A user reports encountering a SecretsInjectionError while attempting to deploy the Meta SAM3 model on Microsoft Azure using the Hugging Face Foundry example. The error occurs during the setup and installation phase when invoking the deployed API.

  • The exception is an HttpResponseError indicating a failure to retrieve and inject workspace connection secrets.
  • The error message suggests verifying that the endpoint identity has been granted the Workspace Connection Secrets Reader role.
  • The user must ensure custom roles include actions for Microsoft.MachineLearningServices/workspaces/connections/listsecrets/action and metadata/secrets/read.
  • The secret reference schema in the environment variables must be accurate to resolve the issue.

This highlights a potential configuration hurdle for users deploying SAM3 on Azure, specifically regarding identity permissions and secret management within the Azure Machine Learning environment.