Updates (#256)

Updates to readme and new delete script

Author: meerakurup

samples/microsoft/infrastructure-setup/15-private-network-standard-agent-setup/README.md

@@ -77,15 +77,21 @@ This implementation gives you full control over the inbound and outbound communi
 1. Review network requirements and plan Virtual Network address space (e.g., 192.168.0.0/16 or an alternative non-overlapping address space)
 
 2. Two subnets are needed as well:  
-    - **Agent Subnet** (e.g., 192.168.0.0/24): Hosts Agent client for Agent workloads 
+    - **Agent Subnet** (e.g., 192.168.0.0/24): Hosts Agent client for Agent workloads, delegated to Microsoft.App/environments
     - **Private endpoint Subnet** (e.g. 192.168.1.0/24): Hosts private endpoints 
-    - Ensure that the address spaces for these subnets do not overlap with any existing networks in your Azure environment
+    - Ensure that the address spaces for these subnets do not overlap with any existing networks in your Azure environment or reserved IP ranges like the following: 169.254.0.0/16, 172.30.0.0/16, 172.31.0.0/16, 192.0.2.0/24, 0.0.0.0/8, 127.0.0.0/8, 100.100.0.0/17, 100.100.192.0/19, 100.100.224.0/19, 10.0.0.0/8.
 
-  > **Note:** If you do not provide an existing virtual network, the template will create a new virtual network with the default address spaces and subnets described above. If you use an existing virtual network, make sure it already contains two subnets (Agent and Private Endpoint) before deploying the template.
+  > **Notes:** 
+  - If you do not provide an existing virtual network, the template will create a new virtual network with the default address spaces and subnets described above. If you use an existing virtual network, make sure it already contains two subnets (Agent and Private Endpoint) before deploying the template.
+  - You must ensure the Foundry account was successfully created so that underlying caphost has also succeeded. Then proceed to deploying the project caphost bicep. 
+  - You must ensure the subnet is not already in use by another account. It must be an exclusive subnet for the Foundry account.
+  - You must ensure the subnet is exclusively delegated to __Microsoft.App/environments__ and cannot be used by any other Azure resources.
 
   **Limitations:**
   - Class A subnet support is only available in a limited number of regions and requires your subscription id be allowlisted. Please reach out to [email protected] if you are interested in getting access.
     - Supported regions: West US, East US, East US 2, Central US, Japan East, France Central, [New] Spain Central, [New] UAE North
+  - The capability host sub-resources of Resource/Project must be deleted before deleting the Resource/Project resource itself. You can use the script __deleteCaphost.sh__ located in this folder to delete it.  
+
 
 ### Template Customization
 

samples/microsoft/infrastructure-setup/15-private-network-standard-agent-setup/deleteCapHost.sh

@@ -0,0 +1,87 @@
+#!/bin/bash
+
+# Script to delete the capability host
+
+# Prompt for required information
+read -p "Enter Subscription ID: " subscription_id
+read -p "Enter Resource Group name: " resource_group
+read -p "Enter Hub or Project name: " workspace_name
+read -p "Enter CapabilityHost name: " caphost_name
+
+# Get Azure access token
+echo "Getting Azure access token..."
+access_token=$(az account get-access-token --query accessToken -o tsv)
+
+if [ -z "$access_token" ]; then
+    echo "Error: Failed to get access token. Please make sure you're logged in with 'az login'"
+    exit 1
+fi
+
+# Construct the API URL
+api_url="https://management.azure.com/subscriptions/${subscription_id}/resourceGroups/${resource_group}/providers/Microsoft.CognitiveServices/accounts/${account_name}/capabilityHosts/${caphost_name}?api-version=2025-04-01-preview"
+
+# Check if the curl command was successful
+if [ $? -ne 0 ]; then
+    echo -e "\nError: Failed to send deletion request."
+    rm -f "${response_headers}"
+    exit 1
+fi
+
+# Extract the Azure-AsyncOperation URL from the response headers
+operation_url=$(grep -i "Azure-AsyncOperation" "${response_headers}" | cut -d' ' -f2 | tr -d '\r')
+
+if [ -z "${operation_url}" ]; then
+    echo -e "\nError: Could not find operation URL in the response."
+    cat "${response_headers}"
+    rm -f "${response_headers}"
+    exit 1
+fi
+
+rm -f "${response_headers}"
+
+echo -e "\nCapability host deletion request initiated."
+echo "Monitoring operation: ${operation_url}"
+
+# Poll the operation URL until the operation completes
+status="Creating"
+while [ "${status}" = "Creating" ]; do
+    echo "Checking operation status..."
+    access_token=$(az account get-access-token --query accessToken -o tsv)
+    # Get the operation status
+    operation_response=$(curl -s \
+        -H "Authorization: Bearer ${access_token}" \
+        -H "Content-Type: application/json" \
+        "${operation_url}")
+
+    # Check for transient errors
+    error_code=$(echo "${operation_response}" | jq -r '.error.code // empty')
+    if [ "${error_code}" = "TransientError" ]; then
+        echo "Transient error encountered. Continuing to poll..."
+        sleep 10
+        continue
+    fi
+    # Extract the status from the response using jq
+    status=$(echo "${operation_response}" | jq -r '.status')
+
+    if [ -z "${status}" ]; then
+        echo "Error: Could not determine operation status."
+        echo "Response: ${operation_response}"
+        exit 1
+    fi
+
+    echo "Current status: ${status}"
+
+    if [ "${status}" = "Creating" ]; then
+        echo "Operation still in progress. Waiting 10 seconds before checking again..."
+        sleep 10
+    fi
+done
+
+# Check the final status
+if [ "${status}" = "Succeeded" ]; then
+    echo -e "\nCapability host deletion completed successfully."
+else
+    echo -e "\nCapability host deletion failed with status: ${status}"
+    echo "Response: ${operation_response}"
+    exit 1
+fi