Azure Functions
An Azure service that provides an event-driven serverless compute platform.
4,321 questions
Azure Function App gives 401 for QA slot
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(147.20000000000002, 20%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDB%3C/text%3E%3C/svg%3E)
Dhanush B L
0
Reputation points
I am facing some weird issue from azure function app, i.e., the function app keys are getting changed too frequently (like i changed 20-30mins ago) and after sometimes when i make request to functions with valid key i'm getting 401. But this issue is not in PROD slot, only in QA slot
I have 2 environments DEV and STAGE in both i am facing the same issue, i have not done any modifications recently and moreover it was working perfectly few mins ago.
I tried the following things:-
- Restarting the app (Didn't work)
- Disabled the authentication from authentication blade in slot app
- Tried checking changes from terraform plan, Showed no changes (Didn't work)
- Refreshed several times (Didn't work)
- Tried running the function from azure portal 'Test/Run' method using Master (HostKey), Default(Host key), Default(Function key) (Didn't work)
- Googling
Possible solutions but not interested, because this was working earlier and changing approach is not a wise option:
- Using our own host keys for the function app, but this method is a temporary fix and also its not supported in terraform
Few days back when Microsoft 365 service were down i faced the same issue while testing functions and along with that APIM resource was also behaving weirdly at that time by giving 401.
So please help me if anyone has faced this issue or any idea on this to resolve.
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(275.2, 33%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMM%3C/text%3E%3C/svg%3E)
MughundhanRaveendran-MSFT 12,431 Reputation points2023-02-07T09:11:29.2466667+00:00 @Dhanush B L The functions keys should not change frequently unless the storage account associated with the function slot changes. I would request you to open a support ticket with MS support to resolve and find out the RCA. Please let me know if you dont have a support plan
-
Dhanush B L 0 Reputation points
2023-02-08T16:55:29.03+00:00 @MughundhanRaveendran-MSFT , The storage account associated with the function app is not modified at all and on the other side i found the cause for the issue and a solution too.
The problem is :- In QA slots where the keys that are shown in azure portal is same as PROD slot keys (both default and master, sometimes it shows keys that APIM added in PROD) and when the pipeline runs terraform stage it checks for changes and finds that azure replace QA keys with same as PROD and hence our API tests in pipeline are failing.Solution :- This solution may look really weird but this is how i can solve this.
First i checked the keys of PROD slot and compared with QA slot, when it's the same means its error, so to fix that i did the following :-
- Open Function app -> go to Deployment Slots blade and open QA slot
- open Configuration blade (wait till it loads completely)
- Then go back App Keys blade, Now the keys are updated with original QA slot keys
This seems to be a bug, which is happening at random times and causing API tests to fail since it reads keys dynamically from terraform output every time a pipeline runs.
And for support plan i need to raise request to management and create ticket for me which takes more time. -
Dhanush B L 0 Reputation points
2023-02-08T16:58:00.4933333+00:00 sorry same comment posted twice.
Sign in to comment