Skip to content

Add automotive machine vision example#31

Open
vinfnet wants to merge 17 commits into
Azure-Samples:mainfrom
vinfnet:main
Open

Add automotive machine vision example#31
vinfnet wants to merge 17 commits into
Azure-Samples:mainfrom
vinfnet:main

Conversation

@vinfnet

@vinfnet vinfnet commented Jun 26, 2026

Copy link
Copy Markdown
Contributor

Purpose

  • ...

Does this introduce a breaking change?

[ ] Yes
[ ] No

Pull Request Type

What kind of change does this Pull Request introduce?

[ ] Bugfix
[ ] Feature
[ ] Code style update (formatting, local variables)
[ ] Refactoring (no functional changes, no api changes)
[ ] Documentation content changes
[ ] Other... Please describe:

How to Test

  • Get the code
git clone https://github.com/Azure-Samples/confidential-computing.git
cd confidential-computing
git checkout [branch-name]
  • Test the code

What to Check

Verify that the following are valid

  • ...

Other Information

Copilot AI and others added 17 commits May 29, 2026 14:19
- deployment-afd.bicep: Bicep template for Azure Front Door with ACI origin
- Deploy-AutomotiveMachineVision.ps1: Add -DeployAFD flag to automate AFD creation
- README.md: Document AFD deployment and combined certificate/AFD usage
…ephemeral *.azurecontainer.io FQDN can't be trusted by AFD's origin TLS validation. Switch AFD to forward HTTP to origin port 80 while still serving HTTPS at the *.azurefd.net edge. - Bicep: profile and endpoint location='global'; route forwardingProtocol HttpOnly with httpsRedirect; origin-group probe Http on /. - nginx: add port 80 server block alongside the 443 self-signed listener. - ACI template: expose port 80 (TCP) in addition to 443. - Deploy script: pass explicit timestamped --name to az deployment group create/show to avoid filename-derived ambiguity.
The int->string ARM expression [string(parameters('processingWorkers'))]
is embedded as a literal string in the generated CCE policy because
az confcom acipolicygen does not evaluate nested ARM functions. With
allow_environment_variable_dropping := true, the runtime then silently
drops PROCESSING_WORKERS and DETECT_EVERY_N_FRAMES because their
actual values (e.g. '6', '1') do not match the literal pattern.

App falls back to os.cpu_count() = 4 -> UI shows '4 workers' regardless
of the configured value.

- Make processingWorkers/detectEveryNFrames parameters string-typed so
  the env value can be a plain [parameters('x')] reference that confcom
  resolves correctly.
- Emit the values as strings from the deploy script.
Filter stabilized vehicle detections down to a single lead car/truck per frame using area, center-offset, and bottom-position heuristics. New env knobs LEAD_VEHICLE_MIN_AREA_RATIO and LEAD_VEHICLE_MAX_CENTER_OFFSET. Update READMEs to describe the rounded overlays for cars, trucks, pedestrians, and street signs.
- Reconcile redaction behavior section with rounded overlays for cars/trucks/pedestrians/signs.\n- Document LEAD_VEHICLE_MIN_AREA_RATIO and LEAD_VEHICLE_MAX_CENTER_OFFSET tunables.\n- Add scaling table for -CpuCores, -MemoryInGB, -ProcessingWorkers, -DetectEveryNFrames with the 16-worker runtime cap and /api/debug/runtime verification command.\n- Add CCE policy gotcha note about nested ARM functions in env values being silently dropped via allow_environment_variable_dropping.\n- Explain AFD HTTP-origin path and 5-15 minute DNS propagation window after FQDN changes.
Add `automotive-machine-vision` confidential ACI sample with attestation-gated HTTPS video processing
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants