skills.rest
aiappsgbb
aiappsgbbOFFICIAL
Explore all skills by this author →
GitHub

citadel-hub-deploy

Deploy an Azure AI governance hub using pinned AZD templates and curated profiles.

5|2|Updated Apr 28, 2026
Search Tags:#foundry#citadel#apim#llm governance#private endpoints#azure infrastructure#azd deployment
One-click install
npx skills add https://github.com/aiappsgbb/awesome-gbb --skill citadel-hub-deploy
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: citadel-hub-deploy
Source: https://github.com/aiappsgbb/awesome-gbb/tree/main/skills/citadel-hub-deploy
Command: npx skills add https://github.com/aiappsgbb/awesome-gbb --skill citadel-hub-deploy

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

The skill solves the problem of repeatedly setting up a secure, multi-model governance “Layer 1” gateway for AI Foundry workloads with consistent cost controls, policy enforcement, and telemetry.

Core Features & Use Cases

  • Pinned, reproducible deployments: Wraps the Azure-Samples ai-hub-gateway-solution-accelerator template on the citadel-v1 branch at a known-good pinned commit, so your infra doesn’t drift unexpectedly.
  • Profile-driven deployment shapes: Provides curated AZD environment profiles for a cheapest demo, an enterprise-grade baseline (including BYO Log Analytics), and a VNet-isolated hub/spoke-friendly configuration.
  • Governed gateway for multiple backends: Sets up APIM AI Gateway + Foundry control plane + telemetry sink plus private endpoint networking and access-contract hand-off to per-team onboarding.

Quick Start

Use the citadel-hub-deploy skill to deploy the AI Citadel Governance Hub by initializing the upstream AZD template on the pinned citadel-v1 branch and applying the pilot-quickstart env profile, then running azd up after completing tenant isolation.

Frequently Asked Questions about citadel-hub-deploy

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I deploy an AI governance gateway with APIM and Azure Foundry?▼

To deploy an AI governance gateway, this skill initializes a pinned Azure-Samples ai-hub-gateway-solution-accelerator template on the citadel-v1 branch, configuring APIM AI Gateway and Foundry control-plane infrastructure with consistent policy enforcement and telemetry routing.

Can I use AZD environment profiles to configure VNet-isolated hub and spoke topologies?▼

Yes, you can use curated AZD environment profiles to configure VNet-isolated hub and spoke topologies. The skill provides pre-configured profiles supporting private endpoint networking, DNS isolation, and enterprise-grade BYO Log Analytics workspaces.

What's the best way to ensure reproducible Azure infrastructure deployments for multi-LLM routing?▼

The best way to ensure reproducible Azure infrastructure deployments is pinning the upstream template to a validated known-good commit. This prevents infrastructure drift while setting up multi-LLM backend routing and governed access-contract onboarding.

Does the AI governance hub deployment support tenant isolation guardrails?▼

Yes, the AI governance hub deployment supports tenant isolation guardrails. You must complete tenant isolation configuration before running azd up with the pilot-quickstart env profile to ensure secure multi-team access-contract hand-off.

Why does the Layer 1 governance hub avoid onboarding spokes or in-process governance?▼

The Layer 1 governance hub avoids onboarding spokes and in-process governance to compose cleanly with citadel-spoke-onboarding and foundry-agt skills, maintaining separation between centralized gateway policy enforcement and per-team workload management.

When do I need a dedicated APIM AI Gateway for Azure Foundry workloads?▼

You need a dedicated APIM AI Gateway for Azure Foundry workloads when requiring unified universal model APIs, consistent cost controls, policy enforcement, and telemetry across multiple LLM backends in a secure Layer 1 governance topology.

Related Skills

Explore More Software Engineering Skills→
mahmoud20138mahmoud20138
10

azure-deploy

Automate Azure application deployment using Azure Developer CLI, Bicep, and Terraform.

Community
Advanced
aiappsgbbaiappsgbb
5

citadel-spoke-onboarding

Onboard Microsoft Foundry projects as governed spokes into an AI Citadel Governance Hub.

Official
Advanced
aiappsgbbaiappsgbb
5

jwt_403_debug_expert

Diagnose Citadel APIM 401/403 failures by correlating requests and validating JWT claims.

Official
Intermediate
pazdedavpazdedav

azure-bicep-patterns

Generate Azure Bicep patterns for hub-spoke networking and private endpoints.

Community
Intermediate