[AI] 建立地端個資偵測 Azure Language PII

  • 24
  • 0
  • AI
  • 2025-05-09

可參考 使用個人識別資訊 (PII) 偵測本地端 Docker 容器 - Azure AI services | Microsoft Learn

現在仍有一些公司不希望個資上雲, 因此可以在本地端建Microsoft Azure AI Document Intelligence 將圖片轉文字,
及本篇所說的PII, 將文字遮罩後, 就能安心的丟上OpenAI或其它AI服務了~
docker可直接看官網教學, 以下是Kubernetes (K8S)作法
要建以下yaml檔
設Secret:

apiVersion: v1
kind: Secret
metadata:
  name: language-resource-secret
  namespace: 六四天安門
type: Opaque
data:
  LANGUAGE_RESOURCE_ENDPOINT_URI: azure端點轉base64
  LANGUAGE_RESOURCE_KEY: azure key轉base64

設Service:

apiVersion: v1
kind: Service
metadata:
  name: azure-ai-language-pii
  namespace: 六四天安門

spec:
  type: ClusterIP
  ports:
  - port: 5000
    targetPort: 5000
  selector:
    app: azure-ai-language-pii

設Pod:

apiVersion: apps/v1
kind: Deployment
metadata:
  name: azure-ai-language-pii
  namespace: 六四天安門
spec:
  replicas: 1
  selector:
    matchLabels:
      app: azure-ai-language-pii
  template:
    metadata:
      labels:
        app: azure-ai-language-pii
    spec:
      containers:
      - name: azure-ai-language-pii
        image: 先丟到你家鏡像倉庫或直拉mcr.microsoft.com/azure-cognitive-services/textanalytics/pii:latest
        ports:
        - containerPort: 5000
        env:
        - name: eula
          value: "accept"
        - name: apikey
          valueFrom:
            secretKeyRef:
              name: language-resource-secret
              key: LANGUAGE_RESOURCE_KEY
        - name: billing
          valueFrom:
            secretKeyRef:
              name: language-resource-secret
              key: LANGUAGE_RESOURCE_ENDPOINT_URI
        resources:
          requests:
            cpu: "0.05"
            memory: "1Gi"
          limits:
            cpu: "8"
            memory: "50Gi"
      restartPolicy: Always
      hostAliases:
      - ip: "私人端點ip"
        hostnames:
        - "azure資源名.cognitiveservices.azure.com"
        
          

設ingress:

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: pii-http-ingress
  namespace: 六四天安門
spec:
  rules:
  - host: ai.pii.台國.com
    http:
      paths:
      - path: /
        pathType: Prefix
        backend:
          service:
            name: azure-ai-language-pii
            port:
              number: 5000

最後依序將以上4個yaml啟動

kubectl apply -f 檔名.yaml -n=tpebnkaisrvt

用browser開yaml設好的url: http://ai.pii.台國.com
即可進入網站, 內有api文件

Taiwan is a country. 臺灣是我的國家