Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Azure Identity SDK RC Test failed in Azure Cloudshell and Azure Webjobs #25810

Closed
v-jiaodi opened this issue May 9, 2023 · 7 comments
Closed
Assignees
Labels
Azure.Identity Client This issue points to a problem in the data-plane of the library. customer-reported Issues that are reported by GitHub users external to the Azure organization. needs-team-attention Workflow: This issue needs attention from Azure service team or SDK team question The issue doesn't require a change to the product in order to be resolved. Most issues start as that

Comments

@v-jiaodi
Copy link
Member

v-jiaodi commented May 9, 2023

Describe the issue:
1.When test the Testing azure-identity in Azure Cloudshell with instruction for Test team(Repro steps) and run the node index command, it displays the error :
image

2.When test the Testing azure-identity in Automate Azure Webjobs with instruction (Repro steps) and run the az webapp webjob triggered run -w AzureTestJob -g $RESOURCE_GROUP -n $APP_NAME_SYSTEM_ASSIGNED command, it displays the error :
image

Environment:
Env: Azure Cloudshell and Azure Webjobs
package: @azure/identity@3.2.0-beta.2
Related issue: Azure/azure-sdk#795 and Azure/azure-sdk#902

Expected behavior:
Run the node index and az webapp webjob triggered run -w AzureTestJob -g $RESOURCE_GROUP -n $APP_NAME_SYSTEM_ASSIGNED expected to create secret successfully.

@joshfree, @KarishmaGhiya, @mpodwysocki for notification.

@github-actions github-actions bot added Azure.Identity Client This issue points to a problem in the data-plane of the library. customer-reported Issues that are reported by GitHub users external to the Azure organization. needs-team-triage Workflow: This issue needs the team to triage. question The issue doesn't require a change to the product in order to be resolved. Most issues start as that labels May 9, 2023
@xirzec xirzec removed the needs-team-triage Workflow: This issue needs the team to triage. label May 9, 2023
@github-actions github-actions bot added the needs-team-attention Workflow: This issue needs attention from Azure service team or SDK team label May 9, 2023
@orgads
Copy link
Contributor

orgads commented May 10, 2023

@KarishmaGhiya
Copy link
Member

This issue has been resolved with this PR #25829 and is released in the version 3.2.1. Can you please try this version of identity sdk and let me know if the tests pass for that? https://www.npmjs.com/package/@azure/identity

@v-jiaodi
Copy link
Member Author

@KarishmaGhiya Retest using version 3.2.1. In Azure Cloudshell, the test passed, but for Azure Webjobs, when test based on instruction (Repro steps), run

Invoke-WebRequest -Uri https://$APP_NAME_SYSTEM_ASSIGNED.scm.azurewebsites.net/api/zipdeploy -Headers $Headers -InFile .\AzureTestJob.zip -ContentType "multipart/form-data" -Method Post

get error as follow:
image
Can you help solve this error?

@KarishmaGhiya
Copy link
Member

please check if you are assigning the correct access policy and enable logging to see the whole error -

  • Enable logging to determine which credential in the chain returned the authenticating token.
  • In the case a credential other than the expected is returning a token, bypass this by either signing out of the corresponding development tool, or excluding the credential with the ExcludeXXXCredential property in the DefaultAzureCredentialOptions
  • Confirm that the correct RBAC role is assigned to the identity being used to authenticate. For example, the resource specific role rather than just the inherited "Owner" role.

@KarishmaGhiya
Copy link
Member

KarishmaGhiya commented Jun 3, 2023

I am able to reproduce the issue, but not sure why this is happening. Will discuss with folks who originally worked on the test guidance and get back to you. Apparently, Java test also has the same failure. v-jiaodi

@v-jiaodi
Copy link
Member Author

@KarishmaGhiya Retest using version 3.2.1. In Azure Cloudshell, the test passed, but for Azure Webjobs, when test based on instruction (Repro steps), run

Invoke-WebRequest -Uri https://$APP_NAME_SYSTEM_ASSIGNED.scm.azurewebsites.net/api/zipdeploy -Headers $Headers -InFile .\AzureTestJob.zip -ContentType "multipart/form-data" -Method Post

get error as follow: image Can you help solve this error?

The above issue has been moved to Azure/azure-sdk#902 (comment).

@v-jiaodi
Copy link
Member Author

Close this issue as it cannot be reproduced now.

@github-actions github-actions bot locked and limited conversation to collaborators Nov 21, 2023
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
Azure.Identity Client This issue points to a problem in the data-plane of the library. customer-reported Issues that are reported by GitHub users external to the Azure organization. needs-team-attention Workflow: This issue needs attention from Azure service team or SDK team question The issue doesn't require a change to the product in order to be resolved. Most issues start as that
Projects
None yet
Development

No branches or pull requests

4 participants