citadel-spoke-onboarding
OfficialGovern a Foundry app through a Citadel hub.
System Documentation
What problem does it solve?
This Skill solves the problem of securely onboarding an AI workload (a Microsoft Foundry project) as a governed spoke into an existing AI Citadel Governance Hub.
Core Features & Use Cases
- Access Contract provisioning (IaC): Creates the APIM products, subscriptions, and optional secrets and policy bindings needed for the spoke’s AI services.
- Foundry-to-Gateway connectivity: Wires a Foundry APIM connection so model calls route through the Citadel hub gateway.
- Security posture & auth layers: Supports keyless-by-mandate with Foundry connections, optional JWT auth on top of gateway access, and role-based authorization.
A practical example is onboarding a VNet-isolated Foundry project so its LLM traffic is routed through Citadel, with JWT enforcement and per-product policies (models allowed, token limits, and content safety) applied automatically.
Quick Start
Run this skill against your Foundry project to create the required access contract artifacts and configure the Foundry APIM connection to route LLM calls through the Citadel Governance Hub.
Dependency Matrix
Required Modules
None requiredComponents
💻 Claude Code Installation
Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.
Please help me install this Skill: Name: citadel-spoke-onboarding Download link: https://github.com/aiappsgbb/awesome-gbb/archive/main.zip#citadel-spoke-onboarding Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
Agent Skills Search Helper
Install a tiny helper to your Agent, search and equip skill from 471,000+ vetted skills library on demand.