Azure OpenAI Service
An Azure service that provides access to OpenAI’s GPT-3 models with enterprise capabilities.
4,092 questions
OpenAI Studio Ingest Error FQDN list is null or empty
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(208, 57.00000000000001%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3E9%3C/text%3E%3C/svg%3E)
90093266
5
Reputation points
Hello, I have set up an Azure OpenAI and Search setup according to https://learn.microsoft.com/en-us/azure/ai-services/openai/how-to/use-your-data-securely , which uses private endpoints. The validation script in that link passes, and I can use this setup to successfully use the chat playground in OpenAI Studio (Accessing OpenAI over the private endpoint works). However, when I try to use "Bring your own data" the ingest job fails, with the following error in OpenAI Studio:
I do have records in private DNS zones attached to the same vnet which resolve the search and blob services.
Using chrome devtools, I can see that the URL it is hitting for this API call is like the following (I have anonymized all resource names)
and the body it is sending is like the JSON I will paste at the bottom. Using this same, or similar body, I can replicate the problem using an api call using curl or az rest, and get the following response: {"error":{"code":"BadRequest","message":"The FQDN list is null or empty. Please ensure that you have at least one endpoint in your FQDN list."}}
Here is my sample request body which produces the error. What could be causing this? All devices I have tested on do have VPN connectivity to the private endpoints and can reach them. I have tried many variations on the body and headers, but have found no solution. Notably I have also tried using the "privatelink" DNS addresses of the blob and search services in the body, such as testsearch788726557.privatelink.search.windows.net but this does not help.
{
"kind": "SystemCompute",
"overrides": {
"useFr": false,
"useVision": false
},
"searchServiceConnection": {
"kind": "EndpointWithManagedIdentity",
"endpoint": "https://testsearch788726557.search.windows.net"
},
"datasource": {
"kind": "Storage",
"storageAccountConnection": {
"kind": "EndpointWithManagedIdentity",
"resourceId": "ResourceId=/subscriptions/72f476b2-72f1-4302-aa45-28ec2d46ea32/resourceGroups/rg-test-001/providers/Microsoft.Storage/storageAccounts/testblob7986685",
"endpoint": "https://testblob7986685.blob.core.windows.net"
},
"containerName": "fileupload-test",
"embeddingsSettings": [],
"chunkingSettings": {
"maxChunkSizeInTokens": 1024
}
},
"dataRefreshIntervalInHours": 0
}
Azure OpenAI Service
{count} votes
-
romungi-MSFT 48,911 Reputation points Microsoft Employee Moderator2024-06-12T08:24:28.85+00:00 @90093266 I believe there is also an application process to allow access to your Azure AI Search resource from Azure OpenAI resource. This is the form link which you can submit and the team will then provision the private endpoint in Microsoft managed virtual network, and send a private endpoint connection request to your search service, and you will need to approve the request.
As per documentation:
If you have already submitted and your application is approved, then you should be able to use this feature. If the error persists you can write to the email address mentioned in the form to check what could be causing an issue in your case or setup. Thanks!!
-
90093266 5 Reputation points
2024-06-12T18:17:53.2633333+00:00 Hello, thank you for your response. I was approved via the application form and accepted the private connection to Search when it became available. Unfortunately, the email on the form, aoaionyourdatavpn@microsoft.com , now bounces for me saying that it only accepts allow-listed senders. I will continue to troubleshoot and update here if the problem is solved.
Sign in to comment
Sign in to answer