Skip to content

[Teams Chatbot] Reduce hosted agent log noise and use AAD-only Cosmos auth #16230

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
JiaqiZhang-Dev merged 1 commit into from
Jul 2, 2026
Merged

[Teams Chatbot] Reduce hosted agent log noise and use AAD-only Cosmos auth #16230

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion tools/sdk-ai-bots/azure-sdk-qa-bot-agent/agents/chat_agent/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ WORKDIR /app

ENV PYTHONUNBUFFERED=1
ENV ENABLE_INSTRUMENTATION=true

ENV OTEL_EXPERIMENTAL_RESOURCE_DETECTORS=otel
ARG AZSDK_CLI_VERSION=0.6.3
ARG NODE_VERSION=22.12.0

Expand Down
16 changes: 9 additions & 7 deletions tools/sdk-ai-bots/azure-sdk-qa-bot-agent/agents/chat_agent/init.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -164,14 +164,16 @@ async def _init_mcp(factory):
stream=sys.stdout,
)
# Silence noisy loggers that flood container logs.
for noisy_logger in [
"azure.core.pipeline.policies.http_logging_policy", # HTTP request/response headers
"azure.cosmos._cosmos_http_logging_policy", # Cosmos DB request/response logging
"azure.monitor.opentelemetry.exporter", # telemetry transmission
"uvicorn.access", # health-probe GET /readiness /liveness
"uvicorn", # uvicorn root logger (also emits access logs)
for noisy_logger, level in [
("azure.core.pipeline.policies.http_logging_policy", logging.WARNING), # HTTP request/response headers
("azure.cosmos._cosmos_http_logging_policy", logging.WARNING), # Cosmos DB request/response logging
("azure.monitor.opentelemetry.exporter", logging.WARNING), # telemetry transmission
("uvicorn.access", logging.WARNING), # health-probe GET /readiness /liveness
("uvicorn", logging.WARNING), # uvicorn root logger (also emits access logs)
("microsoft.opentelemetry.a365.core.exporters.agent365_exporter", logging.CRITICAL), # A365 telemetry export 403s
("microsoft.opentelemetry._distro", logging.ERROR), # benign "No module named 'agents'" (openai-agents SDK unused)
]:
logging.getLogger(noisy_logger).setLevel(logging.WARNING)
logging.getLogger(noisy_logger).setLevel(level)

logger.info("Agent container starting...")

Expand Down
16 changes: 1 addition & 15 deletions tools/sdk-ai-bots/azure-sdk-qa-bot-agent/utils/azure_cosmosdb.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,6 @@

from config.app_config import get as cfg
from utils.azure_credential import get_credential
from utils.azure_keyvault import get_secret

logger = logging.getLogger(__name__)

Expand Down Expand Up @@ -55,19 +54,6 @@ def _get_endpoint() -> str:
return endpoint


async def _get_cosmos_credential():
"""Return the Cosmos DB account key from Key Vault.

Falls back to the shared token credential when the key cannot be
fetched (e.g. local dev).
"""
key = await get_secret("AZURE-COSMOSDB-KEY")
if key:
logger.info("Using Cosmos DB key-based auth (from Key Vault)")
return key
return get_credential()


async def _get_client() -> CosmosClient:
global _client
if _client is not None:
Expand All @@ -77,7 +63,7 @@ async def _get_client() -> CosmosClient:
if _client is None:
client = CosmosClient(
url=_get_endpoint(),
credential=await _get_cosmos_credential(),
credential=get_credential(),
retry_total=int(
cfg("AZURE_COSMOSDB_RETRY_TOTAL", str(_DEFAULT_RETRY_TOTAL))
),
Expand Down
Loading