Operate¶
This tab is for platform maintainers and administrators who deploy, configure, monitor, or evolve the ElasticBLAST control plane on Azure. If you are a researcher driving the dashboard from a browser, the User Guide is the better entry point.
Where to start¶
| Goal | Page |
|---|---|
Deploy the control plane (manual azd flow, redirect URI, lockdown) |
Deployment Reference |
| Pull latest code + build + roll out from a workstation (with snapshot + auto-rollback) | CLI Rolling Update |
| Check the current default and lifecycle of every behavior/security switch | Feature Gate Registry |
| Enable and monitor automatic DB order-oracle builds | Auto Oracle |
| Triage failed jobs, capacity pressure, sidecars, and external dependencies | Incident Response Runbook |
| Operate direct or public OpenAPI access safely | OpenAPI Direct Access |
| Diagnose caller permissions for mutating OpenAPI proxy calls | OpenAPI Execution RBAC Gate |
| Download Service Bus results through the authenticated API gateway | Service Bus Result Downloads |
| Understand the runtime topology, sidecars, network, identity | Architecture → High Level |
| Dig into the shipped Azure Container Apps layout, cost, secrets | Architecture → Container Apps |
| Inspect the MSAL + managed-identity flow and the full RBAC matrix | Architecture → Authentication |
| Read the in-progress research notes that informed BLAST result fidelity | Research Notes |
What lives here¶
- Deployment Reference — Bicep modules,
azdworkflow, post-provision steps, AKS sizing, six-sidecar template swap. - CLI Rolling Update — the
git pull+ build + rolling-update wrapper aroundquick-deploy.sh/postprovision.shfor non-browser upgrades and emergency rollback. - Auto Oracle — activation order, eligibility, retry/restart recovery, progress, and reference-safe retention for automatic DB order-oracle builds.
- Feature Gate Registry — checked-in deployment defaults, process fallbacks, and activation/rollback meaning for every behavior gate.
- Incident Response Runbook — symptom-first recovery for queue, AKS, Storage, terminal, and observability failures.
- OpenAPI operations — direct access, execution RBAC, and Service Bus result downloads.
- Architecture —
docs/architecture/— the durable system map, container app topology, and authentication design. - Research Notes —
docs/research/— investigations that informed BLAST search-space + Web BLAST compatibility decisions. Not user-facing documentation.
For day-to-day researcher workflow, see the User Guide. For codebase-level orientation (agent reference, repo layout), see the Contributor tab.