Import Public certificate to Azure Function APP via ARM template

Hi,

I tried the below arm template to add public certificate , but it fails with ##[error]undefined: Parameter publicCertificateEnv is null or empty.

What's wrong with this code ? Is there another way to add the public certificate via arm or cli to azure function ?

        {
        "apiVersion": "2022-09-01",
        "name": "[concat(variables('ServiceName'), '/', variables('publicCertificateName'))]",
        "type": "Microsoft.Web/sites/publicCertificates",
        "dependsOn": [
          "[resourceId('Microsoft.Web/sites', variables('serviceName'))]"
        ],
        "properties": {
          "blob": "[parameters('root_cert_base64')]",         
          "publicCertificateLocation": "LocalMachineMy"
        }
        }

navba-MSFT 20,560 Microsoft Employee

@Thangavel Tamilarasan (YICCB) Welcome to Microsoft Q&A Forum, Thank you for posting your query here!

The error message ##[error]undefined: Parameter publicCertificateEnv is null or empty suggests that the parameter publicCertificateEnv is not defined or is empty. However, I don’t see this parameter in the provided ARM template. It’s possible that this parameter is used elsewhere in your code and is not properly defined or assigned a value.

Plan 1:
Ensure that all the required parameters are defined and provided correctly.

Here's a revised version of your ARM template with an added parameters section. Ensure that you have defined all the necessary parameters, especially root_cert_base64.

{

  "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",

  "contentVersion": "1.0.0.0",

  "parameters": {

    "serviceName": {

      "type": "string",

      "metadata": {

        "description": "The name of the Azure Function App."

      }

    },

    "publicCertificateName": {

      "type": "string",

      "metadata": {

        "description": "The name of the public certificate."

      }

    },

    "root_cert_base64": {

      "type": "string",

      "metadata": {

        "description": "The base64-encoded public certificate."

      }

    }

  },

  "variables": {

    "serviceName": "[parameters('serviceName')]",

    "publicCertificateName": "[parameters('publicCertificateName')]"

  },

  "resources": [

    {

      "apiVersion": "2022-09-01",

      "name": "[concat(variables('serviceName'), '/', variables('publicCertificateName'))]",

      "type": "Microsoft.Web/sites/publicCertificates",

      "dependsOn": [

        "[resourceId('Microsoft.Web/sites', variables('serviceName'))]"

      ],

      "properties": {

        "blob": "[parameters('root_cert_base64')]",

        "publicCertificateLocation": "LocalMachineMy"

      }

    }

  ]

}

Plan 2:

Did you try with AZ CLI for the same certificate and check if that works ?

az deployment group create --resource-group <your-resource-group> --template-file <path-to-template-file> --parameters serviceName=<your-service-name> publicCertificateName=<your-certificate-name> root_cert_base64=<your-base64-encoded-certificate>

Hope this helps. If you have any follow-up questions, please let me know. I would be happy to help.

Thangavel Tamilarasan (YICCB) 0 Reputation points

2024-07-10T08:11:22.03+00:00

Hi,

No where in my template I have the parameter publicCertificateEnv defined.

I have all other variables and parameters in place , just posted the piece of code to highlight the issue.

This is similar to the issue here https://github.com/Azure/bicep-types-az/issues/2083
navba-MSFT 20,560 Reputation points Microsoft Employee

2024-07-11T05:35:44.98+00:00

@Thangavel Tamilarasan (YICCB) Thanks for clarifying. In the same GitHub thread there is a solution shared: https://github.com/Azure/bicep-types-az/issues/2083#issuecomment-1976435715

Could you please check if that helps ?
Pasquini, Matteo 0 Reputation points

2024-07-22T20:15:57.83+00:00

Hi,
I would say that it not fix or clarify the error.
the "solution" is to give the file reference instead the blob.
For what I see this make impossibile to provide a variable to the PubCert.
The blob can be a variable defined elsewhere while the function "loadFileAsBase64" do not accept variables.

Share via

Import Public certificate to Azure Function APP via ARM template