platform-engineering-copilot/appsettings.keyvault.json at main · POps-Rox/platform-engineering-copilot · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
{
  "ConnectionStrings": {
    "DefaultConnection": "Data Source=./platform_engineering_copilot_management.db",
    "SqlServerConnection": "@Microsoft.KeyVault(SecretUri=https://pec-compliance-kv.vault.azure.us/secrets/SqlServerConnectionString/)"
  },
  "DatabaseProvider": "Sqlite",
  "KeyVault": {
    "Endpoint": "https://pec-compliance-kv.vault.azure.us/",
    "ManagedIdentityClientId": ""
  },
  "AgentConfiguration": {
    "InfrastructureAgent": {
      "Enabled": true,
      "Temperature": 0.4,
      "MaxTokens": 4000,
      "DefaultRegion": "usgovvirginia",
      "EnableComplianceEnhancement": true,
      "DefaultComplianceFramework": "NIST80053",
      "EnablePredictiveScaling": true,
      "EnableNetworkDesign": true
    },
    "ComplianceAgent": {
      "Enabled": true,
      "Temperature": 0.2,
      "MaxTokens": 4000,
      "EnableAutomatedRemediation": true,
      "DefaultFramework": "NIST80053",
      "DefaultBaseline": "FedRAMPHigh",
      "DefenderForCloud": {
        "Enabled": false,
        "IncludeSecureScore": true,
        "MapToNistControls": true,
        "CacheDurationMinutes": 60,
        "EnableDeduplication": true,
        "SubscriptionId": "your-subscription-id",
        "WorkspaceId": "your-log-analytics-workspace-id"
      },
      "CodeScanning": {
        "EnableSecretsDetection": true,
        "EnableDependencyScanning": true,
        "EnableStigChecks": true,
        "SecretPatterns": [
          "API_KEY",
          "PASSWORD",
          "SECRET",
          "TOKEN"
        ]
      },
      "Evidence": {
        "StorageAccount": "mcpsa",
        "Container": "evidence",
        "RetentionDays": 2555,
        "EnableVersioning": true,
        "EnableImmutability": true
      },
      "NistControls": {
        "BaseUrl": "https://raw.githubusercontent.com/usnistgov/oscal-content/main/nist.gov/SP800-53/rev5/json",
        "TimeoutSeconds": 60,
        "CacheDurationHours": 24,
        "MaxRetryAttempts": 3,
        "RetryDelaySeconds": 2,
        "EnableOfflineFallback": true,
        "EnableDetailedLogging": false
      }
    },
    "CostManagementAgent": {
      "Enabled": true,
      "Temperature": 0.3,
      "MaxTokens": 4000,
      "DefaultCurrency": "USD",
      "DefaultTimeframe": "MonthToDate",
      "EnableAnomalyDetection": true,
      "EnableOptimizationRecommendations": true,
      "CostManagement": {
        "RefreshIntervalMinutes": 60,
        "AnomalyThresholdPercentage": 50,
        "MinimumSavingsThreshold": 100.0,
        "ForecastDays": 30
      },
      "Budgets": {
        "DefaultAlertThresholds": [
          50,
          80,
          100
        ],
        "EnableAutoAlerts": true,
        "AlertEmail": "platform-team@example.gov"
      }
    },
    "EnvironmentAgent": {
      "Enabled": true,
      "Temperature": 0.5,
      "MaxTokens": 4000,
      "EnableAutoProvisioning": false,
      "DefaultEnvironments": [
        "dev",
        "test",
        "staging",
        "prod"
      ]
    },
    "DiscoveryAgent": {
      "Enabled": true,
      "Temperature": 0.3,
      "MaxTokens": 4000,
      "ScanIntervalMinutes": 60,
      "EnableResourceTagging": true,
      "EnableCostTracking": true
    },
    "SecurityAgent": {
      "Enabled": true,
      "Temperature": 0.2,
      "MaxTokens": 4000,
      "EnableThreatDetection": true,
      "EnableVulnerabilityScanning": true
    },
    "KnowledgeBaseAgent": {
      "Enabled": true,
      "Temperature": 0.4,
      "MaxTokens": 4000,
      "EnableRAG": true,
      "MaxSearchResults": 10
    }
  },
  "AzureAd": {
    "Instance": "https://login.microsoftonline.us/",
    "TenantId": "your-gov-tenant-id",
    "ClientId": "your-mcp-app-registration-id",
    "ClientSecret": "@Microsoft.KeyVault(SecretUri=https://pec-compliance-kv.vault.azure.us/secrets/AzureAD-ClientSecret/)",
    "Audience": "api://platform-engineering-copilot",
    "RequireMfa": false,
    "RequireCac": false,
    "ValidIssuers": [
      "https://login.microsoftonline.us/{tenant-id}/v2.0",
      "https://sts.windows.net/{tenant-id}/"
    ],
    "EnableUserTokenPassthrough": false
  },
  "Gateway": {
    "Azure": {
      "UseManagedIdentity": false,
      "CloudEnvironment": "AzureGovernment",
      "Enabled": true,
      "EnableUserTokenPassthrough": false
    },
    "AzureOpenAI": {
      "ApiKey": "@Microsoft.KeyVault(SecretUri=https://pec-compliance-kv.vault.azure.us/secrets/AzureOpenAI-ApiKey/)",
      "Endpoint": "https://your-resource-name.openai.azure.us/",
      "DeploymentName": "gpt-4o",
      "UseManagedIdentity": false,
      "ChatDeploymentName": "gpt-4o",
      "EmbeddingDeploymentName": "text-embedding-ada-002"
    },
    "GitHub": {
      "AccessToken": "@Microsoft.KeyVault(SecretUri=https://pec-compliance-kv.vault.azure.us/secrets/GitHub-AccessToken/)",
      "ApiBaseUrl": "https://api.github.com",
      "DefaultOwner": "your-github-username-or-org",
      "Enabled": true,
      "PersonalAccessToken": "@Microsoft.KeyVault(SecretUri=https://pec-compliance-kv.vault.azure.us/secrets/GitHub-AccessToken/)",
      "WebhookSecret": "@Microsoft.KeyVault(SecretUri=https://pec-compliance-kv.vault.azure.us/secrets/GitHub-WebhookSecret/)",
      "EnablePrReviews": true,
      "AutoApproveOnSuccess": false,
      "MaxFileSizeKb": 1024
    },
    "ConnectionTimeoutSeconds": 60,
    "RequestTimeoutSeconds": 300
  }
}