Go to Subscriptions.
  • Select the subscription where YData Fabric will be installed.
  • Click “View my access” as shown in the image below.

azure check permissions

  • Check if you have at least the following configurations:

  • Contributor azure contributor

And the following permissions:

  • Microsoft.Authorization/roleAssignments/read

  • Microsoft.Authorization/roleAssignments/write

azure role assignment

  • If not, please create a custom role with this two permissions and create the role assignment to the user in the subscription.

For more information check Azure's official documentation on Azure custom roles and Azure built-in roles.

Resource Providers

Check and activate (if needed) resource providers for the subscription where the YData platform will be installed following the next steps.

  • Go to Subscriptions
  • Select the subscription where YData Fabric will be installed
  • Go to Resource Providers

  • Using the filter, check if you have the following resource providers registered. If not, please click the resource provider and click “Register”.

    • Microsoft.Authorization
    • Microsoft.Compute
    • Microsoft.ContainerInstance
    • Microsoft.ContainerRegistry
    • Microsoft.ContainerService
    • Microsoft.KeyVault
    • Microsoft.ManagedIdentity
    • Microsoft.Network
    • Microsoft.Resources
    • Microsoft.Storage

    azure container

For more information check Azure's official documentation on resource providers and Azure Resource Manager.

Register features

Check and register (if needed) the required features. - Install and update the aks-preview extension:

    az extension add --name aks-preview
    az extension update --name aks-preview
  • Register the 'EnableWorkloadIdentityPreview' feature flag
    az feature register --namespace "Microsoft.ContainerService" --name "EnableWorkloadIdentityPreview"
  • Wait until feature to be registered:

    az feature show --namespace "Microsoft.ContainerService" --name "EnableWorkloadIdentityPreview"

    {
        "id": "/subscriptions/xxxxx/providers/Microsoft.Features/providers/Microsoft.ContainerService/features/EnableWorkloadIdentityPreview",
        "name": "Microsoft.ContainerService/EnableWorkloadIdentityPreview",
        "properties": {
            "state": "Registered"
        },
        "type": "Microsoft.Features/providers/features"
    }

  • After the feature status is “Registered”, refresh the registration of the container service resource provider:
    az provider register --namespace Microsoft.ContainerService

Read more in Azure's official documentation on Azure Kubernetes Services (AKS).

Resource compute quotas

Check and set (if needed) new quotas for the region where the managed app will be installed.

  • Go to Subscriptions.
  • Select the subscription where YData Fabric will be installed
  • Click “Usage + quotas”
  • Filter by the region where YData Fabric will be installed

azure check quotas

  • Check for the following quota limits:
Quota Minimum Recommended
Total Regional vCPUs 16* 100**
Standard DSv3 Family vCPUs 16* 100**
Standard NCSv3 Family vCPUs* 6* 20**
Standard DDSv4 Family vCPUs 10 10

*These limits are the required only for the installation of the platform. Usage is limited.

** Each limit will depend on the platform usage and each client requirements.

*** Not available in Sweden region

  • If needed, request for a new limit to the azure support team as per the image below.

azure check quotas

Check Azure's official documentation on quotas, increase regional vCPU quotas and increase VM-family quotas.

More on available instance types can be found here.

JIT Access

The JIT Access feature will prevent YData Fabric from having write access to the managed app at any time.

  • To use the just-in-time access, you must have an Azure Active Directory P2 license.
  • Without this license and with the JIT enable, YData will not be able to give any closer support or make updates to the solution.

To check your current license, go to the Azure Portal → Azure Active Directory → Licenses and check your license. To activate the P2 license, click the “Try/Buy” button.

azure licenses

For more information check Azure's official documentation on assigning and removing licenses to Azure Active directory. To learn how to enable JIT access and approve requests.

After accepting the request, the YData team will have access in order to make updates and give you closer support. Any other requests open a support case at support.ydata.ai.