Bind managed certificate to custom domain container app with az cli

Question

I am trying to provision and then bind a managed certificate to a custom domain for an Azure Container App but I am getting an error.

I used this command to create the certificate

az containerapp env certificate create -g $RESOURCE_GROUP -n $CONTAINER_APP_ENV_NAME --hostname $CUSTOM_DOMAIN --validation-method CNAME

The certificate is created correctly, I checked both on azure portal and with the command

az containerapp env certificate list -g $RESOURCE_GROUP -n $CONTAINER_APP_ENV_NAME --managed-certificates-only --output tsv

In the output of the last command I get the name of the certificate created.

I use the name of the cert with the command

az containerapp hostname bind -g $RESOURCE_GROUP -n $CONTAINER_APP_NAME --hostname $CUSTOM_DOMAIN --environment $CONTAINER_APP_ENV_NAME --certificate $CERTIFICATE_NAME --validation-method CNAME

The problem is with this command that returns the following error: The certificate <certificate_name> does not exist in Container app environment <env_name>.

I don't understand what I am doing wrong, can someone help?

Answer 1

Hello Riccardo Barbieri,

Thanks for your question.

Ensure that the certificate is indeed created and associated. Use Azure CLI:

az containerapp env certificate list --name $name--resource-group $RG

If the certificate exists try binding: https://learn.microsoft.com/en-us/cli/azure/containerapp/hostname?view=azure-cli-latest#az-containerapp-hostname-bind

az containerapp hostname bind -g $RESOURCE_GROUP -n $CONTAINER_APP_NAME --hostname --environment $CONTAINER_APP_ENV_NAME --certificate $CERTIFICATE_ID 

You can mark it 'Accept Answer' and 'Upvote' if this helped you

Regards,

Abiola